Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.mft
File: mWsZb8o8chhx7p4UE5Mri1DtCas.mft (raw, json)
Hash identifier: QBWiev8+18byrI99XI9QSBjgn9MA91gDC7CkuiDb8FA=
Subject key identifier: BC:8D:BA:1F:A9:3A:BE:65:18:3C:AC:FE:C0:E4:51:26:AD:7E:07:EB
Authority key identifier: 99:6B:19:6F:CA:3C:72:18:71:EE:9E:14:13:93:2B:8B:50:ED:09:AB
Certificate issuer: /CN=A91164D3/serialNumber=996B196FCA3C721871EE9E1413932B8B50ED09AB
Certificate serial: 72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWsZb8o8chhx7p4UE5Mri1DtCas.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.mft
Manifest number: 71
Signing time: Fri 31 Jan 2025 05:52:26 +0000
Manifest this update: Fri 31 Jan 2025 05:52:25 +0000
Manifest next update: Fri 07 Feb 2025 05:52:25 +0000
Files and hashes: 1: mWsZb8o8chhx7p4UE5Mri1DtCas.crl (hash: 6M7iwu0MpmQFlkJt+DAMwqE3Jre+ilQvKE/0mvZX9AE=)
2: 934F8250338A11EFB9C7A738C4F9AE02.roa (hash: 5xe8CAklHEvfHNnz1/f5nBginvtCFLJVR3UsgZ34D1c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114 (0x72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91164D3/serialNumber=996B196FCA3C721871EE9E1413932B8B50ED09AB
Validity
Not Before: Jan 31 05:52:25 2025 GMT
Not After : Feb 7 05:52:25 2025 GMT
Subject: CN=679c6519-6a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:73:86:08:1a:a7:bc:73:db:c2:97:5e:0d:a4:
4b:4c:a7:77:25:f3:10:4b:c4:70:6c:e2:c7:f5:5f:
5e:6b:b1:67:9f:c8:3e:f1:c4:4c:4c:0c:5a:46:62:
e7:89:54:df:a9:19:be:74:77:c4:43:55:33:91:9c:
21:d1:f2:ff:85:68:b4:72:51:00:39:83:51:e4:f2:
4e:4d:ff:bc:73:8a:3d:46:59:b8:b6:55:ba:74:0b:
cc:5b:5f:11:55:5c:c9:80:25:3c:41:fd:5a:aa:08:
50:c2:58:ec:c4:9d:aa:68:10:40:cd:20:4c:7a:50:
d5:9c:be:db:ee:c7:41:b6:82:35:e2:fc:d9:8f:44:
4a:a3:6b:33:24:0f:9d:06:54:06:5b:0e:08:97:93:
aa:03:6f:d8:e3:a4:33:a5:98:9a:6c:df:0a:8e:23:
c6:13:8c:89:79:0e:2c:13:54:aa:cd:fd:5a:8e:a2:
c4:5c:08:b1:91:60:92:15:25:4c:53:69:15:7b:49:
97:7d:36:c2:bf:8b:22:63:aa:4a:01:92:dd:5d:ee:
f2:41:a9:82:a4:1e:04:4f:a5:df:bd:63:de:80:03:
6a:b0:a5:c1:ae:d5:1e:aa:81:97:2d:89:18:ee:73:
c9:35:c6:44:81:e5:e2:f4:77:64:ec:68:4b:c4:32:
1d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8D:BA:1F:A9:3A:BE:65:18:3C:AC:FE:C0:E4:51:26:AD:7E:07:EB
X509v3 Authority Key Identifier:
keyid:99:6B:19:6F:CA:3C:72:18:71:EE:9E:14:13:93:2B:8B:50:ED:09:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWsZb8o8chhx7p4UE5Mri1DtCas.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:fc:e9:91:0b:c7:e0:e6:c2:c3:9a:96:92:b1:82:ae:3e:9f:
57:2f:33:dd:93:52:14:5c:07:d0:d6:f9:b1:53:b0:6a:8b:c0:
2f:14:4e:3f:db:fd:10:fe:99:51:80:cb:1e:74:b2:75:13:b0:
2f:d6:41:d6:65:60:9f:2b:18:fc:ef:e1:82:2b:6d:af:bd:e1:
d9:c0:e7:b7:7c:c5:b7:14:96:56:26:65:43:b9:de:59:2a:fc:
5c:0d:f9:ee:83:01:a4:f1:39:ea:18:5d:93:6b:8a:60:4b:3d:
dd:09:9b:3d:62:39:5b:52:80:6f:4c:b1:4d:db:f9:63:0d:d8:
3e:22:3b:86:57:29:2b:a2:16:f2:3c:12:34:17:26:6e:13:ef:
a4:dc:02:21:f7:28:70:d7:97:63:06:6b:51:04:ea:4c:30:a9:
29:c6:6e:96:26:c9:f2:09:e4:f2:eb:90:58:59:9d:b0:ed:b2:
8c:d3:b1:02:4d:e1:9e:4f:71:5f:60:32:f2:ca:2d:ec:6e:f2:
1c:62:ac:9e:0b:25:79:c9:41:b3:ca:5c:5a:3b:76:20:92:a8:
a3:52:78:e8:13:7a:62:24:72:f3:dd:c6:8b:24:37:94:d8:3a:
cd:d3:96:b8:8b:a2:71:26:63:1e:29:41:3b:98:5f:64:78:e9:
c8:bc:61:5b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
NjREMzExMC8GA1UEBRMoOTk2QjE5NkZDQTNDNzIxODcxRUU5RTE0MTM5MzJCOEI1
MEVEMDlBQjAeFw0yNTAxMzEwNTUyMjVaFw0yNTAyMDcwNTUyMjVaMBgxFjAUBgNV
BAMTDTY3OWM2NTE5LTZhOGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDsc4YIGqe8c9vCl14NpEtMp3cl8xBLxHBs4sf1X15rsWefyD7xxExMDFpGYueJ
VN+pGb50d8RDVTORnCHR8v+FaLRyUQA5g1Hk8k5N/7xzij1GWbi2Vbp0C8xbXxFV
XMmAJTxB/VqqCFDCWOzEnapoEEDNIEx6UNWcvtvux0G2gjXi/NmPREqjazMkD50G
VAZbDgiXk6oDb9jjpDOlmJps3wqOI8YTjIl5DiwTVKrN/VqOosRcCLGRYJIVJUxT
aRV7SZd9NsK/iyJjqkoBkt1d7vJBqYKkHgRPpd+9Y96AA2qwpcGu1R6qgZctiRju
c8k1xkSB5eL0d2TsaEvEMh2vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvI26H6k6
vmUYPKz+wORRJq1+B+swHwYDVR0jBBgwFoAUmWsZb8o8chhx7p4UE5Mri1DtCasw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2NEQzLzE1NTA0OEVBMzM4
OTExRUY5OUZEMUMyN0M0RjlBRTAyL21Xc1piOG84Y2hoeDdwNFVFNU1yaTFEdENh
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbVdzWmI4bzhjaGh4N3A0VUU1TXJpMUR0Q2FzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2
NEQzLzE1NTA0OEVBMzM4OTExRUY5OUZEMUMyN0M0RjlBRTAyL21Xc1piOG84Y2ho
eDdwNFVFNU1yaTFEdENhcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJ386ZELx+DmwsOalpKxgq4+n1cvM92TUhRcB9DW+bFTsGqLwC8UTj/b
/RD+mVGAyx50snUTsC/WQdZlYJ8rGPzv4YIrba+94dnA57d8xbcUllYmZUO53lkq
/FwN+e6DAaTxOeoYXZNrimBLPd0Jmz1iOVtSgG9MsU3b+WMN2D4iO4ZXKSuiFvI8
EjQXJm4T76TcAiH3KHDXl2MGa1EE6kwwqSnGbpYmyfIJ5PLrkFhZnbDtsozTsQJN
4Z5PcV9gMvLKLexu8hxirJ4LJXnJQbPKXFo7diCSqKNSeOgTemIkcvPdxoskN5TY
Os3TlriLonEmYx4pQTuYX2R46ci8YVs=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:09:04 2025 by rpki-client