Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft
File: mPTtHqVu_jfKE0-HapZfKsb6N0g.mft (raw, json)
Hash identifier: bdoflphUEcmCUSCpwAcmoTAVhrUDf44EjHbwKwJGrlY=
Subject key identifier: F0:A6:4B:11:EA:39:01:08:D7:23:2A:9A:91:20:FC:95:79:78:51:A6
Authority key identifier: 98:F4:ED:1E:A5:6E:FE:37:CA:13:4F:87:6A:96:5F:2A:C6:FA:37:48
Certificate issuer: /CN=A9190EF5/serialNumber=98F4ED1EA56EFE37CA134F876A965F2AC6FA3748
Certificate serial: 0102
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft
Manifest number: 0100
Signing time: Fri 31 Jan 2025 04:12:16 +0000
Manifest this update: Fri 31 Jan 2025 04:12:16 +0000
Manifest next update: Fri 07 Feb 2025 04:12:16 +0000
Files and hashes: 1: mPTtHqVu_jfKE0-HapZfKsb6N0g.crl (hash: i+YNfhnQ6qePmQwC/tSuoNNKzTJx6mR3VciK7JBeS+U=)
2: 688DBA84577911EE8A10F47BC4F9AE02.roa (hash: Fm4uHiAUi3X+9CLHzcIf57OhsNaBKsN/1TP2wSaWGkE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190EF5/serialNumber=98F4ED1EA56EFE37CA134F876A965F2AC6FA3748
Validity
Not Before: Jan 31 04:12:16 2025 GMT
Not After : Feb 7 04:12:16 2025 GMT
Subject: CN=679c4da0-b72d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6c:dd:05:29:ec:bc:29:c4:c0:51:b5:78:12:
df:7c:2c:89:23:e8:f6:c8:e4:29:04:5c:cc:e6:18:
ba:52:5f:4f:65:c1:01:32:8d:96:93:04:dc:f2:ee:
75:03:aa:cd:5f:41:66:55:e8:f1:fa:ba:43:16:d4:
31:17:86:13:c6:b2:4f:cd:68:0b:03:5d:fc:8e:ae:
3c:a5:fb:16:04:1d:6f:5c:6c:aa:cf:df:e0:5f:30:
be:8d:20:2c:c6:98:bb:4d:bb:12:be:3b:5d:93:37:
07:89:b3:b2:62:47:9c:0c:ae:bb:d3:b5:b2:16:54:
2d:d3:e5:48:30:85:40:ff:03:1e:eb:4f:d9:68:38:
79:d5:cd:cd:b6:43:15:d1:37:f5:c0:8b:58:f7:83:
8a:18:90:2d:d0:af:4f:34:ef:ff:0e:17:e0:b9:67:
40:b9:66:ce:ab:02:68:59:40:01:0f:a4:81:7c:74:
1d:89:0d:e7:48:2f:1d:be:50:5d:cd:eb:32:c5:92:
80:f7:20:47:88:85:78:a9:a1:0e:fe:6d:2e:7a:95:
10:f3:d4:5b:e7:1c:32:c8:ec:10:84:24:fa:82:43:
8a:42:b9:b6:79:81:56:3f:61:0a:9a:66:23:48:19:
b1:28:32:85:f5:c8:ac:95:df:da:e9:cb:28:5f:f4:
ce:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A6:4B:11:EA:39:01:08:D7:23:2A:9A:91:20:FC:95:79:78:51:A6
X509v3 Authority Key Identifier:
keyid:98:F4:ED:1E:A5:6E:FE:37:CA:13:4F:87:6A:96:5F:2A:C6:FA:37:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a8:63:89:a0:08:f1:6c:a1:56:36:ee:d7:6a:34:6b:47:b7:
28:aa:08:26:fd:51:6f:b6:04:95:60:c1:a6:39:4b:d7:7c:8c:
