Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft
File: H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft (raw, json)
Hash identifier: oDQp1sIwUt7jdob4vuviX0F5dLqyhACBqfeDH/ACFA0=
Subject key identifier: 30:1D:4C:4E:87:6D:C0:56:13:08:5E:EE:A9:07:4C:D3:FD:F3:E3:23
Authority key identifier: 1F:DF:88:B3:59:F4:48:ED:4C:71:2F:9F:15:7D:08:3C:C2:11:4C:14
Certificate issuer: /CN=A91C3ED8/serialNumber=1FDF88B359F448ED4C712F9F157D083CC2114C14
Certificate serial: 01B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft
Manifest number: 01B4
Signing time: Sat 29 Mar 2025 02:42:58 +0000
Manifest this update: Sat 29 Mar 2025 02:42:57 +0000
Manifest next update: Sat 05 Apr 2025 02:42:57 +0000
Files and hashes: 1: H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl (hash: 0jtkP9GgLqE3p5k8wHfnMtb7cigoVUzkUL8KTdIGPm8=)
2: 51CC97DE72D711ED95179B5EC4F9AE02.roa (hash: k1Zwpv5X+PU26A87kFtIjFMNyUjqNWGBGW/MolkeBNQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 440 (0x1b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3ED8
Validity
Not Before: Mar 29 02:42:57 2025 GMT
Not After : Apr 5 02:42:57 2025 GMT
Subject: CN=67e75e32-ad3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:09:07:4c:4f:ec:08:e2:c3:b6:9a:66:e5:fc:
12:d5:48:9b:7c:8e:b1:7b:28:d0:ed:e0:c6:a1:59:
68:40:a3:46:8c:b0:2a:86:cb:ed:0e:7c:33:92:e8:
aa:02:d6:c9:1b:68:7c:48:1f:ef:4b:09:e4:41:ad:
b0:f6:56:a0:a8:92:56:c9:c6:d8:0c:40:bf:59:33:
f1:c2:cc:de:eb:2e:48:5e:c5:1a:85:1b:94:78:67:
fd:0f:c7:de:53:3b:b5:f2:88:38:d0:cd:50:e9:bd:
f5:92:f8:be:69:ce:28:19:f2:db:30:db:1a:9b:0c:
20:85:eb:e4:ea:41:cf:7c:18:bf:f9:bd:cc:6a:45:
b6:3c:11:72:1f:34:2e:1f:1f:af:2e:ec:05:68:71:
ea:b9:91:48:99:72:12:f4:6c:a6:ce:97:07:a7:b1:
28:be:0c:d1:3c:51:bb:2f:bf:4b:65:8e:45:3b:84:
48:fe:d4:79:6b:7e:5f:59:86:45:42:2f:5d:0e:f1:
23:6d:86:a7:82:f0:96:27:dd:58:63:ec:c8:5d:ae:
81:44:1b:25:28:92:f4:13:d6:4f:fe:01:70:b8:4b:
9b:73:57:af:19:b4:e7:4a:be:26:86:b7:a0:88:c0:
1d:2c:2d:c3:1d:36:80:65:0d:f9:54:6c:1a:c0:a8:
92:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1D:4C:4E:87:6D:C0:56:13:08:5E:EE:A9:07:4C:D3:FD:F3:E3:23
X509v3 Authority Key Identifier:
keyid:1F:DF:88:B3:59:F4:48:ED:4C:71:2F:9F:15:7D:08:3C:C2:11:4C:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:75:ab:9b:c6:22:f4:01:ba:99:97:a9:37:de:1c:01:0a:71:
0c:12:2a:74:97:10:37:02:0b:f7:01:fc:51:bd:cb:0e:57:c6:
84:2e:55:43:82:ab:23:68:30:82:76:85:ad:36:e1:33:8b:17:
ef:ed:a7:e1:23:ec:c6:43:b5:19:54:79:9e:a9:19:03:c9:fc:
4e:24:30:2f:12:56:76:c3:0f:39:d8:6d:d6:13:88:da:f6:54:
9b:18:80:10:f0:de:a4:4c:62:c6:3e:2e:c5:bf:17:00:66:8d:
30:9a:64:4c:6a:f8:9a:64:db:db:f9:24:26:2e:d6:e6:0f:18:
41:7f:6f:e0:b2:99:b0:6a:3a:f5:ad:83:c7:fe:76:bb:cb:9c:
c9:69:ac:a9:53:21:99:04:71:3a:22:81:66:9c:0e:c9:ce:4b:
e1:f4:c5:45:cc:3f:b6:e9:c2:ca:27:42:42:a0:ce:e2:44:82:
39:a0:8b:94:88:81:1f:16:20:85:22:bb:cc:0c:81:cd:d2:ca:
08:3b:54:7f:e6:1d:e2:2e:8d:34:5f:3d:07:24:aa:ca:dd:f8:
e8:3f:e9:7b:0a:b9:1e:48:5e:e8:f3:20:84:78:09:fa:30:23:
54:ed:0f:7b:37:5b:e9:13:b3:a5:15:07:81:0f:5e:ae:eb:fb:
e7:b8:9e:e3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzNFRDgxMTAvBgNVBAUTKDFGREY4OEIzNTlGNDQ4RUQ0QzcxMkY5RjE1N0QwODND
QzIxMTRDMTQwHhcNMjUwMzI5MDI0MjU3WhcNMjUwNDA1MDI0MjU3WjAYMRYwFAYD
VQQDEw02N2U3NWUzMi1hZDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsAkHTE/sCOLDtppm5fwS1UibfI6xeyjQ7eDGoVloQKNGjLAqhsvtDnwzkuiq
AtbJG2h8SB/vSwnkQa2w9lagqJJWycbYDEC/WTPxwsze6y5IXsUahRuUeGf9D8fe
Uzu18og40M1Q6b31kvi+ac4oGfLbMNsamwwghevk6kHPfBi/+b3MakW2PBFyHzQu
Hx+vLuwFaHHquZFImXIS9GymzpcHp7EovgzRPFG7L79LZY5FO4RI/tR5a35fWYZF
Qi9dDvEjbYangvCWJ91YY+zIXa6BRBslKJL0E9ZP/gFwuEubc1evGbTnSr4mhreg
iMAdLC3DHTaAZQ35VGwawKiSjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDAdTE6H
bcBWEwhe7qkHTNP98+MjMB8GA1UdIwQYMBaAFB/fiLNZ9EjtTHEvnxV9CDzCEUwU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0VEOC8zQzU1MzNBRTcy
RDUxMUVEOTVGNTU5NUVDNEY5QUUwMi9IOS1JczFuMFNPMU1jUy1mRlgwSVBNSVJU
QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0g5LUlzMW4wU08xTWNTLWZGWDBJUE1JUlRCUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
M0VEOC8zQzU1MzNBRTcyRDUxMUVEOTVGNTU5NUVDNEY5QUUwMi9IOS1JczFuMFNP
MU1jUy1mRlgwSVBNSVJUQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBldaubxiL0AbqZl6k33hwBCnEMEip0lxA3Agv3AfxRvcsOV8aELlVD
gqsjaDCCdoWtNuEzixfv7afhI+zGQ7UZVHmeqRkDyfxOJDAvElZ2ww852G3WE4ja
9lSbGIAQ8N6kTGLGPi7FvxcAZo0wmmRMaviaZNvb+SQmLtbmDxhBf2/gspmwajr1
rYPH/na7y5zJaaypUyGZBHE6IoFmnA7Jzkvh9MVFzD+26cLKJ0JCoM7iRII5oIuU
iIEfFiCFIrvMDIHN0soIO1R/5h3iLo00Xz0HJKrK3fjoP+l7CrkeSF7o8yCEeAn6
MCNU7Q97N1vpE7OlFQeBD16u6/vnuJ7j
-----END CERTIFICATE-----
Generated at Thu Apr 10 13:32:54 2025 by rpki-client