
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.mft
File: bLMNwI7ylzDp3wScVPOVgquFvpQ.mft (raw, json)
Hash identifier: xO7SnWQWJfrVwrO/ZnkU8CIA7RezCPgToz356dnEMjc=
Subject key identifier: E9:91:61:57:56:BB:6B:2C:F7:A6:13:34:90:41:28:10:07:45:9B:47
Authority key identifier: 6C:B3:0D:C0:8E:F2:97:30:E9:DF:04:9C:54:F3:95:82:AB:85:BE:94
Certificate issuer: /CN=A91C40D1/serialNumber=6CB30DC08EF29730E9DF049C54F39582AB85BE94
Certificate serial: 1281
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLMNwI7ylzDp3wScVPOVgquFvpQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.mft
Manifest number: 1276
Signing time: Fri 31 Jan 2025 17:06:04 +0000
Manifest this update: Fri 31 Jan 2025 17:06:04 +0000
Manifest next update: Fri 07 Feb 2025 17:06:04 +0000
Files and hashes: 1: bLMNwI7ylzDp3wScVPOVgquFvpQ.crl (hash: k8ajtvwwTH8DiM1L0Ve6ApwcYpzewIH3fBjzq2e/sKc=)
2: 18272628C30B11E8A6851824C4F9AE02.roa (hash: zhAB02c7MO6g0ZjU60Q0NOMxZrMu/KXiBvCTRD/ktbM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4737 (0x1281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C40D1/serialNumber=6CB30DC08EF29730E9DF049C54F39582AB85BE94
Validity
Not Before: Jan 31 17:06:04 2025 GMT
Not After : Feb 7 17:06:04 2025 GMT
Subject: CN=679d02fc-b80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1a:45:9c:4f:2e:39:aa:5c:1a:3e:3d:57:a2:
dc:b3:a0:f0:a5:65:68:c7:5d:2d:33:a8:53:fb:9c:
7b:49:6c:e2:c9:3a:6b:b2:7f:71:ae:6b:25:6f:d7:
a3:ad:88:9d:b3:ca:0a:24:2d:3f:84:92:a7:5b:b0:
18:ab:22:a0:01:93:86:47:6a:a0:fe:21:72:fe:23:
13:01:7f:4d:9d:43:af:56:46:20:b6:be:54:20:85:
4a:43:e6:f7:5e:1c:00:bc:8c:1a:ef:9c:c9:66:f0:
d4:48:30:4e:fb:11:92:54:1e:82:31:4f:4c:12:ca:
3d:dc:fe:f7:27:c8:b1:38:64:e5:55:3f:68:ef:16:
01:85:84:e4:5d:22:7f:50:52:0a:d4:c6:b9:ed:94:
5c:3a:00:33:cd:3f:24:e0:1c:64:43:f5:42:3c:98:
d2:ee:78:f2:2f:ca:fa:c2:8d:a8:90:4f:83:79:de:
0b:19:72:90:c3:9c:5a:cc:f6:a6:64:82:26:d6:ea:
e9:a2:7a:4a:4d:28:a1:9c:66:5c:2c:76:0c:b4:85:
89:94:c0:06:07:cb:19:0a:a9:92:25:86:ec:ff:fa:
82:ce:f5:25:0a:87:07:c5:3b:7a:95:81:fc:c3:5d:
4d:a9:ae:79:84:8e:71:c1:79:d9:54:eb:e7:af:b1:
08:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:91:61:57:56:BB:6B:2C:F7:A6:13:34:90:41:28:10:07:45:9B:47
X509v3 Authority Key Identifier:
keyid:6C:B3:0D:C0:8E:F2:97:30:E9:DF:04:9C:54:F3:95:82:AB:85:BE:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLMNwI7ylzDp3wScVPOVgquFvpQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f0:f2:eb:fc:ab:c7:d4:c5:9c:51:37:27:cc:39:01:83:c6:
70:03:7b:13:58:c8:d7:f6:a5:b2:a4:0e:0f:ee:ef:1b:e3:cc:
cd:25:a9:3f:10:37:11:3e:d1:4d:55:cf:26:d3:40:a9:4e:14:
91:e9:a1:d0:01:a8:d6:12:5b:6d:ad:02:96:6c:da:aa:79:7e:
df:1b:b4:7d:36:8c:ef:d8:23:60:f9:90:86:93:44:63:67:e4:
d8:fe:99:db:43:d1:64:d2:3c:73:12:9c:20:b0:23:94:ad:f2:
fc:9d:14:e5:6b:b9:b4:97:ba:66:9a:93:35:86:56:04:fe:53:
3a:cf:e6:01:71:4d:99:bb:58:d9:da:0f:36:ee:17:bd:1b:03:
aa:4d:0f:05:cd:02:73:7b:27:91:ab:76:32:fb:f6:b4:01:d2:
20:32:7e:b0:3e:f9:98:c4:63:24:97:99:6b:ae:41:fa:09:09:
e7:97:95:56:7b:0c:5f:14:d4:25:7d:72:0c:63:8d:ec:8e:c8:
b8:fe:a3:cc:ba:a8:6f:61:c0:45:49:02:4e:a4:5b:d8:77:18:
2a:e7:86:1e:c6:74:9f:16:2b:3a:94:f0:07:76:00:12:ef:5f:
c5:37:5e:71:c3:15:4a:f6:7f:d9:5a:cf:e9:72:b1:fc:ee:45:
cc:f8:ba:23
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzQwRDExMTAvBgNVBAUTKDZDQjMwREMwOEVGMjk3MzBFOURGMDQ5QzU0RjM5NTgy
QUI4NUJFOTQwHhcNMjUwMTMxMTcwNjA0WhcNMjUwMjA3MTcwNjA0WjAYMRYwFAYD
VQQDEw02NzlkMDJmYy1iODBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5BpFnE8uOapcGj49V6Lcs6DwpWVox10tM6hT+5x7SWziyTprsn9xrmslb9ej
rYids8oKJC0/hJKnW7AYqyKgAZOGR2qg/iFy/iMTAX9NnUOvVkYgtr5UIIVKQ+b3
XhwAvIwa75zJZvDUSDBO+xGSVB6CMU9MEso93P73J8ixOGTlVT9o7xYBhYTkXSJ/
UFIK1Ma57ZRcOgAzzT8k4BxkQ/VCPJjS7njyL8r6wo2okE+Ded4LGXKQw5xazPam
ZIIm1urponpKTSihnGZcLHYMtIWJlMAGB8sZCqmSJYbs//qCzvUlCocHxTt6lYH8
w11Nqa55hI5xwXnZVOvnr7EIrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOmRYVdW
u2ss96YTNJBBKBAHRZtHMB8GA1UdIwQYMBaAFGyzDcCO8pcw6d8EnFTzlYKrhb6U
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDBEMS9DQzc4MzBCMEMz
MDkxMUU4OTAwRTVGMjFDNEY5QUUwMi9iTE1Od0k3eWx6RHAzd1NjVlBPVmdxdUZ2
cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JMTU53STd5bHpEcDN3U2NWUE9WZ3F1RnZwUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NDBEMS9DQzc4MzBCMEMzMDkxMUU4OTAwRTVGMjFDNEY5QUUwMi9iTE1Od0k3eWx6
RHAzd1NjVlBPVmdxdUZ2cFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAa8PLr/KvH1MWcUTcnzDkBg8ZwA3sTWMjX9qWypA4P7u8b48zNJak/
EDcRPtFNVc8m00CpThSR6aHQAajWElttrQKWbNqqeX7fG7R9Nozv2CNg+ZCGk0Rj
Z+TY/pnbQ9Fk0jxzEpwgsCOUrfL8nRTla7m0l7pmmpM1hlYE/lM6z+YBcU2Zu1jZ
2g827he9GwOqTQ8FzQJzeyeRq3Yy+/a0AdIgMn6wPvmYxGMkl5lrrkH6CQnnl5VW
ewxfFNQlfXIMY43sjsi4/qPMuqhvYcBFSQJOpFvYdxgq54YexnSfFis6lPAHdgAS
71/FN15xwxVK9n/ZWs/pcrH87kXM+Loj
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:55:14 2025 by rpki-client