Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
File: gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft (raw, json)
Hash identifier: u46ztEpaetRt5Ip38DFMDNWWtxTbx4equgJ0YwVM1As=
Subject key identifier: 92:25:E5:A8:40:C8:8B:CC:46:EA:07:0F:B6:1C:77:EA:01:12:29:69
Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB
Certificate issuer: /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
Certificate serial: 03EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
Manifest number: 03CB
Signing time: Sat 29 Mar 2025 00:57:13 +0000
Manifest this update: Sat 29 Mar 2025 00:57:12 +0000
Manifest next update: Sat 05 Apr 2025 00:57:12 +0000
Files and hashes: 1: gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl (hash: +vUgUS3XlnjimxRIznFCpK7ISZ5N4WAu/26zW9DBSIw=)
2: 44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa (hash: XYAlCpJ7mzvp/cofGi5NvPIKtbxLdre0l8+aO1T1+jg=)
3: 8F9CB4448F3511ECB2182782C4F9AE02.roa (hash: DWvrRFsnIPoLKEJMzAK4aBrg0Gv8BJj/6fbSi0CsC/o=)
4: 609BCC763D9311EE9B7BB945C4F9AE02.roa (hash: 5W5E+3mSkVgIcfD5D9nwVRXpAej/2LIvbq7hJHUIIQs=)
5: F255CD0A5EC411ED810B8584C4F9AE02.roa (hash: 1/c265I61z81RbwUjN+/+ktuTISDdU6AGxRGRBwwFGQ=)
6: 6873616CCAE811ECBB89015FC4F9AE02.roa (hash: 0bYsYs837SFgGZweeq9bSFBIzROTTbuMX0UkDBxpW3g=)
7: A5D75708E07111ED9601E941C4F9AE02.roa (hash: zT5o3xGQl3eggTa0HGvpU0sVsYrZsqPQ9mpieJGNY8E=)
8: 21ECD84A856011EC924B3E58C4F9AE02.roa (hash: ZX3EFF6YPYsvFLMNAm4Da6miOiuOSCWVNa70Njpa5XM=)
9: 64782D1E607E11ED9CD7EF0FC4F9AE02.roa (hash: RdvlkapM35MRJfHVT6ITjiEohu/282iaA5oNrFH45uM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1004 (0x3ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B4BF
Validity
Not Before: Mar 29 00:57:12 2025 GMT
Not After : Apr 5 00:57:12 2025 GMT
Subject: CN=67e74569-42c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1f:d8:99:99:9b:b2:fe:df:1c:b6:a5:3c:61:
6f:15:4b:53:32:9d:c2:72:64:d6:50:30:1b:54:a5:
89:ef:a6:eb:40:1c:95:a9:16:10:17:a2:9c:73:fb:
73:fc:04:4b:a1:ef:29:5a:42:ea:25:2f:a7:0c:00:
df:4d:e2:c5:3d:86:21:e6:d0:8d:a2:6b:4d:0b:dd:
2e:00:a0:d4:6c:21:e6:cd:61:46:56:36:b3:0c:86:
69:5b:80:3b:1a:07:00:bc:96:6f:f0:e7:54:c5:d2:
cb:35:92:68:53:4c:05:0c:2d:ce:bd:b5:58:fa:63:
ff:4d:ba:73:51:3d:30:98:a1:ff:55:26:b5:85:d7:
8e:13:16:3c:9c:2f:7c:87:a8:d1:d5:44:16:48:29:
0c:8c:02:02:96:3f:17:aa:63:1b:8e:5e:7a:50:58:
d8:8b:e5:ce:4f:7f:83:cf:2d:44:b6:78:44:20:d7:
d5:22:d9:c0:17:01:4b:42:ad:19:5b:b2:4c:7a:32:
73:dd:44:7b:1d:c4:8f:6c:fc:62:9b:6f:8a:17:2a:
ce:79:bb:ef:5b:a1:8d:8c:f1:8e:9c:3b:e9:89:ee:
9d:9d:75:b2:9a:1a:a4:8e:ab:a9:68:e2:bf:5c:5b:
56:64:59:18:7d:e3:11:d9:3d:f6:4d:ca:8a:e8:d6:
e0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:25:E5:A8:40:C8:8B:CC:46:EA:07:0F:B6:1C:77:EA:01:12:29:69
X509v3 Authority Key Identifier:
keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:ff:ca:b5:66:a4:6f:63:90:6f:75:79:34:5b:26:b7:86:ac:
d8:ea:78:32:49:00:dd:5f:d3:96:0e:d7:8f:92:61:d0:32:dd:
d8:36:ef:f3:cd:e4:22:95:0c:a5:ae:81:0d:80:37:a2:16:d1:
20:f8:c7:93:07:d4:4b:0b:4a:77:22:50:8b:b0:11:1c:fa:a3:
3f:65:c0:a8:b4:2c:03:85:5f:69:ec:67:e3:24:81:ee:c8:42:
de:bd:23:d8:1d:e2:4b:8a:e2:af:0d:db:60:2b:a4:ce:54:8a:
34:03:16:9e:b1:61:da:da:a8:3d:19:7b:8c:91:c0:64:62:73:
62:47:1a:3f:97:ba:c7:ad:64:f1:6f:94:cc:c1:dd:ee:a7:ea:
60:4c:88:98:61:f6:aa:78:9d:92:16:b9:bf:01:c3:04:06:19:
c0:0d:38:b9:47:0f:b8:03:4a:12:31:da:cd:2c:d7:81:a8:ac:
d2:7a:3d:8d:50:d0:76:ec:dd:81:78:33:b0:96:03:a1:08:09:
2f:8c:d4:2b:19:a2:df:c3:3a:2c:80:08:92:de:7c:13:5b:58:
6f:f6:eb:74:02:ba:86:3f:a1:83:98:4b:79:f9:e9:ca:07:9f:
c2:1e:eb:5e:07:d2:ea:88:6a:bc:1b:07:3a:aa:8b:1a:20:a3:
3d:7c:26:b3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0I0QkYxMTAvBgNVBAUTKDgwMzUwOTBBMDU3MzI3RTEyMDA1OTNDMjBDODhDNTE5
QTQ1QzlFQ0IwHhcNMjUwMzI5MDA1NzEyWhcNMjUwNDA1MDA1NzEyWjAYMRYwFAYD
VQQDEw02N2U3NDU2OS00MmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuh/YmZmbsv7fHLalPGFvFUtTMp3CcmTWUDAbVKWJ76brQByVqRYQF6Kcc/tz
/ARLoe8pWkLqJS+nDADfTeLFPYYh5tCNomtNC90uAKDUbCHmzWFGVjazDIZpW4A7
GgcAvJZv8OdUxdLLNZJoU0wFDC3OvbVY+mP/TbpzUT0wmKH/VSa1hdeOExY8nC98
h6jR1UQWSCkMjAIClj8XqmMbjl56UFjYi+XOT3+Dzy1EtnhEINfVItnAFwFLQq0Z
W7JMejJz3UR7HcSPbPxim2+KFyrOebvvW6GNjPGOnDvpie6dnXWymhqkjqupaOK/
XFtWZFkYfeMR2T32TcqK6NbgxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJIl5ahA
yIvMRuoHD7Ycd+oBEilpMB8GA1UdIwQYMBaAFIA1CQoFcyfhIAWTwgyIxRmkXJ7L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjRCRi9COENDNjkzQzg1
NUMxMUVDOEUzQ0JCNTFDNEY5QUUwMi9nRFVKQ2dWekotRWdCWlBDRElqRkdhUmNu
c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dEVUpDZ1Z6Si1FZ0JaUENESWpGR2FSY25zcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QjRCRi9COENDNjkzQzg1NUMxMUVDOEUzQ0JCNTFDNEY5QUUwMi9nRFVKQ2dWekot
RWdCWlBDRElqRkdhUmNuc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCv/8q1ZqRvY5BvdXk0Wya3hqzY6ngySQDdX9OWDtePkmHQMt3YNu/z
zeQilQylroENgDeiFtEg+MeTB9RLC0p3IlCLsBEc+qM/ZcCotCwDhV9p7GfjJIHu
yELevSPYHeJLiuKvDdtgK6TOVIo0AxaesWHa2qg9GXuMkcBkYnNiRxo/l7rHrWTx
b5TMwd3up+pgTIiYYfaqeJ2SFrm/AcMEBhnADTi5Rw+4A0oSMdrNLNeBqKzSej2N
UNB27N2BeDOwlgOhCAkvjNQrGaLfwzosgAiS3nwTW1hv9ut0ArqGP6GDmEt5+enK
B5/CHuteB9LqiGq8Gwc6qosaIKM9fCaz
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:30:43 2025 by rpki-client