Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft
File: 1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft (raw, json)
Hash identifier: NOMdrts737PZYhdZSHFPIYOcdShdeAhDIgBsaD4Uh58=
Subject key identifier: 1F:F3:E0:AF:46:80:34:1E:0E:94:42:31:B5:AB:2D:EB:86:88:5D:A8
Authority key identifier: D4:3B:44:D5:F9:37:F6:5E:8B:AB:9B:7F:98:7A:3D:C9:D2:10:4A:32
Certificate issuer: /CN=A91B7BDC/serialNumber=D43B44D5F937F65E8BAB9B7F987A3DC9D2104A32
Certificate serial: 042B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft
Manifest number: 041C
Signing time: Fri 31 Jan 2025 00:30:55 +0000
Manifest this update: Fri 31 Jan 2025 00:30:54 +0000
Manifest next update: Fri 07 Feb 2025 00:30:54 +0000
Files and hashes: 1: 1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl (hash: I54xMv1YUG+dlLzYwOqOIe+RWfn2rtsJoNdj6sNVrbk=)
2: D76AC8AC2EAB11EF9B369566C4F9AE02.roa (hash: roXdyWanhEz1VmVRl+7k+hRwHYExNJ739SbYutF/VAU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1067 (0x42b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7BDC/serialNumber=D43B44D5F937F65E8BAB9B7F987A3DC9D2104A32
Validity
Not Before: Jan 31 00:30:54 2025 GMT
Not After : Feb 7 00:30:54 2025 GMT
Subject: CN=679c19bf-4faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d7:97:ee:79:ce:fd:68:05:4f:fc:78:71:14:
75:2f:36:35:d0:1a:dc:bb:fa:5f:58:61:c9:be:03:
07:71:72:45:de:fe:9b:21:ae:2b:67:3d:a8:9e:4f:
e0:52:a8:05:12:45:f9:ed:e0:d3:81:4e:0f:93:45:
92:35:8c:9b:41:27:be:cd:36:e7:a5:de:b8:fb:d5:
30:f7:45:f2:e0:1d:eb:66:cd:1f:98:c0:7d:ed:b8:
de:81:e7:e4:d0:19:c8:01:96:0d:30:70:7f:72:05:
40:bc:be:ac:a4:c9:48:12:96:89:94:9d:46:ac:98:
59:91:bd:c1:96:7f:60:19:4a:5b:46:f6:d3:55:eb:
d4:1a:03:63:b4:4b:1e:5d:73:b2:f3:05:71:68:24:
c9:9c:e8:86:c2:66:68:b0:67:cb:0a:e6:24:af:bb:
a0:02:7f:73:c9:62:6c:f1:d6:b9:db:3d:93:f0:6a:
c6:cd:15:ca:3f:08:98:b5:8a:f8:39:ff:6c:65:df:
cc:9a:5a:c5:62:cb:84:4c:c0:87:95:54:10:7c:c2:
b7:77:83:a4:03:3f:d4:cc:c5:a5:4a:17:28:5d:73:
ca:c8:3b:99:ba:2a:02:1e:bb:87:fb:ac:ff:a6:32:
09:ec:f3:4b:2e:6c:47:40:92:fe:7b:0b:0b:2f:5b:
05:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F3:E0:AF:46:80:34:1E:0E:94:42:31:B5:AB:2D:EB:86:88:5D:A8
X509v3 Authority Key Identifier:
keyid:D4:3B:44:D5:F9:37:F6:5E:8B:AB:9B:7F:98:7A:3D:C9:D2:10:4A:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:5f:d4:24:7b:28:31:f6:4c:89:cf:58:a1:25:5e:53:c4:ba:
d9:63:72:86:71:72:f7:12:1a:96:02:03:1e:8f:08:41:a6:57:
79:ea:9c:a5:ba:07:8a:c8:da:43:6c:25:32:26:1d:93:83:5c:
4b:9f:26:34:f8:ed:4f:76:19:0d:ae:a5:1a:29:f0:9c:96:13:
4d:00:dd:b6:7d:38:29:74:9c:67:23:7a:f3:47:3a:d8:dd:81:
4b:80:c0:f9:d5:6c:f2:35:06:e0:32:ec:b4:25:fc:c8:33:0d:
5c:de:da:04:84:6f:b4:20:d9:42:77:8e:96:79:ff:88:4b:7d:
78:2c:ce:9e:a9:13:55:a2:c7:6b:d3:73:c7:32:51:42:37:55:
81:20:36:19:a3:38:c9:f3:33:59:9e:8c:3a:d1:e4:22:33:e5:
af:72:fe:88:0f:7e:ed:77:f7:c9:f7:7f:29:57:72:d9:35:a9:
40:9f:99:d8:5a:dc:42:6d:9d:59:08:e6:6b:44:b4:3b:17:4d:
d0:93:d0:34:9e:01:be:7b:4a:61:1b:9b:3a:a8:2f:d3:97:6d:
cf:50:f9:e5:a3:22:66:72:ff:7c:24:db:bc:b6:65:71:ed:88:
36:19:29:67:d7:63:8e:a2:1b:0a:49:75:86:8c:06:00:04:bc:
5f:d8:bc:95
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjdCREMxMTAvBgNVBAUTKEQ0M0I0NEQ1RjkzN0Y2NUU4QkFCOUI3Rjk4N0EzREM5
RDIxMDRBMzIwHhcNMjUwMTMxMDAzMDU0WhcNMjUwMjA3MDAzMDU0WjAYMRYwFAYD
VQQDEw02NzljMTliZi00ZmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA19eX7nnO/WgFT/x4cRR1LzY10Brcu/pfWGHJvgMHcXJF3v6bIa4rZz2onk/g
UqgFEkX57eDTgU4Pk0WSNYybQSe+zTbnpd64+9Uw90Xy4B3rZs0fmMB97bjegefk
0BnIAZYNMHB/cgVAvL6spMlIEpaJlJ1GrJhZkb3Bln9gGUpbRvbTVevUGgNjtEse
XXOy8wVxaCTJnOiGwmZosGfLCuYkr7ugAn9zyWJs8da52z2T8GrGzRXKPwiYtYr4
Of9sZd/MmlrFYsuETMCHlVQQfMK3d4OkAz/UzMWlShcoXXPKyDuZuioCHruH+6z/
pjIJ7PNLLmxHQJL+ewsLL1sFDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/z4K9G
gDQeDpRCMbWrLeuGiF2oMB8GA1UdIwQYMBaAFNQ7RNX5N/Zei6ubf5h6PcnSEEoy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0JEQy82ODFDOEY0NjU4
QkUxMUVDOEFFRDVGMkNDNEY5QUUwMi8xRHRFMWZrMzlsNkxxNXRfbUhvOXlkSVFT
akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFEdEUxZmszOWw2THE1dF9tSG85eWRJUVNqSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
N0JEQy82ODFDOEY0NjU4QkUxMUVDOEFFRDVGMkNDNEY5QUUwMi8xRHRFMWZrMzls
NkxxNXRfbUhvOXlkSVFTakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAEX9Qkeygx9kyJz1ihJV5TxLrZY3KGcXL3EhqWAgMejwhBpld56pyl
ugeKyNpDbCUyJh2Tg1xLnyY0+O1PdhkNrqUaKfCclhNNAN22fTgpdJxnI3rzRzrY
3YFLgMD51WzyNQbgMuy0JfzIMw1c3toEhG+0INlCd46Wef+IS314LM6eqRNVosdr
03PHMlFCN1WBIDYZozjJ8zNZnow60eQiM+Wvcv6ID37td/fJ938pV3LZNalAn5nY
WtxCbZ1ZCOZrRLQ7F03Qk9A0ngG+e0phG5s6qC/Tl23PUPnloyJmcv98JNu8tmVx
7Yg2GSln12OOohsKSXWGjAYABLxf2LyV
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:32:55 2025 by rpki-client