Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft
File: Gu-1HeyOsHlip15FnOIQp0ABBPs.mft (raw, json)
Hash identifier: cqrtvhtPdwESGbeuJ+9Hq6hfe/d2G8ILBdr9hv6OPbE=
Subject key identifier: C7:54:B1:95:5B:A7:36:DE:35:48:97:DC:72:E0:2B:24:BC:D8:09:F3
Authority key identifier: 1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB
Certificate issuer: /CN=A91D3DAE/serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB
Certificate serial: 3458
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft
Manifest number: 344F
Signing time: Fri 31 Jan 2025 14:42:42 +0000
Manifest this update: Fri 31 Jan 2025 14:42:42 +0000
Manifest next update: Fri 07 Feb 2025 14:42:42 +0000
Files and hashes: 1: Gu-1HeyOsHlip15FnOIQp0ABBPs.crl (hash: 5KqzTbOjce/6CreMTnj0UpFEo0hwFihNafwUqxRfoO4=)
2: 232E8BFEFEA411EDBC673B4BC4F9AE02.roa (hash: 2R/JIm+dy3J9QEhBrc+vl6TnBvASBKCKIARBdM+hz20=)
3: 229F27ACFEA411EDBC673B4BC4F9AE02.roa (hash: GofCRUflvDRo1yALF5A3qEW6x0Z/FLZHjkmP8REXKAE=)
4: 220E32CEFEA411EDBC673B4BC4F9AE02.roa (hash: /ZfamkrcyVX98fX+BafwQ7UNJGR9Hte2HxcSkHXGZs8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13400 (0x3458)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3DAE/serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB
Validity
Not Before: Jan 31 14:42:42 2025 GMT
Not After : Feb 7 14:42:42 2025 GMT
Subject: CN=679ce162-0b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:df:5b:bb:bd:14:0e:96:f2:a2:54:aa:65:80:
88:86:ed:36:0a:3f:cc:89:89:32:21:52:06:14:03:
10:ce:85:44:b4:b6:63:2c:70:a2:62:e6:65:a6:86:
f6:37:1d:15:49:77:38:8e:07:07:d8:b9:da:a9:d4:
2f:ea:2a:64:80:77:cb:90:9e:c4:5c:03:86:af:f1:
92:7c:03:65:34:9e:fc:f4:24:c0:fb:9b:c8:74:4f:
ec:21:9d:16:a4:da:b5:03:63:9f:a9:71:6f:aa:d4:
d6:8e:09:73:28:c1:98:96:79:96:d1:93:cf:2d:ab:
26:8d:17:81:2b:e7:b0:40:f6:51:a0:c4:47:ba:df:
46:97:dd:85:08:12:77:7f:28:88:07:e6:86:17:1a:
7f:31:2c:d2:1a:9e:d7:3d:34:4b:d7:0a:9a:65:a4:
86:66:61:69:26:27:c4:f8:d1:df:da:e3:66:77:e8:
29:61:74:84:79:3e:8a:4a:5c:b8:af:4b:7d:80:b0:
95:b9:c1:7d:61:2b:f7:a2:c7:3b:91:59:75:03:4a:
98:d4:ff:04:20:eb:83:34:1c:77:5a:05:27:49:0e:
8f:0a:bb:7d:f3:c6:8e:5b:e3:cd:0a:2e:d8:65:82:
38:57:21:60:32:b3:01:c9:3f:71:48:b1:d2:ac:a3:
0a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:54:B1:95:5B:A7:36:DE:35:48:97:DC:72:E0:2B:24:BC:D8:09:F3
X509v3 Authority Key Identifier:
