Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft
File: ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft (raw, json)
Hash identifier: iPuzeZB4bfKLDN1yCc6iOSyQ6TjscBr0RTGRtlzBiIQ=
Subject key identifier: 25:88:47:54:0E:6A:3E:0A:0B:DF:3D:17:65:B7:F6:B5:C0:E1:66:39
Authority key identifier: A1:C2:39:65:70:40:17:72:42:9E:B8:CB:B0:DF:66:53:F1:67:8C:F6
Certificate issuer: /CN=A91CE6EC/serialNumber=A1C2396570401772429EB8CBB0DF6653F1678CF6
Certificate serial: 2543
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft
Manifest number: 253A
Signing time: Fri 31 Jan 2025 15:45:51 +0000
Manifest this update: Fri 31 Jan 2025 15:45:51 +0000
Manifest next update: Fri 07 Feb 2025 15:45:51 +0000
Files and hashes: 1: ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl (hash: hu0kh1vWsOf5sGZoqaNVfoO6ALrOp38SzUP/9vmpfNQ=)
2: F3CB78DC2D1D11EFB1125716C4F9AE02.roa (hash: TPPWZGP5sV9IJtZUwLcKpBnJCq1AW3jjv3oaEJcerEg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9539 (0x2543)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE6EC/serialNumber=A1C2396570401772429EB8CBB0DF6653F1678CF6
Validity
Not Before: Jan 31 15:45:51 2025 GMT
Not After : Feb 7 15:45:51 2025 GMT
Subject: CN=679cf02f-5a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:13:b5:54:45:e2:32:d1:0f:db:1b:b7:a1:ff:
4b:b2:53:d8:e3:0d:1e:66:38:3f:81:00:f3:dc:43:
50:6e:1a:7e:4d:fd:87:cd:46:72:41:af:23:05:54:
77:ea:14:11:65:77:06:05:47:a8:8a:fc:8a:f9:e7:
cf:69:c5:f8:99:0b:3f:e8:71:fe:9c:91:9b:d5:d9:
f2:b1:ab:4e:cb:99:c1:95:5e:4f:e7:cd:28:73:48:
ae:95:05:5d:72:7c:c1:b6:89:d3:6d:b7:33:96:d1:
c9:5f:96:d0:a4:9b:64:62:29:91:5c:af:02:e7:41:
fc:56:99:68:7c:18:b6:2f:4f:8f:01:93:ca:7b:5f:
b8:42:a1:bc:03:a0:da:a4:48:30:70:51:59:eb:b8:
d1:84:b0:4b:9a:75:25:04:9b:41:fd:23:a3:13:b8:
29:7b:78:64:9a:2e:f5:38:db:64:cd:d1:9d:94:3e:
08:29:31:63:af:b9:e6:aa:f1:35:a2:bd:d7:d6:b2:
d7:27:28:9d:a8:82:3b:b2:c5:2d:af:bf:e3:db:17:
8d:ef:17:47:bc:76:56:24:ea:40:25:9f:45:9d:58:
2e:76:40:4f:39:c8:07:eb:3f:17:aa:30:b0:85:f1:
9a:77:5d:1b:64:a2:fe:4b:57:ef:c2:c9:48:84:ab:
d2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:88:47:54:0E:6A:3E:0A:0B:DF:3D:17:65:B7:F6:B5:C0:E1:66:39
X509v3 Authority Key Identifier:
keyid:A1:C2:39:65:70:40:17:72:42:9E:B8:CB:B0:DF:66:53:F1:67:8C:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e4:57:18:a5:c6:20:73:0b:35:e3:00:cc:1e:c4:ec:55:27:
