
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
File: 0QwglvtdswSr0vmfRaKUiCktNyE.mft (raw, json)
Hash identifier: i+QOhlYCU2a5Jc+0wZEZguKPexWN5Blc8rKgdBLdFRo=
Subject key identifier: C0:19:D2:9A:E5:37:4A:2B:60:07:02:26:96:04:BF:26:38:75:ED:7E
Authority key identifier: D1:0C:20:96:FB:5D:B3:04:AB:D2:F9:9F:45:A2:94:88:29:2D:37:21
Certificate issuer: /CN=A91C68AD/serialNumber=D10C2096FB5DB304ABD2F99F45A29488292D3721
Certificate serial: 3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
Manifest number: 3C
Signing time: Fri 31 Jan 2025 06:32:25 +0000
Manifest this update: Fri 31 Jan 2025 06:32:24 +0000
Manifest next update: Fri 07 Feb 2025 06:32:24 +0000
Files and hashes: 1: 0QwglvtdswSr0vmfRaKUiCktNyE.crl (hash: 7wqt4YavvOZGaZaLS3UFhUtnu7SeVtcJ1Bekz9rmQ4U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C68AD/serialNumber=D10C2096FB5DB304ABD2F99F45A29488292D3721
Validity
Not Before: Jan 31 06:32:24 2025 GMT
Not After : Feb 7 06:32:24 2025 GMT
Subject: CN=679c6e78-f8d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:57:b1:fa:97:b7:22:cd:fd:97:bb:37:81:f7:
0b:e9:4a:df:10:0f:2c:56:96:f3:5b:7e:f2:27:ce:
eb:73:91:09:bb:5d:fe:61:2f:a2:e0:eb:23:95:87:
0a:97:08:1a:a4:6f:47:d6:d4:e4:89:a6:48:d8:d1:
d1:f0:7a:fe:e4:40:62:0f:ed:9c:eb:b9:fe:1c:21:
d5:d6:c5:e4:9d:64:a0:5e:34:33:a2:da:d1:ce:31:
5f:3d:87:4d:2e:c4:63:e0:95:c4:97:ca:37:36:c0:
6f:ca:36:70:4d:8e:24:39:4b:b8:9b:2c:6f:55:0a:
bd:cc:65:c6:5f:f0:1c:42:49:04:ca:e6:98:ce:28:
84:46:e2:01:b5:5a:d0:fc:6c:db:5a:26:6e:51:4b:
94:24:93:73:fa:cd:f7:cf:2f:5b:03:da:74:1e:4e:
eb:ca:48:78:fc:54:70:b4:08:57:2d:72:01:5b:71:
cc:46:6f:23:3b:ca:fc:f7:ec:d5:29:75:a7:fe:eb:
b9:ee:53:f1:9b:65:97:43:37:c0:3c:8f:c9:bf:22:
6f:77:8c:98:d1:21:c1:6d:ec:87:a7:82:e2:b8:86:
92:fd:18:96:b3:dd:36:34:41:4f:3a:fb:56:4d:c2:
b3:23:dc:ae:fe:68:16:e8:23:f8:86:18:5e:b9:20:
09:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:19:D2:9A:E5:37:4A:2B:60:07:02:26:96:04:BF:26:38:75:ED:7E
X509v3 Authority Key Identifier:
keyid:D1:0C:20:96:FB:5D:B3:04:AB:D2:F9:9F:45:A2:94:88:29:2D:37:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:d5:19:89:f5:70:35:e8:63:44:bd:07:d4:a3:11:b3:9b:67:
fb:5f:36:18:df:02:97:54:71:a9:78:58:03:1a:8b:55:ad:a8:
fb:4e:54:85:34:77:36:24:da:29:d1:bd:62:eb:4c:5b:85:89:
5d:67:2f:1a:a4:59:ee:3e:30:d6:45:15:38:e9:30:1c:46:2d:
f0:19:ef:8b:84:fa:c6:37:85:a0:30:c0:d2:e7:9f:7c:69:72:
25:3a:14:01:c1:c1:84:56:ed:13:e1:78:f7:b0:0d:51:6b:bd:
65:42:c5:20:e4:59:a6:aa:9d:a6:43:e1:d1:ac:3a:f5:d4:9d:
1b:e4:2b:f1:7e:c1:07:5f:d5:70:cd:f6:4c:c7:b8:42:af:9a:
be:1f:79:13:0b:b1:e9:03:db:73:6e:cb:f8:59:2e:a8:75:f9:
3f:39:af:3f:57:a4:12:cc:7f:6e:b5:7f:94:31:b7:2f:fb:1f:
32:8d:3a:11:f1:db:e6:a7:63:a3:c4:20:78:33:36:15:04:69:
60:10:8d:b7:09:8f:5f:74:67:5d:0b:ce:93:36:a6:b0:f7:23:
11:65:52:6d:0a:98:a1:7d:7e:87:f0:22:41:8c:a7:c9:b5:8c:
7b:59:83:3c:01:d7:7f:e3:43:d8:57:ce:5e:02:f2:e9:f9:e2:
77:87:dd:6f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
NjhBRDExMC8GA1UEBRMoRDEwQzIwOTZGQjVEQjMwNEFCRDJGOTlGNDVBMjk0ODgy
OTJEMzcyMTAeFw0yNTAxMzEwNjMyMjRaFw0yNTAyMDcwNjMyMjRaMBgxFjAUBgNV
BAMTDTY3OWM2ZTc4LWY4ZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDSV7H6l7cizf2XuzeB9wvpSt8QDyxWlvNbfvInzutzkQm7Xf5hL6Lg6yOVhwqX
CBqkb0fW1OSJpkjY0dHwev7kQGIP7Zzruf4cIdXWxeSdZKBeNDOi2tHOMV89h00u
xGPglcSXyjc2wG/KNnBNjiQ5S7ibLG9VCr3MZcZf8BxCSQTK5pjOKIRG4gG1WtD8
bNtaJm5RS5Qkk3P6zffPL1sD2nQeTuvKSHj8VHC0CFctcgFbccxGbyM7yvz37NUp
daf+67nuU/GbZZdDN8A8j8m/Im93jJjRIcFt7IenguK4hpL9GJaz3TY0QU86+1ZN
wrMj3K7+aBboI/iGGF65IAmDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwBnSmuU3
SitgBwImlgS/Jjh17X4wHwYDVR0jBBgwFoAU0QwglvtdswSr0vmfRaKUiCktNyEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2OEFEL0RFQkEyMzgwODZB
MDExRUZCMzZFMzAwRUM0RjlBRTAyLzBRd2dsdnRkc3dTcjB2bWZSYUtVaUNrdE55
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMFF3Z2x2dGRzd1NyMHZtZlJhS1VpQ2t0TnlFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2
OEFEL0RFQkEyMzgwODZBMDExRUZCMzZFMzAwRUM0RjlBRTAyLzBRd2dsdnRkc3dT
cjB2bWZSYUtVaUNrdE55RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAFXVGYn1cDXoY0S9B9SjEbObZ/tfNhjfApdUcal4WAMai1WtqPtOVIU0
dzYk2inRvWLrTFuFiV1nLxqkWe4+MNZFFTjpMBxGLfAZ74uE+sY3haAwwNLnn3xp
ciU6FAHBwYRW7RPhePewDVFrvWVCxSDkWaaqnaZD4dGsOvXUnRvkK/F+wQdf1XDN
9kzHuEKvmr4feRMLsekD23Nuy/hZLqh1+T85rz9XpBLMf261f5Qxty/7HzKNOhHx
2+anY6PEIHgzNhUEaWAQjbcJj190Z10LzpM2prD3IxFlUm0KmKF9fofwIkGMp8m1
jHtZgzwB13/jQ9hXzl4C8un54neH3W8=
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:03:08 2025 by rpki-client