Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft
File: TySfPU9SKVXadOhT4AXndAZ6Oaw.mft (raw, json)
Hash identifier: 8qm6VdGhQKScAXMAzp81ik45kereRyNU5qlfny8Y2P4=
Subject key identifier: 30:1C:9B:D3:F3:C5:08:6F:E1:25:4A:2B:EE:05:CD:67:CC:5E:13:AB
Authority key identifier: 4F:24:9F:3D:4F:52:29:55:DA:74:E8:53:E0:05:E7:74:06:7A:39:AC
Certificate issuer: /CN=A919F06A/serialNumber=4F249F3D4F522955DA74E853E005E774067A39AC
Certificate serial: 06E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft
Manifest number: 06E8
Signing time: Thu 30 Jan 2025 21:55:23 +0000
Manifest this update: Thu 30 Jan 2025 21:55:22 +0000
Manifest next update: Thu 06 Feb 2025 21:55:22 +0000
Files and hashes: 1: TySfPU9SKVXadOhT4AXndAZ6Oaw.crl (hash: C9uMun0BrOsJ6YBJVciYhCAPCzzxU8z2so5ppqPFK4I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1768 (0x6e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F06A/serialNumber=4F249F3D4F522955DA74E853E005E774067A39AC
Validity
Not Before: Jan 30 21:55:22 2025 GMT
Not After : Feb 6 21:55:22 2025 GMT
Subject: CN=679bf54b-c116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:68:53:b0:e6:af:40:4f:a7:a9:d5:f0:92:af:
68:a8:13:e5:72:de:8b:6f:81:e5:33:1b:b6:79:f2:
2f:24:2d:33:c4:a3:e2:ab:68:6e:b8:2a:8c:57:f9:
0b:e7:eb:2b:a7:ef:13:a6:bb:15:99:7d:bf:22:82:
85:3d:4d:ca:96:87:f0:09:5f:d9:4d:7c:d3:7d:ec:
83:36:b8:86:1c:7b:9f:fa:48:7f:2d:3f:63:68:99:
7c:29:99:01:73:f7:77:70:10:19:15:ab:15:a1:69:
36:4a:d7:ea:12:4c:33:8e:71:24:d9:7d:e4:78:d6:
dd:e5:1a:89:d4:34:6a:10:a3:b1:d2:85:6c:7b:39:
81:e2:4c:5b:03:8b:f4:77:50:5d:1f:a8:d3:5b:f6:
44:b2:74:fb:cb:11:2a:70:b3:3a:1b:60:ba:89:65:
bf:9e:d1:71:e0:50:78:e7:31:b1:fe:0d:c4:a4:60:
e9:e6:6c:66:6e:ba:32:ab:0f:b6:1a:a3:2a:c3:86:
e9:bb:af:ba:e1:c9:9a:9f:ce:52:fc:01:70:8e:a0:
a4:a5:48:e7:3e:b6:d8:b3:54:60:be:07:69:eb:cf:
83:f7:5e:b2:b1:12:20:a5:36:8c:df:5f:19:34:aa:
e1:66:94:94:82:23:dc:2c:fa:60:97:d6:4f:8a:44:
b4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1C:9B:D3:F3:C5:08:6F:E1:25:4A:2B:EE:05:CD:67:CC:5E:13:AB
X509v3 Authority Key Identifier:
keyid:4F:24:9F:3D:4F:52:29:55:DA:74:E8:53:E0:05:E7:74:06:7A:39:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:2d:fd:ac:7f:9a:6e:e9:b2:ef:3e:58:71:c2:a9:d8:77:d3:
cd:a8:bc:9b:7f:9c:f1:2a:e5:5a:bd:83:44:ee:00:33:9b:38:
