Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0416/54750BDA637C11EC9C822317C4F9AE02/43R0Hh7G7NjwB3XisOiSmLY45mo.mft
File: 43R0Hh7G7NjwB3XisOiSmLY45mo.mft (raw, json)
Hash identifier: xCiTN1PwuyxIj/HjJokw/H0oO4Lp3V7hiyhHASC6u7E=
Subject key identifier: 5C:66:66:81:48:6F:E6:33:AC:E1:6F:2A:E4:DD:A9:B8:B1:E1:F2:DE
Authority key identifier: E3:74:74:1E:1E:C6:EC:D8:F0:07:75:E2:B0:E8:92:98:B6:38:E6:6A
Certificate issuer: /CN=A91B0416/serialNumber=E374741E1EC6ECD8F00775E2B0E89298B638E66A
Certificate serial: 03F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/43R0Hh7G7NjwB3XisOiSmLY45mo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0416/54750BDA637C11EC9C822317C4F9AE02/43R0Hh7G7NjwB3XisOiSmLY45mo.mft
Manifest number: 03EC
Signing time: Fri 31 Jan 2025 00:37:27 +0000
Manifest this update: Fri 31 Jan 2025 00:37:27 +0000
Manifest next update: Fri 07 Feb 2025 00:37:27 +0000
Files and hashes: 1: 43R0Hh7G7NjwB3XisOiSmLY45mo.crl (hash: RQJNRzDZRiTzzfooC2d4RIOigPDuKHBBCOoQoGwYUJA=)
2: B56622C2638011ECAFDDDF20C4F9AE02.roa (hash: 5JVS9rLOFKIljft/lvnWQAQk331+RM1kSimyqz2YLac=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1008 (0x3f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0416/serialNumber=E374741E1EC6ECD8F00775E2B0E89298B638E66A
Validity
Not Before: Jan 31 00:37:27 2025 GMT
Not After : Feb 7 00:37:27 2025 GMT
Subject: CN=679c1b47-3d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5d:6c:e6:84:47:fa:75:97:97:8b:df:5b:3f:
a1:97:b4:58:44:9e:44:45:d5:bc:92:8b:91:58:c2:
c0:bd:fc:44:1c:f6:c5:11:92:b3:5f:60:31:63:3b:
e2:56:ed:a4:d2:d4:25:f4:2d:c1:c7:c6:cb:ad:c7:
e7:5e:ae:34:39:59:c0:f5:f1:1e:2e:59:19:a2:5f:
b6:d1:80:ff:45:e1:c1:82:95:39:2d:27:ad:bb:1f:
84:81:4f:f9:26:f8:26:ea:7a:54:a4:b2:a9:c6:63:
e6:17:e4:d8:87:f9:f4:bf:64:e3:83:85:69:7c:13:
c8:c8:e7:7a:f8:cf:d1:d5:08:d3:8b:af:ce:6c:5e:
d9:6b:aa:d3:85:f1:fa:68:c0:a6:8e:37:c7:99:e1:
5e:6a:2e:6f:2a:9a:e0:f9:40:5d:d2:4b:b4:bf:74:
ac:37:4d:0f:f2:af:71:47:25:5a:d8:8b:8d:19:01:
d2:a0:b5:68:f6:e3:19:17:ea:12:f6:42:2a:06:d9:
a8:4c:67:91:6a:2c:83:f6:2d:93:eb:25:00:dd:24:
e5:53:f5:fa:4e:16:02:50:0f:8f:10:fe:da:c0:77:
95:dd:76:26:a9:e2:bc:eb:ed:1b:7b:34:4d:4e:b3:
1b:6d:de:6c:08:e1:4a:81:82:d0:5d:e9:fa:9b:da:
1a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:66:66:81:48:6F:E6:33:AC:E1:6F:2A:E4:DD:A9:B8:B1:E1:F2:DE
X509v3 Authority Key Identifier:
