
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft
File: Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft (raw, json)
Hash identifier: EZNMonCNzbewWyhff4rX1LKWEcfFPFWwqALpXQP/gs8=
Subject key identifier: 07:28:EF:B5:89:8E:FE:0B:B9:85:05:A9:94:B8:95:4E:4F:9E:55:5C
Authority key identifier: 42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71
Certificate issuer: /CN=A91BE1BC/serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71
Certificate serial: 0FE5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft
Manifest number: 0FD3
Signing time: Fri 31 Jan 2025 17:27:50 +0000
Manifest this update: Fri 31 Jan 2025 17:27:50 +0000
Manifest next update: Fri 07 Feb 2025 17:27:49 +0000
Files and hashes: 1: Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl (hash: Ckx1GYPA6D2HWPGfNoPC9qYxVRbaUsRnY4s057lV87w=)
2: 58FDD2EA10C211EA977E7378C4F9AE02.roa (hash: tN1EHa1UYeXagc4zmtE102yqFtWAzIXQIzUc6GH+XWc=)
3: 8C2FEEE0708811ED95A9DC75C4F9AE02.roa (hash: WszsRhmHN8MvwoWSP1GLjLxlHlQgLVNtDapzW8cpCCk=)
4: 8B7BDC02708811ED95A9DC75C4F9AE02.roa (hash: LIC4JqnhhbZV4DldwBIYZJpNNfHsiprIB69VyfCle0Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4069 (0xfe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE1BC/serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71
Validity
Not Before: Jan 31 17:27:50 2025 GMT
Not After : Feb 7 17:27:49 2025 GMT
Subject: CN=679d0816-1f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:99:98:0b:0e:a9:ca:dd:06:0d:84:9d:52:1c:
ee:60:8a:08:6d:f8:3f:11:ee:12:45:3e:26:7e:28:
75:78:58:de:3d:f5:db:d0:ba:d1:30:53:6b:59:dd:
c9:a4:58:70:4c:00:18:98:8f:8f:75:22:86:eb:4b:
16:05:27:f6:7d:10:3e:46:8b:88:ff:26:ce:df:fd:
0f:37:07:10:70:fd:74:a7:ed:2d:65:da:be:4d:b3:
5a:e4:41:3b:81:8a:81:a8:ee:ec:65:60:54:7f:96:
08:8c:93:9d:72:b9:89:aa:71:e3:9e:53:17:cc:7c:
bc:15:96:62:6b:f8:da:5d:7e:4b:8b:da:ab:c0:8e:
ee:80:a5:13:aa:4b:d1:7f:ea:de:f9:2f:30:4c:19:
0e:e6:77:5d:88:c9:f1:09:af:16:39:3e:dc:f4:82:
b9:11:f7:5e:ba:3b:e1:0c:0e:fe:7e:00:0c:ee:4d:
1a:d1:56:3b:24:7b:5f:82:17:41:d2:0d:23:a8:5b:
36:d4:79:8f:2e:35:0b:dc:8a:14:eb:5c:5b:b0:57:
9e:5e:38:fe:97:43:fc:5a:3e:49:c8:e2:e7:2d:d0:
b1:a7:b9:af:a6:45:ef:e8:26:5f:bd:d5:ec:67:e3:
fc:e8:b9:cc:c1:d9:fc:56:4c:37:68:c1:1f:1a:25:
b2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:28:EF:B5:89:8E:FE:0B:B9:85:05:A9:94:B8:95:4E:4F:9E:55:5C
X509v3 Authority Key Identifier:
keyid:42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:18:f9:8a:62:c3:10:29:da:9a:8a:70:06:24:58:ce:88:61:
ab:de:8d:9d:f0:a8:e0:17:ae:6a:8f:af:3f:9e:7f:b0:76:53:
f8:51:e8:4c:06:52:aa:3d:95:34:31:ae:9c:c6:0b:d2:97:4c:
e3:34:f0:ac:98:60:c0:92:63:8c:1e:1a:32:e4:19:ec:49:ab:
ac:35:a5:b1:fd:da:1b:ce:5f:e0:3f:bb:42:d9:01:ee:25:d0:
9a:66:62:9b:e2:e1:08:ff:22:23:4b:04:ff:c4:a4:81:20:4d:
1f:0d:2e:71:d3:24:e7:0e:8f:94:c0:93:5a:28:b2:5c:5c:10:
e0:8a:08:1a:74:c4:83:84:b2:cb:d9:82:11:34:15:13:0d:65:
c8:0b:ea:b1:13:ae:66:f5:a2:f4:2a:44:11:52:4d:3f:f0:21:
61:79:ee:db:73:0a:7e:8e:a0:03:00:58:32:b0:f4:72:a4:3e:
58:43:f7:7d:de:b3:27:eb:99:59:c9:c9:ac:a8:54:4b:07:9d:
bc:09:66:23:c5:9c:ec:76:bf:eb:3e:22:d2:62:73:2e:96:5a:
be:ab:39:3e:e6:0d:15:5a:ba:65:9f:f4:8a:af:bc:74:ff:91:
04:58:d5:f8:14:8a:95:9b:e1:44:c5:1f:75:23:e3:cc:81:dc:
f6:cd:75:81
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICD+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkUxQkMxMTAvBgNVBAUTKDQyOUU5QkREQTI5NjYyMDAwM0NFQzVFRkFCQjgyM0Qz
MDNGRTRGNzEwHhcNMjUwMTMxMTcyNzUwWhcNMjUwMjA3MTcyNzQ5WjAYMRYwFAYD
VQQDEw02NzlkMDgxNi0xZjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4pmYCw6pyt0GDYSdUhzuYIoIbfg/Ee4SRT4mfih1eFjePfXb0LrRMFNrWd3J
pFhwTAAYmI+PdSKG60sWBSf2fRA+RouI/ybO3/0PNwcQcP10p+0tZdq+TbNa5EE7
gYqBqO7sZWBUf5YIjJOdcrmJqnHjnlMXzHy8FZZia/jaXX5Li9qrwI7ugKUTqkvR
f+re+S8wTBkO5nddiMnxCa8WOT7c9IK5EfdeujvhDA7+fgAM7k0a0VY7JHtfghdB
0g0jqFs21HmPLjUL3IoU61xbsFeeXjj+l0P8Wj5JyOLnLdCxp7mvpkXv6CZfvdXs
Z+P86LnMwdn8Vkw3aMEfGiWyZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAco77WJ
jv4LuYUFqZS4lU5PnlVcMB8GA1UdIwQYMBaAFEKem92ilmIAA87F76u4I9MD/k9x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTFCQy84OTZDNkM0ODQ2
Q0UxMUU5OTI4NTBBM0NDNEY5QUUwMi9RcDZiM2FLV1lnQUR6c1h2cTdnajB3UC1U
M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FwNmIzYUtXWWdBRHpzWHZxN2dqMHdQLVQzRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RTFCQy84OTZDNkM0ODQ2Q0UxMUU5OTI4NTBBM0NDNEY5QUUwMi9RcDZiM2FLV1ln
QUR6c1h2cTdnajB3UC1UM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAaGPmKYsMQKdqainAGJFjOiGGr3o2d8KjgF65qj68/nn+wdlP4UehM
BlKqPZU0Ma6cxgvSl0zjNPCsmGDAkmOMHhoy5BnsSausNaWx/dobzl/gP7tC2QHu
JdCaZmKb4uEI/yIjSwT/xKSBIE0fDS5x0yTnDo+UwJNaKLJcXBDgiggadMSDhLLL
2YIRNBUTDWXIC+qxE65m9aL0KkQRUk0/8CFhee7bcwp+jqADAFgysPRypD5YQ/d9
3rMn65lZycmsqFRLB528CWYjxZzsdr/rPiLSYnMullq+qzk+5g0VWrpln/SKr7x0
/5EEWNX4FIqVm+FExR91I+PMgdz2zXWB
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:40:31 2025 by rpki-client