Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft
File: Sr2iSte9no2c77NZONCoeIBMYuQ.mft (raw, json)
Hash identifier: Foeego49FpYJagV4LHzpm/MHElZqf1GwXTibnRcQTyY=
Subject key identifier: 60:D3:01:4F:19:A1:7D:1D:76:62:C3:93:A5:63:81:5C:CB:23:10:AD
Authority key identifier: 4A:BD:A2:4A:D7:BD:9E:8D:9C:EF:B3:59:38:D0:A8:78:80:4C:62:E4
Certificate issuer: /CN=A91BE096/serialNumber=4ABDA24AD7BD9E8D9CEFB35938D0A878804C62E4
Certificate serial: 1060
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft
Manifest number: 1047
Signing time: Fri 31 Jan 2025 17:22:39 +0000
Manifest this update: Fri 31 Jan 2025 17:22:38 +0000
Manifest next update: Fri 07 Feb 2025 17:22:38 +0000
Files and hashes: 1: Sr2iSte9no2c77NZONCoeIBMYuQ.crl (hash: oiqyPmUnzaaFeffH1etNYJwXk0HN+NqZSBC7R9wkolo=)
2: 60E695B6C52A11EE80D54071C4F9AE02.roa (hash: Ur8W3C7QgJQkw3BnGAD55weFMOItsdqD/26WShAlLaM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4192 (0x1060)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE096/serialNumber=4ABDA24AD7BD9E8D9CEFB35938D0A878804C62E4
Validity
Not Before: Jan 31 17:22:38 2025 GMT
Not After : Feb 7 17:22:38 2025 GMT
Subject: CN=679d06df-ac94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b8:05:bb:f7:85:87:f3:ca:b6:a0:9d:75:9e:
5a:5a:52:ca:05:f0:77:4a:16:12:a7:66:fb:6e:90:
65:81:ef:77:1f:5b:93:4b:2b:02:25:91:2a:a3:4a:
18:0b:2a:dc:33:84:a0:2c:03:ec:01:c2:04:09:26:
04:b4:29:63:69:5f:2e:ec:6b:25:2e:71:9c:b7:2d:
f9:9e:4c:25:ed:3b:99:f1:90:32:69:15:33:21:ab:
d3:16:bd:aa:f5:68:be:ee:52:60:ea:ab:de:d9:8b:
c6:71:df:32:46:fc:db:55:e3:db:b1:f7:b9:57:a4:
50:43:9b:a6:3b:79:7e:8e:1d:46:e4:9d:3b:92:74:
68:99:2f:c8:ac:7e:6f:3d:62:08:c2:88:2d:52:47:
1a:46:9a:37:31:6f:69:c5:75:29:92:12:bf:3c:98:
40:e2:1e:42:05:e9:d5:43:05:69:ed:30:f6:ef:6f:
da:5b:de:74:b3:be:1b:6d:ba:19:f7:3a:a2:74:e7:
e2:84:e3:28:20:18:9e:68:6a:e4:8f:1b:3b:2f:65:
3f:af:48:cf:99:63:69:65:20:c0:33:37:a9:6c:a3:
9e:21:04:5c:40:80:eb:85:08:60:c6:e6:f6:e3:6d:
c8:3f:91:e1:7d:aa:d9:af:6d:e9:18:5a:95:67:00:
17:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D3:01:4F:19:A1:7D:1D:76:62:C3:93:A5:63:81:5C:CB:23:10:AD
X509v3 Authority Key Identifier:
keyid:4A:BD:A2:4A:D7:BD:9E:8D:9C:EF:B3:59:38:D0:A8:78:80:4C:62:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:35:a9:48:ba:7a:ca:94:b5:a1:99:13:09:bb:23:49:82:d5:
2f:3d:bd:72:8c:2d:3a:b7:6f:d6:1b:66:91:cd:32:e4:48:c4:
f6:5a:e4:1b:d6:96:b0:ba:d5:63:10:59:f6:c7:58:60:bf:70:
ec:2c:e7:c8:fa:82:dc:9d:1b:0b:15:65:2f:0e:4f:f2:e1:da:
dc:e3:72:33:61:fa:c5:ad:d4:53:1c:52:19:34:2a:1f:5c:05:
24:7a:5c:b9:6a:e6:45:88:86:e3:84:a9:fb:ed:75:37:8b:a6:
5e:76:0b:cf:32:7b:17:d4:0f:ed:ed:72:43:a8:6b:7e:9b:bc:
b2:0b:d5:23:ad:41:60:7a:3d:53:b2:0b:5f:33:c6:42:07:e0:
81:f2:76:4c:54:74:3f:0c:af:60:f2:81:68:00:43:ab:d6:32:
a1:ac:00:89:47:62:7e:f7:bf:cd:28:92:f5:fe:38:0b:9e:d9:
bc:e1:4d:c0:ad:2e:7b:3c:ea:69:3a:de:22:2f:67:ba:79:4c:
78:6d:11:b1:80:93:80:3e:85:99:fd:d0:75:62:2c:ad:db:86:
57:77:c7:9f:eb:bd:d0:cc:eb:5f:72:9d:6e:c4:51:72:3d:6d:
c4:9f:1c:1e:f6:05:01:e1:b7:f6:79:19:4e:70:9a:81:b2:d1:
33:31:94:fb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkUwOTYxMTAvBgNVBAUTKDRBQkRBMjRBRDdCRDlFOEQ5Q0VGQjM1OTM4RDBBODc4
ODA0QzYyRTQwHhcNMjUwMTMxMTcyMjM4WhcNMjUwMjA3MTcyMjM4WjAYMRYwFAYD
VQQDEw02NzlkMDZkZi1hYzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxLgFu/eFh/PKtqCddZ5aWlLKBfB3ShYSp2b7bpBlge93H1uTSysCJZEqo0oY
CyrcM4SgLAPsAcIECSYEtCljaV8u7GslLnGcty35nkwl7TuZ8ZAyaRUzIavTFr2q
9Wi+7lJg6qve2YvGcd8yRvzbVePbsfe5V6RQQ5umO3l+jh1G5J07knRomS/IrH5v
PWIIwogtUkcaRpo3MW9pxXUpkhK/PJhA4h5CBenVQwVp7TD272/aW950s74bbboZ
9zqidOfihOMoIBieaGrkjxs7L2U/r0jPmWNpZSDAMzepbKOeIQRcQIDrhQhgxub2
423IP5HhfarZr23pGFqVZwAXQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGDTAU8Z
oX0ddmLDk6VjgVzLIxCtMB8GA1UdIwQYMBaAFEq9okrXvZ6NnO+zWTjQqHiATGLk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTA5Ni8yRkJCNDQwRTMz
NDUxMUU5OThDNTY3M0JDNEY5QUUwMi9TcjJpU3RlOW5vMmM3N05aT05Db2VJQk1Z
dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NyMmlTdGU5bm8yYzc3TlpPTkNvZUlCTVl1US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RTA5Ni8yRkJCNDQwRTMzNDUxMUU5OThDNTY3M0JDNEY5QUUwMi9TcjJpU3RlOW5v
MmM3N05aT05Db2VJQk1ZdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAwNalIunrKlLWhmRMJuyNJgtUvPb1yjC06t2/WG2aRzTLkSMT2WuQb
1pawutVjEFn2x1hgv3DsLOfI+oLcnRsLFWUvDk/y4drc43IzYfrFrdRTHFIZNCof
XAUkely5auZFiIbjhKn77XU3i6ZedgvPMnsX1A/t7XJDqGt+m7yyC9UjrUFgej1T
sgtfM8ZCB+CB8nZMVHQ/DK9g8oFoAEOr1jKhrACJR2J+97/NKJL1/jgLntm84U3A
rS57POppOt4iL2e6eUx4bRGxgJOAPoWZ/dB1Yiyt24ZXd8ef673QzOtfcp1uxFFy
PW3Enxwe9gUB4bf2eRlOcJqBstEzMZT7
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:36 2025 by rpki-client