Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft
File: LsRLn8Flw7yChYEsMTzHgBmI_zE.mft (raw, json)
Hash identifier: ++zghNt7S5Te/7fdWEU1wwhYTZlxM4RjpUMFWh89hUg=
Subject key identifier: 1F:0E:FD:C4:8E:66:E9:EB:08:01:E6:FE:28:BD:BB:4E:76:0D:5E:04
Authority key identifier: 2E:C4:4B:9F:C1:65:C3:BC:82:85:81:2C:31:3C:C7:80:19:88:FF:31
Certificate issuer: /CN=A91BA164/serialNumber=2EC44B9FC165C3BC8285812C313CC7801988FF31
Certificate serial: 11B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft
Manifest number: 1193
Signing time: Fri 31 Jan 2025 17:13:04 +0000
Manifest this update: Fri 31 Jan 2025 17:13:04 +0000
Manifest next update: Fri 07 Feb 2025 17:13:04 +0000
Files and hashes: 1: LsRLn8Flw7yChYEsMTzHgBmI_zE.crl (hash: w4DedvA02qtgR1dQmZBk/6rPedHfWYW6hG7Tv1N0ctg=)
2: F05E8084931011EDB92FFC5FC4F9AE02.roa (hash: vcEpVe8WzCy+v+J1vMGZon/z2g5FjUpW+QeDenM9Y2c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4529 (0x11b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA164/serialNumber=2EC44B9FC165C3BC8285812C313CC7801988FF31
Validity
Not Before: Jan 31 17:13:04 2025 GMT
Not After : Feb 7 17:13:04 2025 GMT
Subject: CN=679d04a0-5a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:7d:e7:e4:0f:1d:be:07:f8:b2:f0:7b:8b:d5:
62:44:8a:ed:5b:6c:15:84:c5:6a:97:c5:62:7f:7f:
46:bb:52:c1:e5:ef:24:6e:88:28:db:a2:d1:98:d5:
be:7f:75:cd:15:88:eb:de:7e:76:03:4b:62:36:f7:
7e:5c:f3:20:1c:fe:25:39:62:c6:ba:49:c5:0e:89:
99:04:45:08:24:90:28:bc:5d:5c:e5:b1:5c:11:09:
86:cc:cc:de:b4:f7:9e:85:ed:9f:bf:ac:b9:3d:13:
0d:69:b0:7f:db:eb:0d:5b:8c:65:10:14:4c:75:f7:
5c:70:fd:bd:7c:b2:94:5b:4f:29:6d:49:92:e2:af:
34:8c:9c:03:8e:f5:b6:ab:9b:22:57:b2:e3:f4:a8:
ae:55:fe:f3:ca:23:d4:e7:36:31:17:5b:ed:e9:fe:
1c:73:a7:d3:1d:d9:f2:b1:3d:e7:86:d2:35:95:b0:
d3:44:84:d0:1c:b8:cc:bb:dd:8c:b6:8a:1b:de:56:
23:28:7f:7e:50:f0:4d:7f:98:87:50:9a:75:27:c2:
3e:ff:7d:4b:1a:3e:a2:7a:09:a4:2f:4a:29:cb:d9:
57:90:6b:9c:df:9f:e6:ee:fe:af:41:63:cd:68:4c:
30:35:9b:41:e1:eb:58:f7:65:01:0e:da:22:4d:7d:
23:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0E:FD:C4:8E:66:E9:EB:08:01:E6:FE:28:BD:BB:4E:76:0D:5E:04
X509v3 Authority Key Identifier:
keyid:2E:C4:4B:9F:C1:65:C3:BC:82:85:81:2C:31:3C:C7:80:19:88:FF:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:8b:55:6a:52:2b:41:60:31:b3:cb:e5:2b:d3:3a:5e:3c:fd:
