Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
File: oYXAxXSCnF_NcURUSeU0za70E5Y.mft (raw, json)
Hash identifier: jMPwJUmDvytsF1N8EIkfkkwisz5UYPLODqY4zMirYAk=
Subject key identifier: 70:C6:69:31:43:B5:7D:C8:47:5D:D7:DD:08:30:7C:75:C7:04:4B:53
Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Certificate serial: 02C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
Manifest number: 0291
Signing time: Fri 31 Jan 2025 01:48:40 +0000
Manifest this update: Fri 31 Jan 2025 01:48:39 +0000
Manifest next update: Fri 07 Feb 2025 01:48:39 +0000
Files and hashes: 1: oYXAxXSCnF_NcURUSeU0za70E5Y.crl (hash: aYJFpb1E/8xrhVW7lIO4J3g22T9Ngc6WpdIgy/zEA6s=)
2: CD2CF86C759E11EFB8230E38C4F9AE02.roa (hash: YBmeTVaSZHxdyluaKY2LXGaV+psmMf8UYwHUVBju0ME=)
3: B111111288B411EF80480527C4F9AE02.roa (hash: CjPKYAuDT4eI5JPa/G5V81ZBwDnMXPobI3BPswZB4kQ=)
4: B5D1A1164E3111EFB475160AC4F9AE02.roa (hash: F7ZAiYqiaqgCjshmhAH40pkpaSlek68K5yOIUFIlCqE=)
5: A3571FDE47EC11EFB51C3666C4F9AE02.roa (hash: 2cEppnqVz6EA8cjixAQPIWKPT1GtTfD8PJaZqxpWTLE=)
6: 77B975EC79C511EF94E24B5EC4F9AE02.roa (hash: yEIwnuRJU6I6rs+jiNjI+mClNF9GymbQxuMkCMOp07U=)
7: B137DB2670EF11EFBEF21935C4F9AE02.roa (hash: gVhoaUxSYFZFX3pfYYhl9cQHoz5s0K+bPZd1cYQ52Y8=)
8: 811803C270C111EF8A30EB51C4F9AE02.roa (hash: 89cYcTv3FMM/3M08ZzwOVhAvZtTfzr28mJIgkmfMCvo=)
9: D4E4D8FCA7C311EFB1AAAD55C4F9AE02.roa (hash: Xf5Ju4zh/ec55xkKs2QH4FHNMxaxZH8+1mgQURFonS4=)
10: 1E1EB7789D8C11EF9B16D921C4F9AE02.roa (hash: TCFvbSrzX3ld7ReLyyVPKT1K5SyyyvX3oexEUzvLigY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 704 (0x2c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Validity
Not Before: Jan 31 01:48:39 2025 GMT
Not After : Feb 7 01:48:39 2025 GMT
Subject: CN=679c2bf7-cf52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:29:0c:7d:66:6c:02:9d:ba:f6:56:a6:5b:b6:
84:ab:83:d5:fe:a3:68:3d:f3:06:1c:04:71:a9:7b:
e9:e4:8b:e6:6f:29:ea:21:07:ba:59:b3:56:79:d5:
5e:c3:c7:1d:71:ec:64:30:4e:c3:04:49:51:71:a6:
80:ef:c1:26:e1:23:8e:6a:be:5b:fc:fc:8c:47:75:
f4:84:64:11:85:ff:bc:45:27:4a:ff:10:25:ca:98:
e1:9f:81:68:5f:db:13:1d:be:42:9e:03:98:1d:38:
2d:19:83:fb:b1:ff:bd:4a:a1:92:f4:27:cc:68:e9:
28:c3:d8:ab:df:61:6e:fb:9f:6f:7e:26:31:d8:ff:
61:2d:61:73:a1:6c:c0:3d:02:d5:5f:cd:69:eb:8e:
b1:e8:73:63:79:a7:59:39:77:a2:85:dd:1f:50:85:
88:30:d1:2b:4c:e3:48:0e:83:e9:86:47:d4:9f:02:
ed:b5:81:4d:aa:e4:0e:f0:e7:8e:d0:39:04:02:1c:
74:ae:c0:b6:78:22:6f:c7:f5:a0:b3:41:97:76:3d:
aa:a7:aa:7c:ae:be:3b:93:48:73:3e:ea:79:6f:09:
fc:79:f2:ac:87:dd:5e:41:e5:87:66:5b:6e:6f:b6:
98:50:7a:c8:1e:b4:6e:07:8e:1d:b1:c3:20:9a:e0:
69:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C6:69:31:43:B5:7D:C8:47:5D:D7:DD:08:30:7C:75:C7:04:4B:53
X509v3 Authority Key Identifier:
keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:a0:df:1a:57:96:c7:4a:b2:3d:23:a3:69:b5:b5:5b:c8:03:
cf:ab:4d:4e:f2:1b:cc:2c:ad:db:0c:87:28:ab:3c:53:18:8d:
99:c4:20:f9:b1:8e:fa:bd:e5:70:80:73:75:64:20:9e:2f:5c:
8f:18:a4:56:77:56:b4:1a:59:47:63:28:73:ed:81:44:0d:2c:
39:76:f5:0f:37:da:73:12:3a:5a:c2:e6:77:54:f0:8e:52:06:
5f:99:c7:d3:f4:e8:2e:24:22:6a:d0:52:3f:fe:47:ad:41:54:
65:ed:82:90:66:6a:69:22:18:ec:40:eb:5e:6a:a8:79:48:43:
e4:81:94:3d:a3:0a:31:af:a4:2b:6f:63:f4:b8:c6:85:d8:e8:
d6:59:d1:0f:ba:66:86:53:7f:6a:48:be:47:7c:b2:9b:c7:3e:
cf:4e:8e:7f:b1:d0:79:ff:2a:89:c7:6b:1f:d3:70:fc:b7:48:
65:fa:2b:eb:76:53:5d:c9:84:a6:5f:79:cc:8d:10:95:0e:62:
22:49:c3:fc:e6:04:d2:0d:98:5d:13:3d:c6:c4:51:eb:99:37:
44:24:04:eb:22:99:5c:86:c3:e0:00:b4:a3:85:93:7d:92:90:
a9:40:0a:aa:da:4b:e8:45:ea:32:07:d9:db:e0:10:9d:b4:28:
6d:14:ec:c0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTRFMzIxMTAvBgNVBAUTKEExODVDMEM1NzQ4MjlDNUZDRDcxNDQ1NDQ5RTUzNENE
QUVGNDEzOTYwHhcNMjUwMTMxMDE0ODM5WhcNMjUwMjA3MDE0ODM5WjAYMRYwFAYD
VQQDEw02NzljMmJmNy1jZjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4ykMfWZsAp269lamW7aEq4PV/qNoPfMGHARxqXvp5IvmbynqIQe6WbNWedVe
w8cdcexkME7DBElRcaaA78Em4SOOar5b/PyMR3X0hGQRhf+8RSdK/xAlypjhn4Fo
X9sTHb5CngOYHTgtGYP7sf+9SqGS9CfMaOkow9ir32Fu+59vfiYx2P9hLWFzoWzA
PQLVX81p646x6HNjeadZOXeihd0fUIWIMNErTONIDoPphkfUnwLttYFNquQO8OeO
0DkEAhx0rsC2eCJvx/Wgs0GXdj2qp6p8rr47k0hzPup5bwn8efKsh91eQeWHZltu
b7aYUHrIHrRuB44dscMgmuBpoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHDGaTFD
tX3IR13X3QgwfHXHBEtTMB8GA1UdIwQYMBaAFKGFwMV0gpxfzXFEVEnlNM2u9BOW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEUzMi83MjA5NTlGQzAx
QzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25GX05jVVJVU2VVMHphNzBF
NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29ZWEF4WFNDbkZfTmNVUlVTZVUwemE3MEU1WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NEUzMi83MjA5NTlGQzAxQzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25G
X05jVVJVU2VVMHphNzBFNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAIoN8aV5bHSrI9I6NptbVbyAPPq01O8hvMLK3bDIcoqzxTGI2ZxCD5
sY76veVwgHN1ZCCeL1yPGKRWd1a0GllHYyhz7YFEDSw5dvUPN9pzEjpawuZ3VPCO
UgZfmcfT9OguJCJq0FI//ketQVRl7YKQZmppIhjsQOteaqh5SEPkgZQ9owoxr6Qr
b2P0uMaF2OjWWdEPumaGU39qSL5HfLKbxz7PTo5/sdB5/yqJx2sf03D8t0hl+ivr
dlNdyYSmX3nMjRCVDmIiScP85gTSDZhdEz3GxFHrmTdEJATrIplchsPgALSjhZN9
kpCpQAqq2kvoReoyB9nb4BCdtChtFOzA
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:15:17 2025 by rpki-client