Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft
File: Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft (raw, json)
Hash identifier: 9KvfxYmUUbp11CfxdhJMc1y1QFa/h9FgZmAQcefg0uA=
Subject key identifier: 34:AD:6C:62:3D:D7:03:95:69:D8:EE:3D:5F:1E:3A:B5:3C:35:8F:D2
Authority key identifier: 36:1B:BA:94:08:FA:19:B5:E9:7D:82:CD:DB:FF:B2:E7:9B:BB:A3:3F
Certificate issuer: /CN=A919D656/serialNumber=361BBA9408FA19B5E97D82CDDBFFB2E79BBBA33F
Certificate serial: 01A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft
Manifest number: 019D
Signing time: Fri 31 Jan 2025 02:38:21 +0000
Manifest this update: Fri 31 Jan 2025 02:38:20 +0000
Manifest next update: Fri 07 Feb 2025 02:38:20 +0000
Files and hashes: 1: Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl (hash: lZRg+1++ThDZ9/ClF8cJOowvMNZe3PGfX8xv/HuffhI=)
2: 00FFAB766ACF11EDBCC28E3CC4F9AE02.roa (hash: XpTSLigO4HKKd3j+0vvg/u/YVC83XW6OinlRQSFc3LQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 418 (0x1a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D656/serialNumber=361BBA9408FA19B5E97D82CDDBFFB2E79BBBA33F
Validity
Not Before: Jan 31 02:38:20 2025 GMT
Not After : Feb 7 02:38:20 2025 GMT
Subject: CN=679c379c-bba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:12:bd:0f:42:b4:b8:68:42:ea:10:36:93:16:
5c:12:e6:fd:a3:dd:63:43:f5:e1:c3:81:bb:45:95:
c6:de:e5:34:e4:74:e1:80:54:84:e7:0c:90:d7:06:
c1:74:0c:ae:bd:ae:08:e4:87:fc:27:fd:9c:ea:dd:
c8:2b:ee:c9:be:40:61:c9:fa:44:2c:1e:3d:52:2d:
56:32:5e:c5:50:43:d4:02:97:6f:19:28:ba:d9:7a:
38:c1:73:76:48:a6:55:cd:7c:00:2d:f3:f7:97:14:
66:cd:ef:e5:e4:11:f2:ab:24:74:61:8b:15:eb:da:
b3:e5:56:42:4e:54:d6:e5:aa:aa:d2:38:2f:8b:92:
9f:ef:81:44:8e:79:70:83:42:d6:49:b8:a1:c8:10:
5a:fb:fd:c6:f4:0b:7b:df:1a:2c:72:93:d0:3e:f4:
70:bf:5b:ba:a0:00:3a:46:96:b5:d5:f4:7e:57:d5:
11:cb:87:1e:a7:a3:1c:c8:40:3a:10:0f:83:e0:99:
b0:7c:e9:25:f9:ef:e2:05:0a:00:e9:0f:76:79:cd:
87:4c:f3:6b:ed:91:81:4f:d2:1a:99:e7:01:48:cf:
8b:2b:5d:bb:a4:6b:51:71:d1:b4:62:d6:64:66:e9:
5c:72:cb:fb:de:6d:d7:96:11:2b:d2:17:3e:13:7c:
1f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AD:6C:62:3D:D7:03:95:69:D8:EE:3D:5F:1E:3A:B5:3C:35:8F:D2
X509v3 Authority Key Identifier:
keyid:36:1B:BA:94:08:FA:19:B5:E9:7D:82:CD:DB:FF:B2:E7:9B:BB:A3:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:5b:ef:69:d9:fb:6f:94:d9:7c:02:2b:d3:ce:82:da:88:dd:
e2:93:4b:98:b0:55:c0:6a:de:99:12:9e:dc:ef:1a:b1:6c:5d:
be:01:58:70:48:ff:1d:37:b0:04:34:8a:41:71:a5:0f:5b:cd:
49:15:98:63:b6:e7:59:f3:f2:b4:a0:fe:c2:7c:90:cf:20:3b:
db:a1:77:04:ba:d5:cc:79:cb:7c:5a:e1:7d:34:64:ca:52:bf:
17:a3:0c:d7:11:3f:f0:ac:cf:56:d0:d0:26:7e:9f:4b:b5:dd:
9a:94:4c:38:de:14:85:70:92:b8:96:60:5b:ff:89:05:7d:8c:
79:6c:d5:45:eb:1a:3d:3d:c9:b8:1c:14:10:45:bf:fa:7f:31:
b8:9e:cb:fe:f2:da:da:2d:3b:89:4b:29:46:a3:a7:7d:01:87:
9d:98:7e:74:07:d6:56:b7:02:84:b7:7f:55:15:ae:69:ce:45:
a8:f6:aa:12:89:de:78:d6:eb:24:c9:ae:3f:0d:88:19:62:cc:
43:9a:cd:24:e1:0d:e3:7f:fb:58:1c:ae:49:e1:32:ff:f8:91:
ff:9c:02:7b:00:27:de:c9:95:82:27:98:db:b3:61:09:c3:33:
6e:86:64:c5:c5:08:e1:d4:7b:41:aa:85:9c:30:ec:3e:f8:6b:
91:e8:92:4c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUQ2NTYxMTAvBgNVBAUTKDM2MUJCQTk0MDhGQTE5QjVFOTdEODJDRERCRkZCMkU3
OUJCQkEzM0YwHhcNMjUwMTMxMDIzODIwWhcNMjUwMjA3MDIzODIwWjAYMRYwFAYD
VQQDEw02NzljMzc5Yy1iYmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzxK9D0K0uGhC6hA2kxZcEub9o91jQ/Xhw4G7RZXG3uU05HThgFSE5wyQ1wbB
dAyuva4I5If8J/2c6t3IK+7JvkBhyfpELB49Ui1WMl7FUEPUApdvGSi62Xo4wXN2
SKZVzXwALfP3lxRmze/l5BHyqyR0YYsV69qz5VZCTlTW5aqq0jgvi5Kf74FEjnlw
g0LWSbihyBBa+/3G9At73xoscpPQPvRwv1u6oAA6Rpa11fR+V9URy4cep6McyEA6
EA+D4JmwfOkl+e/iBQoA6Q92ec2HTPNr7ZGBT9IamecBSM+LK127pGtRcdG0YtZk
Zulccsv73m3XlhEr0hc+E3wfcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDStbGI9
1wOVadjuPV8eOrU8NY/SMB8GA1UdIwQYMBaAFDYbupQI+hm16X2Czdv/suebu6M/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDY1Ni85M0NCNzdBRTZB
Q0IxMUVEOUI2MzNCMzlDNEY5QUUwMi9OaHU2bEFqNkdiWHBmWUxOMl8teTU1dTdv
ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05odTZsQWo2R2JYcGZZTE4yXy15NTV1N296OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RDY1Ni85M0NCNzdBRTZBQ0IxMUVEOUI2MzNCMzlDNEY5QUUwMi9OaHU2bEFqNkdi
WHBmWUxOMl8teTU1dTdvejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBPW+9p2ftvlNl8AivTzoLaiN3ik0uYsFXAat6ZEp7c7xqxbF2+AVhw
SP8dN7AENIpBcaUPW81JFZhjtudZ8/K0oP7CfJDPIDvboXcEutXMect8WuF9NGTK
Ur8XowzXET/wrM9W0NAmfp9Ltd2alEw43hSFcJK4lmBb/4kFfYx5bNVF6xo9Pcm4
HBQQRb/6fzG4nsv+8traLTuJSylGo6d9AYedmH50B9ZWtwKEt39VFa5pzkWo9qoS
id541uskya4/DYgZYsxDms0k4Q3jf/tYHK5J4TL/+JH/nAJ7ACfeyZWCJ5jbs2EJ
wzNuhmTFxQjh1HtBqoWcMOw++GuR6JJM
-----END CERTIFICATE-----
Generated at Sun Apr 27 00:45:31 2025 by rpki-client