Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft
File: l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft (raw, json)
Hash identifier: GDJGuTnu2iQ85CxB9IP49TYhLD3ICZOQkAfp36nQSxk=
Subject key identifier: D6:63:6B:9A:15:EF:DD:6F:CE:17:B4:D4:4E:77:4D:01:3F:6A:4D:B7
Authority key identifier: 97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12
Certificate issuer: /CN=A91E39B4/serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12
Certificate serial: 0B03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft
Manifest number: 0AEF
Signing time: Thu 30 Jan 2025 19:22:47 +0000
Manifest this update: Thu 30 Jan 2025 19:22:47 +0000
Manifest next update: Thu 06 Feb 2025 19:22:47 +0000
Files and hashes: 1: l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl (hash: bvhke4t7I+iNkXH5JD0tkCTfJ7JWQRnbQe2KLgR4Kt0=)
2: 46F57CF8137B11EBA3B47E37C4F9AE02.roa (hash: 2qnnF6MVOAPWKTwVx6xcANvt7+ipRsuxDi1zcVsoM90=)
3: D968823E3DA111EA9A3FD550C4F9AE02.roa (hash: LHN9DyWzlGRcwkpXqFqZ90XaKLujDGwCFAysXhBXguc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2819 (0xb03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E39B4/serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12
Validity
Not Before: Jan 30 19:22:47 2025 GMT
Not After : Feb 6 19:22:47 2025 GMT
Subject: CN=679bd187-430f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2a:a4:2e:c3:6d:d8:35:cd:48:d3:61:a8:e3:
4c:52:63:eb:64:62:37:ab:e7:75:10:51:76:b7:0e:
49:41:0e:4b:45:6c:af:13:05:76:78:37:5d:b9:6b:
d3:3d:b0:4a:00:6d:b9:dc:1e:48:7d:63:bd:bf:5f:
cc:d8:38:b3:6f:3d:c2:be:fd:16:16:6c:5b:c3:f5:
bd:c7:92:1d:80:13:e8:64:a2:bd:e0:6d:90:23:8d:
51:8b:20:fa:75:95:2a:cd:da:cd:79:01:9c:15:15:
b1:27:7f:ed:50:4b:99:25:d9:bb:a6:71:8f:ce:d5:
3e:57:06:6a:b8:db:4f:89:7f:7a:5e:14:bb:a9:46:
bd:4e:4d:dd:3f:8d:dd:b8:8f:6d:50:d7:65:a8:2c:
eb:90:d7:70:3d:2d:dc:43:ac:cc:5c:b9:58:c8:2e:
03:f3:bc:47:fb:fc:47:75:57:ea:43:50:d2:54:f5:
eb:c3:6b:a8:46:a4:68:08:b2:d8:4f:8e:3a:90:c5:
1b:49:ee:a3:e4:9e:65:80:b1:d2:9d:4b:c6:67:55:
4a:6b:f8:7f:7e:42:21:6c:1b:81:ae:d2:9c:2f:3d:
75:ce:f1:04:75:8c:23:5d:41:a8:db:32:0d:6e:84:
22:fc:42:4a:00:ac:66:3a:a1:9e:6b:48:0b:b3:6c:
cd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:63:6B:9A:15:EF:DD:6F:CE:17:B4:D4:4E:77:4D:01:3F:6A:4D:B7
X509v3 Authority Key Identifier:
keyid:97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:54:11:11:0b:49:44:61:42:d4:e8:f1:68:96:e8:05:d4:59:
a9:db:ca:a7:51:74:08:de:13:aa:34:f8:3b:61:4f:81:2c:45:
61:20:6b:59:dc:4d:59:5d:eb:62:2b:76:80:62:f2:93:15:e1:
cc:d2:37:7c:45:74:87:5c:33:07:d0:10:60:78:27:76:cf:d6:
ee:80:a9:65:84:9f:f6:d2:70:ad:47:c3:b1:a6:75:22:ea:61:
ad:fe:01:3d:15:b2:6f:05:ee:49:64:c3:fe:8b:e2:1c:e7:ca:
7e:cd:90:77:cc:2d:08:01:49:ea:1a:92:bf:58:8b:6c:15:0b:
56:f4:f0:81:fa:4f:6b:c6:b6:4e:84:d2:c6:59:5a:44:b8:d2:
d3:71:fc:df:f9:24:2c:a0:f6:79:dc:a8:f9:00:cf:2f:69:be:
2e:5a:55:59:4c:b4:5e:0d:c7:68:4f:02:12:d5:dc:df:9a:30:
6d:59:20:c3:dc:24:11:c2:b5:85:b3:36:3a:61:ba:fc:5f:fc:
46:41:bc:fa:e0:92:c9:50:9e:1d:3b:e7:a8:a3:42:9e:3f:f8:
a9:8b:ee:0a:07:a9:1a:be:90:11:70:48:c9:f1:78:01:28:bf:
e7:3f:27:fc:46:4c:f6:28:31:a3:9b:d6:5f:de:e7:47:33:80:
c7:35:bf:12
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTM5QjQxMTAvBgNVBAUTKDk3QjNERDJBQjNDODlCQzhBMkJCQzFEQjgwM0JDRTY4
RUFBNUFBMTIwHhcNMjUwMTMwMTkyMjQ3WhcNMjUwMjA2MTkyMjQ3WjAYMRYwFAYD
VQQDEw02NzliZDE4Ny00MzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1CqkLsNt2DXNSNNhqONMUmPrZGI3q+d1EFF2tw5JQQ5LRWyvEwV2eDdduWvT
PbBKAG253B5IfWO9v1/M2Dizbz3Cvv0WFmxbw/W9x5IdgBPoZKK94G2QI41RiyD6
dZUqzdrNeQGcFRWxJ3/tUEuZJdm7pnGPztU+VwZquNtPiX96XhS7qUa9Tk3dP43d
uI9tUNdlqCzrkNdwPS3cQ6zMXLlYyC4D87xH+/xHdVfqQ1DSVPXrw2uoRqRoCLLY
T446kMUbSe6j5J5lgLHSnUvGZ1VKa/h/fkIhbBuBrtKcLz11zvEEdYwjXUGo2zIN
boQi/EJKAKxmOqGea0gLs2zNgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZja5oV
791vzhe01E53TQE/ak23MB8GA1UdIwQYMBaAFJez3SqzyJvIorvB24A7zmjqpaoS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzlCNC8xRUUxODI5RTNE
QTExMUVBOEI2N0U5NEZDNEY5QUUwMi9sN1BkS3JQSW04aWl1OEhiZ0R2T2FPcWxx
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2w3UGRLclBJbThpaXU4SGJnRHZPYU9xbHFoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MzlCNC8xRUUxODI5RTNEQTExMUVBOEI2N0U5NEZDNEY5QUUwMi9sN1BkS3JQSW04
aWl1OEhiZ0R2T2FPcWxxaEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCFVBERC0lEYULU6PFolugF1Fmp28qnUXQI3hOqNPg7YU+BLEVhIGtZ
3E1ZXetiK3aAYvKTFeHM0jd8RXSHXDMH0BBgeCd2z9bugKllhJ/20nCtR8OxpnUi
6mGt/gE9FbJvBe5JZMP+i+Ic58p+zZB3zC0IAUnqGpK/WItsFQtW9PCB+k9rxrZO
hNLGWVpEuNLTcfzf+SQsoPZ53Kj5AM8vab4uWlVZTLReDcdoTwIS1dzfmjBtWSDD
3CQRwrWFszY6Ybr8X/xGQbz64JLJUJ4dO+eoo0KeP/ipi+4KB6kavpARcEjJ8XgB
KL/nPyf8Rkz2KDGjm9Zf3udHM4DHNb8S
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:38:59 2025 by rpki-client