Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft
File: aWkfVRZJUvL08f7oBKoVg1_-htU.mft (raw, json)
Hash identifier: 8OLK5Ho/jNrc/x14AX/iRbZBx+DcALwU4QcUKoIQb3k=
Subject key identifier: 05:84:D2:94:63:48:A6:A2:C5:31:90:F6:7D:B3:A9:18:1E:32:D4:3D
Authority key identifier: 69:69:1F:55:16:49:52:F2:F4:F1:FE:E8:04:AA:15:83:5F:FE:86:D5
Certificate issuer: /CN=A91A618B/serialNumber=69691F55164952F2F4F1FEE804AA15835FFE86D5
Certificate serial: 098F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft
Manifest number: 098A
Signing time: Thu 30 Jan 2025 20:09:49 +0000
Manifest this update: Thu 30 Jan 2025 20:09:49 +0000
Manifest next update: Thu 06 Feb 2025 20:09:49 +0000
Files and hashes: 1: aWkfVRZJUvL08f7oBKoVg1_-htU.crl (hash: Th4mVTJOvKZ6bfBLwoMl456O0Bcjkcn/KuhOH2GckDY=)
2: 594ECE96804011EA9B73BC62C4F9AE02.roa (hash: bowd2B0tA4ibjD34KXZjrzNTGjmQ2OPcAbE7DjOnSAk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2447 (0x98f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A618B/serialNumber=69691F55164952F2F4F1FEE804AA15835FFE86D5
Validity
Not Before: Jan 30 20:09:49 2025 GMT
Not After : Feb 6 20:09:49 2025 GMT
Subject: CN=679bdc8d-5ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:24:bf:89:34:2c:e6:34:66:0d:2f:46:67:1b:
28:5d:58:e4:34:89:26:88:0c:c9:43:31:1c:80:f6:
e3:a5:68:6d:27:a1:34:06:18:51:a2:e2:b6:91:5a:
97:f0:51:46:8e:66:85:22:8a:34:56:bc:e4:81:8a:
31:fb:3c:79:12:ac:f7:35:1a:0a:22:d7:63:26:9d:
8e:65:c1:a2:ef:60:30:df:c9:9d:0f:0a:f9:f4:9b:
2b:85:e1:54:42:bf:45:2b:3b:84:e8:6f:7c:4a:ae:
71:0f:bf:8a:a3:c0:2f:aa:a5:f1:75:1d:16:db:b7:
85:87:bc:4a:12:83:92:a2:1e:85:77:57:97:98:7e:
b8:63:0d:07:c5:77:26:24:87:43:c8:ab:be:64:54:
cb:0d:85:86:d1:53:db:1c:5f:cd:45:65:2b:89:63:
07:24:3f:e0:2c:79:69:b2:3f:ac:96:2d:30:8c:8a:
88:da:37:74:a8:bc:c6:08:f1:d4:d8:8d:d2:0b:51:
ef:29:c2:32:a4:8b:e4:8a:e9:9b:6d:c7:b4:e1:e8:
fb:3d:16:27:5d:b2:e6:cd:a8:28:1e:71:8e:6d:66:
40:94:83:df:77:57:a2:98:8a:b6:52:9e:05:09:e2:
c1:04:70:2b:89:c4:14:eb:cc:2d:5c:22:60:3a:a1:
ca:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:84:D2:94:63:48:A6:A2:C5:31:90:F6:7D:B3:A9:18:1E:32:D4:3D
X509v3 Authority Key Identifier:
keyid:69:69:1F:55:16:49:52:F2:F4:F1:FE:E8:04:AA:15:83:5F:FE:86:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:75:a1:9b:fd:e6:d5:dc:27:b8:85:9f:bf:36:11:1a:ae:94:
ec:a8:16:f5:c1:77:90:21:de:d1:d1:ec:81:bf:bb:51:eb:56:
e3:10:78:23:6b:2b:2c:ec:a1:fb:2b:8e:be:c3:fc:19:3d:7a:
16:4e:b6:93:32:cf:5c:b7:ae:4a:74:3d:89:11:0b:1d:27:38:
cc:c3:c6:f4:92:da:4a:d8:3f:98:ad:a8:97:a3:6a:a6:15:72:
6d:b3:bc:d6:ca:75:a8:3a:6a:1b:69:61:fc:9d:2a:2f:3b:07:
e1:ab:b4:73:a6:13:39:0d:0c:a2:d8:16:65:50:28:e6:5c:89:
a4:3a:87:4b:c0:ac:20:b7:48:20:a8:5e:d5:a9:0c:15:41:13:
a6:d3:af:bf:f9:b6:6d:c1:70:56:c0:fb:a5:01:13:5a:bf:f2:
22:5b:a4:36:b3:38:57:9e:15:e6:1d:c3:94:1e:c1:e9:c1:53:
99:23:d4:d1:d1:b8:da:96:c5:88:46:57:b0:8e:bd:ac:16:81:
b4:3c:e4:76:11:6c:e7:e2:61:61:8e:e5:61:fb:ac:43:c9:de:
42:bd:68:24:81:44:db:cd:68:0b:d0:10:88:6b:a7:85:77:70:
04:24:cc:de:f2:16:15:82:e5:59:d1:18:c8:67:7b:42:de:1c:
be:44:9e:91
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTYxOEIxMTAvBgNVBAUTKDY5NjkxRjU1MTY0OTUyRjJGNEYxRkVFODA0QUExNTgz
NUZGRTg2RDUwHhcNMjUwMTMwMjAwOTQ5WhcNMjUwMjA2MjAwOTQ5WjAYMRYwFAYD
VQQDEw02NzliZGM4ZC01ZWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4iS/iTQs5jRmDS9GZxsoXVjkNIkmiAzJQzEcgPbjpWhtJ6E0BhhRouK2kVqX
8FFGjmaFIoo0VrzkgYox+zx5Eqz3NRoKItdjJp2OZcGi72Aw38mdDwr59JsrheFU
Qr9FKzuE6G98Sq5xD7+Ko8AvqqXxdR0W27eFh7xKEoOSoh6Fd1eXmH64Yw0HxXcm
JIdDyKu+ZFTLDYWG0VPbHF/NRWUriWMHJD/gLHlpsj+sli0wjIqI2jd0qLzGCPHU
2I3SC1HvKcIypIvkiumbbce04ej7PRYnXbLmzagoHnGObWZAlIPfd1eimIq2Up4F
CeLBBHAricQU68wtXCJgOqHKpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAWE0pRj
SKaixTGQ9n2zqRgeMtQ9MB8GA1UdIwQYMBaAFGlpH1UWSVLy9PH+6ASqFYNf/obV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjE4Qi85QkEyQjI1NDgw
M0YxMUVBOTdCNDNENjJDNEY5QUUwMi9hV2tmVlJaSlV2TDA4ZjdvQktvVmcxXy1o
dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FXa2ZWUlpKVXZMMDhmN29CS29WZzFfLWh0VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NjE4Qi85QkEyQjI1NDgwM0YxMUVBOTdCNDNENjJDNEY5QUUwMi9hV2tmVlJaSlV2
TDA4ZjdvQktvVmcxXy1odFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC/daGb/ebV3Ce4hZ+/NhEarpTsqBb1wXeQId7R0eyBv7tR61bjEHgj
ayss7KH7K46+w/wZPXoWTraTMs9ct65KdD2JEQsdJzjMw8b0ktpK2D+YraiXo2qm
FXJts7zWynWoOmobaWH8nSovOwfhq7RzphM5DQyi2BZlUCjmXImkOodLwKwgt0gg
qF7VqQwVQROm06+/+bZtwXBWwPulARNav/IiW6Q2szhXnhXmHcOUHsHpwVOZI9TR
0bjalsWIRlewjr2sFoG0POR2EWzn4mFhjuVh+6xDyd5CvWgkgUTbzWgL0BCIa6eF
d3AEJMze8hYVguVZ0RjIZ3tC3hy+RJ6R
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:41:14 2025 by rpki-client