Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft
File: SSgoWwzlZAMAEAFOY147esxilFc.mft (raw, json)
Hash identifier: n8PvsfxNPI4M48Fp0e8RA+jKMWxF0aRSVESTOTMwXps=
Subject key identifier: C6:FA:B9:D3:37:FB:5A:EE:E9:03:FC:E9:9E:76:AA:C6:17:FB:45:1F
Authority key identifier: 49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57
Certificate issuer: /CN=A9191E77/serialNumber=4928285B0CE564030010014E635E3B7ACC629457
Certificate serial: 0295
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft
Manifest number: 0292
Signing time: Fri 31 Jan 2025 01:38:08 +0000
Manifest this update: Fri 31 Jan 2025 01:38:08 +0000
Manifest next update: Fri 07 Feb 2025 01:38:08 +0000
Files and hashes: 1: SSgoWwzlZAMAEAFOY147esxilFc.crl (hash: 9plxcjG/6Vr+OeeKFQcxu1r8LZfMIXa1mP4R9fSsJ18=)
2: 26E6B114EB2B11ECBE328172C4F9AE02.roa (hash: PUc54q2WTiia3AT9HsSdWhbagSjmonMUemo/1oF5Qio=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 661 (0x295)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191E77/serialNumber=4928285B0CE564030010014E635E3B7ACC629457
Validity
Not Before: Jan 31 01:38:08 2025 GMT
Not After : Feb 7 01:38:08 2025 GMT
Subject: CN=679c2980-eb61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:21:4e:d5:c2:19:37:e4:f7:f8:ea:1d:7a:53:
3c:59:26:4a:c8:bc:10:ef:b5:83:d3:6e:ed:f5:43:
f9:b6:75:db:da:ea:9b:ea:75:b4:22:92:ea:04:bb:
44:39:7a:5c:ea:e9:4d:3b:53:c4:91:d5:d8:3f:ca:
6d:07:ae:2d:93:f2:18:1b:7d:78:cd:73:06:8c:b4:
56:af:86:e6:3b:7b:2f:21:bc:38:88:34:ff:2a:53:
db:9e:c5:a7:81:a2:e3:53:00:4c:a9:28:df:c3:23:
25:a0:d0:02:92:12:69:a9:b6:5d:bc:6d:29:00:d9:
87:e4:e1:f9:5e:ee:da:d4:74:d1:1c:17:3a:69:12:
13:46:a8:2d:47:0b:8c:70:ba:d3:b8:ee:7a:24:7e:
c4:e9:25:82:7e:28:c3:56:00:8e:e3:aa:4e:4f:fc:
d1:b1:f0:86:aa:b9:43:5a:95:3d:2c:92:be:80:ba:
26:c1:3b:a7:57:98:55:25:49:24:28:f3:08:87:1d:
99:ca:95:c7:34:49:73:87:14:3c:54:f8:7e:6e:29:
f7:44:07:5b:79:99:4e:f3:db:9b:55:3d:af:b8:2f:
9d:ba:3f:e4:e8:36:c3:8f:91:e4:26:f2:1b:3e:ac:
77:69:c8:e8:8a:e3:dc:5d:6e:df:4a:da:c1:08:84:
bb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FA:B9:D3:37:FB:5A:EE:E9:03:FC:E9:9E:76:AA:C6:17:FB:45:1F
X509v3 Authority Key Identifier:
keyid:49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:6a:f2:24:f6:36:70:76:a4:27:4e:81:49:4c:ad:c0:f0:25:
24:1d:f8:84:2d:4e:0b:f9:5b:f0:68:00:b2:bc:9a:71:5f:9d:
