Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/71tJf_2LJZ7p6hV7AiKxECZs9Z8.mft
File: 71tJf_2LJZ7p6hV7AiKxECZs9Z8.mft (raw, json)
Hash identifier: 4D2P/wwoc6XyoUUzxZG4nIMGFWvxrgm9iMgCpMsRi20=
Subject key identifier: DC:2A:12:BD:73:07:0A:97:5E:C6:16:6B:D9:DD:11:03:F1:20:34:9C
Authority key identifier: EF:5B:49:7F:FD:8B:25:9E:E9:EA:15:7B:02:22:B1:10:26:6C:F5:9F
Certificate issuer: /CN=A91B9BC6/serialNumber=EF5B497FFD8B259EE9EA157B0222B110266CF59F
Certificate serial: 04BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71tJf_2LJZ7p6hV7AiKxECZs9Z8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/71tJf_2LJZ7p6hV7AiKxECZs9Z8.mft
Manifest number: 04A5
Signing time: Fri 31 Jan 2025 00:03:30 +0000
Manifest this update: Fri 31 Jan 2025 00:03:29 +0000
Manifest next update: Fri 07 Feb 2025 00:03:29 +0000
Files and hashes: 1: 71tJf_2LJZ7p6hV7AiKxECZs9Z8.crl (hash: GVNgoJPus0/CStpxOzWFxpGVoIlqAHuJU/RVeebEjT8=)
2: 13DBE72EB4A611EE9795B755C4F9AE02.roa (hash: fopvRRWJIFpu2y3+PSB4W8rVw97gaPxUTr85DknbhoM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1214 (0x4be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9BC6/serialNumber=EF5B497FFD8B259EE9EA157B0222B110266CF59F
Validity
Not Before: Jan 31 00:03:29 2025 GMT
Not After : Feb 7 00:03:29 2025 GMT
Subject: CN=679c1352-7580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b7:36:24:31:51:c9:13:87:8d:01:d7:55:98:
02:aa:6b:f8:a7:27:3f:33:3a:b0:63:bf:35:9f:37:
3e:a3:bd:09:30:ac:fd:81:ad:74:ce:e8:e5:b9:3d:
3c:e8:05:99:ec:c1:2b:a2:12:e1:2e:6b:27:16:6f:
ea:c5:19:50:c0:f9:bb:81:ad:07:e4:ca:ca:03:50:
1d:07:96:dd:f1:9b:2a:a4:50:0c:f9:1c:7f:0b:8b:
fc:4c:21:62:5e:e2:3e:ba:32:3f:c9:6f:a5:f3:e2:
ce:64:fd:0d:c6:57:66:d5:d6:b9:a6:11:7e:9d:50:
67:e9:c9:e1:7b:c1:9f:d3:c5:a7:ca:83:9c:86:d4:
1b:7d:c9:0c:8f:2e:f7:7f:33:12:6f:d7:8c:18:4b:
a6:c8:5d:84:d3:a3:ad:cf:69:6d:2f:c1:72:5a:2e:
62:e1:c2:71:c0:ca:7d:e9:52:d3:5e:81:e5:91:dc:
fa:67:29:23:47:43:85:ab:2e:b5:6d:6d:fe:28:8e:
3c:6c:ed:93:43:2e:3c:0c:0e:03:11:9d:03:54:31:
4a:c6:c7:b8:fa:42:f5:bb:a0:e9:c8:ab:47:60:dd:
38:fa:e9:5e:95:2b:94:ac:9b:07:90:9a:35:2c:43:
15:39:99:2a:8c:b4:19:2b:50:28:92:9a:cc:c5:8e:
9a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:2A:12:BD:73:07:0A:97:5E:C6:16:6B:D9:DD:11:03:F1:20:34:9C
X509v3 Authority Key Identifier:
keyid:EF:5B:49:7F:FD:8B:25:9E:E9:EA:15:7B:02:22:B1:10:26:6C:F5:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/71tJf_2LJZ7p6hV7AiKxECZs9Z8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71tJf_2LJZ7p6hV7AiKxECZs9Z8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/71tJf_2LJZ7p6hV7AiKxECZs9Z8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:5b:96:35:b6:d7:a0:03:bd:1d:8a:e9:87:ce:e0:4a:d4:be:
d2:a0:c8:38:17:1b:1d:50:9b:aa:e3:49:64:fb:c8:1c:84:68:
61:fd:f9:ea:e0:31:16:9e:cd:7a:ec:60:eb:89:2c:c9:d7:00:
24:c3:6f:ba:39:60:b2:30:48:1a:de:7d:20:01:cd:c1:87:17:
6c:6b:b7:bd:23:2c:48:02:fb:ee:d0:b1:ae:29:a3:a4:c6:7d:
fe:d4:f3:0a:58:d9:98:5b:4e:bb:b4:f9:22:d7:fd:59:8b:e5:
aa:de:0b:20:cc:4b:33:06:fa:ca:b1:e9:ea:6b:6c:6e:4d:d5:
96:24:ce:5a:7b:7c:06:33:9f:28:15:b2:c6:c3:0b:a2:9e:7b:
27:f3:de:7d:73:61:0f:4b:09:85:86:b0:7a:d0:13:c6:3c:15:
9c:c9:f6:53:f2:59:ff:b3:99:d4:65:39:1f:31:f6:fe:54:6e:
21:81:3b:9e:6d:29:88:4e:96:01:ba:70:70:eb:cf:8d:c4:b6:
ea:ed:9f:7e:d8:f5:b9:07:77:e0:e0:da:04:37:35:86:72:d2:
f0:fe:6f:be:51:9f:4f:0a:d6:1a:e5:b1:b0:a0:dd:07:ad:2b:
a3:ab:8a:00:91:e4:ba:e5:8b:2a:48:ff:aa:fe:48:55:f1:54:
8b:aa:bc:2e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjlCQzYxMTAvBgNVBAUTKEVGNUI0OTdGRkQ4QjI1OUVFOUVBMTU3QjAyMjJCMTEw
MjY2Q0Y1OUYwHhcNMjUwMTMxMDAwMzI5WhcNMjUwMjA3MDAwMzI5WjAYMRYwFAYD
VQQDEw02NzljMTM1Mi03NTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw7c2JDFRyROHjQHXVZgCqmv4pyc/MzqwY781nzc+o70JMKz9ga10zujluT08
6AWZ7MErohLhLmsnFm/qxRlQwPm7ga0H5MrKA1AdB5bd8ZsqpFAM+Rx/C4v8TCFi
XuI+ujI/yW+l8+LOZP0Nxldm1da5phF+nVBn6cnhe8Gf08WnyoOchtQbfckMjy73
fzMSb9eMGEumyF2E06Otz2ltL8FyWi5i4cJxwMp96VLTXoHlkdz6ZykjR0OFqy61
bW3+KI48bO2TQy48DA4DEZ0DVDFKxse4+kL1u6DpyKtHYN04+ulelSuUrJsHkJo1
LEMVOZkqjLQZK1AokprMxY6aTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNwqEr1z
BwqXXsYWa9ndEQPxIDScMB8GA1UdIwQYMBaAFO9bSX/9iyWe6eoVewIisRAmbPWf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUJDNi80ODkwOTFDRTI2
NjcxMUVDQjlDMjJDNzdDNEY5QUUwMi83MXRKZl8yTEpaN3A2aFY3QWlLeEVDWnM5
WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzcxdEpmXzJMSlo3cDZoVjdBaUt4RUNaczlaOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OUJDNi80ODkwOTFDRTI2NjcxMUVDQjlDMjJDNzdDNEY5QUUwMi83MXRKZl8yTEpa
N3A2aFY3QWlLeEVDWnM5WjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQARW5Y1ttegA70diumHzuBK1L7SoMg4FxsdUJuq40lk+8gchGhh/fnq
4DEWns167GDriSzJ1wAkw2+6OWCyMEga3n0gAc3Bhxdsa7e9IyxIAvvu0LGuKaOk
xn3+1PMKWNmYW067tPki1/1Zi+Wq3gsgzEszBvrKsenqa2xuTdWWJM5ae3wGM58o
FbLGwwuinnsn8959c2EPSwmFhrB60BPGPBWcyfZT8ln/s5nUZTkfMfb+VG4hgTue
bSmITpYBunBw68+NxLbq7Z9+2PW5B3fg4NoENzWGctLw/m++UZ9PCtYa5bGwoN0H
rSujq4oAkeS65YsqSP+q/khV8VSLqrwu
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:25:08 2025 by rpki-client