5c:7d:09:71:d5:4f:b6:89:01:39:a4:d3:da:62:08:ba:12:42:
a5:cf:dc:c8:1e:a1:be:c8:96:7e:1c:cb:49:b8:c9:d9:a1:e0:
66:b3:bc:29:1a:cc:d2:91:1a:80:75:72:67:25:08:bc:0a:2a:
40:a2:48:11:6d:5e:b9:c9:46:fb:ac:b5:06:3c:d8:c0:00:8b:
ba:a9:86:45:b7:e9:2d:a7:a4:81:76:48:33:08:fa:83:e5:54:
82:ce:6a:c6:96:a8:0f:c2:71:84:70:71:db:6d:45:97:24:d7:
eb:43:58:51:3a:fe:eb:b5:46:db:28:99:12:ff:f0:16:4f:a3:
23:be:ee:9a:86:c7:1c:b6:fc:2d:87:0c:10:78:08:aa:26:bd:
7b:b4:98:57:48:61:d0:46:bb:1a:17:e7:d9:73:c8:50:80:99:
d9:54:e8:ee:fc:bf:96:81:ba:81:4c:e8:02:56:6d:d5:8a:16:
06:81:b6:ef:4b:f8:4d:8d:20:0c:ee:36:ab:ec:7a:a6:61:94:
09:1a:40:cb:36:a4:c2:d8:8a:d5:4b:03:d6:3e:8c:3e:02:95:
dd:71:13:b5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTBFRjUxMTAvBgNVBAUTKDk4RjRFRDFFQTU2RUZFMzdDQTEzNEY4NzZBOTY1RjJB
QzZGQTM3NDgwHhcNMjUwMTMxMDQxMjE2WhcNMjUwMjA3MDQxMjE2WjAYMRYwFAYD
VQQDEw02NzljNGRhMC1iNzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA32zdBSnsvCnEwFG1eBLffCyJI+j2yOQpBFzM5hi6Ul9PZcEBMo2WkwTc8u51
A6rNX0FmVejx+rpDFtQxF4YTxrJPzWgLA138jq48pfsWBB1vXGyqz9/gXzC+jSAs
xpi7TbsSvjtdkzcHibOyYkecDK6707WyFlQt0+VIMIVA/wMe60/ZaDh51c3NtkMV
0Tf1wItY94OKGJAt0K9PNO//DhfguWdAuWbOqwJoWUABD6SBfHQdiQ3nSC8dvlBd
zesyxZKA9yBHiIV4qaEO/m0uepUQ89Rb5xwyyOwQhCT6gkOKQrm2eYFWP2EKmmYj
SBmxKDKF9cisld/a6csoX/TOMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPCmSxHq
OQEI1yMqmpEg/JV5eFGmMB8GA1UdIwQYMBaAFJj07R6lbv43yhNPh2qWXyrG+jdI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEVGNS85NDA2NjI4RTU3
NzgxMUVFOENERjg1N0FDNEY5QUUwMi9tUFR0SHFWdV9qZktFMC1IYXBaZktzYjZO
MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21QVHRIcVZ1X2pmS0UwLUhhcFpmS3NiNk4wZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MEVGNS85NDA2NjI4RTU3NzgxMUVFOENERjg1N0FDNEY5QUUwMi9tUFR0SHFWdV9q
ZktFMC1IYXBaZktzYjZOMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCPqGOJoAjxbKFWNu7XajRrR7coqggm/VFvtgSVYMGmOUvXfIxcfQlx
1U+2iQE5pNPaYgi6EkKlz9zIHqG+yJZ+HMtJuMnZoeBms7wpGszSkRqAdXJnJQi8
CipAokgRbV65yUb7rLUGPNjAAIu6qYZFt+ktp6SBdkgzCPqD5VSCzmrGlqgPwnGE
cHHbbUWXJNfrQ1hROv7rtUbbKJkS//AWT6Mjvu6ahscctvwthwwQeAiqJr17tJhX
SGHQRrsaF+fZc8hQgJnZVOju/L+WgbqBTOgCVm3VihYGgbbvS/hNjSAM7jar7Hqm
YZQJGkDLNqTC2IrVSwPWPow+ApXdcRO1
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:04 2025 by rpki-client