Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft
File: IaR__8gaEzNcB7kmBaLd_RgHoUw.mft (raw, json)
Hash identifier: xFUQKdvX2l4jb5bB9tWK165bfgEtU0AbmTEdql/Ev98=
Subject key identifier: 5E:97:73:46:38:73:39:C6:D2:3B:68:E1:6B:F1:8B:21:9C:CD:C4:92
Authority key identifier: 21:A4:7F:FF:C8:1A:13:33:5C:07:B9:26:05:A2:DD:FD:18:07:A1:4C
Certificate issuer: /CN=A91BF905/serialNumber=21A47FFFC81A13335C07B92605A2DDFD1807A14C
Certificate serial: 0ABA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft
Manifest number: 0AAE
Signing time: Thu 30 Jan 2025 19:37:38 +0000
Manifest this update: Thu 30 Jan 2025 19:37:38 +0000
Manifest next update: Thu 06 Feb 2025 19:37:38 +0000
Files and hashes: 1: IaR__8gaEzNcB7kmBaLd_RgHoUw.crl (hash: +yEfs2jv+TtaKwTS66X5vUTPlbLZ14QjZIcSf38Yp9Q=)
2: CDEFCF14801F11EF99206C47C4F9AE02.roa (hash: RMagxS9fF4MOIlqdvj1T37sYlt01e4qRdvTOPSHcQyU=)
3: A558194E801F11EFB86B2647C4F9AE02.roa (hash: 6ExiSFvRcHAeJ7B+wvsVJT4/UUiJai/2ESDav7XvIM0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2746 (0xaba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF905/serialNumber=21A47FFFC81A13335C07B92605A2DDFD1807A14C
Validity
Not Before: Jan 30 19:37:38 2025 GMT
Not After : Feb 6 19:37:38 2025 GMT
Subject: CN=679bd502-cbc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:62:33:42:38:67:1a:27:77:79:48:43:5a:ec:
52:94:f4:3b:ab:1a:f2:5a:d2:fe:92:b2:99:15:47:
c3:5d:b7:b8:52:4e:3d:38:ea:36:e7:19:4a:66:19:
3a:8b:e1:8a:9b:91:e4:94:eb:e0:b7:8b:a0:46:7e:
f6:49:80:8d:9e:f8:91:05:7e:da:da:3e:95:4b:ab:
b1:66:72:29:78:3b:3a:54:aa:8f:d0:05:ef:57:e8:
f0:e0:03:b7:3e:a9:04:3b:89:e3:7d:96:24:e0:d1:
38:dd:cd:78:1b:de:f2:b1:e6:20:2c:57:06:2b:70:
b2:b1:b3:4c:b1:18:c4:02:43:dd:f5:b9:47:45:fd:
d0:98:ac:f6:9d:bd:8e:1f:59:9e:b6:8e:91:32:31:
f4:f9:af:a2:a8:ed:72:2e:93:4e:a3:64:ff:32:35:
b9:89:03:44:6a:18:bd:7d:d8:99:e9:3f:a5:62:c8:
e9:2b:1f:8a:59:02:69:a5:d6:ab:f6:78:b2:5e:13:
f5:b7:e0:f7:85:ad:8a:e1:94:49:1a:3c:ba:1a:bc:
b7:3b:d9:70:35:54:c3:ad:14:f4:e4:37:17:bd:b4:
c0:e9:d3:14:df:9c:63:26:6d:8a:d8:b2:91:63:1c:
cb:5a:45:d8:79:9c:9d:22:98:ec:f5:ce:b7:ff:ac:
b2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:97:73:46:38:73:39:C6:D2:3B:68:E1:6B:F1:8B:21:9C:CD:C4:92
X509v3 Authority Key Identifier:
keyid:21:A4:7F:FF:C8:1A:13:33:5C:07:B9:26:05:A2:DD:FD:18:07:A1:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:e2:93:0c:ee:7f:f5:98:2d:db:54:ee:ea:18:e1:7b:cf:23:
