Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B98F0/8A1AE1F4672C11EA8393DF25C4F9AE02/ntLhokBcme5158OQPfckDKqr-yU.mft
File: ntLhokBcme5158OQPfckDKqr-yU.mft (raw, json)
Hash identifier: ga0qw4CiibNyFgcIfLwHHqxpQMR8SH9fGWb0RdcJY5s=
Subject key identifier: A6:53:33:4E:90:F6:BD:B0:45:EC:A4:8F:AD:8C:47:4E:EC:BF:D1:27
Authority key identifier: 9E:D2:E1:A2:40:5C:99:EE:75:E7:C3:90:3D:F7:24:0C:AA:AB:FB:25
Certificate issuer: /CN=A91B98F0/serialNumber=9ED2E1A2405C99EE75E7C3903DF7240CAAABFB25
Certificate serial: 0A32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntLhokBcme5158OQPfckDKqr-yU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B98F0/8A1AE1F4672C11EA8393DF25C4F9AE02/ntLhokBcme5158OQPfckDKqr-yU.mft
Manifest number: 0A1C
Signing time: Thu 30 Jan 2025 19:55:23 +0000
Manifest this update: Thu 30 Jan 2025 19:55:22 +0000
Manifest next update: Thu 06 Feb 2025 19:55:22 +0000
Files and hashes: 1: ntLhokBcme5158OQPfckDKqr-yU.crl (hash: fIlQQjgVp/exl5dAxKGVXkxfQeLwJU4ksGXd6w70a28=)
2: AD47EF027F2511EBA072E644C4F9AE02.roa (hash: L2rSWyT7U6NBRQEU8jk8q2T+Vq9Had5EEUoPhXuWAi4=)
3: 0B782968C2A011EF8E69CF37C4F9AE02.roa (hash: Qvg3+6pnfOYzXfI9qrrdDhYHJZK+RcqmSL7InKfMVvE=)
4: 7CFFFCEEA18D11EE84DFAF0EC4F9AE02.roa (hash: wPsx9Tq8nhzprRZSFepMrjHo0pJom7iMBA5mXF1c33Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2610 (0xa32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B98F0/serialNumber=9ED2E1A2405C99EE75E7C3903DF7240CAAABFB25
Validity
Not Before: Jan 30 19:55:22 2025 GMT
Not After : Feb 6 19:55:22 2025 GMT
Subject: CN=679bd92a-ce2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ec:36:53:34:6c:45:61:07:05:1a:ae:6c:b1:
e7:8e:ee:c1:ed:2c:a0:6f:93:b9:90:1c:1b:da:26:
b0:0c:4a:06:3f:02:46:1f:d2:d1:25:1e:1e:45:d9:
37:a0:77:dc:6e:d0:38:a6:8a:73:5b:03:94:ae:a2:
f6:91:63:80:4b:e1:d5:d5:48:d5:e9:70:07:aa:4e:
d1:f8:6d:80:2f:93:0b:92:bd:a9:68:9a:8f:88:36:
0e:53:67:76:00:bd:92:2b:ed:1f:4a:8a:3f:42:a1:
c0:39:ba:07:c7:b5:47:c1:37:92:fc:50:54:b0:c0:
24:82:54:85:6f:e5:ce:58:65:51:6e:37:51:f2:19:
73:3e:2f:d6:85:44:29:05:99:c0:04:72:5e:a0:d5:
e1:a6:e7:07:94:81:7b:22:3d:5a:d4:ab:ad:d9:35:
d5:25:65:72:40:32:d8:18:f1:dc:57:17:0b:9e:29:
fd:de:c0:58:69:82:70:9c:f9:50:78:57:ce:e8:c6:
9f:31:43:7e:4d:56:f9:b5:74:80:87:be:aa:fe:38:
de:2a:0f:2d:95:e6:81:62:86:61:42:7f:c1:d9:ce:
fa:1e:c3:73:86:1e:c7:6c:77:66:92:49:a5:11:84:
18:8c:f7:3c:67:3d:6a:1f:c0:4a:2c:e5:dc:86:76:
e8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:53:33:4E:90:F6:BD:B0:45:EC:A4:8F:AD:8C:47:4E:EC:BF:D1:27
X509v3 Authority Key Identifier:
keyid:9E:D2:E1:A2:40:5C:99:EE:75:E7:C3:90:3D:F7:24:0C:AA:AB:FB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B98F0/8A1AE1F4672C11EA8393DF25C4F9AE02/ntLhokBcme5158OQPfckDKqr-yU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntLhokBcme5158OQPfckDKqr-yU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B98F0/8A1AE1F4672C11EA8393DF25C4F9AE02/ntLhokBcme5158OQPfckDKqr-yU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:33:a1:d0:e9:f4:7d:4d:71:af:95:58:a4:cf:16:9b:1a:ec:
8c:e6:65:9d:db:f7:07:82:80:7a:d7:6c:9f:b9:d6:02:4e:c6:
6b:89:6e:a6:b0:46:26:9c:c6:fd:36:6f:0c:18:14:d8:47:2b:
ee:cb:61:47:7c:2d:95:e5:d5:39:94:fc:ea:e3:27:7c:4e:e3:
9c:b9:02:b7:2e:e8:14:1e:d6:91:31:9f:a6:b9:5d:b0:70:90:
57:a4:ef:9d:18:6a:dc:08:ad:cf:94:1b:cc:94:15:a9:3e:6f:
f3:23:4c:64:98:fd:7a:4e:68:23:ba:d3:3a:01:31:20:00:10:
3f:9a:8c:8c:65:8f:3c:43:0a:03:96:09:84:db:6e:15:19:8b:
30:cf:fa:a3:ba:89:a9:af:77:74:0d:f3:67:d5:99:c7:20:b6:
6c:46:76:36:3c:29:19:5a:e1:60:7f:a2:58:be:ac:7c:9d:76:
55:d4:2c:06:85:2c:b6:10:0f:d0:09:5b:51:68:4b:24:32:2d:
a0:9c:8c:7c:bc:f0:dc:78:0e:d0:a3:ad:1a:57:35:db:8e:f0:
e3:21:ca:c6:f8:db:da:e7:ee:69:eb:0d:a0:1c:2a:95:0f:bc:
fb:c9:d4:cf:db:10:e3:34:cc:bc:c3:21:89:67:49:69:ec:88:
5a:75:9a:cc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjk4RjAxMTAvBgNVBAUTKDlFRDJFMUEyNDA1Qzk5RUU3NUU3QzM5MDNERjcyNDBD
QUFBQkZCMjUwHhcNMjUwMTMwMTk1NTIyWhcNMjUwMjA2MTk1NTIyWjAYMRYwFAYD
VQQDEw02NzliZDkyYS1jZTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAquw2UzRsRWEHBRqubLHnju7B7Sygb5O5kBwb2iawDEoGPwJGH9LRJR4eRdk3
oHfcbtA4popzWwOUrqL2kWOAS+HV1UjV6XAHqk7R+G2AL5MLkr2paJqPiDYOU2d2
AL2SK+0fSoo/QqHAOboHx7VHwTeS/FBUsMAkglSFb+XOWGVRbjdR8hlzPi/WhUQp
BZnABHJeoNXhpucHlIF7Ij1a1Kut2TXVJWVyQDLYGPHcVxcLnin93sBYaYJwnPlQ
eFfO6MafMUN+TVb5tXSAh76q/jjeKg8tleaBYoZhQn/B2c76HsNzhh7HbHdmkkml
EYQYjPc8Zz1qH8BKLOXchnboywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZTM06Q
9r2wReykj62MR07sv9EnMB8GA1UdIwQYMBaAFJ7S4aJAXJnudefDkD33JAyqq/sl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOThGMC84QTFBRTFGNDY3
MkMxMUVBODM5M0RGMjVDNEY5QUUwMi9udExob2tCY21lNTE1OE9RUGZja0RLcXIt
eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL250TGhva0JjbWU1MTU4T1FQZmNrREtxci15VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OThGMC84QTFBRTFGNDY3MkMxMUVBODM5M0RGMjVDNEY5QUUwMi9udExob2tCY21l
NTE1OE9RUGZja0RLcXIteVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA4M6HQ6fR9TXGvlVikzxabGuyM5mWd2/cHgoB612yfudYCTsZriW6m
sEYmnMb9Nm8MGBTYRyvuy2FHfC2V5dU5lPzq4yd8TuOcuQK3LugUHtaRMZ+muV2w
cJBXpO+dGGrcCK3PlBvMlBWpPm/zI0xkmP16TmgjutM6ATEgABA/moyMZY88QwoD
lgmE224VGYswz/qjuompr3d0DfNn1ZnHILZsRnY2PCkZWuFgf6JYvqx8nXZV1CwG
hSy2EA/QCVtRaEskMi2gnIx8vPDceA7Qo60aVzXbjvDjIcrG+Nva5+5p6w2gHCqV
D7z7ydTP2xDjNMy8wyGJZ0lp7IhadZrM
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:33:55 2025 by rpki-client