Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
File: 0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft (raw, json)
Hash identifier: cs/G61wHhidIn/s4ZxwVg13PtKfgShyQTUL1L8Fgn4g=
Subject key identifier: 03:DD:EA:EE:DC:D4:59:90:85:0A:55:35:4A:4C:A1:38:40:69:AC:A5
Authority key identifier: D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0
Certificate issuer: /CN=A91B834D/serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0
Certificate serial: 019B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
Manifest number: 0192
Signing time: Sat 29 Mar 2025 03:02:40 +0000
Manifest this update: Sat 29 Mar 2025 03:02:40 +0000
Manifest next update: Sat 05 Apr 2025 03:02:39 +0000
Files and hashes: 1: 0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl (hash: pYt+xQ9mpTdWkyv7bmCuWTIMvEqMw7NMF/eRidcy/PU=)
2: F9B10D46ADAA11ED810C6C45C4F9AE02.roa (hash: 9uR9cVnp9mE1i5KXBSkkfpXEwSfx3/BMoE6xrI/LuMM=)
3: 61883292ADA511EDB2C68947C4F9AE02.roa (hash: jVsOkESQWaLXR1oAo7YvVLXTH7CGZNa6Fnq6GGFvuF4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411 (0x19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B834D
Validity
Not Before: Mar 29 03:02:40 2025 GMT
Not After : Apr 5 03:02:39 2025 GMT
Subject: CN=67e762d0-9153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:69:93:c3:33:c4:4c:7f:9c:65:87:cf:1e:f4:
43:0e:e6:a1:70:11:06:f8:7e:9d:83:a1:78:97:9c:
a7:d2:af:86:3e:2f:23:bc:19:d5:a8:5e:f6:8f:5c:
e2:1e:35:e4:64:21:bc:66:3b:6a:15:3e:9e:8e:ec:
10:15:9e:f6:f3:11:5a:16:ef:61:f6:33:87:df:ef:
de:ea:0f:6a:54:65:7d:47:53:b8:b3:22:b7:28:23:
a2:0e:97:65:1c:0e:8c:20:6e:26:5b:ca:8d:d4:b1:
fb:2d:bf:47:db:45:68:49:65:e8:9d:a8:41:b9:ab:
d2:e7:cc:0b:a7:3e:a5:df:79:d8:24:65:da:ea:84:
20:5e:a5:37:47:a1:b2:a3:00:9c:ac:6d:96:30:67:
24:d3:0f:9f:5d:5a:26:4f:42:dd:99:ce:d6:e4:ab:
86:95:98:3a:4a:17:b7:ec:7c:f6:a0:35:af:fa:17:
20:19:7d:e2:3c:44:cd:b5:c2:f2:5f:49:ac:ee:86:
41:ed:74:31:5d:80:65:4f:04:26:7a:98:4e:2c:2d:
67:1d:66:cc:3c:5a:45:90:9c:1c:40:c6:2b:9f:7a:
4c:cf:ea:2a:bc:51:fe:e8:1e:9d:57:05:91:ae:2e:
8b:9c:a5:d6:30:09:9c:0d:3d:7c:f5:da:d1:b5:5b:
61:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DD:EA:EE:DC:D4:59:90:85:0A:55:35:4A:4C:A1:38:40:69:AC:A5
X509v3 Authority Key Identifier:
keyid:D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:be:72:f6:60:fb:78:2f:08:cd:9b:20:24:bb:30:23:1d:1f:
ea:8f:bd:0f:b6:be:af:24:c1:b4:bd:25:0e:9a:a7:ce:a6:52:
b5:5a:c2:66:8b:e8:34:e5:49:04:e8:e8:1e:91:48:fb:17:06:
a7:20:f6:6c:53:0a:1d:ee:00:39:d7:1e:3e:df:14:35:69:6d:
e0:99:12:42:72:ad:33:3d:8e:39:35:f1:cc:79:b1:fb:a7:2f:
5e:46:10:ad:8d:64:3e:bf:20:b3:a8:31:db:c6:dc:8e:9b:b9:
9f:db:03:6f:37:d1:a5:37:9e:5e:7b:f9:19:1a:21:47:68:dc:
d7:3b:69:d7:13:06:bc:8e:c6:db:f4:50:89:36:b2:74:d8:75:
d9:d6:4e:b8:38:b2:1f:ae:9f:44:b3:f2:37:f0:2b:bf:df:4a:
39:3a:be:06:a5:42:ad:e9:cf:ec:4b:6d:88:26:9e:e1:d3:0a:
27:f6:c9:0b:2a:0d:54:16:7a:b4:f5:b4:ce:06:ce:ef:4d:6a:
c0:12:24:1d:6c:7f:e6:9a:c8:1d:68:12:42:a9:36:b3:96:06:
e9:64:31:f7:ed:ce:f0:c3:1b:92:b6:02:c3:58:e6:ac:14:34:
e1:83:a8:69:7d:27:ea:e7:7a:0c:60:c9:8c:66:14:07:71:06:
a5:fe:ff:96
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjgzNEQxMTAvBgNVBAUTKEQwRTU0NDA1QjAzRDNEMTIzNDU5REUwMUJCNDAwRjRE
N0E4MzI5RDAwHhcNMjUwMzI5MDMwMjQwWhcNMjUwNDA1MDMwMjM5WjAYMRYwFAYD
VQQDEw02N2U3NjJkMC05MTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0WmTwzPETH+cZYfPHvRDDuahcBEG+H6dg6F4l5yn0q+GPi8jvBnVqF72j1zi
HjXkZCG8ZjtqFT6ejuwQFZ728xFaFu9h9jOH3+/e6g9qVGV9R1O4syK3KCOiDpdl
HA6MIG4mW8qN1LH7Lb9H20VoSWXonahBuavS58wLpz6l33nYJGXa6oQgXqU3R6Gy
owCcrG2WMGck0w+fXVomT0Ldmc7W5KuGlZg6She37Hz2oDWv+hcgGX3iPETNtcLy
X0ms7oZB7XQxXYBlTwQmephOLC1nHWbMPFpFkJwcQMYrn3pMz+oqvFH+6B6dVwWR
ri6LnKXWMAmcDT189drRtVthTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAPd6u7c
1FmQhQpVNUpMoThAaaylMB8GA1UdIwQYMBaAFNDlRAWwPT0SNFneAbtAD016gynQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODM0RC8zQTJDNTE5NkFE
QTExMUVEQUI2REY0MkRDNEY5QUUwMi8wT1ZFQmJBOVBSSTBXZDRCdTBBUFRYcURL
ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBPVkVCYkE5UFJJMFdkNEJ1MEFQVFhxREtkQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
ODM0RC8zQTJDNTE5NkFEQTExMUVEQUI2REY0MkRDNEY5QUUwMi8wT1ZFQmJBOVBS
STBXZDRCdTBBUFRYcURLZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA2vnL2YPt4LwjNmyAkuzAjHR/qj70Ptr6vJMG0vSUOmqfOplK1WsJm
i+g05UkE6OgekUj7FwanIPZsUwod7gA51x4+3xQ1aW3gmRJCcq0zPY45NfHMebH7
py9eRhCtjWQ+vyCzqDHbxtyOm7mf2wNvN9GlN55ee/kZGiFHaNzXO2nXEwa8jsbb
9FCJNrJ02HXZ1k64OLIfrp9Es/I38Cu/30o5Or4GpUKt6c/sS22IJp7h0won9skL
Kg1UFnq09bTOBs7vTWrAEiQdbH/mmsgdaBJCqTazlgbpZDH37c7wwxuStgLDWOas
FDThg6hpfSfq53oMYMmMZhQHcQal/v+W
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:39:01 2025 by rpki-client