Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
File: U8Dn8GiqHvADoL7ipdUtvInc37g.mft (raw, json)
Hash identifier: 7LdCPXqskma2GnAtamaPxCk9Xl+5b5M4evrZgmaiiJU=
Subject key identifier: 18:AA:89:D6:50:BC:7E:85:DA:07:FF:21:BB:41:7B:40:2C:1A:98:59
Authority key identifier: 53:C0:E7:F0:68:AA:1E:F0:03:A0:BE:E2:A5:D5:2D:BC:89:DC:DF:B8
Certificate issuer: /CN=A91109A3/serialNumber=53C0E7F068AA1EF003A0BEE2A5D52DBC89DCDFB8
Certificate serial: E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
Manifest number: E2
Signing time: Fri 31 Jan 2025 04:40:09 +0000
Manifest this update: Fri 31 Jan 2025 04:40:08 +0000
Manifest next update: Fri 07 Feb 2025 04:40:08 +0000
Files and hashes: 1: U8Dn8GiqHvADoL7ipdUtvInc37g.crl (hash: D+YqqwKPEvEbe/CPH87zlsFCTxFRpPGv+4ipOilcvvU=)
2: FEB0698C941C11EE89E27567C4F9AE02.roa (hash: L26fzptytT9bxS3tMFpfzEmv3OkfRWvu4Ly32GIlRg8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91109A3/serialNumber=53C0E7F068AA1EF003A0BEE2A5D52DBC89DCDFB8
Validity
Not Before: Jan 31 04:40:08 2025 GMT
Not After : Feb 7 04:40:08 2025 GMT
Subject: CN=679c5429-20dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:76:d5:99:55:53:06:4d:4b:9b:18:8f:0f:f4:
f4:3d:df:52:3a:1c:6e:2a:30:f0:33:40:04:92:6c:
c7:b9:3f:6e:41:ad:d5:cf:09:2d:00:91:c7:5a:e7:
28:15:36:26:63:82:48:c1:75:28:49:92:c7:50:16:
35:db:35:04:dd:3f:4a:df:c7:a5:82:ee:68:c0:ac:
9c:7d:4c:66:65:5d:0d:cb:b9:b6:87:bb:6e:15:a8:
22:9e:23:cb:f6:8a:a6:0e:e5:44:08:d4:56:c4:a6:
25:4e:c1:96:85:68:93:25:2a:84:f0:b5:5d:04:65:
a0:5f:6e:5b:07:d8:35:10:5b:02:f6:5f:b9:17:7b:
fd:46:a6:20:fa:19:35:28:6a:08:64:40:e4:d1:91:
03:f0:7b:eb:f3:f1:87:49:38:e4:5f:49:40:10:73:
29:55:de:2b:5e:7e:01:35:1d:67:a7:f5:89:26:ca:
cc:0b:e2:9b:14:4e:e6:dd:cd:40:0e:3f:b2:6e:41:
19:f6:65:b2:04:3a:b5:47:bb:19:71:ca:d4:fe:e7:
a4:18:66:a8:a3:ce:32:07:ff:8e:f5:4a:7c:b2:1c:
4d:0f:5a:02:f4:79:0d:38:6b:69:a3:79:1b:71:46:
63:47:43:69:34:ee:02:11:46:0b:82:b2:fe:ec:a5:
d5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AA:89:D6:50:BC:7E:85:DA:07:FF:21:BB:41:7B:40:2C:1A:98:59
X509v3 Authority Key Identifier:
keyid:53:C0:E7:F0:68:AA:1E:F0:03:A0:BE:E2:A5:D5:2D:BC:89:DC:DF:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:74:cd:27:d3:7a:a1:1b:4d:02:28:43:ba:4c:8c:bc:1a:66:
6d:cf:f0:7f:b0:f4:89:76:ec:49:74:e4:48:e8:d2:1f:8f:51:
68:0a:97:0f:8e:43:9d:4d:fe:ab:d6:07:43:79:2a:05:f4:90:
28:35:ea:41:d8:f7:e5:17:d1:f7:c1:11:bd:35:aa:12:13:4e:
5f:1c:2f:e2:25:32:df:59:b5:91:ca:a9:a4:54:a2:04:f9:5e:
43:1f:58:4f:37:b8:64:fc:18:62:fb:01:d9:99:2d:84:31:00:
ac:5a:17:4d:c0:18:c5:8e:a4:06:4f:4f:30:2b:9f:ab:8f:cc:
c0:fb:c8:f8:9c:cb:aa:b0:9f:aa:b0:27:6e:55:de:45:d4:cc:
bb:0b:19:12:48:1a:bf:0a:e8:6c:b4:e3:d5:de:a3:87:cf:57:
bb:d3:81:15:82:db:82:e2:82:5a:a6:da:ed:35:04:1b:6e:74:
3b:84:f8:a7:31:8b:a3:60:3f:26:4d:95:88:c7:5e:d8:f9:3f:
16:76:ae:91:bb:f0:c3:86:a6:cb:23:a3:b3:20:6e:24:b1:c3:
51:eb:01:e8:42:e6:15:49:df:8c:c3:11:33:6c:0e:b6:66:21:
a1:c1:5f:c4:58:e8:3b:f0:6a:b3:ec:0d:47:31:ae:b7:ab:e1:
50:32:d8:ce
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTA5QTMxMTAvBgNVBAUTKDUzQzBFN0YwNjhBQTFFRjAwM0EwQkVFMkE1RDUyREJD
ODlEQ0RGQjgwHhcNMjUwMTMxMDQ0MDA4WhcNMjUwMjA3MDQ0MDA4WjAYMRYwFAYD
VQQDEw02NzljNTQyOS0yMGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA13bVmVVTBk1LmxiPD/T0Pd9SOhxuKjDwM0AEkmzHuT9uQa3VzwktAJHHWuco
FTYmY4JIwXUoSZLHUBY12zUE3T9K38elgu5owKycfUxmZV0Ny7m2h7tuFaginiPL
9oqmDuVECNRWxKYlTsGWhWiTJSqE8LVdBGWgX25bB9g1EFsC9l+5F3v9RqYg+hk1
KGoIZEDk0ZED8Hvr8/GHSTjkX0lAEHMpVd4rXn4BNR1np/WJJsrMC+KbFE7m3c1A
Dj+ybkEZ9mWyBDq1R7sZccrU/uekGGaoo84yB/+O9Up8shxND1oC9HkNOGtpo3kb
cUZjR0NpNO4CEUYLgrL+7KXV0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBiqidZQ
vH6F2gf/IbtBe0AsGphZMB8GA1UdIwQYMBaAFFPA5/Boqh7wA6C+4qXVLbyJ3N+4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDlBMy80M0ZCNjJGQThG
RTgxMUVFOTJGNUM3NkFDNEY5QUUwMi9VOERuOEdpcUh2QURvTDdpcGRVdHZJbmMz
N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1U4RG44R2lxSHZBRG9MN2lwZFV0dkluYzM3Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDlBMy80M0ZCNjJGQThGRTgxMUVFOTJGNUM3NkFDNEY5QUUwMi9VOERuOEdpcUh2
QURvTDdpcGRVdHZJbmMzN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC1dM0n03qhG00CKEO6TIy8GmZtz/B/sPSJduxJdORI6NIfj1FoCpcP
jkOdTf6r1gdDeSoF9JAoNepB2PflF9H3wRG9NaoSE05fHC/iJTLfWbWRyqmkVKIE
+V5DH1hPN7hk/Bhi+wHZmS2EMQCsWhdNwBjFjqQGT08wK5+rj8zA+8j4nMuqsJ+q
sCduVd5F1My7CxkSSBq/CuhstOPV3qOHz1e704EVgtuC4oJaptrtNQQbbnQ7hPin
MYujYD8mTZWIx17Y+T8Wdq6Ru/DDhqbLI6OzIG4kscNR6wHoQuYVSd+MwxEzbA62
ZiGhwV/EWOg78Gqz7A1HMa63q+FQMtjO
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:46:15 2025 by rpki-client