ce:5e:ad:db:69:27:68:ed:9f:53:d1:52:19:54:8d:47:a9:fa:
ef:7e:d9:f8:c8:1f:47:31:eb:37:f0:58:a3:6e:89:62:9b:17:
32:31:ce:a5:ec:5e:6e:71:f0:1c:24:0c:82:b5:fc:6d:ee:4c:
3f:47:3b:ce:52:8c:6c:13:46:92:f6:43:90:a9:71:77:4d:5f:
fe:01:f9:01:cd:21:13:73:38:3e:73:a7:91:56:24:53:12:67:
4a:23:0e:0c:2a:3e:69:7d:ca:d9:7c:55:cb:23:6a:a2:bc:69:
75:cf:7c:b0:8a:58:95:65:e2:a7:63:86:01:9c:c1:e3:e8:84:
21:3c:b8:87:81:72:ea:8e:78:46:27:16:70:cd:4e:ff:cc:b0:
a6:f9:e0:e5:75:ec:ab:d2:f5:1c:5a:19:ae:be:42:4a:3f:15:
06:93:93:e9:48:9f:02:58:e3:fb:49:7c:9a:c9:24:90:9d:62:
52:28:36:ff:4b:3f:76:52:cb:d6:4f:6b:32:b4:ab:19:98:bb:
90:43:92:b3:b8:a2:75:a2:7a:2c:23:40:2b:3e:fd:f5:b5:1c:
13:e5:2e:41:05:5d:0b:d1:47:69:1b:41:16:a8:61:c2:8d:bb:
f0:1f:29:a2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICJUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U2RUMxMTAvBgNVBAUTKEExQzIzOTY1NzA0MDE3NzI0MjlFQjhDQkIwREY2NjUz
RjE2NzhDRjYwHhcNMjUwMTMxMTU0NTUxWhcNMjUwMjA3MTU0NTUxWjAYMRYwFAYD
VQQDEw02NzljZjAyZi01YTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzRO1VEXiMtEP2xu3of9LslPY4w0eZjg/gQDz3ENQbhp+Tf2HzUZyQa8jBVR3
6hQRZXcGBUeoivyK+efPacX4mQs/6HH+nJGb1dnysatOy5nBlV5P580oc0iulQVd
cnzBtonTbbczltHJX5bQpJtkYimRXK8C50H8VplofBi2L0+PAZPKe1+4QqG8A6Da
pEgwcFFZ67jRhLBLmnUlBJtB/SOjE7gpe3hkmi71ONtkzdGdlD4IKTFjr7nmqvE1
or3X1rLXJyidqII7ssUtr7/j2xeN7xdHvHZWJOpAJZ9FnVgudkBPOcgH6z8XqjCw
hfGad10bZKL+S1fvwslIhKvSMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCWIR1QO
aj4KC989F2W39rXA4WY5MB8GA1UdIwQYMBaAFKHCOWVwQBdyQp64y7DfZlPxZ4z2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTZFQy9EM0FCNjAxNjE0
QzgxMUU1QTJGQ0VGMTVDNEY5QUUwMi9vY0k1WlhCQUYzSkNucmpMc045bVVfRm5q
UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29jSTVaWEJBRjNKQ25yakxzTjltVV9GbmpQWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTZFQy9EM0FCNjAxNjE0QzgxMUU1QTJGQ0VGMTVDNEY5QUUwMi9vY0k1WlhCQUYz
SkNucmpMc045bVVfRm5qUFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCO5FcYpcYgcws14wDMHsTsVSfOXq3baSdo7Z9T0VIZVI1Hqfrvftn4
yB9HMes38FijbolimxcyMc6l7F5ucfAcJAyCtfxt7kw/RzvOUoxsE0aS9kOQqXF3
TV/+AfkBzSETczg+c6eRViRTEmdKIw4MKj5pfcrZfFXLI2qivGl1z3ywiliVZeKn
Y4YBnMHj6IQhPLiHgXLqjnhGJxZwzU7/zLCm+eDldeyr0vUcWhmuvkJKPxUGk5Pp
SJ8CWOP7SXyaySSQnWJSKDb/Sz92UsvWT2sytKsZmLuQQ5KzuKJ1onosI0ArPv31
tRwT5S5BBV0L0UdpG0EWqGHCjbvwHymi
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:04:57 2025 by rpki-client