Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.mft
File: sTgy_KSTRJYjasOJSZjD3VE9fAk.mft (raw, json)
Hash identifier: VavWl9mxUfwGvx3uWL2WPUy+AeJj5quww4N0mH37Y7Y=
Subject key identifier: 79:AC:31:95:DE:08:88:EB:B6:A6:9F:F0:F0:5C:34:C1:1C:7C:5C:CC
Authority key identifier: B1:38:32:FC:A4:93:44:96:23:6A:C3:89:49:98:C3:DD:51:3D:7C:09
Certificate issuer: /CN=A91D4A16/serialNumber=B13832FCA4934496236AC3894998C3DD513D7C09
Certificate serial: 0163
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sTgy_KSTRJYjasOJSZjD3VE9fAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.mft
Manifest number: 015F
Signing time: Fri 31 Jan 2025 03:18:16 +0000
Manifest this update: Fri 31 Jan 2025 03:18:15 +0000
Manifest next update: Fri 07 Feb 2025 03:18:15 +0000
Files and hashes: 1: sTgy_KSTRJYjasOJSZjD3VE9fAk.crl (hash: BJHSTIUYnBwbFylQAZC7SJ/05RugbTl5gR5aI2sgcho=)
2: 61DBE422A88B11EFAF507987C4F9AE02.roa (hash: STHjjsnIAoIPHR0TFAUlDiXLQCeT5pB31DsweaU0WWA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355 (0x163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4A16/serialNumber=B13832FCA4934496236AC3894998C3DD513D7C09
Validity
Not Before: Jan 31 03:18:15 2025 GMT
Not After : Feb 7 03:18:15 2025 GMT
Subject: CN=679c40f7-3d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:66:34:47:b3:ba:02:45:10:ab:73:ed:8a:ff:
91:39:3d:3d:37:4e:f9:48:53:cf:b7:1f:3e:af:a6:
e1:25:bb:45:53:57:a0:10:1f:3a:9a:9d:ec:a7:fa:
08:78:ad:b7:ca:3f:86:93:3d:cc:59:29:72:d6:2a:
2a:87:76:b0:86:de:f0:83:0b:1e:eb:56:e9:8f:1b:
a7:3f:10:c3:5c:d8:f2:f8:f7:37:03:77:9d:43:9a:
15:ac:ad:f5:64:0a:82:42:83:b0:8a:4e:fd:5d:84:
9c:04:6d:63:b0:c1:9c:e7:b2:63:b9:64:6d:7b:73:
19:3e:ae:a2:62:48:6f:4c:58:fb:9b:1c:b2:a8:ef:
4b:56:31:24:69:09:ae:b4:95:43:06:75:e8:50:18:
82:8b:c1:8c:00:ad:78:64:5e:1e:17:a5:be:2f:a5:
2a:0e:41:67:ef:81:0b:1a:2e:67:08:bd:08:f4:34:
76:8d:de:cf:a2:13:ef:0f:db:7b:bf:76:b1:74:bd:
64:3d:69:30:ea:fa:a6:72:94:3d:c3:80:2a:9c:c9:
75:c7:7e:ea:49:c2:7d:7c:ac:c4:05:7b:62:23:a4:
a5:a1:bd:88:3f:da:88:49:91:91:6d:69:e7:5a:08:
5d:76:41:b8:04:6a:f0:17:0c:4d:ae:5b:d4:5e:79:
f1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:AC:31:95:DE:08:88:EB:B6:A6:9F:F0:F0:5C:34:C1:1C:7C:5C:CC
X509v3 Authority Key Identifier:
keyid:B1:38:32:FC:A4:93:44:96:23:6A:C3:89:49:98:C3:DD:51:3D:7C:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sTgy_KSTRJYjasOJSZjD3VE9fAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:b0:11:6a:1d:0b:13:90:7e:0f:31:77:6f:de:12:70:00:6d:
be:15:44:56:53:97:02:fa:e3:44:a9:e6:2e:aa:97:1d:cc:06:
36:7a:30:a3:42:38:01:23:94:a4:fe:d4:fa:8c:c3:c6:a9:60:
1c:86:01:0f:88:49:01:eb:5e:2f:cb:1a:0b:92:af:eb:bf:9c:
38:05:8a:cb:c5:45:6e:ec:b3:4a:35:30:8c:a3:64:b8:fc:42:
94:29:f8:cd:98:68:ac:72:bb:a1:ba:ff:e5:dd:0a:a3:0b:71:
58:e7:69:75:d5:12:89:f8:7f:cc:33:02:be:d7:2c:96:42:e3:
82:c4:06:db:2c:38:4c:fc:47:8f:94:50:0d:67:90:bf:f4:e9:
d3:bf:c2:b3:57:d6:44:05:35:9b:76:40:05:d0:c4:83:42:a6:
ff:c3:1c:ac:65:d0:5f:b6:df:22:53:dc:0c:01:a2:70:34:d6:
3a:1b:e0:2f:ed:59:ee:98:4c:3c:47:f0:73:fa:d0:ba:ef:b6:
b3:99:a0:bc:3b:eb:f5:f1:d9:00:1b:ec:7d:8e:d4:f8:af:b1:
35:e5:b1:2f:36:42:4d:42:74:54:13:dd:26:c1:96:27:85:0d:
4d:50:10:0a:cf:97:6e:32:8f:af:0c:01:dc:64:9b:4e:4e:59:
d3:ff:fe:2d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDRBMTYxMTAvBgNVBAUTKEIxMzgzMkZDQTQ5MzQ0OTYyMzZBQzM4OTQ5OThDM0RE
NTEzRDdDMDkwHhcNMjUwMTMxMDMxODE1WhcNMjUwMjA3MDMxODE1WjAYMRYwFAYD
VQQDEw02NzljNDBmNy0zZDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5WY0R7O6AkUQq3Ptiv+ROT09N075SFPPtx8+r6bhJbtFU1egEB86mp3sp/oI
eK23yj+Gkz3MWSly1ioqh3awht7wgwse61bpjxunPxDDXNjy+Pc3A3edQ5oVrK31
ZAqCQoOwik79XYScBG1jsMGc57JjuWRte3MZPq6iYkhvTFj7mxyyqO9LVjEkaQmu
tJVDBnXoUBiCi8GMAK14ZF4eF6W+L6UqDkFn74ELGi5nCL0I9DR2jd7PohPvD9t7
v3axdL1kPWkw6vqmcpQ9w4AqnMl1x37qScJ9fKzEBXtiI6Slob2IP9qISZGRbWnn
WghddkG4BGrwFwxNrlvUXnnxoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmsMZXe
CIjrtqaf8PBcNMEcfFzMMB8GA1UdIwQYMBaAFLE4Mvykk0SWI2rDiUmYw91RPXwJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEExNi9CQUU3RUZGRUND
NTMxMUVEODFGNEM1MTVDNEY5QUUwMi9zVGd5X0tTVFJKWWphc09KU1pqRDNWRTlm
QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NUZ3lfS1NUUkpZamFzT0pTWmpEM1ZFOWZBay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NEExNi9CQUU3RUZGRUNDNTMxMUVEODFGNEM1MTVDNEY5QUUwMi9zVGd5X0tTVFJK
WWphc09KU1pqRDNWRTlmQWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC9sBFqHQsTkH4PMXdv3hJwAG2+FURWU5cC+uNEqeYuqpcdzAY2ejCj
QjgBI5Sk/tT6jMPGqWAchgEPiEkB614vyxoLkq/rv5w4BYrLxUVu7LNKNTCMo2S4
/EKUKfjNmGiscruhuv/l3QqjC3FY52l11RKJ+H/MMwK+1yyWQuOCxAbbLDhM/EeP
lFANZ5C/9OnTv8KzV9ZEBTWbdkAF0MSDQqb/wxysZdBftt8iU9wMAaJwNNY6G+Av
7VnumEw8R/Bz+tC677azmaC8O+v18dkAG+x9jtT4r7E15bEvNkJNQnRUE90mwZYn
hQ1NUBAKz5duMo+vDAHcZJtOTlnT//4t
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:54:01 2025 by rpki-client