Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft
File: rKEv19uyg_Ms3XPPzs8F08uaiKE.mft (raw, json)
Hash identifier: RM5gTGq5HAHdp45JVHU2uqgTUeKQ7lX9ivES2aIbgDA=
Subject key identifier: AA:1D:BB:12:83:B5:E9:35:A9:22:11:14:79:4C:89:D9:C0:78:13:E9
Authority key identifier: AC:A1:2F:D7:DB:B2:83:F3:2C:DD:73:CF:CE:CF:05:D3:CB:9A:88:A1
Certificate issuer: /CN=A91994D1/serialNumber=ACA12FD7DBB283F32CDD73CFCECF05D3CB9A88A1
Certificate serial: 0785
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft
Manifest number: 0780
Signing time: Thu 30 Jan 2025 21:17:28 +0000
Manifest this update: Thu 30 Jan 2025 21:17:28 +0000
Manifest next update: Thu 06 Feb 2025 21:17:28 +0000
Files and hashes: 1: rKEv19uyg_Ms3XPPzs8F08uaiKE.crl (hash: J++IypBkV9nu8TlzW/VrJPzlj7R2kKt01ogi/paoSmg=)
2: CD8C0430F99011EAB54DF63CC4F9AE02.roa (hash: KyOkY9VA3J/3sBokvUHuRFKP5fmOGmjv1+iHz+yAeU0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1925 (0x785)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91994D1/serialNumber=ACA12FD7DBB283F32CDD73CFCECF05D3CB9A88A1
Validity
Not Before: Jan 30 21:17:28 2025 GMT
Not After : Feb 6 21:17:28 2025 GMT
Subject: CN=679bec68-89f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:19:6a:f9:b5:25:66:47:b4:51:14:81:52:b3:
8b:92:f9:75:a0:85:c5:91:f4:3d:8a:2e:f2:1f:fe:
71:c4:a0:62:f2:ed:be:e5:32:91:a8:5a:b3:e7:39:
fb:43:c2:d3:4c:f1:4c:cd:ef:2e:17:48:ca:66:32:
3a:e2:a2:d2:5b:3a:6c:c9:f8:cd:70:f9:e1:dd:d8:
31:d8:25:94:17:b0:56:2a:c3:32:32:62:1e:06:53:
54:db:8a:f3:9d:15:a9:17:e6:a3:54:a9:e2:5e:50:
95:4e:89:70:c5:8c:bc:ef:c0:5b:61:1a:b3:e7:82:
1b:14:34:4a:50:a1:9c:59:6b:9d:5a:15:75:e1:46:
12:6c:b8:13:0e:a4:7c:90:e7:c7:f4:55:31:ec:ec:
d9:4d:1a:da:c8:ce:d6:5c:5e:78:80:8a:02:06:0e:
32:b8:b6:96:58:6d:8e:63:5b:bb:30:79:87:4b:a0:
1d:57:35:f8:c3:0b:6f:0e:86:bf:f6:ff:86:6d:d3:
8b:37:28:b3:fb:aa:fa:25:85:8a:c7:3c:33:b4:57:
71:28:9f:d2:78:67:3e:6d:b9:32:f7:ba:9e:a2:ff:
54:d6:53:64:09:49:7c:5f:42:f5:33:eb:6f:fe:a9:
3f:07:99:38:16:c0:b8:a3:0b:1e:2f:e5:7b:3d:e7:
89:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1D:BB:12:83:B5:E9:35:A9:22:11:14:79:4C:89:D9:C0:78:13:E9
X509v3 Authority Key Identifier:
keyid:AC:A1:2F:D7:DB:B2:83:F3:2C:DD:73:CF:CE:CF:05:D3:CB:9A:88:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:69:47:28:53:8d:f7:45:c3:31:f2:b8:4e:4f:2c:7a:f8:72:
f5:f5:c4:81:f2:d8:e2:93:63:2d:80:16:4c:e7:e3:52:61:60:
0a:0b:af:5e:f8:af:e4:f8:86:ca:83:e1:c3:00:c6:d7:d2:2a:
df:b3:6c:e7:12:ce:a0:58:21:b5:d0:e2:eb:ef:52:e3:71:3a:
ca:08:bd:fa:a4:ed:ba:39:98:47:cd:41:6b:fd:54:01:5c:b6:
41:3c:e5:d2:c0:15:5b:46:6b:5b:0f:3b:2c:8b:79:69:b0:af:
30:7f:8e:21:36:10:cf:2b:74:a4:40:88:3d:03:4f:38:16:bb:
e9:66:93:6e:aa:eb:c4:42:89:04:a0:88:31:03:0c:15:57:2e:
4b:99:d7:fc:b6:30:82:36:de:0b:43:e5:2d:b7:6a:ea:c9:b5:
93:30:71:75:ca:76:68:db:c4:e2:57:67:f2:6e:0b:06:d3:2d:
d9:4c:1a:2d:9c:26:cb:be:af:38:1d:ef:f5:40:80:95:61:5a:
ce:9a:d2:f9:a1:e4:5b:c7:c3:9f:99:82:ed:6b:c1:94:82:c9:
7f:ea:d5:77:cc:8b:4f:6a:58:d9:8d:a5:73:18:d1:ba:eb:f8:
62:d9:0b:c0:ed:1c:d5:9d:bd:74:e1:71:6f:64:f7:13:4a:f2:
4d:6d:a6:db
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTk0RDExMTAvBgNVBAUTKEFDQTEyRkQ3REJCMjgzRjMyQ0RENzNDRkNFQ0YwNUQz
Q0I5QTg4QTEwHhcNMjUwMTMwMjExNzI4WhcNMjUwMjA2MjExNzI4WjAYMRYwFAYD
VQQDEw02NzliZWM2OC04OWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApRlq+bUlZke0URSBUrOLkvl1oIXFkfQ9ii7yH/5xxKBi8u2+5TKRqFqz5zn7
Q8LTTPFMze8uF0jKZjI64qLSWzpsyfjNcPnh3dgx2CWUF7BWKsMyMmIeBlNU24rz
nRWpF+ajVKniXlCVTolwxYy878BbYRqz54IbFDRKUKGcWWudWhV14UYSbLgTDqR8
kOfH9FUx7OzZTRrayM7WXF54gIoCBg4yuLaWWG2OY1u7MHmHS6AdVzX4wwtvDoa/
9v+GbdOLNyiz+6r6JYWKxzwztFdxKJ/SeGc+bbky97qeov9U1lNkCUl8X0L1M+tv
/qk/B5k4FsC4owseL+V7PeeJGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKoduxKD
tek1qSIRFHlMidnAeBPpMB8GA1UdIwQYMBaAFKyhL9fbsoPzLN1zz87PBdPLmoih
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTREMS83QkQyMUFGRUY5
N0IxMUVBQUM5MDVFNjJDNEY5QUUwMi9yS0V2MTl1eWdfTXMzWFBQenM4RjA4dWFp
S0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JLRXYxOXV5Z19NczNYUFB6czhGMDh1YWlLRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTREMS83QkQyMUFGRUY5N0IxMUVBQUM5MDVFNjJDNEY5QUUwMi9yS0V2MTl1eWdf
TXMzWFBQenM4RjA4dWFpS0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBqaUcoU433RcMx8rhOTyx6+HL19cSB8tjik2MtgBZM5+NSYWAKC69e
+K/k+IbKg+HDAMbX0irfs2znEs6gWCG10OLr71LjcTrKCL36pO26OZhHzUFr/VQB
XLZBPOXSwBVbRmtbDzssi3lpsK8wf44hNhDPK3SkQIg9A084FrvpZpNuquvEQokE
oIgxAwwVVy5Lmdf8tjCCNt4LQ+Utt2rqybWTMHF1ynZo28TiV2fybgsG0y3ZTBot
nCbLvq84He/1QICVYVrOmtL5oeRbx8OfmYLta8GUgsl/6tV3zItPaljZjaVzGNG6
6/hi2QvA7RzVnb104XFvZPcTSvJNbabb
-----END CERTIFICATE-----
Generated at Wed Apr 30 15:44:15 2025 by rpki-client