keyid:E3:74:74:1E:1E:C6:EC:D8:F0:07:75:E2:B0:E8:92:98:B6:38:E6:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0416/54750BDA637C11EC9C822317C4F9AE02/43R0Hh7G7NjwB3XisOiSmLY45mo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/43R0Hh7G7NjwB3XisOiSmLY45mo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0416/54750BDA637C11EC9C822317C4F9AE02/43R0Hh7G7NjwB3XisOiSmLY45mo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:44:09:a3:2a:7a:69:58:e4:8a:d4:d7:26:34:a5:02:b8:d3:
88:67:2c:e1:fa:ef:ca:5e:a8:bd:da:a4:d6:88:65:44:3a:25:
95:a0:96:a8:51:6a:79:0b:7d:6d:bc:e7:f5:55:ff:69:ed:08:
a2:6e:22:eb:05:99:ca:53:a3:93:d8:58:9e:11:02:14:c6:ef:
92:53:56:14:af:28:f7:25:99:db:63:07:81:2c:80:a4:68:64:
77:c1:7a:89:2f:8c:67:24:3c:bc:7c:da:20:c1:3b:02:33:6a:
af:e3:90:0d:ba:c7:48:4c:aa:a2:0e:dd:0f:d0:06:4a:03:7b:
4e:c4:53:ab:17:73:b1:b2:07:b7:7c:f1:85:98:22:c1:35:82:
1a:0d:ab:d5:c3:aa:29:df:53:4f:24:54:f3:25:c7:44:20:d3:
16:5b:9d:77:08:f1:f9:3c:ba:ed:0e:af:71:c0:79:61:87:91:
80:77:39:6e:38:1c:3d:17:00:76:ff:c7:aa:79:55:36:ea:e4:
7b:14:7c:7a:4f:48:95:2d:75:cb:21:a0:ce:8b:53:a2:10:a2:
ab:63:b7:d8:bc:fe:ae:70:86:bd:04:a4:c7:b5:fe:0b:0e:30:
ac:b4:73:e2:d1:70:e9:60:6d:08:57:b7:7c:66:9d:1d:93:e2:
0b:e0:b9:00
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjA0MTYxMTAvBgNVBAUTKEUzNzQ3NDFFMUVDNkVDRDhGMDA3NzVFMkIwRTg5Mjk4
QjYzOEU2NkEwHhcNMjUwMTMxMDAzNzI3WhcNMjUwMjA3MDAzNzI3WjAYMRYwFAYD
VQQDEw02NzljMWI0Ny0zZDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0l1s5oRH+nWXl4vfWz+hl7RYRJ5ERdW8kouRWMLAvfxEHPbFEZKzX2AxYzvi
Vu2k0tQl9C3Bx8bLrcfnXq40OVnA9fEeLlkZol+20YD/ReHBgpU5LSetux+EgU/5
Jvgm6npUpLKpxmPmF+TYh/n0v2Tjg4VpfBPIyOd6+M/R1QjTi6/ObF7Za6rThfH6
aMCmjjfHmeFeai5vKprg+UBd0ku0v3SsN00P8q9xRyVa2IuNGQHSoLVo9uMZF+oS
9kIqBtmoTGeRaiyD9i2T6yUA3STlU/X6ThYCUA+PEP7awHeV3XYmqeK86+0bezRN
TrMbbd5sCOFKgYLQXen6m9oaGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxmZoFI
b+YzrOFvKuTdqbix4fLeMB8GA1UdIwQYMBaAFON0dB4exuzY8Ad14rDokpi2OOZq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDQxNi81NDc1MEJEQTYz
N0MxMUVDOUM4MjIzMTdDNEY5QUUwMi80M1IwSGg3RzdOandCM1hpc09pU21MWTQ1
bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzQzUjBIaDdHN05qd0IzWGlzT2lTbUxZNDVtby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MDQxNi81NDc1MEJEQTYzN0MxMUVDOUM4MjIzMTdDNEY5QUUwMi80M1IwSGg3RzdO
andCM1hpc09pU21MWTQ1bW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBjRAmjKnppWOSK1NcmNKUCuNOIZyzh+u/KXqi92qTWiGVEOiWVoJao
UWp5C31tvOf1Vf9p7QiibiLrBZnKU6OT2FieEQIUxu+SU1YUryj3JZnbYweBLICk
aGR3wXqJL4xnJDy8fNogwTsCM2qv45ANusdITKqiDt0P0AZKA3tOxFOrF3Oxsge3
fPGFmCLBNYIaDavVw6op31NPJFTzJcdEINMWW513CPH5PLrtDq9xwHlhh5GAdzlu
OBw9FwB2/8eqeVU26uR7FHx6T0iVLXXLIaDOi1OiEKKrY7fYvP6ucIa9BKTHtf4L
DjCstHPi0XDpYG0IV7d8Zp0dk+IL4LkA
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:09:21 2025 by rpki-client