Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft
File: g7x91dFCfoM0DS32wztiPUPX7KQ.mft (raw, json)
Hash identifier: 44QyNORoXQhuNh2V5rVKY++2WiGHHcECWkNsPUV+Imk=
Subject key identifier: BC:DC:59:72:76:FA:4D:B5:FC:59:1A:69:3A:4D:57:CE:11:5A:66:81
Authority key identifier: 83:BC:7D:D5:D1:42:7E:83:34:0D:2D:F6:C3:3B:62:3D:43:D7:EC:A4
Certificate issuer: /CN=A911B468/serialNumber=83BC7DD5D1427E83340D2DF6C33B623D43D7ECA4
Certificate serial: 0E65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7x91dFCfoM0DS32wztiPUPX7KQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft
Manifest number: 0E5A
Signing time: Fri 31 Jan 2025 17:42:16 +0000
Manifest this update: Fri 31 Jan 2025 17:42:15 +0000
Manifest next update: Fri 07 Feb 2025 17:42:15 +0000
Files and hashes: 1: g7x91dFCfoM0DS32wztiPUPX7KQ.crl (hash: FJdVJwTIiTPc+gK5DF3hSc5g69gZgB6QTsf0A2+38GE=)
2: E1769D329EF711EABE23195AC4F9AE02.roa (hash: bnxide7jSDy0H4+26/GRiKEkbVdX6Jj48LQNDvhocz8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3685 (0xe65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B468/serialNumber=83BC7DD5D1427E83340D2DF6C33B623D43D7ECA4
Validity
Not Before: Jan 31 17:42:15 2025 GMT
Not After : Feb 7 17:42:15 2025 GMT
Subject: CN=679d0b77-d594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:18:f0:2b:36:15:16:06:c1:a0:3b:d1:5e:a2:
e9:d9:53:18:63:34:74:01:cd:22:25:df:10:36:ab:
99:56:77:46:f5:9b:c5:e9:4b:85:ed:a8:14:cb:27:
8b:c2:b7:38:1d:18:f9:7f:a6:03:be:46:bb:4c:7a:
a5:a1:76:e8:84:a1:62:60:f5:bf:e9:3a:d8:e6:59:
06:c3:89:fb:21:ba:6a:85:ee:f8:a6:50:e5:75:de:
13:b1:fd:d7:4c:9c:6b:da:cc:f1:64:6f:56:81:ae:
c6:10:95:a0:7b:f2:08:08:af:d0:76:02:26:d0:00:
26:8b:db:2f:cc:8d:98:35:9f:c0:53:90:e9:56:7f:
43:4d:4b:86:cd:9b:e4:2b:58:fa:fb:da:dd:c0:ad:
67:40:72:8c:04:5b:3c:f3:46:28:04:f8:a4:39:6e:
d7:f0:b7:df:28:1d:04:e7:be:45:6a:14:31:38:5b:
37:51:c0:6d:97:e8:df:ea:72:31:89:40:e8:28:80:
4f:2f:43:9f:aa:ec:3a:c9:0d:23:8c:a8:57:cb:6c:
78:a3:68:54:5c:1c:8b:55:17:4a:08:ac:75:2a:a3:
24:19:e9:8b:85:7b:a4:c0:e0:5c:1f:58:2f:3b:4f:
fc:3e:c3:5e:50:25:54:d8:2b:fb:48:a6:bd:ea:f5:
70:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DC:59:72:76:FA:4D:B5:FC:59:1A:69:3A:4D:57:CE:11:5A:66:81
X509v3 Authority Key Identifier:
keyid:83:BC:7D:D5:D1:42:7E:83:34:0D:2D:F6:C3:3B:62:3D:43:D7:EC:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7x91dFCfoM0DS32wztiPUPX7KQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:cd:a9:7f:65:80:dd:4f:5c:df:cd:3a:3f:d1:c9:be:fc:26:
