Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
File: LnKDqP3Vzws9n6or6XQogZiRk6U.mft (raw, json)
Hash identifier: ukVWaktKUyuCMZaFmd+4yURzi61/aHc9v1zsCIaQPRg=
Subject key identifier: 6A:1C:E2:BF:BD:21:98:90:12:26:E8:8C:18:35:2C:CB:F1:BC:35:21
Authority key identifier: 2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5
Certificate issuer: /CN=A91DFADF/serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5
Certificate serial: 0974
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
Manifest number: 0963
Signing time: Thu 30 Jan 2025 20:17:54 +0000
Manifest this update: Thu 30 Jan 2025 20:17:53 +0000
Manifest next update: Thu 06 Feb 2025 20:17:53 +0000
Files and hashes: 1: LnKDqP3Vzws9n6or6XQogZiRk6U.crl (hash: dl3YiffQhi1Rd4uQkcjADmdxNoyGkBiN3d9gHfyJA2E=)
2: 651384A6766811EF96E4115EC4F9AE02.roa (hash: p8tYT8YIzrMYfS8FEgPfOhyzQ3A1i1G+CgkjUdJPswc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2420 (0x974)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFADF/serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5
Validity
Not Before: Jan 30 20:17:53 2025 GMT
Not After : Feb 6 20:17:53 2025 GMT
Subject: CN=679bde71-4a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:65:44:3b:70:3d:0e:c5:9d:3b:96:df:17:f2:
58:5e:60:35:fb:76:b4:d9:cb:d4:3a:7a:0d:36:4a:
d7:86:d8:ba:a7:fe:74:a2:99:95:86:62:ef:8f:78:
60:74:5e:4f:6c:8f:fc:57:d9:59:ca:eb:3f:22:47:
04:62:4b:67:46:ad:17:fc:b3:3a:16:f0:a0:67:9c:
de:3c:ea:cd:fc:b4:33:c3:a4:3e:df:cc:34:5d:85:
94:70:3d:f1:fc:35:ef:da:35:51:ff:39:b4:a6:d0:
33:88:dc:5c:05:89:9a:24:e2:b4:99:a0:f9:1b:83:
68:aa:8c:5d:3e:aa:52:7a:f1:6a:ba:30:33:ae:6e:
ba:6c:cf:fa:d2:4d:24:f3:d8:2e:97:d2:b7:39:f1:
ac:db:b0:66:eb:7d:f8:63:05:7b:5a:70:66:d3:3f:
61:1c:17:e6:6c:48:96:28:38:25:2e:e4:f2:d2:49:
22:f1:43:f5:e5:81:56:13:89:91:20:73:05:7e:92:
b1:f8:2b:72:41:c0:b8:9e:ff:2b:66:02:d5:14:f7:
16:1b:e1:fd:13:54:e5:31:0f:41:9b:fd:d6:4a:f9:
8e:78:ac:c5:eb:c9:ef:fa:8a:97:3a:df:ea:5f:fa:
3a:1c:94:23:46:94:35:34:e2:1b:1a:46:ff:d7:a0:
b0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:1C:E2:BF:BD:21:98:90:12:26:E8:8C:18:35:2C:CB:F1:BC:35:21
X509v3 Authority Key Identifier:
keyid:2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:98:dd:96:eb:9a:31:b8:2b:1d:9f:c4:3a:9c:8a:1d:6f:2a:
60:d4:bb:7b:e9:3c:39:fd:5a:a0:7c:f1:69:53:3f:11:e5:9b:
49:76:ae:81:ae:29:09:9f:09:0e:fa:6f:0e:55:05:f4:78:07:
e8:3c:88:77:80:fa:6c:a0:a0:00:c2:95:06:2a:e2:28:40:2c:
89:44:2d:82:fb:a0:11:0f:fe:fe:d4:1f:ef:98:45:f9:84:34:
79:a9:f2:bd:e1:c9:55:66:50:fc:3f:71:48:aa:5c:ec:c2:97:
33:51:64:ac:5e:42:00:56:83:ca:82:d6:9f:27:c4:f2:c5:d4:
78:5c:a2:0e:03:a7:55:5e:17:a5:88:73:cd:e4:53:05:cf:81:
dd:12:c2:5f:07:84:b8:c5:a4:3f:81:5a:84:be:60:8a:43:79:
dc:0a:7f:a5:21:39:1c:b1:b2:fc:ea:4b:76:63:6a:ee:ac:ff:
4f:57:98:d7:b2:4b:58:af:78:85:77:95:be:b8:ed:24:fb:ed:
ea:a3:6a:c1:d2:6e:0e:58:4b:63:c8:13:62:df:a7:6a:9a:59:
b7:f2:a5:45:f5:fb:43:c7:4c:55:da:a7:4c:be:ff:cf:26:40:
12:78:a9:67:51:5f:0d:a2:41:08:de:6d:d5:78:a9:0f:6e:7e:
99:a6:f6:74
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REZBREYxMTAvBgNVBAUTKDJFNzI4M0E4RkRENUNGMEIzRDlGQUEyQkU5NzQyODgx
OTg5MTkzQTUwHhcNMjUwMTMwMjAxNzUzWhcNMjUwMjA2MjAxNzUzWjAYMRYwFAYD
VQQDEw02NzliZGU3MS00YTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7mVEO3A9DsWdO5bfF/JYXmA1+3a02cvUOnoNNkrXhti6p/50opmVhmLvj3hg
dF5PbI/8V9lZyus/IkcEYktnRq0X/LM6FvCgZ5zePOrN/LQzw6Q+38w0XYWUcD3x
/DXv2jVR/zm0ptAziNxcBYmaJOK0maD5G4NoqoxdPqpSevFqujAzrm66bM/60k0k
89gul9K3OfGs27Bm6334YwV7WnBm0z9hHBfmbEiWKDglLuTy0kki8UP15YFWE4mR
IHMFfpKx+CtyQcC4nv8rZgLVFPcWG+H9E1TlMQ9Bm/3WSvmOeKzF68nv+oqXOt/q
X/o6HJQjRpQ1NOIbGkb/16CwswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGoc4r+9
IZiQEibojBg1LMvxvDUhMB8GA1UdIwQYMBaAFC5yg6j91c8LPZ+qK+l0KIGYkZOl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkFERi81ODUzMjBERThC
RDgxMUVBOTVBQUVCODNDNEY5QUUwMi9MbktEcVAzVnp3czluNm9yNlhRb2daaVJr
NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xuS0RxUDNWendzOW42b3I2WFFvZ1ppUms2VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RkFERi81ODUzMjBERThCRDgxMUVBOTVBQUVCODNDNEY5QUUwMi9MbktEcVAzVnp3
czluNm9yNlhRb2daaVJrNlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCYmN2W65oxuCsdn8Q6nIodbypg1Lt76Tw5/VqgfPFpUz8R5ZtJdq6B
rikJnwkO+m8OVQX0eAfoPIh3gPpsoKAAwpUGKuIoQCyJRC2C+6ARD/7+1B/vmEX5
hDR5qfK94clVZlD8P3FIqlzswpczUWSsXkIAVoPKgtafJ8TyxdR4XKIOA6dVXhel
iHPN5FMFz4HdEsJfB4S4xaQ/gVqEvmCKQ3ncCn+lITkcsbL86kt2Y2rurP9PV5jX
sktYr3iFd5W+uO0k++3qo2rB0m4OWEtjyBNi36dqmlm38qVF9ftDx0xV2qdMvv/P
JkASeKlnUV8NokEI3m3VeKkPbn6ZpvZ0
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:07:12 2025 by rpki-client