Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft
File: 1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft (raw, json)
Hash identifier: VSerBzOfYX4+yYO4VQUe7oau8pgb3LYkn3PWbN2OTRw=
Subject key identifier: A1:AF:DE:DE:DD:25:1E:FE:0A:75:F9:2B:53:00:A9:1F:9F:1B:38:FA
Authority key identifier: D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2
Certificate issuer: /CN=A91CE959/serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2
Certificate serial: A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft
Manifest number: 9F
Signing time: Fri 31 Jan 2025 05:24:07 +0000
Manifest this update: Fri 31 Jan 2025 05:24:06 +0000
Manifest next update: Fri 07 Feb 2025 05:24:06 +0000
Files and hashes: 1: 1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl (hash: 5yWM7yBmO5GRPGxzWUXWAjMLHTWkNJ31WMFCwFQcuL8=)
2: 99244E94FE0211EEB1F40344C4F9AE02.roa (hash: Rg0JDlVpf5av9xgphUcwW8L/umN7c++X0aMQPmcAyBg=)
3: 03BA6992ED7711EE9998FC11C4F9AE02.roa (hash: pNXp/zitcEGKo6/gAz8K4qpjBS4Aa7CoWSI3NGsPSw8=)
4: 38556AC6ED7711EEA7B2AF12C4F9AE02.roa (hash: aGLy/8PjmHM9bBnjKLxACS5cFbKo+n0HrFlLFQU8ICc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163 (0xa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE959/serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2
Validity
Not Before: Jan 31 05:24:06 2025 GMT
Not After : Feb 7 05:24:06 2025 GMT
Subject: CN=679c5e77-ee3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3b:39:97:9e:9b:a3:51:b0:a1:85:d8:e7:dc:
92:cb:af:f7:7f:9e:3c:b1:f7:bb:cc:e1:73:85:2b:
03:7e:67:95:34:ca:98:b6:6e:6c:a8:99:fb:36:32:
e2:e7:fe:3c:03:d2:04:d5:9f:fb:72:c6:91:25:92:
c3:da:15:6c:31:48:b5:d3:3b:00:f2:c8:84:63:95:
9c:69:48:b4:4a:a7:3d:ea:67:44:64:37:69:e0:a0:
78:92:49:71:40:c9:41:f4:14:36:4a:53:8c:fe:81:
41:82:16:d0:53:fa:28:ee:f0:46:7a:63:74:33:09:
fa:1d:49:67:9f:48:e1:6b:8b:94:52:e4:e8:b5:b9:
5b:63:0f:d8:55:59:bf:54:63:f8:8f:3a:c4:1f:11:
a3:1c:06:db:f8:0d:ed:4c:2d:67:69:51:46:86:c8:
0b:56:67:dd:d3:8d:9d:10:de:91:03:cd:58:33:e9:
de:07:21:ca:ac:ee:e4:9d:d8:a9:0d:e2:5e:8c:3f:
da:16:67:8b:e8:66:c9:68:ef:ec:2a:7d:de:2f:6c:
8e:b9:fd:d4:f8:98:3e:ef:72:7c:10:24:2e:e2:4d:
d1:cf:ff:a1:8c:d7:0f:b3:0e:06:09:54:c2:09:ba:
45:eb:24:f9:de:63:dc:fa:d6:bc:39:66:94:43:1c:
8b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AF:DE:DE:DD:25:1E:FE:0A:75:F9:2B:53:00:A9:1F:9F:1B:38:FA
X509v3 Authority Key Identifier:
keyid:D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:03:7c:35:88:a5:02:5c:a5:c1:49:08:bf:4e:b8:9e:dc:bc:
67:c2:2c:c9:a3:96:84:c0:1e:ce:20:19:10:6b:77:b0:b0:97:
86:2b:50:81:71:64:de:e0:fb:a1:c6:3d:2d:33:29:41:dd:7c:
26:1c:a5:b1:ea:da:20:71:ab:b3:85:ce:c8:ed:ef:d8:f0:e9:
3b:c3:23:cb:d3:fa:b4:4f:51:4c:93:3a:f5:9d:40:9c:fb:69:
ba:26:3f:1f:4c:13:ab:df:32:e8:d1:e5:b0:78:16:e9:86:b8:
92:56:4d:01:cb:c1:d1:47:58:db:f6:37:3d:34:0e:75:1b:1f:
e7:f2:a9:c4:37:30:c8:24:02:9a:4a:2f:9a:b0:72:68:ad:88:
51:13:28:94:47:e7:df:6b:7a:a3:00:51:26:e5:18:70:69:03:
85:6b:12:b6:47:e6:b8:ca:13:8d:dc:fd:70:6c:42:95:26:be:
b2:8b:52:bd:65:e4:98:c8:18:6f:70:cc:08:14:1f:c3:bc:32:
02:c4:20:db:6d:0f:4c:f8:48:05:ed:2f:83:f8:58:46:b5:d7:
0b:a8:3f:d5:25:79:a5:00:25:f0:58:8d:ca:77:33:0e:ab:4e:
26:93:c8:5a:dc:09:c0:64:b9:21:b1:3f:d8:d0:c3:0f:02:68:
4b:1d:5f:ec
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U5NTkxMTAvBgNVBAUTKEQ2RUMyMkE3M0E1OUQyQUE5NTU5OTc0NzAyNzlDNjYy
RDExMDg4RjIwHhcNMjUwMTMxMDUyNDA2WhcNMjUwMjA3MDUyNDA2WjAYMRYwFAYD
VQQDEw02NzljNWU3Ny1lZTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4Ts5l56bo1GwoYXY59ySy6/3f548sfe7zOFzhSsDfmeVNMqYtm5sqJn7NjLi
5/48A9IE1Z/7csaRJZLD2hVsMUi10zsA8siEY5WcaUi0Sqc96mdEZDdp4KB4kklx
QMlB9BQ2SlOM/oFBghbQU/oo7vBGemN0Mwn6HUlnn0jha4uUUuTotblbYw/YVVm/
VGP4jzrEHxGjHAbb+A3tTC1naVFGhsgLVmfd042dEN6RA81YM+neByHKrO7kndip
DeJejD/aFmeL6GbJaO/sKn3eL2yOuf3U+Jg+73J8ECQu4k3Rz/+hjNcPsw4GCVTC
CbpF6yT53mPc+ta8OWaUQxyLZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKGv3t7d
JR7+CnX5K1MAqR+fGzj6MB8GA1UdIwQYMBaAFNbsIqc6WdKqlVmXRwJ5xmLREIjy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTk1OS9BQTRDNzdFQ0VE
NzYxMUVFQUQ4NzFBMTFDNEY5QUUwMi8xdXdpcHpwWjBxcVZXWmRIQW5uR1l0RVFp
UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzF1d2lwenBaMHFxVldaZEhBbm5HWXRFUWlQSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTk1OS9BQTRDNzdFQ0VENzYxMUVFQUQ4NzFBMTFDNEY5QUUwMi8xdXdpcHpwWjBx
cVZXWmRIQW5uR1l0RVFpUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCCA3w1iKUCXKXBSQi/Trie3LxnwizJo5aEwB7OIBkQa3ewsJeGK1CB
cWTe4Puhxj0tMylB3XwmHKWx6togcauzhc7I7e/Y8Ok7wyPL0/q0T1FMkzr1nUCc
+2m6Jj8fTBOr3zLo0eWweBbphriSVk0By8HRR1jb9jc9NA51Gx/n8qnENzDIJAKa
Si+asHJorYhREyiUR+ffa3qjAFEm5RhwaQOFaxK2R+a4yhON3P1wbEKVJr6yi1K9
ZeSYyBhvcMwIFB/DvDICxCDbbQ9M+EgF7S+D+FhGtdcLqD/VJXmlACXwWI3KdzMO
q04mk8ha3AnAZLkhsT/Y0MMPAmhLHV/s
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:37:51 2025 by rpki-client