Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft
File: IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft (raw, json)
Hash identifier: gDJ+zDL5WURQZROwItzbI7W7bWq6oVzDkmI17v2GvUU=
Subject key identifier: 1A:CE:C2:D0:53:6D:4B:DD:52:FF:45:51:2A:3E:34:1F:79:6C:C9:9D
Authority key identifier: 21:93:41:98:E8:33:10:61:D2:75:B8:CF:C7:94:58:D3:2F:AB:D6:C9
Certificate issuer: /CN=A91C53FD/serialNumber=21934198E8331061D275B8CFC79458D32FABD6C9
Certificate serial: 95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZNBmOgzEGHSdbjPx5RY0y-r1sk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft
Manifest number: 93
Signing time: Fri 31 Jan 2025 05:31:07 +0000
Manifest this update: Fri 31 Jan 2025 05:31:06 +0000
Manifest next update: Fri 07 Feb 2025 05:31:06 +0000
Files and hashes: 1: IZNBmOgzEGHSdbjPx5RY0y-r1sk.crl (hash: 6bGi/j8okjKqBm9SfUW0BXJpAjy4xeEtZs14ybVI2PM=)
2: B15E8BECFF3211EEA8607454C4F9AE02.roa (hash: M9Q8RXEiuL/wyMNZhN9zbPG+N0QQluDkDpfmSIoYCRg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149 (0x95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C53FD/serialNumber=21934198E8331061D275B8CFC79458D32FABD6C9
Validity
Not Before: Jan 31 05:31:06 2025 GMT
Not After : Feb 7 05:31:06 2025 GMT
Subject: CN=679c601b-97fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0d:a8:88:2d:5c:62:8a:30:d6:3b:1d:f4:2d:
e8:db:8b:38:0c:49:b5:e6:e3:43:8d:d6:6d:1d:db:
10:35:db:87:a7:43:b3:1e:45:09:4e:03:7f:52:1e:
54:71:b8:0b:78:3e:28:bd:10:72:11:7f:93:49:b4:
dd:99:1c:d0:0b:21:97:20:9e:dd:d0:f8:59:1b:81:
63:a3:f8:e2:13:5b:82:c1:3a:fa:a3:90:30:7f:d5:
47:df:06:b5:2d:9e:d2:b5:cd:f4:47:99:8a:47:00:
50:8b:d3:c5:88:a9:b0:55:dd:10:2e:b2:0b:51:97:
90:2c:a6:66:cd:03:dc:32:2f:16:81:74:a8:d9:64:
6a:d6:e7:22:73:4f:42:bc:84:21:cf:98:5b:d3:40:
4e:f7:82:c2:5b:49:31:24:eb:89:19:fb:56:0a:4f:
a0:ad:fb:3a:cb:ee:86:4a:7b:86:09:10:44:cf:7b:
02:be:bc:80:7e:c6:a4:63:64:6f:59:0c:27:5a:09:
83:06:a5:3e:8d:bc:16:7c:1b:a1:5a:43:8a:60:b3:
e1:ce:a2:7a:8f:99:c6:d1:f5:ab:23:6f:07:7e:cc:
c4:f6:e0:c3:f7:e2:c3:ad:3d:7a:00:d5:ea:7d:f3:
d6:67:4e:ca:e8:78:c5:0e:19:54:a8:64:7d:3f:ce:
40:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CE:C2:D0:53:6D:4B:DD:52:FF:45:51:2A:3E:34:1F:79:6C:C9:9D
X509v3 Authority Key Identifier:
keyid:21:93:41:98:E8:33:10:61:D2:75:B8:CF:C7:94:58:D3:2F:AB:D6:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZNBmOgzEGHSdbjPx5RY0y-r1sk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:ea:c5:fa:85:7f:11:9d:06:5a:ff:ee:36:31:02:de:dd:f6:
ea:3a:d1:f8:02:17:d0:a8:26:a2:5f:57:0c:98:9d:96:39:7a:
d9:44:5b:39:f7:a4:84:4e:6a:32:0f:15:8f:44:8d:57:b6:3b:
ff:f3:d0:44:91:6e:9c:59:01:86:8f:88:df:9c:32:31:9d:8f:
df:fa:97:bf:c0:81:ce:07:03:bf:d9:35:6a:c0:4b:8f:74:a4:
b1:94:9d:83:cd:d3:08:54:a3:e4:0b:cb:90:75:e7:84:37:8d:
aa:be:19:a8:ac:2f:6c:0c:38:57:de:cf:42:ac:ba:ad:0e:bf:
c2:92:b9:1c:fd:58:2f:b3:0c:0f:4c:5a:b6:7e:e1:6d:f7:b6:
08:54:da:88:7d:d6:04:f1:21:96:89:29:2e:7b:10:af:2a:3f:
e0:15:57:22:c8:0c:c0:4a:13:49:54:d6:41:fe:33:c5:42:d6:
c7:e8:3a:36:7e:35:c2:1c:b2:88:5b:56:c3:e6:0d:16:83:0d:
e8:47:46:55:00:86:be:3f:02:25:bd:ce:db:16:ce:fe:50:3b:
06:df:ee:8f:d1:b1:52:00:7f:33:37:9d:2a:a2:57:24:55:98:
86:1e:99:0c:ff:fb:3a:a8:3a:45:61:0b:47:02:a6:67:0f:f3:
fd:56:e5:5f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzUzRkQxMTAvBgNVBAUTKDIxOTM0MTk4RTgzMzEwNjFEMjc1QjhDRkM3OTQ1OEQz
MkZBQkQ2QzkwHhcNMjUwMTMxMDUzMTA2WhcNMjUwMjA3MDUzMTA2WjAYMRYwFAYD
VQQDEw02NzljNjAxYi05N2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyQ2oiC1cYoow1jsd9C3o24s4DEm15uNDjdZtHdsQNduHp0OzHkUJTgN/Uh5U
cbgLeD4ovRByEX+TSbTdmRzQCyGXIJ7d0PhZG4Fjo/jiE1uCwTr6o5Awf9VH3wa1
LZ7Stc30R5mKRwBQi9PFiKmwVd0QLrILUZeQLKZmzQPcMi8WgXSo2WRq1ucic09C
vIQhz5hb00BO94LCW0kxJOuJGftWCk+grfs6y+6GSnuGCRBEz3sCvryAfsakY2Rv
WQwnWgmDBqU+jbwWfBuhWkOKYLPhzqJ6j5nG0fWrI28HfszE9uDD9+LDrT16ANXq
ffPWZ07K6HjFDhlUqGR9P85AGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBrOwtBT
bUvdUv9FUSo+NB95bMmdMB8GA1UdIwQYMBaAFCGTQZjoMxBh0nW4z8eUWNMvq9bJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTNGRC82ODhFNTdFRUZG
MzIxMUVFQTU1RDhFNTNDNEY5QUUwMi9JWk5CbU9nekVHSFNkYmpQeDVSWTB5LXIx
c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0laTkJtT2d6RUdIU2RialB4NVJZMHktcjFzay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NTNGRC82ODhFNTdFRUZGMzIxMUVFQTU1RDhFNTNDNEY5QUUwMi9JWk5CbU9nekVH
SFNkYmpQeDVSWTB5LXIxc2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCB6sX6hX8RnQZa/+42MQLe3fbqOtH4AhfQqCaiX1cMmJ2WOXrZRFs5
96SETmoyDxWPRI1Xtjv/89BEkW6cWQGGj4jfnDIxnY/f+pe/wIHOBwO/2TVqwEuP
dKSxlJ2DzdMIVKPkC8uQdeeEN42qvhmorC9sDDhX3s9CrLqtDr/Ckrkc/VgvswwP
TFq2fuFt97YIVNqIfdYE8SGWiSkuexCvKj/gFVciyAzAShNJVNZB/jPFQtbH6Do2
fjXCHLKIW1bD5g0Wgw3oR0ZVAIa+PwIlvc7bFs7+UDsG3+6P0bFSAH8zN50qolck
VZiGHpkM//s6qDpFYQtHAqZnD/P9VuVf
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:13:16 2025 by rpki-client