Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2F2C/FFB761FA967811EA840F0029C4F9AE02/PDml0ZGM9lqyVjMi8PXxQwmme48.mft
File: PDml0ZGM9lqyVjMi8PXxQwmme48.mft (raw, json)
Hash identifier: HrfDZjejExMB2IaA3rJhDAs4ZhFJWfk/mSYTCiXjSk0=
Subject key identifier: 0F:B6:C1:F1:ED:3E:16:1C:70:E2:19:CE:23:F5:63:ED:FD:E5:5D:1E
Authority key identifier: 3C:39:A5:D1:91:8C:F6:5A:B2:56:33:22:F0:F5:F1:43:09:A6:7B:8F
Certificate issuer: /CN=A91E2F2C/serialNumber=3C39A5D1918CF65AB2563322F0F5F14309A67B8F
Certificate serial: 0946
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDml0ZGM9lqyVjMi8PXxQwmme48.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2F2C/FFB761FA967811EA840F0029C4F9AE02/PDml0ZGM9lqyVjMi8PXxQwmme48.mft
Manifest number: 0935
Signing time: Thu 30 Jan 2025 20:23:55 +0000
Manifest this update: Thu 30 Jan 2025 20:23:55 +0000
Manifest next update: Thu 06 Feb 2025 20:23:55 +0000
Files and hashes: 1: PDml0ZGM9lqyVjMi8PXxQwmme48.crl (hash: 094quK9vgaf5Mydrj4tggMVeZJGvqsBAGPk14oo5OMw=)
2: DE07328A778911ECBD9C7748C4F9AE02.roa (hash: dv7m/vWVCsxj8ZbnKigzGyA9Di8bR9HnPMOcVlR8lHI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2374 (0x946)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2F2C/serialNumber=3C39A5D1918CF65AB2563322F0F5F14309A67B8F
Validity
Not Before: Jan 30 20:23:55 2025 GMT
Not After : Feb 6 20:23:55 2025 GMT
Subject: CN=679bdfdb-48c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:42:84:31:59:47:b3:d0:4c:3b:b5:fa:d4:8f:
f1:9b:b6:bf:e6:d5:1e:f6:95:f3:0d:b8:08:e8:fa:
69:9a:b6:42:e0:4b:60:99:a7:94:dd:36:15:4c:4b:
99:be:7e:2a:f9:e1:d9:14:fd:95:d8:4b:f5:fa:75:
5d:51:00:cd:2c:bf:6a:57:01:ee:16:1d:29:72:a0:
4e:50:07:48:1f:ad:13:ca:db:b2:20:e4:35:2b:27:
0f:cb:c9:8b:d5:ae:d5:6f:22:5a:8b:91:52:4d:5b:
0c:dd:22:1a:0c:87:b1:5f:c7:ab:91:3d:b1:26:b2:
16:c2:5a:f9:ee:59:cf:23:35:a0:25:29:4c:d5:62:
4f:0f:15:2b:c7:f5:69:56:13:7f:ae:49:50:aa:d7:
e1:85:c1:f0:4c:c6:b2:18:21:45:b9:e3:0b:86:38:
3f:82:55:08:ac:15:13:3b:81:1a:bd:0b:1c:2f:e0:
49:ff:20:7b:71:f9:e0:fb:18:04:4c:3a:4d:8c:69:
bc:5e:67:b8:35:54:3d:de:b9:c6:72:6d:e2:33:ea:
31:e6:b2:cc:77:ab:39:8a:31:24:36:0c:c0:15:88:
ec:85:19:2b:b9:05:24:a2:0e:1b:17:c6:e2:e5:79:
9c:08:ab:2c:70:90:5c:ad:dd:18:08:fc:4c:b0:02:
56:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B6:C1:F1:ED:3E:16:1C:70:E2:19:CE:23:F5:63:ED:FD:E5:5D:1E
X509v3 Authority Key Identifier:
keyid:3C:39:A5:D1:91:8C:F6:5A:B2:56:33:22:F0:F5:F1:43:09:A6:7B:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2F2C/FFB761FA967811EA840F0029C4F9AE02/PDml0ZGM9lqyVjMi8PXxQwmme48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDml0ZGM9lqyVjMi8PXxQwmme48.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2F2C/FFB761FA967811EA840F0029C4F9AE02/PDml0ZGM9lqyVjMi8PXxQwmme48.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:8b:d9:87:51:29:89:4d:d4:7c:89:69:77:04:eb:06:50:29:
0b:06:3f:ba:8f:40:4e:ef:a5:3d:4e:38:4a:bd:28:8a:4b:c9:
e4:fc:15:ed:01:c9:83:40:9f:c6:0e:4a:ca:1f:36:fb:82:5d:
48:53:0c:2d:8e:ef:ea:c4:ab:05:19:9d:7d:78:8d:e3:dd:a8:
fc:e5:06:4e:97:c2:41:06:43:e7:da:a5:d4:89:cb:d8:ae:ee:
81:78:ea:50:60:a0:99:bc:ba:c4:4e:27:6f:99:84:e5:9c:01:
ea:fd:6e:42:b1:90:77:36:53:93:b9:b6:05:2d:4f:b0:70:f7:
7b:b8:0f:43:60:2c:c5:d0:f1:d8:3c:8a:cf:57:46:e8:fa:21:
fb:f1:32:24:5a:9b:97:93:39:0b:b9:62:1a:f9:c1:dc:28:af:
a4:c9:cb:df:99:59:30:d4:9c:35:d8:af:83:13:b8:13:c5:4f:
9d:26:4d:ce:5a:35:58:12:05:6a:00:f5:fa:ab:bd:77:87:f1:
c6:76:1f:22:eb:77:1e:f7:e1:46:70:9f:ba:f8:e8:52:fd:0f:
9c:22:e1:1b:18:59:4d:d2:28:fb:25:e3:c2:17:40:43:45:7b:
e9:0e:d2:29:e0:90:20:2a:5e:fd:25:53:53:6d:42:ea:16:3f:
89:81:d7:2e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTJGMkMxMTAvBgNVBAUTKDNDMzlBNUQxOTE4Q0Y2NUFCMjU2MzMyMkYwRjVGMTQz
MDlBNjdCOEYwHhcNMjUwMTMwMjAyMzU1WhcNMjUwMjA2MjAyMzU1WjAYMRYwFAYD
VQQDEw02NzliZGZkYi00OGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz0KEMVlHs9BMO7X61I/xm7a/5tUe9pXzDbgI6PppmrZC4EtgmaeU3TYVTEuZ
vn4q+eHZFP2V2Ev1+nVdUQDNLL9qVwHuFh0pcqBOUAdIH60TytuyIOQ1KycPy8mL
1a7VbyJai5FSTVsM3SIaDIexX8erkT2xJrIWwlr57lnPIzWgJSlM1WJPDxUrx/Vp
VhN/rklQqtfhhcHwTMayGCFFueMLhjg/glUIrBUTO4EavQscL+BJ/yB7cfng+xgE
TDpNjGm8Xme4NVQ93rnGcm3iM+ox5rLMd6s5ijEkNgzAFYjshRkruQUkog4bF8bi
5XmcCKsscJBcrd0YCPxMsAJW9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA+2wfHt
PhYccOIZziP1Y+395V0eMB8GA1UdIwQYMBaAFDw5pdGRjPZaslYzIvD18UMJpnuP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkYyQy9GRkI3NjFGQTk2
NzgxMUVBODQwRjAwMjlDNEY5QUUwMi9QRG1sMFpHTTlscXlWak1pOFBYeFF3bW1l
NDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BEbWwwWkdNOWxxeVZqTWk4UFh4UXdtbWU0OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MkYyQy9GRkI3NjFGQTk2NzgxMUVBODQwRjAwMjlDNEY5QUUwMi9QRG1sMFpHTTls
cXlWak1pOFBYeFF3bW1lNDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBwi9mHUSmJTdR8iWl3BOsGUCkLBj+6j0BO76U9TjhKvSiKS8nk/BXt
AcmDQJ/GDkrKHzb7gl1IUwwtju/qxKsFGZ19eI3j3aj85QZOl8JBBkPn2qXUicvY
ru6BeOpQYKCZvLrETidvmYTlnAHq/W5CsZB3NlOTubYFLU+wcPd7uA9DYCzF0PHY
PIrPV0bo+iH78TIkWpuXkzkLuWIa+cHcKK+kycvfmVkw1Jw12K+DE7gTxU+dJk3O
WjVYEgVqAPX6q713h/HGdh8i63ce9+FGcJ+6+OhS/Q+cIuEbGFlN0ij7JePCF0BD
RXvpDtIp4JAgKl79JVNTbULqFj+Jgdcu
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:48:04 2025 by rpki-client