Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft
File: 4ed5yzH_53MaM7Xrfq_GsqvbROM.mft (raw, json)
Hash identifier: nDs5IG35merR1Rb5V4w10rapq2c3+YsJjyt/zqpwR64=
Subject key identifier: C5:47:11:E1:67:27:D2:7B:BC:BE:F2:85:BC:C7:89:9D:77:54:CD:73
Authority key identifier: E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3
Certificate issuer: /CN=A91D3737/serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3
Certificate serial: 0124
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft
Manifest number: 011C
Signing time: Fri 31 Jan 2025 03:56:54 +0000
Manifest this update: Fri 31 Jan 2025 03:56:54 +0000
Manifest next update: Fri 07 Feb 2025 03:56:54 +0000
Files and hashes: 1: 4ed5yzH_53MaM7Xrfq_GsqvbROM.crl (hash: RhjgGA/Tuo1KAbXapp/JRzOwqBlG0tw3yIvfCAowMF8=)
2: 9E6C93C6372311EEACE5BF61C4F9AE02.roa (hash: TQNp4VPkd2Y3kuSHIh/mgixwhnfBshqTtBcaPCauLtM=)
3: 9F1B80CA372311EEACE5BF61C4F9AE02.roa (hash: GR3/5CWBDLCFuFXDR1pBqo7ZS4ZffgNTqP5rw3l7jgE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292 (0x124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3737/serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3
Validity
Not Before: Jan 31 03:56:54 2025 GMT
Not After : Feb 7 03:56:54 2025 GMT
Subject: CN=679c4a06-a295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:71:0e:70:77:fa:45:d2:fd:06:d7:22:8f:9a:
20:91:93:b6:39:d9:43:aa:0e:1b:2f:61:63:a6:a6:
cd:53:85:a7:6c:7d:52:7c:e7:23:e5:74:08:24:a0:
f0:b5:0e:0b:32:89:86:97:47:0d:6b:14:18:56:93:
34:3e:a3:64:89:bb:1b:0e:7d:cf:2f:b0:68:2d:28:
32:56:ba:1b:5e:5d:ff:8b:43:f5:b3:39:b0:5d:89:
30:d9:7a:15:bd:e6:22:5c:c9:1b:9f:02:65:49:df:
be:c8:d2:9e:5d:53:6b:3f:5c:b6:f2:5c:f1:18:2a:
1d:c9:d3:67:ae:9e:b2:89:28:88:ad:74:84:11:37:
52:e5:04:9d:93:d0:02:51:85:0d:ea:9a:c4:cf:8c:
f9:d8:d1:fd:fb:4d:f7:ce:70:fc:01:bf:6d:e3:e6:
6b:3b:6f:c1:0b:fa:33:26:1c:fa:c5:28:86:eb:1a:
c5:63:8c:72:57:36:8b:57:55:f3:21:24:e2:03:3f:
70:1d:e3:57:7e:e5:f7:cd:c5:e8:5b:3a:b0:b9:5e:
e6:70:c4:c5:bc:38:00:82:84:47:2f:7c:39:53:e8:
2d:35:51:1b:5e:79:58:70:b6:23:b8:8a:df:81:6f:
32:39:78:9c:48:db:dd:ff:72:36:3c:a8:a9:35:7a:
fe:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:47:11:E1:67:27:D2:7B:BC:BE:F2:85:BC:C7:89:9D:77:54:CD:73
X509v3 Authority Key Identifier:
keyid:E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:67:9e:9f:dd:ff:e9:3f:18:99:34:c0:a4:3b:c2:4f:09:00:
6b:f5:52:ba:f0:74:80:c0:97:c8:98:a9:bc:3a:80:d9:84:de:
13:2f:37:84:45:fc:3e:3b:ca:21:75:33:aa:9d:64:cb:4a:e4:
8b:a4:fb:d1:80:96:2c:67:66:83:2c:58:87:3c:30:f1:95:a3:
5f:db:65:a1:8f:2c:86:ff:3c:39:d3:e0:98:69:80:3c:3b:11:
ff:c7:03:de:d1:a8:21:4a:88:fc:5f:39:06:c5:b5:eb:06:47:
ee:d0:59:73:65:ec:33:3b:c8:57:5c:3e:b0:0c:72:2a:fe:74:
ce:fd:17:18:d4:76:ce:62:d4:54:a6:b4:84:19:72:ba:40:3e:
b8:a5:0d:dd:2c:ec:a0:bf:69:03:a5:0c:44:b3:f2:1d:83:1d:
c0:5e:60:e2:4a:ff:28:9e:86:88:47:33:d2:aa:4e:eb:19:91:
2c:8c:c7:6b:f8:51:c8:f0:47:a4:38:a2:dd:32:16:53:a2:a5:
fe:7b:90:1c:bd:d1:07:09:1a:a3:f3:6a:35:97:49:85:4e:46:
86:6d:b6:3d:4f:09:1e:5c:34:de:e1:42:4f:d0:91:01:eb:ad:
de:ac:9a:84:65:93:a2:8c:8b:1c:46:f9:4f:1c:ad:38:97:33:
4b:d3:58:4c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDM3MzcxMTAvBgNVBAUTKEUxRTc3OUNCMzFGRkU3NzMxQTMzQjVFQjdFQUZDNkIy
QUJEQjQ0RTMwHhcNMjUwMTMxMDM1NjU0WhcNMjUwMjA3MDM1NjU0WjAYMRYwFAYD
VQQDEw02NzljNGEwNi1hMjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4XEOcHf6RdL9Btcij5ogkZO2OdlDqg4bL2FjpqbNU4WnbH1SfOcj5XQIJKDw
tQ4LMomGl0cNaxQYVpM0PqNkibsbDn3PL7BoLSgyVrobXl3/i0P1szmwXYkw2XoV
veYiXMkbnwJlSd++yNKeXVNrP1y28lzxGCodydNnrp6yiSiIrXSEETdS5QSdk9AC
UYUN6prEz4z52NH9+033znD8Ab9t4+ZrO2/BC/ozJhz6xSiG6xrFY4xyVzaLV1Xz
ISTiAz9wHeNXfuX3zcXoWzqwuV7mcMTFvDgAgoRHL3w5U+gtNVEbXnlYcLYjuIrf
gW8yOXicSNvd/3I2PKipNXr+PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMVHEeFn
J9J7vL7yhbzHiZ13VM1zMB8GA1UdIwQYMBaAFOHnecsx/+dzGjO1636vxrKr20Tj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzczNy84Mjk0MzYzRTMz
NTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUzTWFNN1hyZnFfR3NxdmJS
T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRlZDV5ekhfNTNNYU03WHJmcV9Hc3F2YlJPTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MzczNy84Mjk0MzYzRTMzNTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUz
TWFNN1hyZnFfR3NxdmJST00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBFZ56f3f/pPxiZNMCkO8JPCQBr9VK68HSAwJfImKm8OoDZhN4TLzeE
Rfw+O8ohdTOqnWTLSuSLpPvRgJYsZ2aDLFiHPDDxlaNf22WhjyyG/zw50+CYaYA8
OxH/xwPe0aghSoj8XzkGxbXrBkfu0FlzZewzO8hXXD6wDHIq/nTO/RcY1HbOYtRU
prSEGXK6QD64pQ3dLOygv2kDpQxEs/Idgx3AXmDiSv8onoaIRzPSqk7rGZEsjMdr
+FHI8EekOKLdMhZToqX+e5AcvdEHCRqj82o1l0mFTkaGbbY9TwkeXDTe4UJP0JEB
663erJqEZZOijIscRvlPHK04lzNL01hM
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:22 2025 by rpki-client