Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft
File: iyhQBa2gBz4MCUttpqOLtR__oaQ.mft (raw, json)
Hash identifier: mAQY3/U7kWvLAOgvusgBCASruwo545HXHvkyggDbx+M=
Subject key identifier: F1:A7:98:07:72:36:26:8E:C1:60:70:92:6E:D6:41:21:8E:F8:94:B9
Authority key identifier: 8B:28:50:05:AD:A0:07:3E:0C:09:4B:6D:A6:A3:8B:B5:1F:FF:A1:A4
Certificate issuer: /CN=A918D14B/serialNumber=8B285005ADA0073E0C094B6DA6A38BB51FFFA1A4
Certificate serial: 03B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft
Manifest number: 039E
Signing time: Sat 29 Mar 2025 01:02:04 +0000
Manifest this update: Sat 29 Mar 2025 01:02:03 +0000
Manifest next update: Sat 05 Apr 2025 01:02:03 +0000
Files and hashes: 1: iyhQBa2gBz4MCUttpqOLtR__oaQ.crl (hash: 0m/meFKOmRkci6l0EVktu5BQ7MZhYqHRJ3NI6CUMfo0=)
2: 58C00854905211EC90E6100FC4F9AE02.roa (hash: 5eLmPskwIg5y4gDpqWBeusWbrOc+t34TIFwmF+boTps=)
3: 989BBF70904F11EC8B118911C4F9AE02.roa (hash: sO6E1E+nR+eYc5iIU6EYUSE2ekfNEYMYq4mKBPQmsro=)
4: 7E8442B68FE511EC94D98C7BC4F9AE02.roa (hash: oJI3ab/8fzhkHDC4Wzdxeh+CGGzoOkYJ9B82+ons7t8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 945 (0x3b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D14B
Validity
Not Before: Mar 29 01:02:03 2025 GMT
Not After : Apr 5 01:02:03 2025 GMT
Subject: CN=67e7468b-3c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:34:07:48:19:a0:c8:72:46:73:b3:6b:76:93:
fd:64:8b:8d:61:ee:22:11:5a:f5:fa:d4:90:3c:33:
a6:e1:53:69:64:f7:da:82:f9:b2:26:21:38:71:ff:
fe:8f:f1:0b:76:f0:5d:ce:e5:77:9b:95:74:e0:cd:
2c:82:ee:3f:d1:f6:56:b2:d1:29:39:93:9d:57:a4:
21:37:6b:95:e7:da:9b:09:e7:c8:37:d6:e4:12:0d:
96:29:4e:34:12:c3:d8:d0:c0:d7:59:cf:fb:a6:bc:
60:69:9c:4a:34:6b:0c:86:61:b6:f9:eb:1c:0e:d9:
7a:cc:55:9a:2b:7c:ea:15:77:2c:f7:b1:7f:d7:71:
91:4b:7b:cd:13:3c:b1:ad:00:09:51:04:39:c6:be:
e1:31:53:46:de:50:2e:18:95:04:2f:7f:28:aa:c6:
3a:69:14:a9:ca:f7:ce:d4:b3:e4:89:df:4b:59:c8:
0d:bb:41:5d:b4:09:59:6f:f0:6d:a4:e6:5b:7c:9b:
c3:47:9f:96:78:e7:e5:d7:5b:c8:b7:6c:4e:e2:37:
d6:98:9d:2f:96:f8:11:73:22:83:fd:d1:7c:e9:ff:
d8:5b:3f:38:20:13:50:11:1e:85:82:97:7c:21:44:
a4:29:91:fa:b8:5a:61:bf:1c:83:b8:76:7e:d5:8a:
68:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A7:98:07:72:36:26:8E:C1:60:70:92:6E:D6:41:21:8E:F8:94:B9
X509v3 Authority Key Identifier:
keyid:8B:28:50:05:AD:A0:07:3E:0C:09:4B:6D:A6:A3:8B:B5:1F:FF:A1:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:dc:1f:48:f4:a0:34:06:c8:e9:fb:49:3b:56:d1:fb:e6:c4:
d0:72:f6:9a:b8:b0:4a:2e:e7:e9:98:39:e3:de:68:ad:3f:4a:
f5:ea:77:b9:9f:2e:cf:c9:3f:52:ed:6f:ae:0f:68:5a:9a:99:
d7:2f:30:e3:f0:52:41:08:41:51:85:86:2d:cf:e1:b5:d3:0a:
b4:cc:71:40:b6:74:62:53:73:77:52:75:f0:a0:85:d1:81:37:
61:39:3e:53:b7:28:e9:3e:06:ce:32:f5:53:c4:d3:c2:02:03:
b6:ea:e5:43:07:67:bd:d0:66:30:3a:46:42:75:f2:14:2a:61:
9e:11:5b:22:50:6c:df:be:85:cc:b7:f5:0c:47:a8:61:62:51:
20:2f:fb:ce:d1:a5:34:33:3f:bd:47:a9:74:94:4f:fb:33:4d:
c6:26:7a:e9:53:9e:05:6c:d6:03:0e:97:74:e9:00:c0:4a:b8:
f3:7e:46:6f:ba:c5:c0:9d:ba:53:8a:ea:da:45:7c:df:b8:14:
c6:68:c7:fe:38:3f:59:03:a2:6e:88:51:92:96:89:f7:11:ac:
47:00:f5:1a:84:87:cc:23:86:e0:aa:50:f9:4e:c1:b8:27:3d:
47:38:fc:c3:9e:70:93:78:ba:ca:a0:5a:bf:72:60:bc:fb:99:
31:e7:ae:eb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQxNEIxMTAvBgNVBAUTKDhCMjg1MDA1QURBMDA3M0UwQzA5NEI2REE2QTM4QkI1
MUZGRkExQTQwHhcNMjUwMzI5MDEwMjAzWhcNMjUwNDA1MDEwMjAzWjAYMRYwFAYD
VQQDEw02N2U3NDY4Yi0zYzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqjQHSBmgyHJGc7NrdpP9ZIuNYe4iEVr1+tSQPDOm4VNpZPfagvmyJiE4cf/+
j/ELdvBdzuV3m5V04M0sgu4/0fZWstEpOZOdV6QhN2uV59qbCefIN9bkEg2WKU40
EsPY0MDXWc/7prxgaZxKNGsMhmG2+escDtl6zFWaK3zqFXcs97F/13GRS3vNEzyx
rQAJUQQ5xr7hMVNG3lAuGJUEL38oqsY6aRSpyvfO1LPkid9LWcgNu0FdtAlZb/Bt
pOZbfJvDR5+WeOfl11vIt2xO4jfWmJ0vlvgRcyKD/dF86f/YWz84IBNQER6Fgpd8
IUSkKZH6uFphvxyDuHZ+1YpotwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPGnmAdy
NiaOwWBwkm7WQSGO+JS5MB8GA1UdIwQYMBaAFIsoUAWtoAc+DAlLbaaji7Uf/6Gk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDE0Qi85NEM4OThDQzhG
RTIxMUVDQThBRkVFNzhDNEY5QUUwMi9peWhRQmEyZ0J6NE1DVXR0cHFPTHRSX19v
YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2l5aFFCYTJnQno0TUNVdHRwcU9MdFJfX29hUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDE0Qi85NEM4OThDQzhGRTIxMUVDQThBRkVFNzhDNEY5QUUwMi9peWhRQmEyZ0J6
NE1DVXR0cHFPTHRSX19vYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB23B9I9KA0Bsjp+0k7VtH75sTQcvaauLBKLufpmDnj3mitP0r16ne5
ny7PyT9S7W+uD2hampnXLzDj8FJBCEFRhYYtz+G10wq0zHFAtnRiU3N3UnXwoIXR
gTdhOT5TtyjpPgbOMvVTxNPCAgO26uVDB2e90GYwOkZCdfIUKmGeEVsiUGzfvoXM
t/UMR6hhYlEgL/vO0aU0Mz+9R6l0lE/7M03GJnrpU54FbNYDDpd06QDASrjzfkZv
usXAnbpTiuraRXzfuBTGaMf+OD9ZA6JuiFGSlon3EaxHAPUahIfMI4bgqlD5TsG4
Jz1HOPzDnnCTeLrKoFq/cmC8+5kx567r
-----END CERTIFICATE-----
Generated at Fri Apr 11 09:21:37 2025 by rpki-client