4e:a5:99:af:dc:1c:40:05:9e:8a:93:e2:41:9f:44:90:8e:5d:
9c:ec:20:6a:75:82:aa:56:d4:2d:b2:93:1a:25:67:22:2c:d5:
7b:19:0b:85:b6:1b:34:f0:70:a7:ae:73:6f:48:81:2d:42:22:
57:27:7f:2a:e3:db:ba:56:3a:20:0c:de:30:0f:c3:c7:30:e1:
ca:a6:f2:02:e6:cd:8a:a7:be:e4:04:16:f4:41:16:70:9d:15:
90:7a:97:a8:81:dc:64:58:92:f5:1f:14:e6:dc:b3:7a:50:85:
02:e8:01:7b:b8:ab:6b:a8:1d:39:16:40:50:74:71:49:e4:a5:
94:52:57:f2:ee:c8:05:23:84:3b:be:72:a5:dc:ec:f9:f1:0b:
f1:db:da:0f:b3:b0:31:9d:f7:b9:7e:5f:4b:6b:e8:95:38:e2:
ea:19:76:39:90:02:63:fd:81:6b:8d:62:4e:63:14:5e:09:0e:
c7:d5:d2:11:3d:ac:28:7a:01:67:e6:91:5b:85:7b:8f:36:15:
dd:5d:17:39:e4:bb:36:7b:df:11:f1:28:87:e3:f9:b0:39:e9:
3c:67:4b:ff:5e:ed:29:69:36:04:2b:0e:ad:79:63:49:76:ff:
fe:9e:99:0e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUI0NjgxMTAvBgNVBAUTKDgzQkM3REQ1RDE0MjdFODMzNDBEMkRGNkMzM0I2MjNE
NDNEN0VDQTQwHhcNMjUwMTMxMTc0MjE1WhcNMjUwMjA3MTc0MjE1WjAYMRYwFAYD
VQQDEw02NzlkMGI3Ny1kNTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2xjwKzYVFgbBoDvRXqLp2VMYYzR0Ac0iJd8QNquZVndG9ZvF6UuF7agUyyeL
wrc4HRj5f6YDvka7THqloXbohKFiYPW/6TrY5lkGw4n7Ibpqhe74plDldd4Tsf3X
TJxr2szxZG9Wga7GEJWge/IICK/QdgIm0AAmi9svzI2YNZ/AU5DpVn9DTUuGzZvk
K1j6+9rdwK1nQHKMBFs880YoBPikOW7X8LffKB0E575FahQxOFs3UcBtl+jf6nIx
iUDoKIBPL0Ofquw6yQ0jjKhXy2x4o2hUXByLVRdKCKx1KqMkGemLhXukwOBcH1gv
O0/8PsNeUCVU2Cv7SKa96vVw3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLzcWXJ2
+k21/FkaaTpNV84RWmaBMB8GA1UdIwQYMBaAFIO8fdXRQn6DNA0t9sM7Yj1D1+yk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQ2OC84MTIyNjAyODkx
MUIxMUU5OTMwMEZFNTdDNEY5QUUwMi9nN3g5MWRGQ2ZvTTBEUzMyd3p0aVBVUFg3
S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2c3eDkxZEZDZm9NMERTMzJ3enRpUFVQWDdLUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QjQ2OC84MTIyNjAyODkxMUIxMUU5OTMwMEZFNTdDNEY5QUUwMi9nN3g5MWRGQ2Zv
TTBEUzMyd3p0aVBVUFg3S1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBizal/ZYDdT1zfzTo/0cm+/CZOpZmv3BxABZ6Kk+JBn0SQjl2c7CBq
dYKqVtQtspMaJWciLNV7GQuFths08HCnrnNvSIEtQiJXJ38q49u6VjogDN4wD8PH
MOHKpvIC5s2Kp77kBBb0QRZwnRWQepeogdxkWJL1HxTm3LN6UIUC6AF7uKtrqB05
FkBQdHFJ5KWUUlfy7sgFI4Q7vnKl3Oz58Qvx29oPs7Axnfe5fl9La+iVOOLqGXY5
kAJj/YFrjWJOYxReCQ7H1dIRPawoegFn5pFbhXuPNhXdXRc55Ls2e98R8SiH4/mw
Oek8Z0v/Xu0paTYEKw6teWNJdv/+npkO
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:19:24 2025 by rpki-client