6b:25:cf:44:57:0b:4c:bc:57:60:d0:9b:05:d1:60:10:57:9f:
84:35:31:af:02:05:e2:6b:ce:c9:5b:24:13:cd:0d:cf:a2:d3:
cb:86:4a:ad:a6:e8:86:8e:23:29:a8:e7:79:c9:e5:02:88:e0:
eb:30:ae:c6:98:99:66:27:eb:92:76:9e:00:fc:ac:13:32:21:
b7:d3:72:e1:50:ef:20:97:0d:bc:9d:c0:bc:8d:92:c7:53:49:
77:7a:dd:81:92:6c:dd:ad:d0:a7:c5:70:fe:60:a1:00:5d:6f:
9a:f2:7d:8f:1c:d2:a1:20:92:f5:88:d1:a0:17:ff:ed:d4:75:
07:68:72:95:75:df:b3:87:c7:f0:21:ba:ac:2e:d1:d7:98:46:
fb:84:f5:1c:29:0f:8d:e7:70:08:1d:5b:e8:11:9e:82:41:3f:
b5:c9:ec:f7:a3:0f:90:11:b0:c6:ac:60:1b:5b:79:b8:67:52:
9f:fc:85:56:40:dd:9f:8e:0f:74:c2:05:b6:af:23:18:23:e2:
25:fd:c3:d5:7a:ad:8d:64:64:61:3a:40:3a:18:5e:26:a1:7d:
2a:d1:80:b1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICApUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTFFNzcxMTAvBgNVBAUTKDQ5MjgyODVCMENFNTY0MDMwMDEwMDE0RTYzNUUzQjdB
Q0M2Mjk0NTcwHhcNMjUwMTMxMDEzODA4WhcNMjUwMjA3MDEzODA4WjAYMRYwFAYD
VQQDEw02NzljMjk4MC1lYjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0yFO1cIZN+T3+OodelM8WSZKyLwQ77WD027t9UP5tnXb2uqb6nW0IpLqBLtE
OXpc6ulNO1PEkdXYP8ptB64tk/IYG314zXMGjLRWr4bmO3svIbw4iDT/KlPbnsWn
gaLjUwBMqSjfwyMloNACkhJpqbZdvG0pANmH5OH5Xu7a1HTRHBc6aRITRqgtRwuM
cLrTuO56JH7E6SWCfijDVgCO46pOT/zRsfCGqrlDWpU9LJK+gLomwTunV5hVJUkk
KPMIhx2ZypXHNElzhxQ8VPh+bin3RAdbeZlO89ubVT2vuC+duj/k6DbDj5HkJvIb
Pqx3acjoiuPcXW7fStrBCIS7iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMb6udM3
+1ru6QP86Z52qsYX+0UfMB8GA1UdIwQYMBaAFEkoKFsM5WQDABABTmNeO3rMYpRX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUU3Ny8xMjFDRjEzNEVC
MjcxMUVDOTI4RDBBNkZDNEY5QUUwMi9TU2dvV3d6bFpBTUFFQUZPWTE0N2VzeGls
RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NTZ29Xd3psWkFNQUVBRk9ZMTQ3ZXN4aWxGYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MUU3Ny8xMjFDRjEzNEVCMjcxMUVDOTI4RDBBNkZDNEY5QUUwMi9TU2dvV3d6bFpB
TUFFQUZPWTE0N2VzeGlsRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA2avIk9jZwdqQnToFJTK3A8CUkHfiELU4L+VvwaACyvJpxX51rJc9E
VwtMvFdg0JsF0WAQV5+ENTGvAgXia87JWyQTzQ3PotPLhkqtpuiGjiMpqOd5yeUC
iODrMK7GmJlmJ+uSdp4A/KwTMiG303LhUO8glw28ncC8jZLHU0l3et2BkmzdrdCn
xXD+YKEAXW+a8n2PHNKhIJL1iNGgF//t1HUHaHKVdd+zh8fwIbqsLtHXmEb7hPUc
KQ+N53AIHVvoEZ6CQT+1yez3ow+QEbDGrGAbW3m4Z1Kf/IVWQN2fjg90wgW2ryMY
I+Il/cPVeq2NZGRhOkA6GF4moX0q0YCx
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:20:17 2025 by rpki-client