Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
File: 2v3gvG4K06iVvHVtbDGh5httODs.mft (raw, json)
Hash identifier: MGe+iUeWOCVZk1scpidPDIYk3CsRmW6scU4K9jRn3OE=
Subject key identifier: CE:5E:DF:57:EA:90:C1:FE:F8:E0:0B:6B:32:52:36:86:A6:84:08:12
Authority key identifier: DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B
Certificate issuer: /CN=A918FCE2/serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B
Certificate serial: 0828
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
Manifest number: 0815
Signing time: Thu 30 Jan 2025 20:55:07 +0000
Manifest this update: Thu 30 Jan 2025 20:55:06 +0000
Manifest next update: Thu 06 Feb 2025 20:55:06 +0000
Files and hashes: 1: 2v3gvG4K06iVvHVtbDGh5httODs.crl (hash: qHUtI+lqY4TVHnaY5nJ3tqcrPMjdBOg8c+AKJWFpA9A=)
2: 311DA6AA78F611EFAFD81B5BC4F9AE02.roa (hash: N273KJZBVvsgocX2roxdV3igs8iuW9HGezq7GTon2t0=)
3: 312D1714A6F211EFBD311B19C4F9AE02.roa (hash: 3WiuON+DZCyyzbg9J4hxbgh73YCM3rOmSlSP3M274IM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2088 (0x828)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FCE2/serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B
Validity
Not Before: Jan 30 20:55:06 2025 GMT
Not After : Feb 6 20:55:06 2025 GMT
Subject: CN=679be72a-726b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e7:41:38:6a:cf:db:c6:8f:28:92:d5:ed:c4:
f1:f9:7a:49:8f:06:bd:74:5b:fa:aa:1e:e6:52:f7:
bd:4f:57:fd:87:b0:f0:f8:c9:92:9a:cd:8f:3d:70:
ce:bd:d0:29:d1:ea:c2:ef:50:68:ef:28:9a:fa:dd:
f4:2e:cf:d6:74:d1:31:9f:0f:8f:f1:c8:dd:dd:42:
95:90:c2:f0:7a:97:e0:79:bc:0a:dd:39:6e:4e:0c:
fc:98:40:14:03:d4:fd:6e:14:29:13:c2:c4:d9:f5:
06:cd:67:a3:05:90:7d:4f:04:ae:73:ee:0d:db:65:
ec:15:8a:63:e5:24:d2:cc:6d:f1:3b:c2:d7:4e:6d:
26:46:e2:66:e1:86:44:c8:ba:4d:dc:4b:85:4f:06:
29:84:99:97:9a:16:92:3b:6d:4b:48:8d:02:c3:0e:
11:47:29:3c:f3:4c:4a:33:cb:8c:68:de:da:d5:7c:
d3:f6:34:6b:5c:76:ba:17:79:ba:d9:38:29:3d:4f:
53:1f:18:a2:62:a3:8d:ac:94:28:20:d2:79:ac:39:
03:3a:31:bd:a5:8a:0b:f0:7a:44:e1:3a:d2:f6:2a:
70:14:d3:1e:f4:b7:4f:44:54:d3:65:b9:cb:34:94:
e5:93:e8:63:ef:9c:98:55:d8:f4:48:0c:2d:7a:b9:
ca:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5E:DF:57:EA:90:C1:FE:F8:E0:0B:6B:32:52:36:86:A6:84:08:12
X509v3 Authority Key Identifier:
keyid:DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:43:b3:ac:c7:d9:d1:39:32:3b:14:77:99:fc:52:ac:6c:92:
