Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft
File: datLjbMBU71ybPn5YlC-BATYixo.mft (raw, json)
Hash identifier: Itm9p3x7cBy72X+47zdQgnRkrgGodyYdI4P5KpXRgDQ=
Subject key identifier: 58:55:73:0B:EF:19:97:C1:8A:AC:CE:F0:46:E3:17:9A:AB:0B:4A:EE
Authority key identifier: 75:AB:4B:8D:B3:01:53:BD:72:6C:F9:F9:62:50:BE:04:04:D8:8B:1A
Certificate issuer: /CN=A91C0CD3/serialNumber=75AB4B8DB30153BD726CF9F96250BE0404D88B1A
Certificate serial: 0131
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft
Manifest number: 0131
Signing time: Fri 31 Jan 2025 03:38:56 +0000
Manifest this update: Fri 31 Jan 2025 03:38:55 +0000
Manifest next update: Fri 07 Feb 2025 03:38:55 +0000
Files and hashes: 1: datLjbMBU71ybPn5YlC-BATYixo.crl (hash: tJpMPdSHJQmrf5bYYNx/JujGyGum9Z0QrR0xacv8qPE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 305 (0x131)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0CD3/serialNumber=75AB4B8DB30153BD726CF9F96250BE0404D88B1A
Validity
Not Before: Jan 31 03:38:55 2025 GMT
Not After : Feb 7 03:38:55 2025 GMT
Subject: CN=679c45cf-7c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d1:23:96:f1:a2:ec:74:19:93:05:e5:5e:71:
0e:ba:2b:7f:1c:b6:64:a7:07:6c:96:79:d9:46:bb:
70:bd:93:a8:e8:56:e6:1f:ce:d4:d4:27:83:12:a4:
6a:76:2e:39:2b:65:d6:e4:3d:f6:4a:21:25:ae:36:
86:f7:a2:aa:7c:10:42:6f:6b:40:7a:f8:b4:76:f8:
9f:66:b2:87:5c:34:9e:2b:17:e5:02:f6:30:79:65:
30:0b:93:a5:89:c2:a5:89:4e:4d:3a:47:af:dd:7e:
03:ea:93:c7:4d:b4:36:68:a7:78:dc:0f:ad:31:6d:
17:a5:9a:7a:53:d8:65:ad:1d:05:07:1c:af:a0:4c:
b8:08:fb:20:b0:f6:e2:c2:66:9c:bc:41:b1:20:d6:
a9:47:2e:f5:a0:ec:b0:58:cb:64:d8:37:2d:15:48:
95:12:0e:17:2b:7f:e2:95:45:5f:ce:0e:07:c8:2d:
4c:6c:36:be:66:4c:e1:53:a6:5e:52:b3:fc:cd:52:
f5:a4:12:66:99:a8:a8:41:2b:48:fa:82:63:88:98:
f1:11:45:4c:b0:cb:6c:21:96:ce:67:e0:cb:f1:77:
a2:1e:53:f0:84:86:d8:71:b6:55:38:a2:2f:7b:2d:
0d:b4:f8:c0:02:41:b6:65:8f:34:33:d3:07:ba:fb:
d8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:55:73:0B:EF:19:97:C1:8A:AC:CE:F0:46:E3:17:9A:AB:0B:4A:EE
X509v3 Authority Key Identifier:
keyid:75:AB:4B:8D:B3:01:53:BD:72:6C:F9:F9:62:50:BE:04:04:D8:8B:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:fd:61:e8:53:0d:e9:c1:cd:4e:b2:ea:8b:73:b7:d9:36:f1:
a5:1b:0d:3e:e4:c5:fd:e8:a9:a1:86:5e:11:86:23:bc:5d:a3:
55:e1:47:e1:52:1a:ab:38:14:58:1f:8a:b2:29:1a:da:08:a2:
bf:10:0b:9c:ab:c8:f4:33:52:e5:22:01:1e:c8:3b:e1:d1:ea:
b8:6c:cd:ae:88:a9:4b:31:b7:2e:ea:18:35:37:2f:c2:34:37:
81:51:6e:6e:85:20:c2:de:f5:57:79:e7:bb:61:04:4c:35:85:
30:34:dc:a5:8d:d0:6b:23:ef:11:11:70:58:5a:bc:f3:df:09:
65:fa:65:6d:7c:39:b5:20:18:8c:cf:1f:3f:31:ab:bc:19:47:
fa:82:2f:a6:ba:22:fb:49:7c:dd:69:db:e4:85:0a:37:a5:27:
8b:4d:5f:d9:4c:52:8f:6a:a2:ac:ff:95:ed:90:38:25:f4:a9:
68:05:9d:8c:b9:b9:d2:ac:75:16:ab:e3:b4:6b:0c:63:34:55:
ce:8f:92:df:5e:76:85:45:b7:bb:b3:8c:db:b7:d9:da:88:c5:
f2:a1:d0:e9:b7:59:a3:0f:58:a9:e3:a1:8a:e1:08:fd:ef:be:
e1:c9:d3:a1:6c:62:7a:41:f6:29:7a:34:0c:ab:90:3d:86:2c:
d2:8c:11:10
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzBDRDMxMTAvBgNVBAUTKDc1QUI0QjhEQjMwMTUzQkQ3MjZDRjlGOTYyNTBCRTA0
MDREODhCMUEwHhcNMjUwMTMxMDMzODU1WhcNMjUwMjA3MDMzODU1WjAYMRYwFAYD
VQQDEw02NzljNDVjZi03YzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArdEjlvGi7HQZkwXlXnEOuit/HLZkpwdslnnZRrtwvZOo6FbmH87U1CeDEqRq
di45K2XW5D32SiElrjaG96KqfBBCb2tAevi0dvifZrKHXDSeKxflAvYweWUwC5Ol
icKliU5NOkev3X4D6pPHTbQ2aKd43A+tMW0XpZp6U9hlrR0FBxyvoEy4CPsgsPbi
wmacvEGxINapRy71oOywWMtk2DctFUiVEg4XK3/ilUVfzg4HyC1MbDa+ZkzhU6Ze
UrP8zVL1pBJmmaioQStI+oJjiJjxEUVMsMtsIZbOZ+DL8XeiHlPwhIbYcbZVOKIv
ey0NtPjAAkG2ZY80M9MHuvvYQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFhVcwvv
GZfBiqzO8EbjF5qrC0ruMB8GA1UdIwQYMBaAFHWrS42zAVO9cmz5+WJQvgQE2Isa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMENEMy83RjYwMEVDQTA4
RUYxMUVFQkM5QjVEMERDNEY5QUUwMi9kYXRMamJNQlU3MXliUG41WWxDLUJBVFlp
eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RhdExqYk1CVTcxeWJQbjVZbEMtQkFUWWl4by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MENEMy83RjYwMEVDQTA4RUYxMUVFQkM5QjVEMERDNEY5QUUwMi9kYXRMamJNQlU3
MXliUG41WWxDLUJBVFlpeG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBc/WHoUw3pwc1OsuqLc7fZNvGlGw0+5MX96Kmhhl4RhiO8XaNV4Ufh
UhqrOBRYH4qyKRraCKK/EAucq8j0M1LlIgEeyDvh0eq4bM2uiKlLMbcu6hg1Ny/C
NDeBUW5uhSDC3vVXeee7YQRMNYUwNNyljdBrI+8REXBYWrzz3wll+mVtfDm1IBiM
zx8/Mau8GUf6gi+muiL7SXzdadvkhQo3pSeLTV/ZTFKPaqKs/5XtkDgl9KloBZ2M
ubnSrHUWq+O0awxjNFXOj5LfXnaFRbe7s4zbt9naiMXyodDpt1mjD1ip46GK4Qj9
777hydOhbGJ6QfYpejQMq5A9hizSjBEQ
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:04 2025 by rpki-client