70:64:f1:fb:46:d5:d4:52:1e:67:75:e7:ef:ba:73:87:81:1d:
e3:3c:e5:b6:4c:18:b3:9c:9b:9c:f0:d4:d7:2a:3a:ad:f0:8b:
d5:e6:20:23:d0:4f:21:35:9e:1d:b3:5f:55:49:27:91:e6:17:
f2:f0:51:5d:6d:54:c1:3d:5f:ff:f0:4b:39:48:b7:b4:82:cf:
d2:3d:23:3f:4b:96:3b:8b:85:1e:a1:40:ce:54:c7:3a:23:e2:
a8:3d:14:3d:eb:cd:ca:fc:bf:51:9a:16:6a:99:71:80:bb:33:
7e:43:10:cf:f8:35:cf:94:68:fb:fc:65:8d:3a:97:3a:4b:27:
14:26:45:2a:48:c5:f4:06:fe:46:6a:85:b3:7e:44:45:71:44:
df:ca:9d:7a:7b:7a:b2:b6:df:81:b1:95:61:38:4f:42:8d:f7:
fc:9d:b6:b6:44:50:78:81:ee:a0:63:3b:b4:52:4e:35:56:fd:
bd:e8:ce:a0:de:e3:69:43:fe:5b:9d:08:46:9f:1c:3f:2b:e4:
2f:7a:2f:c3:13:a0:73:f3:ca:06:58:ca:fe:66:77:bd:8c:f9:
bb:32:fd:ae:3a:e1:b7:80:c5:64:ef:65:41:f3:38:ef:b6:1b:
1d:c5:2b:85
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkExNjQxMTAvBgNVBAUTKDJFQzQ0QjlGQzE2NUMzQkM4Mjg1ODEyQzMxM0NDNzgw
MTk4OEZGMzEwHhcNMjUwMTMxMTcxMzA0WhcNMjUwMjA3MTcxMzA0WjAYMRYwFAYD
VQQDEw02NzlkMDRhMC01YTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8H3n5A8dvgf4svB7i9ViRIrtW2wVhMVql8Vif39Gu1LB5e8kbogo26LRmNW+
f3XNFYjr3n52A0tiNvd+XPMgHP4lOWLGuknFDomZBEUIJJAovF1c5bFcEQmGzMze
tPeehe2fv6y5PRMNabB/2+sNW4xlEBRMdfdccP29fLKUW08pbUmS4q80jJwDjvW2
q5siV7Lj9KiuVf7zyiPU5zYxF1vt6f4cc6fTHdnysT3nhtI1lbDTRITQHLjMu92M
toob3lYjKH9+UPBNf5iHUJp1J8I+/31LGj6iegmkL0opy9lXkGuc35/m7v6vQWPN
aEwwNZtB4etY92UBDtoiTX0j/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8O/cSO
ZunrCAHm/ii9u052DV4EMB8GA1UdIwQYMBaAFC7ES5/BZcO8goWBLDE8x4AZiP8x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTE2NC9BRkM1OTJFQ0Yz
MUUxMUU4ODNFQjdCNzlDNEY5QUUwMi9Mc1JMbjhGbHc3eUNoWUVzTVR6SGdCbUlf
ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xzUkxuOEZsdzd5Q2hZRXNNVHpIZ0JtSV96RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QTE2NC9BRkM1OTJFQ0YzMUUxMUU4ODNFQjdCNzlDNEY5QUUwMi9Mc1JMbjhGbHc3
eUNoWUVzTVR6SGdCbUlfekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAVi1VqUitBYDGzy+Ur0zpePP1wZPH7RtXUUh5ndefvunOHgR3jPOW2
TBiznJuc8NTXKjqt8IvV5iAj0E8hNZ4ds19VSSeR5hfy8FFdbVTBPV//8Es5SLe0
gs/SPSM/S5Y7i4UeoUDOVMc6I+KoPRQ9683K/L9RmhZqmXGAuzN+QxDP+DXPlGj7
/GWNOpc6SycUJkUqSMX0Bv5GaoWzfkRFcUTfyp16e3qytt+BsZVhOE9Cjff8nba2
RFB4ge6gYzu0Uk41Vv296M6g3uNpQ/5bnQhGnxw/K+Qvei/DE6Bz88oGWMr+Zne9
jPm7Mv2uOuG3gMVk72VB8zjvthsdxSuF
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:20:52 2025 by rpki-client