Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/71tJf_2LJZ7p6hV7AiKxECZs9Z8.mft
File: 71tJf_2LJZ7p6hV7AiKxECZs9Z8.mft (raw, json)
Hash identifier: VXPmsp42XoHZyr1pzOEqErFlN8bvKrEUePNicK+f06Y=
Subject key identifier: DF:23:7B:AA:FE:3A:8F:10:35:E7:BE:71:97:80:DA:89:C0:0D:75:E9
Authority key identifier: EF:5B:49:7F:FD:8B:25:9E:E9:EA:15:7B:02:22:B1:10:26:6C:F5:9F
Certificate issuer: /CN=A91B9BC6/serialNumber=EF5B497FFD8B259EE9EA157B0222B110266CF59F
Certificate serial: 04C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71tJf_2LJZ7p6hV7AiKxECZs9Z8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/71tJf_2LJZ7p6hV7AiKxECZs9Z8.mft
Manifest number: 04AE
Signing time: Mon 17 Feb 2025 00:58:09 +0000
Manifest this update: Mon 17 Feb 2025 00:58:09 +0000
Manifest next update: Mon 24 Feb 2025 00:58:09 +0000
Files and hashes: 1: 71tJf_2LJZ7p6hV7AiKxECZs9Z8.crl (hash: jDFn3Ay89BtrgWJ0/Ws0NB6ZEAQeP3vxDNTmIET4e0Y=)
2: 13DBE72EB4A611EE9795B755C4F9AE02.roa (hash: fopvRRWJIFpu2y3+PSB4W8rVw97gaPxUTr85DknbhoM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1223 (0x4c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9BC6
Validity
Not Before: Feb 17 00:58:09 2025 GMT
Not After : Feb 24 00:58:09 2025 GMT
Subject: CN=67b289a1-2043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c1:62:72:50:e2:00:5b:38:dd:9e:eb:60:a3:
28:90:85:a8:bb:38:15:b1:2e:ff:6e:d9:b6:8b:e6:
67:4f:9e:2a:20:24:2e:90:f4:84:f9:c0:e4:3b:26:
b0:47:8e:09:48:1f:bf:c5:ff:21:7f:37:b9:8b:c5:
16:bf:3b:2b:8f:a6:71:b3:a5:2f:79:bb:66:5d:9f:
c1:41:2c:44:8b:24:7b:ef:01:08:10:11:5b:3a:cb:
52:05:e4:c2:54:ed:67:03:89:6f:52:37:3a:0e:84:
f3:16:54:69:20:4e:95:d1:77:75:f6:7e:2d:1c:52:
fd:cd:b0:9c:96:9c:a0:74:4b:b4:ad:96:a1:f7:d9:
1a:dd:18:ca:f8:5a:40:95:c5:f9:a2:39:5f:b4:d1:
83:ff:b0:67:ba:63:a4:d9:46:fd:84:b4:09:7d:3e:
31:de:ec:5b:25:99:4e:f4:b5:52:7d:5a:41:3d:a2:
bc:47:0c:cd:5a:7d:1d:54:77:25:c4:81:65:3a:32:
62:ed:ac:f7:91:8b:eb:a0:aa:08:af:ea:a6:76:ff:
5a:a8:8d:af:60:0b:4b:64:9b:cc:3f:64:07:e4:ac:
c6:bc:bb:98:70:28:6c:9a:c1:39:6b:63:72:5b:a0:
f4:57:3d:21:5d:5e:cd:77:d1:7b:2e:b4:1c:6e:f6:
23:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:23:7B:AA:FE:3A:8F:10:35:E7:BE:71:97:80:DA:89:C0:0D:75:E9
X509v3 Authority Key Identifier:
keyid:EF:5B:49:7F:FD:8B:25:9E:E9:EA:15:7B:02:22:B1:10:26:6C:F5:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/71tJf_2LJZ7p6hV7AiKxECZs9Z8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71tJf_2LJZ7p6hV7AiKxECZs9Z8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/71tJf_2LJZ7p6hV7AiKxECZs9Z8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:4e:b8:d5:45:8e:03:cc:35:19:17:56:ab:79:96:b0:76:9b:
