Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
File: toWM6JkRXyxWHHZl74vgaIBoEJw.mft (raw, json)
Hash identifier: Ej9n6PDeMVUwEfCxWpoJGd4NooegQaqhQ3uBrqFTl4c=
Subject key identifier: 78:49:BA:7D:FA:A7:4F:5D:5A:8B:DA:78:AA:50:C7:9A:17:8B:60:0C
Authority key identifier: B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C
Certificate issuer: /CN=A91D120D/serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C
Certificate serial: 08E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
Manifest number: 08D1
Signing time: Thu 30 Jan 2025 20:31:10 +0000
Manifest this update: Thu 30 Jan 2025 20:31:09 +0000
Manifest next update: Thu 06 Feb 2025 20:31:09 +0000
Files and hashes: 1: toWM6JkRXyxWHHZl74vgaIBoEJw.crl (hash: LzDzZsAylT8rjL0m39PFvcmiWmLSgKMgK/Hp6IFRtIM=)
2: 1A4ED0E8A71811EA80A77B1FC4F9AE02.roa (hash: o2ubabJQjRgkyeZ1KZmWpq8Ju1E6mRHeCYVqt6Eg9bc=)
3: 8C79CFC6A6FD11EAA1B00744C4F9AE02.roa (hash: ZhKJiPvJVpmKkzL+YkNpWQyHnorv+gyb0AmGgaJqcWs=)
4: 95DC9990D0A211EE9C97373FC4F9AE02.roa (hash: z6k7ctSWW62IFQe+RQT4sXA8JZqwDWiJbhhB0VFDnxM=)
5: 9C454274FB7711EDA78AAC1DC4F9AE02.roa (hash: ZvBB3zmKVUj3FoNo3LoHC19aHdg/tMgwEIpu4fehNZ4=)
6: 9D83F4E6FB7711EDA78AAC1DC4F9AE02.roa (hash: KelzcdHCtnxA0fy0V8HA1xyHStc3LVcSAxi6LwKWwLw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2281 (0x8e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D120D/serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C
Validity
Not Before: Jan 30 20:31:09 2025 GMT
Not After : Feb 6 20:31:09 2025 GMT
Subject: CN=679be18e-c3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:42:1b:5a:10:db:61:6a:64:ac:68:b6:b1:26:
5d:92:12:2e:9e:48:e7:9e:66:89:ff:d6:ea:bc:25:
d9:e1:f9:8a:b9:5f:59:50:4e:0c:8d:78:0b:b3:04:
34:97:f6:51:5d:4b:0a:bd:a0:c0:0d:ff:7d:03:8a:
df:79:90:4d:a2:e4:3a:49:fd:3f:05:d8:02:61:58:
e0:e0:df:44:43:52:92:72:34:36:20:7f:0b:98:c4:
2e:b6:1d:02:f0:1c:f8:d4:24:7d:59:ed:bc:20:d8:
8c:7b:63:b7:4d:c4:d8:6e:06:f2:7e:b4:cb:32:42:
84:3b:d7:24:88:8e:8d:0e:58:6b:25:49:2c:4c:86:
a1:85:2e:8f:7a:32:9b:bb:b8:fa:61:df:8f:38:be:
21:b3:b8:c1:f7:8a:98:2c:c1:2b:66:73:6e:9f:b2:
9f:c9:ae:ae:23:6c:9e:81:d9:fd:de:87:86:2d:5a:
59:e6:ee:93:16:a3:2a:dc:62:e4:d6:f3:83:a0:7e:
84:19:1a:77:21:5a:d9:9f:1e:50:36:83:9e:32:73:
43:ab:f5:ac:44:13:4c:44:50:19:bc:6b:1d:f7:f9:
f0:0f:35:1a:16:78:c2:7a:c6:9b:82:38:08:8c:fd:
aa:6e:64:85:05:95:b8:a0:84:18:70:69:20:96:7d:
5a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:49:BA:7D:FA:A7:4F:5D:5A:8B:DA:78:AA:50:C7:9A:17:8B:60:0C
