Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft
File: akWKsPxWKCkzGD1GgFG_xQeRFjI.mft (raw, json)
Hash identifier: EzgDdfP8ge4BdXzqCxIC3F6g/1IKBUZuKugoVeKl3xM=
Subject key identifier: 51:CB:D0:65:6B:FB:4E:A0:F7:81:09:02:9A:46:E6:2B:21:69:ED:1F
Authority key identifier: 6A:45:8A:B0:FC:56:28:29:33:18:3D:46:80:51:BF:C5:07:91:16:32
Certificate issuer: /CN=A91CCA92/serialNumber=6A458AB0FC56282933183D468051BFC507911632
Certificate serial: 44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft
Manifest number: 40
Signing time: Fri 31 Jan 2025 06:34:27 +0000
Manifest this update: Fri 31 Jan 2025 06:34:27 +0000
Manifest next update: Fri 07 Feb 2025 06:34:27 +0000
Files and hashes: 1: akWKsPxWKCkzGD1GgFG_xQeRFjI.crl (hash: EzsV1luMPj/5bx2wMCZyztLIwVmOQOI8i5IbHBEFtms=)
2: C14680A887BF11EF8804736AC4F9AE02.roa (hash: V86iixkcvnqrY9mFy6IN1yxn9j8XC/z6FWNoSjs479w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCA92/serialNumber=6A458AB0FC56282933183D468051BFC507911632
Validity
Not Before: Jan 31 06:34:27 2025 GMT
Not After : Feb 7 06:34:27 2025 GMT
Subject: CN=679c6ef3-6543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:0c:47:2a:c9:88:ba:6e:3d:0a:75:b1:1c:62:
28:92:61:20:ba:8f:d6:b3:6c:b0:cc:be:78:b7:a0:
fb:b0:79:da:4f:68:50:b9:5c:a3:8d:22:dd:c4:31:
e4:3d:dd:6f:42:b6:a8:e5:27:31:21:b5:45:10:5f:
eb:f8:05:63:83:10:c7:e8:e3:09:72:19:5f:9b:db:
f7:2d:af:34:6e:b9:6c:bb:87:3f:43:8e:bc:a6:59:
42:00:8b:f6:b7:b1:27:65:3e:b7:06:3c:5c:ea:2d:
df:17:06:b1:30:30:31:83:d5:8d:f2:29:e1:07:0d:
ad:c0:69:d5:fb:10:3e:c6:10:a2:c2:8c:f3:fc:33:
44:7a:ac:f0:38:12:19:62:06:66:86:6a:fb:65:60:
e5:3e:63:91:3c:f8:b9:c8:00:28:fe:60:38:bf:dc:
0a:71:8e:cf:26:b4:a8:5a:3a:58:c7:b8:ed:d5:08:
3d:41:5e:23:3a:3c:3e:28:a4:d0:31:49:f3:cc:93:
9c:a2:42:66:58:37:a8:08:0b:74:be:c4:0e:4a:ca:
4a:65:95:db:f9:9c:e4:ea:00:c3:6c:f4:73:b8:d0:
12:bb:72:a4:a1:5f:3f:2a:27:8c:aa:11:a4:1f:94:
69:ef:e7:34:42:49:8d:40:4f:30:d8:9d:14:2f:21:
33:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CB:D0:65:6B:FB:4E:A0:F7:81:09:02:9A:46:E6:2B:21:69:ED:1F
X509v3 Authority Key Identifier:
keyid:6A:45:8A:B0:FC:56:28:29:33:18:3D:46:80:51:BF:C5:07:91:16:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:60:28:b1:ae:f2:25:46:99:26:bb:8f:e2:d1:52:1e:04:d9:
0e:3b:9b:04:6b:39:1c:30:57:76:9b:81:3c:8a:21:b3:6b:68:
