Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft
File: d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft (raw, json)
Hash identifier: fgFzilDKoA37MAyOdGG99UhvICWyv8vqY16JieeMX9k=
Subject key identifier: 41:46:33:DF:41:49:C9:21:3F:F5:68:C3:F3:06:25:82:95:8C:74:3B
Authority key identifier: 77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49
Certificate issuer: /CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49
Certificate serial: 0F77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft
Manifest number: 0F0E
Signing time: Fri 31 Jan 2025 17:39:04 +0000
Manifest this update: Fri 31 Jan 2025 17:39:04 +0000
Manifest next update: Fri 07 Feb 2025 17:39:04 +0000
Files and hashes: 1: d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl (hash: NGXEDKcLLuBHgWbxbWfhNUkxDLWoGghNJqWdfXL5DPY=)
2: 931E0F7681C911EFA5B1D80BC4F9AE02.roa (hash: 3+LMg/UqEn9I3nJe/StT1XRQjadAQ+o1wAjq5EdYwx0=)
3: B35E5B46334111EF9770A542C4F9AE02.roa (hash: POv6am3kG0Q+Q6wUXCA7wbkvozTpMjE+VV+U9mmfNA0=)
4: B1F39E9C334111EF9770A542C4F9AE02.roa (hash: o5RIBT+FmS+BivBjv2JSc02ogBWHDPfxehOosN6/sX4=)
5: 6AB0F2A2892611EEB5E27D69C4F9AE02.roa (hash: XBeLByasLFAR8do7tNTxhh0jQtZtivMveMhhIQYYpGw=)
6: B2A71CE2334111EF9770A542C4F9AE02.roa (hash: 2b7V4cYLeCzYjzBXZFvQMUaMHyWPksazIYG9zve5Hx8=)
7: B431D7F0334111EF9770A542C4F9AE02.roa (hash: Xr2vVZFsdoKESdLFd5/aMVSCMJCON8AUPU5aD5Gvk7Y=)
8: 7BD12E3A480811EE8C512B0DC4F9AE02.roa (hash: xDNVgmjN9DxZxjXVEWTQzbIsIGQRcVSh7mJ/JhS9bSU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3959 (0xf77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49
Validity
Not Before: Jan 31 17:39:04 2025 GMT
Not After : Feb 7 17:39:04 2025 GMT
Subject: CN=679d0ab8-06d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0d:c3:53:b3:53:66:6b:b5:bb:d0:27:7f:fe:
13:a1:d7:f6:ed:cd:3d:79:63:72:2f:a2:69:c8:1a:
25:65:8b:32:ea:80:35:a3:e7:ec:b0:e8:7d:df:bb:
13:e8:4b:64:84:fd:d7:c3:21:b6:8e:84:9d:20:ce:
9e:8e:4c:50:f4:f9:76:c1:ea:22:c1:7e:6b:01:c8:
72:00:ff:82:ee:c2:a5:70:f8:14:2c:ee:db:31:cc:
75:0a:f3:81:e0:51:50:8a:f0:4c:dd:28:17:7d:d8:
df:a3:95:4c:e0:2d:bd:2d:99:60:88:83:c5:81:43:
40:26:6b:51:3e:af:78:08:ec:66:4e:6c:54:b5:c0:
0d:f2:e3:8d:0d:1a:c4:57:9f:46:64:58:67:ab:9b:
56:51:eb:2e:8b:19:aa:f5:64:b8:23:2b:15:1f:49:
b5:85:c3:a7:85:1e:eb:d7:10:b1:37:1e:bd:a9:b3:
18:09:ff:93:8c:2e:b7:4f:6e:cb:37:09:db:0d:24:
e7:ea:fe:9b:18:f0:35:a8:b1:34:93:f1:6e:12:c7:
2a:dc:b0:74:18:a6:34:20:91:0d:00:0d:b2:42:e6:
de:e4:f1:18:1d:97:6f:cb:3f:32:95:13:4c:35:00:
d5:03:a4:37:3b:4f:1f:3d:61:f8:4b:5d:97:6d:36:
b0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:46:33:DF:41:49:C9:21:3F:F5:68:C3:F3:06:25:82:95:8C:74:3B
X509v3 Authority Key Identifier:
keyid:77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:45:83:87:42:02:7b:32:59:ee:92:58:bc:6d:90:13:95:bc:
08:06:47:50:fd:53:78:00:1a:57:01:dd:a5:20:c0:6c:2e:8d:
03:da:ae:45:51:c7:d7:8f:b4:f2:e4:bf:10:a5:d3:82:7a:c5:
87:35:90:02:1a:a0:0d:d7:32:aa:5a:e8:d6:2e:2a:20:7b:5b:
85:07:fe:67:cc:ad:6c:00:85:39:f9:51:f8:28:bd:68:f8:53:
a1:2a:46:2b:e9:37:24:9d:ed:d5:00:c9:68:8f:9e:f5:c1:03:
5a:1b:49:fe:75:3d:54:1d:98:bc:0b:93:c6:53:4d:5b:99:10:
ac:86:7f:14:f2:42:4d:3d:2f:cd:c8:47:b6:c0:fb:47:37:91:
e1:a9:10:35:fa:70:2a:93:c7:f2:db:5d:16:6b:8f:7d:47:4e:
ed:75:c0:fe:81:db:54:af:4f:43:65:46:ed:2d:b0:62:f9:cf:
a5:2d:6b:c5:3b:7c:c6:dd:64:f5:ee:b0:95:7b:29:60:c1:ac:
43:fe:b3:b8:98:5e:a0:5c:02:96:92:aa:b1:0d:97:5d:fd:e3:
bc:50:5e:a7:9a:12:e0:13:aa:d7:c8:54:44:8e:84:23:b2:fa:
52:9f:8e:6d:f1:2b:31:84:78:79:69:db:3a:8b:d1:fb:fe:03:
46:ea:92:cb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICD3cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzJDQzcxMTAvBgNVBAUTKDc3NDg2QjYxMEQzMzNBRUJEQThGMjU1QzUwMTQxMUIw
MUYxOEZGNDkwHhcNMjUwMTMxMTczOTA0WhcNMjUwMjA3MTczOTA0WjAYMRYwFAYD
VQQDEw02NzlkMGFiOC0wNmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0g3DU7NTZmu1u9Anf/4Todf27c09eWNyL6JpyBolZYsy6oA1o+fssOh937sT
6EtkhP3XwyG2joSdIM6ejkxQ9Pl2weoiwX5rAchyAP+C7sKlcPgULO7bMcx1CvOB
4FFQivBM3SgXfdjfo5VM4C29LZlgiIPFgUNAJmtRPq94COxmTmxUtcAN8uONDRrE
V59GZFhnq5tWUesuixmq9WS4IysVH0m1hcOnhR7r1xCxNx69qbMYCf+TjC63T27L
NwnbDSTn6v6bGPA1qLE0k/FuEscq3LB0GKY0IJENAA2yQube5PEYHZdvyz8ylRNM
NQDVA6Q3O08fPWH4S12XbTaw+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFGM99B
SckhP/Vow/MGJYKVjHQ7MB8GA1UdIwQYMBaAFHdIa2ENMzrr2o8lXFAUEbAfGP9J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkNDNy83OTFDNkEzNDdC
MzgxMUU5QkMwRDNCMzJDNEY5QUUwMi9kMGhyWVEwek91dmFqeVZjVUJRUnNCOFlf
MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2QwaHJZUTB6T3V2YWp5VmNVQlFSc0I4WV8way5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MkNDNy83OTFDNkEzNDdCMzgxMUU5QkMwRDNCMzJDNEY5QUUwMi9kMGhyWVEwek91
dmFqeVZjVUJRUnNCOFlfMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDHRYOHQgJ7Mlnukli8bZATlbwIBkdQ/VN4ABpXAd2lIMBsLo0D2q5F
UcfXj7Ty5L8QpdOCesWHNZACGqAN1zKqWujWLioge1uFB/5nzK1sAIU5+VH4KL1o
+FOhKkYr6Tckne3VAMloj571wQNaG0n+dT1UHZi8C5PGU01bmRCshn8U8kJNPS/N
yEe2wPtHN5HhqRA1+nAqk8fy210Wa499R07tdcD+gdtUr09DZUbtLbBi+c+lLWvF
O3zG3WT17rCVeylgwaxD/rO4mF6gXAKWkqqxDZdd/eO8UF6nmhLgE6rXyFREjoQj
svpSn45t8SsxhHh5ads6i9H7/gNG6pLL
-----END CERTIFICATE-----
Generated at Sat Apr 26 23:35:55 2025 by rpki-client