Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
File: lVqjNNYHfBfALW18rdIVmRIeTvo.mft (raw, json)
Hash identifier: 2X3gk+/hMXK0PuhrrAKlvTXI2vmA07ksNoMpsKVa7rM=
Subject key identifier: 72:0E:E1:EE:54:AB:8B:30:08:C1:8B:B2:3B:84:2D:CF:39:B6:AA:F7
Authority key identifier: 95:5A:A3:34:D6:07:7C:17:C0:2D:6D:7C:AD:D2:15:99:12:1E:4E:FA
Certificate issuer: /CN=A91D01AF/serialNumber=955AA334D6077C17C02D6D7CADD21599121E4EFA
Certificate serial: 079E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
Manifest number: 0797
Signing time: Thu 30 Jan 2025 21:11:27 +0000
Manifest this update: Thu 30 Jan 2025 21:11:26 +0000
Manifest next update: Thu 06 Feb 2025 21:11:26 +0000
Files and hashes: 1: lVqjNNYHfBfALW18rdIVmRIeTvo.crl (hash: c9gojB1wZ8oG5O8LUBUBbUg2n66cLooSF8+ej0zc79c=)
2: AD797FA2F17E11EAA3CC597BC4F9AE02.roa (hash: h5ITx5pXE/9NCEhkkWyRU4Y7R0J0MFf0GXuloXcx21g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1950 (0x79e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D01AF/serialNumber=955AA334D6077C17C02D6D7CADD21599121E4EFA
Validity
Not Before: Jan 30 21:11:26 2025 GMT
Not After : Feb 6 21:11:26 2025 GMT
Subject: CN=679beafe-1249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:66:09:70:74:c9:2c:5b:d5:77:7a:36:b3:bd:
cc:7c:0e:ba:de:0e:e5:06:3c:53:4c:c8:96:04:1f:
f7:3c:71:47:38:da:fb:0a:ed:82:34:d3:14:cd:7b:
16:39:8a:63:53:48:7d:5e:87:c7:c9:5d:79:52:5e:
b3:03:2d:e9:72:ca:4e:b4:69:59:33:57:6a:64:ea:
ce:5d:b4:0e:bf:e6:c2:df:2b:d7:95:2f:7d:46:53:
ac:63:a3:b6:36:ef:80:a7:9c:91:8a:fe:65:61:40:
59:fe:c0:b9:b4:bb:64:ff:b4:aa:60:d4:76:7e:4f:
5a:cd:68:19:a0:65:46:e7:eb:54:5c:9a:3e:93:f6:
32:0c:82:d9:ce:17:c6:66:17:94:77:59:8f:7c:60:
4a:a1:fd:4e:0f:82:b3:ee:ea:b0:05:96:89:48:70:
84:d5:9c:4d:32:9d:dd:5d:fd:d8:c8:c1:0d:6e:ae:
66:68:23:81:48:98:e6:b5:2f:6e:a6:72:cd:f9:85:
7e:f8:25:c2:e7:d9:59:70:95:d0:f4:d9:33:8d:e5:
3e:cb:10:aa:95:f7:58:13:82:d9:65:80:ee:a0:16:
5f:30:79:99:1d:6a:8a:c6:da:c3:78:89:9e:b1:7f:
51:d7:8c:5c:3b:62:d2:a4:2a:3d:21:b9:26:ba:76:
df:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0E:E1:EE:54:AB:8B:30:08:C1:8B:B2:3B:84:2D:CF:39:B6:AA:F7
X509v3 Authority Key Identifier:
keyid:95:5A:A3:34:D6:07:7C:17:C0:2D:6D:7C:AD:D2:15:99:12:1E:4E:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:64:10:5f:b4:86:4d:82:4a:af:86:ed:15:84:3f:0f:22:7d:
40:2b:2f:1e:86:57:9c:3c:fa:3c:bb:23:1f:0c:a6:ad:86:9e:
f2:52:81:18:2d:d5:10:96:fb:cb:9f:82:08:9c:69:52:47:58:
47:f1:4b:e0:c1:e3:3a:40:aa:bc:ba:e5:02:0e:34:8f:cb:ed:
61:2d:06:e0:8b:5c:2c:a7:a4:8b:f8:68:e6:28:a5:1a:7d:05:
92:9a:ec:68:1c:d5:10:05:ec:e4:c1:52:d8:48:fe:90:a1:41:
02:e3:47:d3:87:49:6f:98:ff:cd:76:0e:e1:f9:59:f6:c5:7b:
32:b0:d5:db:88:f3:e4:21:9f:97:a9:72:cb:57:60:fb:a5:f1:
ed:24:a5:7a:02:be:4f:14:6f:54:62:6d:fc:f7:88:23:30:ca:
38:18:93:86:ce:6b:40:dc:5a:97:aa:ae:0b:96:76:ae:5a:91:
a4:71:75:41:c1:34:f8:ff:f6:a3:ff:b1:b5:59:4d:30:23:65:
38:d0:32:e5:b2:45:e7:93:e2:67:63:04:1b:58:c4:af:7e:01:
93:ed:51:80:f1:f7:34:f4:35:e6:c5:21:62:00:16:6e:9c:36:
76:50:d3:5a:c4:fd:de:6d:70:f7:81:d9:ea:3f:bb:4b:85:d4:
e1:ba:3a:9c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDAxQUYxMTAvBgNVBAUTKDk1NUFBMzM0RDYwNzdDMTdDMDJENkQ3Q0FERDIxNTk5
MTIxRTRFRkEwHhcNMjUwMTMwMjExMTI2WhcNMjUwMjA2MjExMTI2WjAYMRYwFAYD
VQQDEw02NzliZWFmZS0xMjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw2YJcHTJLFvVd3o2s73MfA663g7lBjxTTMiWBB/3PHFHONr7Cu2CNNMUzXsW
OYpjU0h9XofHyV15Ul6zAy3pcspOtGlZM1dqZOrOXbQOv+bC3yvXlS99RlOsY6O2
Nu+Ap5yRiv5lYUBZ/sC5tLtk/7SqYNR2fk9azWgZoGVG5+tUXJo+k/YyDILZzhfG
ZheUd1mPfGBKof1OD4Kz7uqwBZaJSHCE1ZxNMp3dXf3YyMENbq5maCOBSJjmtS9u
pnLN+YV++CXC59lZcJXQ9NkzjeU+yxCqlfdYE4LZZYDuoBZfMHmZHWqKxtrDeIme
sX9R14xcO2LSpCo9IbkmunbfLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHIO4e5U
q4swCMGLsjuELc85tqr3MB8GA1UdIwQYMBaAFJVaozTWB3wXwC1tfK3SFZkSHk76
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDFBRi9DRDdFNzBEOEYx
N0QxMUVBQUIzOTI1NzhDNEY5QUUwMi9sVnFqTk5ZSGZCZkFMVzE4cmRJVm1SSWVU
dm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xWcWpOTllIZkJmQUxXMThyZElWbVJJZVR2by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MDFBRi9DRDdFNzBEOEYxN0QxMUVBQUIzOTI1NzhDNEY5QUUwMi9sVnFqTk5ZSGZC
ZkFMVzE4cmRJVm1SSWVUdm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBeZBBftIZNgkqvhu0VhD8PIn1AKy8ehlecPPo8uyMfDKathp7yUoEY
LdUQlvvLn4IInGlSR1hH8UvgweM6QKq8uuUCDjSPy+1hLQbgi1wsp6SL+GjmKKUa
fQWSmuxoHNUQBezkwVLYSP6QoUEC40fTh0lvmP/Ndg7h+Vn2xXsysNXbiPPkIZ+X
qXLLV2D7pfHtJKV6Ar5PFG9UYm3894gjMMo4GJOGzmtA3FqXqq4LlnauWpGkcXVB
wTT4//aj/7G1WU0wI2U40DLlskXnk+JnYwQbWMSvfgGT7VGA8fc09DXmxSFiABZu
nDZ2UNNaxP3ebXD3gdnqP7tLhdThujqc
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:46:52 2025 by rpki-client