a0:d5:1e:f5:ad:fd:69:85:50:eb:b8:01:00:bb:70:30:67:17:
ef:04:9d:71:f1:1f:ab:fa:e4:d4:b7:84:e9:22:b6:95:f5:1c:
f1:d1:35:93:2d:81:6b:66:45:55:5f:a1:87:c5:bc:fd:93:bc:
cf:4c:dd:56:43:5b:8c:a9:cf:5b:50:a9:08:0a:93:1e:54:c6:
b7:99:e3:54:49:9c:13:2e:2a:02:73:86:2e:a0:29:e7:11:7e:
52:90:b3:07:6a:36:ec:98:57:47:91:98:3d:61:83:ca:83:e7:
69:c0:83:b6:74:c8:8a:da:7d:f3:13:ae:2e:30:d0:e7:c9:d3:
92:b3:a2:62:b1:16:70:91:ac:33:d0:fe:64:93:ac:2c:7d:d9:
7e:ad:ee:16:c8:6e:f9:d3:bd:4a:4b:c2:fa:83:22:f0:14:6c:
a2:6d:66:c3:8d:63:8a:60:7c:37:d2:e8:a6:10:59:0c:40:fd:
3a:0c:ba:41:24:14:08:92:eb:2d:16:2a:58:4b:4e:38:2c:fc:
19:b6:21:4e:ef:96:a4:f3:13:4b:69:61:f7:91:18:a6:13:34:
3e:e0:00:43:6b:70:11:1c:12:55:c6:03:53:53:3e:93:62:52:
4d:ee:a4:dc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjlCQzYxMTAvBgNVBAUTKEVGNUI0OTdGRkQ4QjI1OUVFOUVBMTU3QjAyMjJCMTEw
MjY2Q0Y1OUYwHhcNMjUwMjE3MDA1ODA5WhcNMjUwMjI0MDA1ODA5WjAYMRYwFAYD
VQQDEw02N2IyODlhMS0yMDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyMFiclDiAFs43Z7rYKMokIWouzgVsS7/btm2i+ZnT54qICQukPSE+cDkOyaw
R44JSB+/xf8hfze5i8UWvzsrj6Zxs6UvebtmXZ/BQSxEiyR77wEIEBFbOstSBeTC
VO1nA4lvUjc6DoTzFlRpIE6V0Xd19n4tHFL9zbCclpygdEu0rZah99ka3RjK+FpA
lcX5ojlftNGD/7BnumOk2Ub9hLQJfT4x3uxbJZlO9LVSfVpBPaK8RwzNWn0dVHcl
xIFlOjJi7az3kYvroKoIr+qmdv9aqI2vYAtLZJvMP2QH5KzGvLuYcChsmsE5a2Ny
W6D0Vz0hXV7Nd9F7LrQcbvYjtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8je6r+
Oo8QNee+cZeA2onADXXpMB8GA1UdIwQYMBaAFO9bSX/9iyWe6eoVewIisRAmbPWf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUJDNi80ODkwOTFDRTI2
NjcxMUVDQjlDMjJDNzdDNEY5QUUwMi83MXRKZl8yTEpaN3A2aFY3QWlLeEVDWnM5
WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzcxdEpmXzJMSlo3cDZoVjdBaUt4RUNaczlaOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OUJDNi80ODkwOTFDRTI2NjcxMUVDQjlDMjJDNzdDNEY5QUUwMi83MXRKZl8yTEpa
N3A2aFY3QWlLeEVDWnM5WjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA1TrjVRY4DzDUZF1areZawdpug1R71rf1phVDruAEAu3AwZxfvBJ1x
8R+r+uTUt4TpIraV9Rzx0TWTLYFrZkVVX6GHxbz9k7zPTN1WQ1uMqc9bUKkICpMe
VMa3meNUSZwTLioCc4YuoCnnEX5SkLMHajbsmFdHkZg9YYPKg+dpwIO2dMiK2n3z
E64uMNDnydOSs6JisRZwkawz0P5kk6wsfdl+re4WyG75071KS8L6gyLwFGyibWbD
jWOKYHw30uimEFkMQP06DLpBJBQIkustFipYS044LPwZtiFO75ak8xNLaWH3kRim
EzQ+4ABDa3ARHBJVxgNTUz6TYlJN7qTc
-----END CERTIFICATE-----
Generated at Tue Apr 8 16:16:08 2025 by rpki-client