Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft
File: ck4fZGxFGwGeHNo21DRq25tf2_g.mft (raw, json)
Hash identifier: R20zQLcWIBCExfyZG9OFfR7i+M6dDmkNtRdAUw9O/TE=
Subject key identifier: A2:A8:4B:5F:92:BE:D7:18:04:29:5B:24:4E:52:8D:D4:9B:FE:13:F2
Authority key identifier: 72:4E:1F:64:6C:45:1B:01:9E:1C:DA:36:D4:34:6A:DB:9B:5F:DB:F8
Certificate issuer: /CN=A91B8E38/serialNumber=724E1F646C451B019E1CDA36D4346ADB9B5FDBF8
Certificate serial: 01BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft
Manifest number: 01B9
Signing time: Fri 31 Jan 2025 02:21:19 +0000
Manifest this update: Fri 31 Jan 2025 02:21:19 +0000
Manifest next update: Fri 07 Feb 2025 02:21:19 +0000
Files and hashes: 1: ck4fZGxFGwGeHNo21DRq25tf2_g.crl (hash: Kjyaf9Fbcpmn5bwZ9JdQQTObW2sHNtiM3KC03gY3mFk=)
2: A6789038400211ED808CCF0DC4F9AE02.roa (hash: AFcbY0/3GFwr3EcAHIPw3DWr7uIr3rpZ3pX3o3qycLQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 444 (0x1bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8E38/serialNumber=724E1F646C451B019E1CDA36D4346ADB9B5FDBF8
Validity
Not Before: Jan 31 02:21:19 2025 GMT
Not After : Feb 7 02:21:19 2025 GMT
Subject: CN=679c339f-5873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b8:27:19:41:64:9f:58:f4:89:9b:a8:5b:67:
89:8a:0a:75:c9:eb:e1:68:5e:20:b9:1e:e2:ac:5b:
c5:19:ee:a0:fb:3c:f3:dd:82:cb:cb:08:fc:7f:0b:
e4:63:77:6c:10:2d:8e:2d:5a:3c:f5:ee:d4:8f:7b:
e5:e0:b8:ad:ca:87:66:39:c2:54:3b:03:12:cd:15:
12:4f:7d:a1:e5:e6:89:03:cf:eb:c4:00:78:4a:47:
14:69:2c:8a:c7:9b:7f:e1:14:2a:b3:67:5e:d4:4f:
91:9e:b9:da:5e:d3:80:0c:cc:bc:8d:4a:54:20:79:
cc:b1:81:b7:3c:6d:d9:ef:a5:64:91:0d:ec:53:38:
be:a4:2e:d2:fc:81:dd:39:7a:5b:53:88:bb:9b:e9:
f1:b2:4a:63:2b:9a:b6:c7:ad:97:77:f9:b2:f4:75:
02:84:a3:02:75:1b:74:e4:d5:a6:d3:2c:56:87:af:
43:e5:99:e8:6a:99:18:60:15:70:e1:cd:ee:b9:03:
29:2f:3b:a0:41:da:52:d5:73:87:ec:eb:01:f3:05:
06:59:c6:63:04:fb:8e:5c:0d:d4:0c:a1:55:6a:99:
0f:5c:91:3c:23:ba:0b:70:0f:7b:ab:96:3c:6d:e0:
af:f8:62:a0:6e:30:76:bc:de:b1:8b:e1:d9:d3:21:
13:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A8:4B:5F:92:BE:D7:18:04:29:5B:24:4E:52:8D:D4:9B:FE:13:F2
X509v3 Authority Key Identifier:
keyid:72:4E:1F:64:6C:45:1B:01:9E:1C:DA:36:D4:34:6A:DB:9B:5F:DB:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:df:08:e5:32:0a:d9:3e:b9:58:86:69:df:6e:54:89:9e:93:
61:db:7e:13:55:e6:4f:61:11:77:ed:9a:f4:7d:df:93:e2:81:
91:b2:6e:a8:c2:03:e0:f0:d1:9d:e5:b1:ec:d9:b4:b6:08:76:
db:96:1b:1e:59:82:29:d5:0c:ac:d5:5a:3a:d9:a2:8f:b2:08:
97:b5:25:10:4c:6c:90:0f:4c:b3:6b:80:dc:c7:a8:89:fd:90:
1d:6f:a9:0f:0d:f7:bf:9f:68:f7:70:62:67:78:dd:c5:56:1a:
b3:65:35:67:5e:a8:02:af:5c:15:72:98:8c:98:78:2c:b8:aa:
b6:22:66:ad:e2:f2:89:af:ab:35:31:1b:63:92:28:66:1a:d9:
cd:e4:a3:27:22:05:05:54:bd:ce:df:77:7d:ca:f8:f5:a5:90:
61:0e:f6:55:c1:fc:84:d9:bd:db:ed:90:0c:b2:56:2c:da:df:
58:cd:45:bb:6b:a2:96:81:f6:34:6b:f5:5b:c4:35:4a:6b:71:
ca:f3:8a:9f:e0:da:a8:32:3a:a4:0c:42:f3:ce:eb:dd:96:c9:
8d:2a:a0:95:24:7b:d9:66:ed:80:a5:58:55:2f:fe:85:65:52:
b9:59:54:d3:36:67:86:e6:8a:90:d5:b1:11:05:93:76:c9:e3:
92:52:89:8e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjhFMzgxMTAvBgNVBAUTKDcyNEUxRjY0NkM0NTFCMDE5RTFDREEzNkQ0MzQ2QURC
OUI1RkRCRjgwHhcNMjUwMTMxMDIyMTE5WhcNMjUwMjA3MDIyMTE5WjAYMRYwFAYD
VQQDEw02NzljMzM5Zi01ODczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8rgnGUFkn1j0iZuoW2eJigp1yevhaF4guR7irFvFGe6g+zzz3YLLywj8fwvk
Y3dsEC2OLVo89e7Uj3vl4LityodmOcJUOwMSzRUST32h5eaJA8/rxAB4SkcUaSyK
x5t/4RQqs2de1E+RnrnaXtOADMy8jUpUIHnMsYG3PG3Z76VkkQ3sUzi+pC7S/IHd
OXpbU4i7m+nxskpjK5q2x62Xd/my9HUChKMCdRt05NWm0yxWh69D5ZnoapkYYBVw
4c3uuQMpLzugQdpS1XOH7OsB8wUGWcZjBPuOXA3UDKFVapkPXJE8I7oLcA97q5Y8
beCv+GKgbjB2vN6xi+HZ0yETNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKKoS1+S
vtcYBClbJE5SjdSb/hPyMB8GA1UdIwQYMBaAFHJOH2RsRRsBnhzaNtQ0atubX9v4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEUzOC81MUYwREIzQzNG
RkUxMUVEOUE4N0EzMTVDNEY5QUUwMi9jazRmWkd4Rkd3R2VITm8yMURScTI1dGYy
X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NrNGZaR3hGR3dHZUhObzIxRFJxMjV0ZjJfZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OEUzOC81MUYwREIzQzNGRkUxMUVEOUE4N0EzMTVDNEY5QUUwMi9jazRmWkd4Rkd3
R2VITm8yMURScTI1dGYyX2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAV3wjlMgrZPrlYhmnfblSJnpNh234TVeZPYRF37Zr0fd+T4oGRsm6o
wgPg8NGd5bHs2bS2CHbblhseWYIp1Qys1Vo62aKPsgiXtSUQTGyQD0yza4Dcx6iJ
/ZAdb6kPDfe/n2j3cGJneN3FVhqzZTVnXqgCr1wVcpiMmHgsuKq2Imat4vKJr6s1
MRtjkihmGtnN5KMnIgUFVL3O33d9yvj1pZBhDvZVwfyE2b3b7ZAMslYs2t9YzUW7
a6KWgfY0a/VbxDVKa3HK84qf4NqoMjqkDELzzuvdlsmNKqCVJHvZZu2ApVhVL/6F
ZVK5WVTTNmeG5oqQ1bERBZN2yeOSUomO
-----END CERTIFICATE-----
Generated at Wed Apr 30 15:43:09 2025 by rpki-client