cb:35:0e:07:23:0b:3c:c2:f7:43:2c:8c:be:a6:99:f3:08:19:
19:5b:f2:4e:cd:cc:26:d4:61:9e:6a:81:4c:b8:68:e3:a7:06:
28:fb:86:14:25:6c:ad:c7:b5:09:f7:96:3b:a3:59:46:20:2f:
86:da:4d:7f:f3:f6:f7:33:a5:30:ef:cd:52:0f:08:c2:71:fe:
33:9a:cb:d0:1e:3c:9e:fe:ce:9a:95:d8:49:35:4c:4f:4d:1d:
71:21:b5:7d:9d:89:f8:47:3d:2d:07:53:b0:12:1e:f1:09:9f:
c4:e3:47:d9:04:64:05:39:b6:67:7f:b1:ac:e1:84:56:0a:98:
30:4a:f5:ec:a6:c2:81:b4:1c:90:e9:ff:ab:43:5e:5b:48:1f:
9c:a9:db:24:36:32:27:82:d9:72:2c:a9:98:65:c1:de:4c:7d:
a0:c8:72:4c:ea:0f:1d:f6:c2:2d:8f:5a:71:f9:d5:e3:fe:20:
d3:73:a2:55:e3:41:7d:b0:05:40:82:cc:98:ef:3a:60:a6:89:
77:d2:7d:54:ee:9d:dd:f6:9c:4d:88:60:2c:b6:61:27:40:5f:
11:be:94:21
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUYwNkExMTAvBgNVBAUTKDRGMjQ5RjNENEY1MjI5NTVEQTc0RTg1M0UwMDVFNzc0
MDY3QTM5QUMwHhcNMjUwMTMwMjE1NTIyWhcNMjUwMjA2MjE1NTIyWjAYMRYwFAYD
VQQDEw02NzliZjU0Yi1jMTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxWhTsOavQE+nqdXwkq9oqBPlct6Lb4HlMxu2efIvJC0zxKPiq2huuCqMV/kL
5+srp+8TprsVmX2/IoKFPU3KlofwCV/ZTXzTfeyDNriGHHuf+kh/LT9jaJl8KZkB
c/d3cBAZFasVoWk2StfqEkwzjnEk2X3keNbd5RqJ1DRqEKOx0oVsezmB4kxbA4v0
d1BdH6jTW/ZEsnT7yxEqcLM6G2C6iWW/ntFx4FB45zGx/g3EpGDp5mxmbroyqw+2
GqMqw4bpu6+64cman85S/AFwjqCkpUjnPrbYs1Rgvgdp68+D916ysRIgpTaM318Z
NKrhZpSUgiPcLPpgl9ZPikS06QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDAcm9Pz
xQhv4SVKK+4FzWfMXhOrMB8GA1UdIwQYMBaAFE8knz1PUilV2nToU+AF53QGejms
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjA2QS9GQ0YyN0FDNjMz
QTQxMUVCQUM1NDg1MkVDNEY5QUUwMi9UeVNmUFU5U0tWWGFkT2hUNEFYbmRBWjZP
YXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1R5U2ZQVTlTS1ZYYWRPaFQ0QVhuZEFaNk9hdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RjA2QS9GQ0YyN0FDNjMzQTQxMUVCQUM1NDg1MkVDNEY5QUUwMi9UeVNmUFU5U0tW
WGFkT2hUNEFYbmRBWjZPYXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDMLf2sf5pu6bLvPlhxwqnYd9PNqLybf5zxKuVavYNE7gAzmzjLNQ4H
Iws8wvdDLIy+ppnzCBkZW/JOzcwm1GGeaoFMuGjjpwYo+4YUJWytx7UJ95Y7o1lG
IC+G2k1/8/b3M6Uw781SDwjCcf4zmsvQHjye/s6aldhJNUxPTR1xIbV9nYn4Rz0t
B1OwEh7xCZ/E40fZBGQFObZnf7Gs4YRWCpgwSvXspsKBtByQ6f+rQ15bSB+cqdsk
NjIngtlyLKmYZcHeTH2gyHJM6g8d9sItj1px+dXj/iDTc6JV40F9sAVAgsyY7zpg
pol30n1U7p3d9pxNiGAstmEnQF8RvpQh
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:56:17 2025 by rpki-client