fe:e0:ca:6c:f3:7e:c3:83:0f:58:08:66:b8:45:02:76:64:6e:
7d:03:7b:9f:8c:82:24:ac:c9:ee:a0:cc:54:2a:eb:70:8f:28:
79:80:36:d3:fa:05:46:3a:71:53:cb:8e:12:73:ff:88:19:63:
59:0b:83:b4:b1:4d:e5:33:c2:97:fc:e3:ee:43:88:45:c0:b2:
29:51:8b:4f:57:31:a5:04:6f:22:35:b2:65:a5:54:83:15:b7:
5e:a9:ae:3f:21:97:5c:f6:5e:ac:71:4d:39:7b:8f:6e:d2:e7:
72:14:fe:2f:61:9c:39:95:82:59:77:93:13:7a:cc:d9:02:42:
b7:24:b6:b4:6d:99:14:8e:ab:70:8d:b4:93:32:3b:c0:e9:87:
5e:8d:fd:46:04:08:21:dc:dc:d6:e2:fc:7f:fe:a3:a1:7e:8d:
55:69:15:e0:64:1b:f7:fc:95:48:fe:1a:de:38:6d:2c:3b:c6:
e4:d8:d6:ba:a4:83:d1:aa:cf:de:0d:ab:88:0e:fa:c5:08:52:
92:73:67:26:d5:bf:07:e5:d8:1a:7a:e6:ea:9a:4e:db:69:0d:
c3:62:7f:fc:0c:8d:b5:8e:9c:8e:d2:22:b6:d2:bc:f7:f1:da:
71:15:c6:53
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEZDRTIxMTAvBgNVBAUTKERBRkRFMEJDNkUwQUQzQTg5NUJDNzU2RDZDMzFBMUU2
MUI2RDM4M0IwHhcNMjUwMTMwMjA1NTA2WhcNMjUwMjA2MjA1NTA2WjAYMRYwFAYD
VQQDEw02NzliZTcyYS03MjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApedBOGrP28aPKJLV7cTx+XpJjwa9dFv6qh7mUve9T1f9h7Dw+MmSms2PPXDO
vdAp0erC71Bo7yia+t30Ls/WdNExnw+P8cjd3UKVkMLwepfgebwK3TluTgz8mEAU
A9T9bhQpE8LE2fUGzWejBZB9TwSuc+4N22XsFYpj5STSzG3xO8LXTm0mRuJm4YZE
yLpN3EuFTwYphJmXmhaSO21LSI0Cww4RRyk880xKM8uMaN7a1XzT9jRrXHa6F3m6
2TgpPU9THxiiYqONrJQoINJ5rDkDOjG9pYoL8HpE4TrS9ipwFNMe9LdPRFTTZbnL
NJTlk+hj75yYVdj0SAwternKXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM5e31fq
kMH++OALazJSNoamhAgSMB8GA1UdIwQYMBaAFNr94LxuCtOolbx1bWwxoeYbbTg7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkNFMi82MTgwQzBBMkNE
NkYxMUVBOTc1NDgwNDNDNEY5QUUwMi8ydjNndkc0SzA2aVZ2SFZ0YkRHaDVodHRP
RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJ2M2d2RzRLMDZpVnZIVnRiREdoNWh0dE9Ecy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RkNFMi82MTgwQzBBMkNENkYxMUVBOTc1NDgwNDNDNEY5QUUwMi8ydjNndkc0SzA2
aVZ2SFZ0YkRHaDVodHRPRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA6Q7Osx9nROTI7FHeZ/FKsbJL+4Mps837Dgw9YCGa4RQJ2ZG59A3uf
jIIkrMnuoMxUKutwjyh5gDbT+gVGOnFTy44Sc/+IGWNZC4O0sU3lM8KX/OPuQ4hF
wLIpUYtPVzGlBG8iNbJlpVSDFbdeqa4/IZdc9l6scU05e49u0udyFP4vYZw5lYJZ
d5MTeszZAkK3JLa0bZkUjqtwjbSTMjvA6Ydejf1GBAgh3NzW4vx//qOhfo1VaRXg
ZBv3/JVI/hreOG0sO8bk2Na6pIPRqs/eDauIDvrFCFKSc2cm1b8H5dgaeubqmk7b
aQ3DYn/8DI21jpyO0iK20rz38dpxFcZT
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:54:12 2025 by rpki-client