X509v3 Authority Key Identifier:
keyid:B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:27:64:0b:15:d0:0c:46:8f:39:61:69:46:17:df:9d:b8:3d:
cb:4f:3b:ac:f0:74:f0:94:2d:b0:8a:74:54:fc:15:ed:7d:bc:
dd:5c:2f:e5:5b:98:72:9e:3a:2e:b4:e9:ce:47:12:ac:ea:58:
d9:c7:40:a6:60:88:68:64:7b:44:4e:dd:f5:63:a7:6e:53:e6:
3e:ac:9b:c9:6a:16:ed:eb:dd:1a:eb:e4:b7:33:f4:8d:6b:ca:
23:f6:52:5c:f6:a3:ac:93:2b:67:c3:3d:e7:74:33:d1:29:12:
79:d3:af:95:53:99:93:1f:58:4e:b4:64:8e:da:b3:33:bb:c9:
08:bd:7b:65:09:71:4b:8f:94:92:62:36:84:b4:23:23:fe:04:
62:55:1e:ef:19:65:66:c1:6e:e0:33:67:3d:6d:a0:4d:06:b2:
bf:79:e7:be:7f:f7:02:c7:84:ef:1d:06:2e:8f:a2:3c:29:d2:
58:b4:a0:ca:8e:fe:3e:79:27:4a:7a:b1:0f:d7:fd:c1:40:91:
49:3b:83:39:d7:6a:7c:ca:95:81:5d:f7:8c:e1:fc:ae:d0:b0:
a3:5b:02:a3:a3:17:6c:1e:70:73:08:d5:c5:56:27:a3:bd:f3:
62:f9:1d:1b:47:51:9e:da:6d:54:9f:47:6f:b5:b0:fc:66:22:
b3:2d:be:d6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDEyMEQxMTAvBgNVBAUTKEI2ODU4Q0U4OTkxMTVGMkM1NjFDNzY2NUVGOEJFMDY4
ODA2ODEwOUMwHhcNMjUwMTMwMjAzMTA5WhcNMjUwMjA2MjAzMTA5WjAYMRYwFAYD
VQQDEw02NzliZTE4ZS1jM2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5UIbWhDbYWpkrGi2sSZdkhIunkjnnmaJ/9bqvCXZ4fmKuV9ZUE4MjXgLswQ0
l/ZRXUsKvaDADf99A4rfeZBNouQ6Sf0/BdgCYVjg4N9EQ1KScjQ2IH8LmMQuth0C
8Bz41CR9We28INiMe2O3TcTYbgbyfrTLMkKEO9ckiI6NDlhrJUksTIahhS6PejKb
u7j6Yd+POL4hs7jB94qYLMErZnNun7Kfya6uI2yegdn93oeGLVpZ5u6TFqMq3GLk
1vODoH6EGRp3IVrZnx5QNoOeMnNDq/WsRBNMRFAZvGsd9/nwDzUaFnjCesabgjgI
jP2qbmSFBZW4oIQYcGkgln1a6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhJun36
p09dWovaeKpQx5oXi2AMMB8GA1UdIwQYMBaAFLaFjOiZEV8sVhx2Ze+L4GiAaBCc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIwRC81MUU4MEU5OEE2
RTExMUVBODA0MjQxNkFDNEY5QUUwMi90b1dNNkprUlh5eFdISFpsNzR2Z2FJQm9F
SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RvV002SmtSWHl4V0hIWmw3NHZnYUlCb0VKdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MTIwRC81MUU4MEU5OEE2RTExMUVBODA0MjQxNkFDNEY5QUUwMi90b1dNNkprUlh5
eFdISFpsNzR2Z2FJQm9FSncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQARJ2QLFdAMRo85YWlGF9+duD3LTzus8HTwlC2winRU/BXtfbzdXC/l
W5hynjoutOnORxKs6ljZx0CmYIhoZHtETt31Y6duU+Y+rJvJahbt690a6+S3M/SN
a8oj9lJc9qOskytnwz3ndDPRKRJ506+VU5mTH1hOtGSO2rMzu8kIvXtlCXFLj5SS
YjaEtCMj/gRiVR7vGWVmwW7gM2c9baBNBrK/eee+f/cCx4TvHQYuj6I8KdJYtKDK
jv4+eSdKerEP1/3BQJFJO4M512p8ypWBXfeM4fyu0LCjWwKjoxdsHnBzCNXFViej
vfNi+R0bR1Ge2m1Un0dvtbD8ZiKzLb7W
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:19:37 2025 by rpki-client