c4:9d:fd:5e:57:b0:d3:7f:43:cd:b7:f7:ac:ee:1e:02:e1:9d:
40:7e:96:29:af:26:7c:2b:a4:73:37:8f:c7:11:bf:58:c6:a0:
b8:f3:5d:e1:a3:77:f7:9f:d6:99:5c:3a:fe:b8:be:fd:48:81:
1a:9d:0f:55:81:97:18:e7:b0:12:95:86:f4:4b:27:72:8d:ce:
fd:bf:54:04:67:44:f3:4e:03:e6:ea:31:8c:6f:8e:54:6f:2e:
8e:8c:7d:5d:8d:7e:e8:2a:62:43:56:aa:f5:25:20:d3:48:91:
32:e7:99:56:16:9d:1c:5c:f4:59:89:7e:a8:f2:fb:40:57:6b:
d8:da:94:7d:a9:18:8e:6b:2c:4f:e3:50:39:6f:03:ac:78:27:
40:4a:b5:2c:47:8d:67:19:53:16:12:cf:04:27:d7:b8:19:45:
fd:78:61:1c:93:cc:a9:81:98:72:28:7c:fc:d6:b7:76:2a:39:
96:d8:8a:02:49:2c:00:da:74:49:10:7c:3e:bb:23:96:47:02:
18:f9:f1:a7:5f:13:97:d2:02:99:b5:9c:db:f4:86:c7:3d:d3:
b2:a8:92:6b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
Q0E5MjExMC8GA1UEBRMoNkE0NThBQjBGQzU2MjgyOTMzMTgzRDQ2ODA1MUJGQzUw
NzkxMTYzMjAeFw0yNTAxMzEwNjM0MjdaFw0yNTAyMDcwNjM0MjdaMBgxFjAUBgNV
BAMTDTY3OWM2ZWYzLTY1NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDxDEcqyYi6bj0KdbEcYiiSYSC6j9azbLDMvni3oPuwedpPaFC5XKONIt3EMeQ9
3W9CtqjlJzEhtUUQX+v4BWODEMfo4wlyGV+b2/ctrzRuuWy7hz9DjrymWUIAi/a3
sSdlPrcGPFzqLd8XBrEwMDGD1Y3yKeEHDa3AadX7ED7GEKLCjPP8M0R6rPA4Ehli
BmaGavtlYOU+Y5E8+LnIACj+YDi/3Apxjs8mtKhaOljHuO3VCD1BXiM6PD4opNAx
SfPMk5yiQmZYN6gIC3S+xA5Kykplldv5nOTqAMNs9HO40BK7cqShXz8qJ4yqEaQf
lGnv5zRCSY1ATzDYnRQvITM3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUcvQZWv7
TqD3gQkCmkbmKyFp7R8wHwYDVR0jBBgwFoAUakWKsPxWKCkzGD1GgFG/xQeRFjIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDQTkyLzk5OUU4RUFDODdC
RTExRUZCQzQxQzI2OEM0RjlBRTAyL2FrV0tzUHhXS0NrekdEMUdnRkdfeFFlUkZq
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYWtXS3NQeFdLQ2t6R0QxR2dGR194UWVSRmpJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND
QTkyLzk5OUU4RUFDODdCRTExRUZCQzQxQzI2OEM0RjlBRTAyL2FrV0tzUHhXS0Nr
ekdEMUdnRkdfeFFlUkZqSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBADNgKLGu8iVGmSa7j+LRUh4E2Q47mwRrORwwV3abgTyKIbNraMSd/V5X
sNN/Q82396zuHgLhnUB+limvJnwrpHM3j8cRv1jGoLjzXeGjd/ef1plcOv64vv1I
gRqdD1WBlxjnsBKVhvRLJ3KNzv2/VARnRPNOA+bqMYxvjlRvLo6MfV2NfugqYkNW
qvUlINNIkTLnmVYWnRxc9FmJfqjy+0BXa9jalH2pGI5rLE/jUDlvA6x4J0BKtSxH
jWcZUxYSzwQn17gZRf14YRyTzKmBmHIofPzWt3YqOZbYigJJLADadEkQfD67I5ZH
Ahj58adfE5fSApm1nNv0hsc907Kokms=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:21:19 2025 by rpki-client