Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft
File: 7IKxn5B5ht6zu4AtInPQNNFBSy0.mft (raw, json)
Hash identifier: C5jevNF02QamTyYB6tRHGjC4FzTLlof6xPWIjSIJ73g=
Subject key identifier: 19:C0:EA:4C:29:D2:FB:29:01:93:91:64:07:25:03:96:70:35:AF:7B
Authority key identifier: EC:82:B1:9F:90:79:86:DE:B3:BB:80:2D:22:73:D0:34:D1:41:4B:2D
Certificate issuer: /CN=A91EC3CA/serialNumber=EC82B19F907986DEB3BB802D2273D034D1414B2D
Certificate serial: 0B77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IKxn5B5ht6zu4AtInPQNNFBSy0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft
Manifest number: 0B71
Signing time: Thu 30 Jan 2025 19:06:36 +0000
Manifest this update: Thu 30 Jan 2025 19:06:35 +0000
Manifest next update: Thu 06 Feb 2025 19:06:35 +0000
Files and hashes: 1: 7IKxn5B5ht6zu4AtInPQNNFBSy0.crl (hash: 6SkX0r4HAnKnmVxeyAfwT4WqRR1wEf0H21V7V19ZLiY=)
2: 8C76CF46218411EAA6A8DB38C4F9AE02.roa (hash: ygQ6vfqXgCOjWaI/M9+8sSQcLe6CReohgnbLpV4rvKo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2935 (0xb77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC3CA/serialNumber=EC82B19F907986DEB3BB802D2273D034D1414B2D
Validity
Not Before: Jan 30 19:06:35 2025 GMT
Not After : Feb 6 19:06:35 2025 GMT
Subject: CN=679bcdbb-4731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5b:c6:79:4e:e7:fa:c3:04:3f:8d:dd:ba:36:
28:b2:92:91:a0:50:2f:21:9f:3a:d9:5d:96:cb:42:
fd:74:c8:5a:38:2d:f2:2a:98:68:b2:56:c4:3a:57:
06:3a:a5:39:dc:5a:e6:f6:7f:c2:37:79:e5:fb:b2:
53:fd:fc:35:bf:29:cf:18:39:4d:fb:83:17:da:4a:
d7:f4:a8:ae:61:42:08:55:27:fc:8b:fc:88:94:77:
f8:2a:9b:69:17:44:c4:48:10:a3:36:ca:f6:ec:eb:
64:15:15:28:f7:1c:95:6d:b3:a8:9c:8f:bb:27:e1:
e4:15:d5:66:90:02:06:63:d7:31:c1:cc:31:7e:ac:
8a:85:21:ba:4e:9a:0a:3c:62:ab:09:c6:34:5b:88:
4e:38:13:85:54:9c:e7:78:4f:d4:a7:63:8c:8f:ec:
14:d4:56:8b:8b:3b:67:2d:4f:84:cd:04:29:8f:e1:
bf:3e:b3:d8:50:25:08:ad:85:b1:e7:04:c2:fc:9b:
aa:e3:e1:ce:7f:a6:74:c7:4e:f1:89:e0:ee:0b:77:
cc:ed:e3:ad:9d:61:fd:f2:d7:2e:36:27:47:5b:61:
3e:86:4a:92:c5:fe:3d:d3:9a:c0:a2:96:93:8d:1e:
f6:3b:3f:f5:f2:6b:15:33:d2:68:49:bc:80:d8:a2:
36:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C0:EA:4C:29:D2:FB:29:01:93:91:64:07:25:03:96:70:35:AF:7B
X509v3 Authority Key Identifier:
keyid:EC:82:B1:9F:90:79:86:DE:B3:BB:80:2D:22:73:D0:34:D1:41:4B:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IKxn5B5ht6zu4AtInPQNNFBSy0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:70:d2:60:66:ab:69:b2:d9:92:91:dc:6e:53:63:fd:25:40:
6c:39:5a:b2:09:78:06:a4:f5:1a:17:75:4b:cf:5a:83:01:11:
1a:d6:12:03:62:e4:57:33:fd:56:ff:57:ea:eb:11:4d:58:78:
26:48:09:6e:1c:ea:ae:cc:04:86:70:6a:46:0a:b8:c0:0a:12:
f8:19:52:1d:c6:49:7a:15:6e:d5:cb:cb:aa:31:41:34:ed:17:
e9:bc:13:cb:91:a7:48:54:80:cb:61:bb:32:3e:2a:38:6f:0f:
46:b2:2f:33:31:98:1d:03:95:77:1b:20:c2:98:c5:9c:27:47:
6b:36:48:cb:c0:3e:e6:1c:9f:6b:ba:af:b3:76:6f:36:6a:f7:
e2:53:98:f2:9a:47:e7:56:30:fb:f3:81:7e:2f:0f:53:e3:d8:
cb:e6:cf:a5:45:2f:95:72:67:e3:3b:a4:87:f9:9c:f9:32:1e:
60:47:9a:69:b7:b7:54:f8:e2:2d:3e:92:d2:00:ca:c5:1c:4f:
45:ec:46:20:b5:48:2c:cf:ee:ec:78:4f:18:cd:2f:26:e5:c0:
c8:79:fd:e3:36:62:f5:76:16:b4:0c:dc:b3:c8:a3:48:6b:2a:
07:41:a6:97:a9:d9:57:a9:25:f4:79:49:0a:1a:bc:53:76:40:
0d:89:d2:8a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC3cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUMzQ0ExMTAvBgNVBAUTKEVDODJCMTlGOTA3OTg2REVCM0JCODAyRDIyNzNEMDM0
RDE0MTRCMkQwHhcNMjUwMTMwMTkwNjM1WhcNMjUwMjA2MTkwNjM1WjAYMRYwFAYD
VQQDEw02NzliY2RiYi00NzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0VvGeU7n+sMEP43dujYospKRoFAvIZ862V2Wy0L9dMhaOC3yKphoslbEOlcG
OqU53Frm9n/CN3nl+7JT/fw1vynPGDlN+4MX2krX9KiuYUIIVSf8i/yIlHf4Kptp
F0TESBCjNsr27OtkFRUo9xyVbbOonI+7J+HkFdVmkAIGY9cxwcwxfqyKhSG6TpoK
PGKrCcY0W4hOOBOFVJzneE/Up2OMj+wU1FaLiztnLU+EzQQpj+G/PrPYUCUIrYWx
5wTC/Juq4+HOf6Z0x07xieDuC3fM7eOtnWH98tcuNidHW2E+hkqSxf4905rAopaT
jR72Oz/18msVM9JoSbyA2KI2iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBnA6kwp
0vspAZORZAclA5ZwNa97MB8GA1UdIwQYMBaAFOyCsZ+QeYbes7uALSJz0DTRQUst
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzNDQS84MTM4NjA0NjIx
ODMxMUVBOENCODQ3MzdDNEY5QUUwMi83SUt4bjVCNWh0Nnp1NEF0SW5QUU5ORkJT
eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdJS3huNUI1aHQ2enU0QXRJblBRTk5GQlN5MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QzNDQS84MTM4NjA0NjIxODMxMUVBOENCODQ3MzdDNEY5QUUwMi83SUt4bjVCNWh0
Nnp1NEF0SW5QUU5ORkJTeTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCMcNJgZqtpstmSkdxuU2P9JUBsOVqyCXgGpPUaF3VLz1qDAREa1hID
YuRXM/1W/1fq6xFNWHgmSAluHOquzASGcGpGCrjAChL4GVIdxkl6FW7Vy8uqMUE0
7RfpvBPLkadIVIDLYbsyPio4bw9Gsi8zMZgdA5V3GyDCmMWcJ0drNkjLwD7mHJ9r
uq+zdm82avfiU5jymkfnVjD784F+Lw9T49jL5s+lRS+VcmfjO6SH+Zz5Mh5gR5pp
t7dU+OItPpLSAMrFHE9F7EYgtUgsz+7seE8YzS8m5cDIef3jNmL1dha0DNyzyKNI
ayoHQaaXqdlXqSX0eUkKGrxTdkANidKK
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:10:55 2025 by rpki-client