keyid:1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:65:21:5a:d5:81:f6:73:7e:c4:9c:dd:87:aa:04:7b:33:40:
a6:01:01:ca:f3:c5:88:c0:32:60:46:7b:94:7f:53:cf:3e:e5:
51:63:38:c1:29:4f:fa:07:64:20:49:6d:c0:a8:cf:93:14:ba:
10:25:49:72:f0:21:0f:c0:02:23:9e:8d:b8:95:11:b5:84:a2:
2a:82:08:03:5d:a2:ba:58:89:76:e4:5a:bd:da:87:9f:0b:78:
ce:b6:cc:4e:d4:4e:ad:1e:5f:ad:36:a5:84:66:75:9b:18:dd:
8b:be:cd:3b:e6:b8:f2:27:55:32:b9:9d:e1:20:05:85:59:bf:
3d:6d:1c:71:89:ff:18:e9:12:6b:72:a1:28:12:57:5d:03:18:
cd:24:f4:65:4d:2e:bd:8e:52:41:c6:b4:ad:3d:0a:b8:64:74:
13:fb:5b:bb:e9:8a:e5:71:35:3b:6d:9c:62:5c:f2:69:55:98:
68:f6:83:25:8d:91:08:a3:bd:6e:05:67:ec:e5:7a:87:ce:6d:
a9:7c:a6:84:65:3e:76:6c:8f:96:71:01:40:f6:76:50:fd:86:
b5:04:5f:b2:4f:17:ce:d2:51:35:4f:fd:be:97:bf:28:ad:a8:
63:0d:74:25:d7:c0:ab:1e:24:a4:bb:c3:98:9a:cf:2f:fa:95:
10:6e:02:95
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDNEQUUxMTAvBgNVBAUTKDFBRUZCNTFERUM4RUIwNzk2MkE3NUU0NTlDRTIxMEE3
NDAwMTA0RkIwHhcNMjUwMTMxMTQ0MjQyWhcNMjUwMjA3MTQ0MjQyWjAYMRYwFAYD
VQQDEw02NzljZTE2Mi0wYjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyt9bu70UDpbyolSqZYCIhu02Cj/MiYkyIVIGFAMQzoVEtLZjLHCiYuZlpob2
Nx0VSXc4jgcH2LnaqdQv6ipkgHfLkJ7EXAOGr/GSfANlNJ789CTA+5vIdE/sIZ0W
pNq1A2OfqXFvqtTWjglzKMGYlnmW0ZPPLasmjReBK+ewQPZRoMRHut9Gl92FCBJ3
fyiIB+aGFxp/MSzSGp7XPTRL1wqaZaSGZmFpJifE+NHf2uNmd+gpYXSEeT6KSly4
r0t9gLCVucF9YSv3osc7kVl1A0qY1P8EIOuDNBx3WgUnSQ6PCrt988aOW+PNCi7Y
ZYI4VyFgMrMByT9xSLHSrKMKCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdUsZVb
pzbeNUiX3HLgKyS82AnzMB8GA1UdIwQYMBaAFBrvtR3sjrB5YqdeRZziEKdAAQT7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0RBRS9GRUZCQ0M4RTFE
OEYxMUUyQjU0QTdERUYwOEIwMkNEMi9HdS0xSGV5T3NIbGlwMTVGbk9JUXAwQUJC
UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0d1LTFIZXlPc0hsaXAxNUZuT0lRcDBBQkJQcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
M0RBRS9GRUZCQ0M4RTFEOEYxMUUyQjU0QTdERUYwOEIwMkNEMi9HdS0xSGV5T3NI
bGlwMTVGbk9JUXAwQUJCUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAQZSFa1YH2c37EnN2HqgR7M0CmAQHK88WIwDJgRnuUf1PPPuVRYzjB
KU/6B2QgSW3AqM+TFLoQJUly8CEPwAIjno24lRG1hKIqgggDXaK6WIl25Fq92oef
C3jOtsxO1E6tHl+tNqWEZnWbGN2Lvs075rjyJ1UyuZ3hIAWFWb89bRxxif8Y6RJr
cqEoElddAxjNJPRlTS69jlJBxrStPQq4ZHQT+1u76YrlcTU7bZxiXPJpVZho9oMl
jZEIo71uBWfs5XqHzm2pfKaEZT52bI+WcQFA9nZQ/Ya1BF+yTxfO0lE1T/2+l78o
rahjDXQl18CrHiSku8OYms8v+pUQbgKV
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:47:55 2025 by rpki-client