Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D0DE/DA45D430152511EA80DBF009C4F9AE02/kzxM1thDXA-L4vUjRybWYQ9-2jo.mft
File: kzxM1thDXA-L4vUjRybWYQ9-2jo.mft (raw, json)
Hash identifier: 8URYUv6XvaSQLvjdZyYfwGiUC30Dy3/1rciAP5khsZ0=
Subject key identifier: E7:71:2D:6A:DE:1C:6A:BC:A1:F1:D6:6F:C5:41:00:A5:F1:D9:BE:81
Authority key identifier: 93:3C:4C:D6:D8:43:5C:0F:8B:E2:F5:23:47:26:D6:61:0F:7E:DA:3A
Certificate issuer: /CN=A918D0DE/serialNumber=933C4CD6D8435C0F8BE2F5234726D6610F7EDA3A
Certificate serial: 0BCB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzxM1thDXA-L4vUjRybWYQ9-2jo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D0DE/DA45D430152511EA80DBF009C4F9AE02/kzxM1thDXA-L4vUjRybWYQ9-2jo.mft
Manifest number: 0BBD
Signing time: Thu 30 Jan 2025 18:54:02 +0000
Manifest this update: Thu 30 Jan 2025 18:54:01 +0000
Manifest next update: Thu 06 Feb 2025 18:54:01 +0000
Files and hashes: 1: kzxM1thDXA-L4vUjRybWYQ9-2jo.crl (hash: l7yDepYLYhTC8fFxSpqod0yr8iZFYLvd5j/5ayPNQBQ=)
2: 38FFAC50884411EDA212BC24C4F9AE02.roa (hash: o7cey+AS0R8fVuMf4POftZacKVzAhG2qKeR3u+WEUgU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3019 (0xbcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D0DE/serialNumber=933C4CD6D8435C0F8BE2F5234726D6610F7EDA3A
Validity
Not Before: Jan 30 18:54:01 2025 GMT
Not After : Feb 6 18:54:01 2025 GMT
Subject: CN=679bcac9-5b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:71:79:ad:dc:10:c7:7b:47:dd:b9:fa:a5:01:
b1:74:de:0b:c9:4f:e6:cf:80:62:75:df:3a:ee:06:
72:f8:3a:db:bd:cf:64:5a:50:48:36:02:aa:f0:09:
9b:c4:cc:73:c0:5f:c6:d6:58:e6:e3:16:8e:9b:57:
f1:61:c8:9e:1b:9a:6d:d6:c1:2b:f4:31:70:61:ca:
a7:7f:62:31:12:5a:22:29:c1:c9:01:66:bd:06:35:
a2:0d:c5:ed:ea:04:dd:ad:8f:a7:ce:97:65:ff:c5:
bf:af:f0:9f:1f:da:10:5d:74:ba:d5:b0:a8:38:f6:
94:d4:82:23:03:d0:2a:db:b1:1c:e5:61:94:36:89:
03:47:86:bb:5a:d5:83:7d:4f:58:1c:ea:d1:99:a2:
8a:6a:70:7c:8f:91:ca:a5:fc:cd:4c:52:f1:80:95:
eb:e3:8d:43:4b:46:4a:ff:54:ed:d2:ab:0f:89:6e:
56:95:64:11:b1:93:d2:59:c5:69:95:52:d5:b7:16:
04:52:31:29:a1:02:9d:c4:d9:7d:29:4e:39:40:5c:
2b:67:38:65:9b:e2:11:7f:2f:eb:1c:cb:69:bc:c7:
6a:6d:55:19:4b:cc:08:92:89:46:1b:2d:e0:7c:18:
b9:7c:5e:6d:22:a9:ff:f3:9e:ea:3c:9d:1a:cc:41:
b9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:71:2D:6A:DE:1C:6A:BC:A1:F1:D6:6F:C5:41:00:A5:F1:D9:BE:81
X509v3 Authority Key Identifier:
keyid:93:3C:4C:D6:D8:43:5C:0F:8B:E2:F5:23:47:26:D6:61:0F:7E:DA:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D0DE/DA45D430152511EA80DBF009C4F9AE02/kzxM1thDXA-L4vUjRybWYQ9-2jo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzxM1thDXA-L4vUjRybWYQ9-2jo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0DE/DA45D430152511EA80DBF009C4F9AE02/kzxM1thDXA-L4vUjRybWYQ9-2jo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:84:ac:50:76:d8:1d:2f:1a:19:f3:d8:4d:7f:54:28:39:28:
98:d1:b6:56:4a:17:36:0f:0c:c4:13:7a:ef:df:79:f4:82:d4:
51:df:5d:c0:1b:77:76:6f:71:da:39:63:e7:4d:9e:ec:bf:6e:
b0:81:89:11:6f:f1:aa:23:4e:56:70:5a:33:76:8d:76:07:b3:
6b:a7:5e:3f:49:d0:f7:66:21:1a:66:81:c6:91:20:66:5d:d9:
2f:87:a0:65:bb:e7:2c:97:6b:d9:93:05:4a:32:1e:88:24:5a:
68:8f:de:e2:7f:0a:15:4e:47:50:6d:80:b3:55:33:00:fd:31:
85:9a:8c:98:be:16:3d:04:c5:56:f7:f1:fa:0d:f0:10:13:40:
ef:ed:ef:2b:ac:49:bd:5b:eb:10:9d:8b:d8:0c:b2:d1:20:2c:
41:2f:41:50:76:e6:3a:af:69:7f:61:79:4a:93:f6:72:6b:43:
fe:bb:52:0a:9c:e2:a2:00:09:f6:43:5f:e4:6b:41:e9:cc:f3:
81:e3:22:7c:71:22:eb:33:4e:40:e7:6b:67:f2:20:4e:f1:5d:
0e:3b:6d:55:46:57:d6:12:c6:cd:ea:60:20:94:8c:f4:71:2b:
f0:fe:d3:69:fc:7b:85:5c:c9:6b:6d:e4:86:57:e9:e9:36:f2:
7f:bb:83:3f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQwREUxMTAvBgNVBAUTKDkzM0M0Q0Q2RDg0MzVDMEY4QkUyRjUyMzQ3MjZENjYx
MEY3RURBM0EwHhcNMjUwMTMwMTg1NDAxWhcNMjUwMjA2MTg1NDAxWjAYMRYwFAYD
VQQDEw02NzliY2FjOS01YjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs3F5rdwQx3tH3bn6pQGxdN4LyU/mz4Bidd867gZy+Drbvc9kWlBINgKq8Amb
xMxzwF/G1ljm4xaOm1fxYcieG5pt1sEr9DFwYcqnf2IxEloiKcHJAWa9BjWiDcXt
6gTdrY+nzpdl/8W/r/CfH9oQXXS61bCoOPaU1IIjA9Aq27Ec5WGUNokDR4a7WtWD
fU9YHOrRmaKKanB8j5HKpfzNTFLxgJXr441DS0ZK/1Tt0qsPiW5WlWQRsZPSWcVp
lVLVtxYEUjEpoQKdxNl9KU45QFwrZzhlm+IRfy/rHMtpvMdqbVUZS8wIkolGGy3g
fBi5fF5tIqn/857qPJ0azEG5+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOdxLWre
HGq8ofHWb8VBAKXx2b6BMB8GA1UdIwQYMBaAFJM8TNbYQ1wPi+L1I0cm1mEPfto6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDBERS9EQTQ1RDQzMDE1
MjUxMUVBODBEQkYwMDlDNEY5QUUwMi9renhNMXRoRFhBLUw0dlVqUnliV1lROS0y
am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2t6eE0xdGhEWEEtTDR2VWpSeWJXWVE5LTJqby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDBERS9EQTQ1RDQzMDE1MjUxMUVBODBEQkYwMDlDNEY5QUUwMi9renhNMXRoRFhB
LUw0dlVqUnliV1lROS0yam8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCWhKxQdtgdLxoZ89hNf1QoOSiY0bZWShc2DwzEE3rv33n0gtRR313A
G3d2b3HaOWPnTZ7sv26wgYkRb/GqI05WcFozdo12B7Nrp14/SdD3ZiEaZoHGkSBm
Xdkvh6Blu+csl2vZkwVKMh6IJFpoj97ifwoVTkdQbYCzVTMA/TGFmoyYvhY9BMVW
9/H6DfAQE0Dv7e8rrEm9W+sQnYvYDLLRICxBL0FQduY6r2l/YXlKk/Zya0P+u1IK
nOKiAAn2Q1/ka0HpzPOB4yJ8cSLrM05A52tn8iBO8V0OO21VRlfWEsbN6mAglIz0
cSvw/tNp/HuFXMlrbeSGV+npNvJ/u4M/
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:28:36 2025 by rpki-client