b9:fb:82:2e:b4:3e:16:a1:90:07:c3:d5:c3:bd:b3:78:9c:8e:
f7:d0:95:d0:39:27:0d:ec:9d:ca:06:0f:1f:65:14:56:3f:f3:
86:fe:e5:13:65:e4:90:c3:c5:7a:b1:11:d8:66:f3:f1:57:2b:
f7:db:a3:61:ff:09:92:5a:36:54:f8:cf:bf:6c:17:c3:56:61:
41:18:63:ef:b0:99:18:60:53:45:93:08:5b:4b:c0:19:b1:28:
d5:a7:1e:ea:91:08:c7:c8:7c:7d:84:6c:67:c9:30:43:53:81:
2a:9e:92:6a:f7:22:dc:3d:90:39:15:61:12:54:e4:00:d3:6d:
8f:62:5b:51:75:6a:24:00:2a:17:fa:3a:78:43:26:3a:f3:75:
e6:f3:93:e0:fd:04:04:01:04:eb:7b:e2:07:4c:18:e1:84:b0:
0a:42:dd:7b:d2:af:55:6b:91:d6:7a:99:6a:11:69:48:c2:e0:
ec:be:91:1e:d1:83:09:35:e0:cd:a5:66:b0:3c:cc:8e:aa:27:
98:0d:c5:41:b6:69:13:30:dc:4e:c8:82:10:73:26:04:d7:d2:
e2:10:5e:ef:4b:6e:dc:92:8f:21:5d:dc:dd:8d:c9:04:4b:4b:
33:d2:69:f5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCrowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkY5MDUxMTAvBgNVBAUTKDIxQTQ3RkZGQzgxQTEzMzM1QzA3QjkyNjA1QTJEREZE
MTgwN0ExNEMwHhcNMjUwMTMwMTkzNzM4WhcNMjUwMjA2MTkzNzM4WjAYMRYwFAYD
VQQDEw02NzliZDUwMi1jYmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAumIzQjhnGid3eUhDWuxSlPQ7qxryWtL+krKZFUfDXbe4Uk49OOo25xlKZhk6
i+GKm5HklOvgt4ugRn72SYCNnviRBX7a2j6VS6uxZnIpeDs6VKqP0AXvV+jw4AO3
PqkEO4njfZYk4NE43c14G97yseYgLFcGK3CysbNMsRjEAkPd9blHRf3QmKz2nb2O
H1meto6RMjH0+a+iqO1yLpNOo2T/MjW5iQNEahi9fdiZ6T+lYsjpKx+KWQJppdar
9niyXhP1t+D3ha2K4ZRJGjy6Gry3O9lwNVTDrRT05DcXvbTA6dMU35xjJm2K2LKR
YxzLWkXYeZydIpjs9c63/6yyMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6Xc0Y4
cznG0jto4WvxiyGczcSSMB8GA1UdIwQYMBaAFCGkf//IGhMzXAe5JgWi3f0YB6FM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjkwNS8xRkE3QzQ2QzQ4
RDMxMUVBOEFBRTQ2NjhDNEY5QUUwMi9JYVJfXzhnYUV6TmNCN2ttQmFMZF9SZ0hv
VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lhUl9fOGdhRXpOY0I3a21CYUxkX1JnSG9Vdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RjkwNS8xRkE3QzQ2QzQ4RDMxMUVBOEFBRTQ2NjhDNEY5QUUwMi9JYVJfXzhnYUV6
TmNCN2ttQmFMZF9SZ0hvVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCV4pMM7n/1mC3bVO7qGOF7zyO5+4IutD4WoZAHw9XDvbN4nI730JXQ
OScN7J3KBg8fZRRWP/OG/uUTZeSQw8V6sRHYZvPxVyv326Nh/wmSWjZU+M+/bBfD
VmFBGGPvsJkYYFNFkwhbS8AZsSjVpx7qkQjHyHx9hGxnyTBDU4EqnpJq9yLcPZA5
FWESVOQA022PYltRdWokACoX+jp4QyY683Xm85Pg/QQEAQTre+IHTBjhhLAKQt17
0q9Va5HWeplqEWlIwuDsvpEe0YMJNeDNpWawPMyOqieYDcVBtmkTMNxOyIIQcyYE
19LiEF7vS27cko8hXdzdjckES0sz0mn1
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:25:44 2025 by rpki-client