Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft
File: MviQDThWvkOnLWx_k-kEtbg8w00.mft (raw, json)
Hash identifier: 0ONr74hEAq4Zwze2N+p/jC8i7I8lSPX/wANUqC+c4Aw=
Subject key identifier: 02:B5:DE:7F:21:40:4D:ED:3C:37:7C:31:69:F6:5F:7F:B5:D7:21:CA
Authority key identifier: 32:F8:90:0D:38:56:BE:43:A7:2D:6C:7F:93:E9:04:B5:B8:3C:C3:4D
Certificate issuer: /CN=A9199371/serialNumber=32F8900D3856BE43A72D6C7F93E904B5B83CC34D
Certificate serial: 045F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft
Manifest number: 045A
Signing time: Fri 31 Jan 2025 00:13:48 +0000
Manifest this update: Fri 31 Jan 2025 00:13:47 +0000
Manifest next update: Fri 07 Feb 2025 00:13:47 +0000
Files and hashes: 1: MviQDThWvkOnLWx_k-kEtbg8w00.crl (hash: 3oglAWoxj2F9S04Ek3fHd5y2hhKlH/EgQzAFERDGPHs=)
2: 5FC6CEFC38BF11EC9BA51E52C4F9AE02.roa (hash: xMR/YnguGQ65JG/6TJojLxvfAgA6ZYA0z3zusRzziKw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1119 (0x45f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199371/serialNumber=32F8900D3856BE43A72D6C7F93E904B5B83CC34D
Validity
Not Before: Jan 31 00:13:47 2025 GMT
Not After : Feb 7 00:13:47 2025 GMT
Subject: CN=679c15bb-48c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4a:de:25:02:4d:e7:c4:a4:54:5c:20:4d:94:
32:20:8e:35:72:92:3d:85:3d:1d:d1:dd:dc:cd:05:
3b:70:95:12:99:50:ff:0a:69:64:b9:f2:70:53:1a:
ee:33:1d:56:f3:22:7f:5e:70:db:3d:3b:ba:41:aa:
7c:bf:6d:04:0d:ec:9b:44:83:29:2e:47:a4:5e:e0:
3d:94:11:66:cc:1b:df:ca:53:33:c2:ef:7a:39:28:
92:31:9a:21:fe:cf:4c:62:dc:a4:0f:fc:b6:d9:02:
e3:64:d4:c2:29:6f:51:a1:27:d9:e6:3a:00:29:a4:
d9:10:b9:9f:4b:38:c0:81:37:42:ac:e8:0c:99:da:
2f:4f:34:26:56:63:9e:10:1c:9f:4d:8e:d5:63:f6:
82:8f:64:2d:c9:1c:80:11:20:83:3a:be:fb:1a:28:
ac:76:06:e0:80:d5:ad:79:c9:0d:b6:ba:ea:df:b9:
53:53:bd:fc:71:b1:2e:11:8e:08:c4:1a:d3:70:8f:
c7:79:d8:23:e4:96:28:4c:b4:95:2f:9a:22:a7:6a:
ee:86:3a:0e:cd:9a:be:de:b8:89:d5:99:2a:8e:44:
23:2d:0b:39:ea:5b:b4:77:8e:a2:9d:fb:a6:ca:3e:
58:6d:2f:59:93:1a:b3:35:a7:29:05:18:89:0f:f1:
95:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B5:DE:7F:21:40:4D:ED:3C:37:7C:31:69:F6:5F:7F:B5:D7:21:CA
X509v3 Authority Key Identifier:
keyid:32:F8:90:0D:38:56:BE:43:A7:2D:6C:7F:93:E9:04:B5:B8:3C:C3:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:51:a1:de:43:92:ce:a0:12:cb:74:85:3c:75:51:26:68:db:
5e:0b:52:18:ab:17:fd:44:0a:42:68:c0:83:ee:b2:7a:e4:8f:
5e:a6:c1:d9:9b:15:62:8c:36:52:2f:57:27:35:03:0b:90:51:
5b:42:ea:d4:21:36:b9:a5:9e:27:2f:bb:0f:94:52:1b:b4:56:
62:54:9c:ab:82:59:9f:46:b9:d3:88:45:63:05:d8:6e:f6:5d:
31:78:70:6f:68:01:7e:02:ca:6b:97:5d:dd:e2:0b:28:64:f4:
5c:c1:8a:c1:d3:05:72:2a:08:f2:2b:74:d6:38:9c:34:ea:62:
96:11:bc:82:82:ed:a8:17:59:6d:a4:13:f3:db:28:e0:5c:53:
26:8f:bb:fe:b2:28:7b:10:98:72:8e:a5:59:c1:76:c8:64:93:
3c:2f:e0:4f:9f:d2:de:ff:d8:fe:95:25:39:aa:75:aa:5e:ac:
71:15:c0:72:c3:ff:55:2a:05:52:e7:98:5e:c3:5d:c5:6b:64:
31:57:6f:e9:ef:62:58:9a:0e:08:f3:69:69:f6:61:3c:b7:f7:
ad:26:c4:33:e4:f6:22:4f:c0:ec:bf:73:cf:c8:d4:81:c7:b3:
01:76:73:97:b8:1c:5f:81:f7:2f:b9:94:b3:88:df:39:d0:c4:
58:18:e7:67
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTkzNzExMTAvBgNVBAUTKDMyRjg5MDBEMzg1NkJFNDNBNzJENkM3RjkzRTkwNEI1
QjgzQ0MzNEQwHhcNMjUwMTMxMDAxMzQ3WhcNMjUwMjA3MDAxMzQ3WjAYMRYwFAYD
VQQDEw02NzljMTViYi00OGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxEreJQJN58SkVFwgTZQyII41cpI9hT0d0d3czQU7cJUSmVD/CmlkufJwUxru
Mx1W8yJ/XnDbPTu6Qap8v20EDeybRIMpLkekXuA9lBFmzBvfylMzwu96OSiSMZoh
/s9MYtykD/y22QLjZNTCKW9RoSfZ5joAKaTZELmfSzjAgTdCrOgMmdovTzQmVmOe
EByfTY7VY/aCj2QtyRyAESCDOr77GiisdgbggNWteckNtrrq37lTU738cbEuEY4I
xBrTcI/Hedgj5JYoTLSVL5oip2ruhjoOzZq+3riJ1ZkqjkQjLQs56lu0d46infum
yj5YbS9ZkxqzNacpBRiJD/GVVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAK13n8h
QE3tPDd8MWn2X3+11yHKMB8GA1UdIwQYMBaAFDL4kA04Vr5Dpy1sf5PpBLW4PMNN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTM3MS8zNkZFRTdFQTM4
QkQxMUVDOURENEVCNTBDNEY5QUUwMi9NdmlRRFRoV3ZrT25MV3hfay1rRXRiZzh3
MDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL012aVFEVGhXdmtPbkxXeF9rLWtFdGJnOHcwMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTM3MS8zNkZFRTdFQTM4QkQxMUVDOURENEVCNTBDNEY5QUUwMi9NdmlRRFRoV3Zr
T25MV3hfay1rRXRiZzh3MDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBfUaHeQ5LOoBLLdIU8dVEmaNteC1IYqxf9RApCaMCD7rJ65I9epsHZ
mxVijDZSL1cnNQMLkFFbQurUITa5pZ4nL7sPlFIbtFZiVJyrglmfRrnTiEVjBdhu
9l0xeHBvaAF+Asprl13d4gsoZPRcwYrB0wVyKgjyK3TWOJw06mKWEbyCgu2oF1lt
pBPz2yjgXFMmj7v+sih7EJhyjqVZwXbIZJM8L+BPn9Le/9j+lSU5qnWqXqxxFcBy
w/9VKgVS55hew13Fa2QxV2/p72JYmg4I82lp9mE8t/etJsQz5PYiT8Dsv3PPyNSB
x7MBdnOXuBxfgfcvuZSziN850MRYGOdn
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:39:00 2025 by rpki-client