Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft
File: C6xCmG6avbfO4s37Kp_o1tAqq1w.mft (raw, json)
Hash identifier: ug7CEUZY4qqMY/CFK/rklFHWGk3Zy9OrThJo1zhP3KU=
Subject key identifier: A6:64:FD:58:9E:E8:1D:45:47:07:66:78:89:6A:AE:FF:F2:00:8B:C8
Authority key identifier: 0B:AC:42:98:6E:9A:BD:B7:CE:E2:CD:FB:2A:9F:E8:D6:D0:2A:AB:5C
Certificate issuer: /CN=A91975CC/serialNumber=0BAC42986E9ABDB7CEE2CDFB2A9FE8D6D02AAB5C
Certificate serial: 034A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft
Manifest number: 033B
Signing time: Fri 31 Jan 2025 01:15:22 +0000
Manifest this update: Fri 31 Jan 2025 01:15:22 +0000
Manifest next update: Fri 07 Feb 2025 01:15:22 +0000
Files and hashes: 1: C6xCmG6avbfO4s37Kp_o1tAqq1w.crl (hash: 7LhSIc+7X0C4V6VjIHE97ogNX7uTsev8ThWUyXGNgzE=)
2: 1CF68346F0BF11EEA1A0B559C4F9AE02.roa (hash: N3w/cqpvbeSysw2Pl0GFrH8zH4tdrq/Hv3k8kKk/v8E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 842 (0x34a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91975CC/serialNumber=0BAC42986E9ABDB7CEE2CDFB2A9FE8D6D02AAB5C
Validity
Not Before: Jan 31 01:15:22 2025 GMT
Not After : Feb 7 01:15:22 2025 GMT
Subject: CN=679c242a-a598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d9:b2:ac:48:b5:77:a1:fa:d7:32:7c:a0:96:
62:e6:ab:7c:56:d7:54:dd:2d:03:48:f1:9e:9b:91:
aa:08:b7:55:4d:d9:c9:bc:f0:85:1d:25:7b:4f:fb:
fc:01:0e:8b:f0:c9:ac:52:d8:fa:ed:73:ab:f2:3d:
94:04:b9:5e:63:57:76:60:8b:f9:59:a5:f5:a4:f7:
b0:53:78:b4:df:be:c8:9d:b3:57:13:a4:0b:89:39:
24:8d:55:76:59:55:7f:ab:4f:3a:ba:22:86:44:09:
11:3d:67:c7:8b:a3:c6:96:fa:d1:3c:15:d2:9a:06:
bc:42:76:5d:32:d8:a9:92:ff:17:80:57:3a:ad:63:
01:30:76:34:9a:b5:87:39:27:fa:ba:53:d8:f3:31:
36:72:d8:51:81:27:66:2d:9d:cb:8f:44:a8:b6:7e:
61:1f:61:a3:d6:08:e5:b3:d7:f5:b7:3c:09:a9:93:
8b:29:34:57:c8:a5:7d:7a:10:0a:e2:bf:c3:8f:0a:
b0:8d:b4:10:97:64:18:b7:8a:9e:9e:c6:d7:18:4b:
7a:00:43:38:71:0f:2c:97:9b:a0:4f:5c:41:2d:34:
f0:03:c5:ce:15:2b:4c:3b:78:73:79:83:47:b9:2f:
64:d7:df:71:ce:f6:dd:1d:f6:6e:84:46:b4:ad:b0:
e1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:64:FD:58:9E:E8:1D:45:47:07:66:78:89:6A:AE:FF:F2:00:8B:C8
X509v3 Authority Key Identifier:
keyid:0B:AC:42:98:6E:9A:BD:B7:CE:E2:CD:FB:2A:9F:E8:D6:D0:2A:AB:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d5:43:09:f8:b1:8c:50:95:13:a4:ea:85:f9:7b:88:c8:a0:
41:c9:94:aa:4a:9e:60:7b:ea:fc:97:f1:8b:f8:0c:0d:67:ea:
cf:84:59:0c:91:bd:66:30:9f:ed:67:43:65:11:86:b8:80:e6:
42:c6:c9:98:3c:0b:e7:62:4c:f1:db:63:0e:78:2d:70:bd:91:
b2:f7:e1:dd:da:2b:7a:33:2c:1c:3d:c6:23:54:de:a9:71:06:
5a:58:0d:dc:8c:19:5d:10:c7:7c:c2:dd:79:d3:8f:4a:eb:cd:
1a:f0:04:17:7b:9d:02:49:fa:cc:54:7d:18:59:40:26:45:0e:
60:59:be:f1:d5:15:cf:d1:1a:2a:e5:56:7b:e1:2c:92:c0:ee:
20:2c:36:7a:5d:f8:09:ad:1d:62:ca:81:34:ae:85:e0:ad:7b:
a7:3e:03:b7:02:95:50:77:b0:3e:cc:f9:42:0d:14:ed:0b:c6:
09:f3:d8:42:b7:f6:44:dc:7d:b2:0c:0b:04:ee:e1:f9:e8:0b:
e8:d3:a9:6c:b1:ce:ac:f8:5f:39:98:5d:25:fd:4e:95:ed:0d:
69:95:55:25:53:b9:e2:79:4e:a4:0c:a1:38:b1:eb:a8:ab:a8:
46:4d:ef:56:9d:21:14:e5:e7:4f:31:f6:c8:3c:d7:ac:11:a3:
4a:c1:89:92
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTc1Q0MxMTAvBgNVBAUTKDBCQUM0Mjk4NkU5QUJEQjdDRUUyQ0RGQjJBOUZFOEQ2
RDAyQUFCNUMwHhcNMjUwMTMxMDExNTIyWhcNMjUwMjA3MDExNTIyWjAYMRYwFAYD
VQQDEw02NzljMjQyYS1hNTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwdmyrEi1d6H61zJ8oJZi5qt8VtdU3S0DSPGem5GqCLdVTdnJvPCFHSV7T/v8
AQ6L8MmsUtj67XOr8j2UBLleY1d2YIv5WaX1pPewU3i0377InbNXE6QLiTkkjVV2
WVV/q086uiKGRAkRPWfHi6PGlvrRPBXSmga8QnZdMtipkv8XgFc6rWMBMHY0mrWH
OSf6ulPY8zE2cthRgSdmLZ3Lj0Sotn5hH2Gj1gjls9f1tzwJqZOLKTRXyKV9ehAK
4r/DjwqwjbQQl2QYt4qensbXGEt6AEM4cQ8sl5ugT1xBLTTwA8XOFStMO3hzeYNH
uS9k199xzvbdHfZuhEa0rbDhjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZk/Vie
6B1FRwdmeIlqrv/yAIvIMB8GA1UdIwQYMBaAFAusQphumr23zuLN+yqf6NbQKqtc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzVDQy8xRUEzNDNFMkFG
RTMxMUVDQTJDQjA2NkRDNEY5QUUwMi9DNnhDbUc2YXZiZk80czM3S3BfbzF0QXFx
MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0M2eENtRzZhdmJmTzRzMzdLcF9vMXRBcXExdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NzVDQy8xRUEzNDNFMkFGRTMxMUVDQTJDQjA2NkRDNEY5QUUwMi9DNnhDbUc2YXZi
Zk80czM3S3BfbzF0QXFxMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB81UMJ+LGMUJUTpOqF+XuIyKBByZSqSp5ge+r8l/GL+AwNZ+rPhFkM
kb1mMJ/tZ0NlEYa4gOZCxsmYPAvnYkzx22MOeC1wvZGy9+Hd2it6MywcPcYjVN6p
cQZaWA3cjBldEMd8wt15049K680a8AQXe50CSfrMVH0YWUAmRQ5gWb7x1RXP0Roq
5VZ74SySwO4gLDZ6XfgJrR1iyoE0roXgrXunPgO3ApVQd7A+zPlCDRTtC8YJ89hC
t/ZE3H2yDAsE7uH56Avo06lssc6s+F85mF0l/U6V7Q1plVUlU7nieU6kDKE4seuo
q6hGTe9WnSEU5edPMfbIPNesEaNKwYmS
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:20 2025 by rpki-client