Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft
File: 1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft (raw, json)
Hash identifier: Vy7QChvmhhzHmhSjpzHR8GzxGPFZ+aCz2W6ASh5tnek=
Subject key identifier: 68:21:26:84:24:89:E3:BE:0C:90:88:75:DB:85:88:88:0B:20:92:E3
Authority key identifier: D5:0D:11:83:73:08:AB:1F:15:A7:5F:35:16:43:FB:7F:C0:14:85:4C
Certificate issuer: /CN=A91DB916/serialNumber=D50D11837308AB1F15A75F351643FB7FC014854C
Certificate serial: F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft
Manifest number: EC
Signing time: Fri 31 Jan 2025 04:30:32 +0000
Manifest this update: Fri 31 Jan 2025 04:30:31 +0000
Manifest next update: Fri 07 Feb 2025 04:30:31 +0000
Files and hashes: 1: 1Q0Rg3MIqx8Vp181FkP7f8AUhUw.crl (hash: FBdN0UY73vtSdAh+AsxSHj8GuuxDTYobw5QL5a9udSY=)
2: 18066BD682CD11EE82EA6452C4F9AE02.roa (hash: Qq2SAGpjgK4uluR309YS8e5suVCymWeDT3qQa1R/qak=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB916/serialNumber=D50D11837308AB1F15A75F351643FB7FC014854C
Validity
Not Before: Jan 31 04:30:31 2025 GMT
Not After : Feb 7 04:30:31 2025 GMT
Subject: CN=679c51e8-abad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fd:f1:f6:8b:a0:a0:41:38:30:a7:5e:5c:96:
61:bb:75:ba:de:1f:71:7e:17:d9:c2:9c:65:ec:ce:
73:2a:3a:6b:0b:c9:19:cc:ca:79:62:03:e2:ce:3c:
40:c9:90:1a:d4:1c:d0:0a:4e:a2:6e:2e:83:45:eb:
89:72:14:16:f7:5b:4e:42:46:8b:f7:7f:c3:f3:59:
f6:7f:05:a7:1d:01:a3:1f:ff:6b:cd:e6:f3:cd:7a:
08:31:e9:b8:b1:b4:79:92:fe:7b:f0:81:0c:1c:81:
c0:77:bf:cf:26:e9:89:91:d5:3a:ab:38:74:06:8f:
fd:6b:29:f2:15:55:c2:f2:5d:0b:9f:45:b7:a3:f8:
f5:28:c0:c1:68:f9:95:38:f9:c6:f8:0d:71:08:f6:
f4:b1:82:a4:8d:06:b9:1b:e6:4e:e3:c3:86:7e:e4:
5e:6e:49:a0:e2:61:ec:a7:e9:6a:70:b0:b1:79:e2:
e9:24:eb:5c:7e:b7:cd:b8:5c:ae:f3:02:d6:25:26:
6d:7a:1b:b9:3e:78:d3:62:4e:39:35:17:3d:03:3e:
96:3a:9b:55:64:32:d1:65:4b:23:d7:0a:0a:5f:2c:
ee:bd:36:8a:46:6c:8d:d5:d1:cb:94:7b:15:5c:ea:
c5:83:49:e0:a9:be:48:42:0c:91:b9:c6:2f:34:bb:
0d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:21:26:84:24:89:E3:BE:0C:90:88:75:DB:85:88:88:0B:20:92:E3
X509v3 Authority Key Identifier:
keyid:D5:0D:11:83:73:08:AB:1F:15:A7:5F:35:16:43:FB:7F:C0:14:85:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:2f:da:40:0d:3d:04:21:b3:2d:ab:23:06:c0:af:0e:3c:da:
37:ac:ad:9e:81:e6:6a:c4:0d:f6:4e:00:4d:b6:a6:d8:21:dd:
65:d6:e8:fc:3d:9e:4f:57:bc:ff:88:bc:81:cf:c5:76:6c:92:
2a:10:a6:34:d7:92:3d:ce:c7:4e:c9:e9:02:3f:1a:f1:61:6a:
9c:fb:c7:ac:5a:96:a2:dc:e0:42:67:a5:5c:0e:02:25:8e:c9:
2e:08:0c:e5:81:3f:ad:b4:53:39:06:1d:ac:1a:9e:ef:46:f7:
38:a3:98:42:2c:46:07:d7:8f:6f:b8:ec:6c:8f:6d:85:dd:f3:
c2:2a:53:08:77:73:7d:94:7c:90:d7:16:53:39:b3:46:0d:2f:
c4:14:a0:7b:56:b4:55:b6:46:cf:ee:04:a6:25:ae:18:c3:9b:
b3:11:9d:ef:8f:11:47:04:a9:ff:8f:f6:62:ca:ff:04:73:bf:
a3:f9:99:00:05:4f:25:e3:e1:9e:0f:ae:d7:f7:ba:c6:a8:c9:
e0:7e:55:4e:28:74:bb:ec:73:5b:9a:d5:fb:ff:18:c6:fb:a9:
a7:71:c1:46:72:b9:da:7b:b9:bc:09:c8:cb:52:2a:dd:6f:5a:
fc:8b:bd:bd:a7:c8:bb:49:89:43:a2:46:10:35:22:bf:2c:cb:
58:1e:59:4e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REI5MTYxMTAvBgNVBAUTKEQ1MEQxMTgzNzMwOEFCMUYxNUE3NUYzNTE2NDNGQjdG
QzAxNDg1NEMwHhcNMjUwMTMxMDQzMDMxWhcNMjUwMjA3MDQzMDMxWjAYMRYwFAYD
VQQDEw02NzljNTFlOC1hYmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwP3x9ougoEE4MKdeXJZhu3W63h9xfhfZwpxl7M5zKjprC8kZzMp5YgPizjxA
yZAa1BzQCk6ibi6DReuJchQW91tOQkaL93/D81n2fwWnHQGjH/9rzebzzXoIMem4
sbR5kv578IEMHIHAd7/PJumJkdU6qzh0Bo/9aynyFVXC8l0Ln0W3o/j1KMDBaPmV
OPnG+A1xCPb0sYKkjQa5G+ZO48OGfuRebkmg4mHsp+lqcLCxeeLpJOtcfrfNuFyu
8wLWJSZtehu5PnjTYk45NRc9Az6WOptVZDLRZUsj1woKXyzuvTaKRmyN1dHLlHsV
XOrFg0ngqb5IQgyRucYvNLsN9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGghJoQk
ieO+DJCIdduFiIgLIJLjMB8GA1UdIwQYMBaAFNUNEYNzCKsfFadfNRZD+3/AFIVM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjkxNi83NEVDMzk3RTdE
M0QxMUVFOUFGNzM5MUFDNEY5QUUwMi8xUTBSZzNNSXF4OFZwMTgxRmtQN2Y4QVVo
VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFRMFJnM01JcXg4VnAxODFGa1A3ZjhBVWhVdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QjkxNi83NEVDMzk3RTdEM0QxMUVFOUFGNzM5MUFDNEY5QUUwMi8xUTBSZzNNSXF4
OFZwMTgxRmtQN2Y4QVVoVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAmL9pADT0EIbMtqyMGwK8OPNo3rK2egeZqxA32TgBNtqbYId1l1uj8
PZ5PV7z/iLyBz8V2bJIqEKY015I9zsdOyekCPxrxYWqc+8esWpai3OBCZ6VcDgIl
jskuCAzlgT+ttFM5Bh2sGp7vRvc4o5hCLEYH149vuOxsj22F3fPCKlMId3N9lHyQ
1xZTObNGDS/EFKB7VrRVtkbP7gSmJa4Yw5uzEZ3vjxFHBKn/j/Ziyv8Ec7+j+ZkA
BU8l4+GeD67X97rGqMngflVOKHS77HNbmtX7/xjG+6mnccFGcrnae7m8CcjLUird
b1r8i729p8i7SYlDokYQNSK/LMtYHllO
-----END CERTIFICATE-----
Generated at Fri Apr 25 17:01:03 2025 by rpki-client