Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft
File: G0cdrc2RIJM1E26s9syYiChlSyo.mft (raw, json)
Hash identifier: H4BI3of/3s5tWKxtWebw0+tiBodYDILRWTO8/m1kDxM=
Subject key identifier: D4:A1:64:32:EF:DD:83:E2:B2:17:21:39:D5:7B:6A:FD:6F:FB:99:BF
Authority key identifier: 1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A
Certificate issuer: /CN=A91C9606/serialNumber=1B471DADCD91209335136EACF6CC988828654B2A
Certificate serial: 0CEE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft
Manifest number: 0CDB
Signing time: Fri 31 Jan 2025 18:04:23 +0000
Manifest this update: Fri 31 Jan 2025 18:04:23 +0000
Manifest next update: Fri 07 Feb 2025 18:04:23 +0000
Files and hashes: 1: G0cdrc2RIJM1E26s9syYiChlSyo.crl (hash: sKfXhXafR4LxK7X/Md06x40gI/nsbsXMx7Irv/zM8FM=)
2: 06370CB2DB9211E9B70EDD2EC4F9AE02.roa (hash: tiA64s/MRKlR1BkumxbFlRLnmMmyLTM+IqS1j/mgdbk=)
3: 645EF9CADB9311E988E56C33C4F9AE02.roa (hash: 9JHcHgmG+w7bGvnU6/Eo85gv0xWCdlnreQQjOwseAsk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3310 (0xcee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9606/serialNumber=1B471DADCD91209335136EACF6CC988828654B2A
Validity
Not Before: Jan 31 18:04:23 2025 GMT
Not After : Feb 7 18:04:23 2025 GMT
Subject: CN=679d10a7-0767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:db:da:3e:17:eb:78:01:02:76:0a:c5:2c:e1:
8b:3e:17:df:6e:d5:39:91:e2:ef:05:fc:8c:0c:35:
c0:65:2d:4f:df:b3:1e:44:bc:17:7e:70:96:4b:e1:
e5:a3:86:91:d0:0e:c9:81:5e:ef:4f:5b:62:62:92:
d6:00:60:de:ec:91:22:a0:86:a2:4d:1a:03:7f:cd:
4c:36:0c:79:15:12:6b:29:61:43:69:50:5c:e1:86:
d4:0c:7e:ce:b9:74:1e:f6:60:8f:e2:3f:bf:5d:75:
fe:83:7a:1f:40:3c:63:76:42:22:ea:de:8d:25:02:
93:54:e6:bb:e8:88:1c:41:6b:6a:22:c8:8a:41:96:
cd:52:a8:84:b5:22:00:9d:78:8f:4a:ce:fd:f4:c6:
fd:54:69:db:e3:80:0b:ce:de:14:15:50:84:b2:6d:
99:2d:39:de:12:05:c0:ba:5d:f4:d2:c5:0e:52:5f:
42:6b:6d:1d:b6:64:82:0f:ca:db:18:87:be:0b:b2:
1c:9b:12:fa:44:90:a8:7d:e0:f3:2f:8d:3a:79:8f:
2b:0f:c0:4d:ac:72:79:bc:43:c1:b1:ac:77:bf:4c:
b6:8b:01:4e:38:39:2e:ba:69:35:fd:0b:26:c5:77:
26:98:90:60:b2:e9:7e:13:38:45:14:f1:02:ae:e5:
d5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A1:64:32:EF:DD:83:E2:B2:17:21:39:D5:7B:6A:FD:6F:FB:99:BF
X509v3 Authority Key Identifier:
keyid:1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:9b:18:ee:36:ef:bb:86:65:e8:b1:ca:85:49:7d:9b:02:06:
f6:d8:da:72:58:f8:6e:e7:9e:4a:50:3d:3d:d6:66:20:0b:d1:
b1:37:19:27:ac:8c:82:9a:4d:c6:9f:20:3b:a1:43:ad:de:a1:
02:04:80:30:ce:df:04:71:b2:0f:5a:61:52:41:47:00:83:ae:
b0:63:81:0b:f6:66:83:15:d0:2f:b5:c1:e2:c7:10:b0:1b:2d:
c7:11:2a:cb:eb:b3:a3:72:67:a7:5d:80:6e:36:e5:b0:21:e1:
d8:1a:6b:83:ce:0d:21:b4:36:b5:c5:60:38:f9:7d:4d:79:56:
6a:25:c7:9c:c5:39:99:aa:d8:48:4d:59:66:6b:d0:bd:64:9a:
45:30:64:bc:c2:0e:e0:c4:32:e3:29:4b:c1:ed:f6:25:de:24:
1b:85:43:80:3c:25:5a:6c:dd:68:1f:07:98:d5:0f:76:53:12:
d5:6c:88:31:bd:80:00:b8:58:74:62:41:17:4c:7b:b3:f2:6d:
fd:2c:76:d0:1c:43:a7:f6:3d:50:2a:57:53:d7:57:60:f9:f1:
09:6e:57:16:8f:20:85:ae:4b:f3:8e:b4:ea:0a:94:f8:be:3e:
5f:7b:21:71:61:9f:fd:be:b8:85:42:2e:1c:52:9a:00:47:34:
e0:72:b7:ad
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzk2MDYxMTAvBgNVBAUTKDFCNDcxREFEQ0Q5MTIwOTMzNTEzNkVBQ0Y2Q0M5ODg4
Mjg2NTRCMkEwHhcNMjUwMTMxMTgwNDIzWhcNMjUwMjA3MTgwNDIzWjAYMRYwFAYD
VQQDEw02NzlkMTBhNy0wNzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuNvaPhfreAECdgrFLOGLPhffbtU5keLvBfyMDDXAZS1P37MeRLwXfnCWS+Hl
o4aR0A7JgV7vT1tiYpLWAGDe7JEioIaiTRoDf81MNgx5FRJrKWFDaVBc4YbUDH7O
uXQe9mCP4j+/XXX+g3ofQDxjdkIi6t6NJQKTVOa76IgcQWtqIsiKQZbNUqiEtSIA
nXiPSs799Mb9VGnb44ALzt4UFVCEsm2ZLTneEgXAul300sUOUl9Ca20dtmSCD8rb
GIe+C7IcmxL6RJCofeDzL406eY8rD8BNrHJ5vEPBsax3v0y2iwFOODkuumk1/Qsm
xXcmmJBgsul+EzhFFPECruXVfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNShZDLv
3YPishchOdV7av1v+5m/MB8GA1UdIwQYMBaAFBtHHa3NkSCTNRNurPbMmIgoZUsq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTYwNi85QzlGOUY5QURC
OTAxMUU5QTNDMTJGMkNDNEY5QUUwMi9HMGNkcmMyUklKTTFFMjZzOXN5WWlDaGxT
eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0cwY2RyYzJSSUpNMUUyNnM5c3lZaUNobFN5by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTYwNi85QzlGOUY5QURCOTAxMUU5QTNDMTJGMkNDNEY5QUUwMi9HMGNkcmMyUklK
TTFFMjZzOXN5WWlDaGxTeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAimxjuNu+7hmXoscqFSX2bAgb22NpyWPhu555KUD091mYgC9GxNxkn
rIyCmk3GnyA7oUOt3qECBIAwzt8EcbIPWmFSQUcAg66wY4EL9maDFdAvtcHixxCw
Gy3HESrL67OjcmenXYBuNuWwIeHYGmuDzg0htDa1xWA4+X1NeVZqJcecxTmZqthI
TVlma9C9ZJpFMGS8wg7gxDLjKUvB7fYl3iQbhUOAPCVabN1oHweY1Q92UxLVbIgx
vYAAuFh0YkEXTHuz8m39LHbQHEOn9j1QKldT11dg+fEJblcWjyCFrkvzjrTqCpT4
vj5feyFxYZ/9vriFQi4cUpoARzTgcret
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:32:50 2025 by rpki-client