Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft
File: FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft (raw, json)
Hash identifier: ckan7W9PoxJ/1HNC5VWSg2npqPY3sMorfa5BC7Iy030=
Subject key identifier: 7D:BA:BE:69:9C:39:EE:AA:EB:5D:B8:C4:25:B1:4A:E9:AE:BC:1F:6D
Authority key identifier: 14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29
Certificate issuer: /CN=A9121188/serialNumber=1466407758A8D7B935694896D50275280679AF29
Certificate serial: E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft
Manifest number: E3
Signing time: Fri 31 Jan 2025 04:33:19 +0000
Manifest this update: Fri 31 Jan 2025 04:33:18 +0000
Manifest next update: Fri 07 Feb 2025 04:33:18 +0000
Files and hashes: 1: FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl (hash: mPBtqLXMnZQ+D49MtGVw6Ev9MytDxDoP+kVJKEDe1P0=)
2: 91FC411C836411EE80C08641C4F9AE02.roa (hash: Ig/coMPIPbPWfq5557ThCTPPOBkbOYZiHHJV9OEcZtI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 229 (0xe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121188/serialNumber=1466407758A8D7B935694896D50275280679AF29
Validity
Not Before: Jan 31 04:33:18 2025 GMT
Not After : Feb 7 04:33:18 2025 GMT
Subject: CN=679c528f-71c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d1:c3:41:7a:c6:58:46:af:21:6f:9e:22:63:
0e:8d:1a:83:c7:dc:83:15:49:90:8f:af:c6:d8:d4:
aa:c4:26:ce:62:bd:88:c9:76:f3:1f:0b:5b:88:ff:
9d:c5:d4:87:b1:ee:44:d6:48:3b:16:47:06:fd:2a:
1f:a6:0e:e3:66:1d:ce:f0:70:6b:a7:1c:83:42:81:
69:1b:04:2a:bc:3f:d4:be:92:0c:a9:43:4a:5f:8d:
06:51:b4:18:35:8a:3d:11:df:92:cd:3b:71:b5:59:
47:ea:f6:b8:24:c3:c7:e0:f8:8a:b1:20:7a:24:e0:
6e:5d:66:c6:44:6e:f0:46:e5:f7:57:0f:17:1b:09:
c0:98:50:d9:b4:33:a1:10:55:2c:3f:f1:af:53:86:
1d:c2:e5:27:8d:0f:fe:05:69:a8:ec:67:f0:20:8f:
dd:a0:b5:21:a2:cc:81:d3:60:77:0f:9b:83:03:75:
0f:9a:ea:f7:0d:8b:83:ef:1c:81:9e:cd:a8:1d:0e:
90:a8:e7:ae:f6:e0:94:88:0b:98:40:e1:6b:29:eb:
57:73:64:db:97:3e:c6:ba:11:b1:8d:97:b0:ef:74:
13:dc:57:b0:3c:0d:16:9c:ff:9b:50:48:a7:4b:c3:
eb:37:73:1d:75:fa:ff:5c:fd:e9:e6:38:21:94:5d:
6f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BA:BE:69:9C:39:EE:AA:EB:5D:B8:C4:25:B1:4A:E9:AE:BC:1F:6D
X509v3 Authority Key Identifier:
keyid:14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:4a:b3:24:0c:2f:21:70:cd:2a:2f:f9:57:50:f3:ca:bb:f6:
0b:9e:00:ac:11:f4:53:49:37:3f:a9:24:31:a5:45:fe:9d:64:
07:38:97:df:5a:e3:99:ee:38:f2:73:b9:cd:05:0a:93:79:da:
14:8a:6d:fa:6b:4b:17:98:52:d8:99:04:9e:48:5d:37:0c:ca:
c6:2c:aa:2a:48:ed:19:33:e4:51:5a:d3:44:39:57:ae:af:ba:
a4:3d:f4:0e:96:8e:0c:5c:9d:34:47:86:b5:9b:4f:40:01:8f:
8d:eb:d3:fd:e8:a2:fe:f7:da:e3:72:d0:dc:2c:32:63:44:35:
0f:10:7a:69:34:b5:bf:69:05:af:38:3d:ce:fc:df:81:e9:cf:
d0:d5:53:25:6b:52:3e:7c:75:94:c5:5e:10:bf:8f:4f:10:ac:
e2:72:2e:50:24:60:84:5b:18:d6:2f:44:a4:4b:ef:6b:eb:39:
1b:7b:4c:61:ed:b2:98:39:60:f4:d2:30:85:47:7e:54:3f:87:
b8:c5:7d:72:19:61:eb:a5:38:b5:52:a8:4a:9d:e4:cf:93:e6:
f8:f5:23:f8:a0:38:fb:9a:7c:26:41:3f:35:dc:ab:fd:ca:0e:
ad:2f:ae:21:7a:5e:b7:9c:b6:b3:67:73:8a:24:7b:5c:2a:ba:
c1:2c:e9:73
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjExODgxMTAvBgNVBAUTKDE0NjY0MDc3NThBOEQ3QjkzNTY5NDg5NkQ1MDI3NTI4
MDY3OUFGMjkwHhcNMjUwMTMxMDQzMzE4WhcNMjUwMjA3MDQzMzE4WjAYMRYwFAYD
VQQDEw02NzljNTI4Zi03MWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwtHDQXrGWEavIW+eImMOjRqDx9yDFUmQj6/G2NSqxCbOYr2IyXbzHwtbiP+d
xdSHse5E1kg7FkcG/Sofpg7jZh3O8HBrpxyDQoFpGwQqvD/UvpIMqUNKX40GUbQY
NYo9Ed+SzTtxtVlH6va4JMPH4PiKsSB6JOBuXWbGRG7wRuX3Vw8XGwnAmFDZtDOh
EFUsP/GvU4YdwuUnjQ/+BWmo7GfwII/doLUhosyB02B3D5uDA3UPmur3DYuD7xyB
ns2oHQ6QqOeu9uCUiAuYQOFrKetXc2Tblz7GuhGxjZew73QT3FewPA0WnP+bUEin
S8PrN3Mddfr/XP3p5jghlF1vOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH26vmmc
Oe6q6124xCWxSumuvB9tMB8GA1UdIwQYMBaAFBRmQHdYqNe5NWlIltUCdSgGea8p
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTE4OC84NEJBQTA2Qzgz
NjMxMUVFQkMxOTFCMUVDNEY5QUUwMi9GR1pBZDFpbzE3azFhVWlXMVFKMUtBWjVy
eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZHWkFkMWlvMTdrMWFVaVcxUUoxS0FaNXJ5ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MTE4OC84NEJBQTA2QzgzNjMxMUVFQkMxOTFCMUVDNEY5QUUwMi9GR1pBZDFpbzE3
azFhVWlXMVFKMUtBWjVyeWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCYSrMkDC8hcM0qL/lXUPPKu/YLngCsEfRTSTc/qSQxpUX+nWQHOJff
WuOZ7jjyc7nNBQqTedoUim36a0sXmFLYmQSeSF03DMrGLKoqSO0ZM+RRWtNEOVeu
r7qkPfQOlo4MXJ00R4a1m09AAY+N69P96KL+99rjctDcLDJjRDUPEHppNLW/aQWv
OD3O/N+B6c/Q1VMla1I+fHWUxV4Qv49PEKzici5QJGCEWxjWL0SkS+9r6zkbe0xh
7bKYOWD00jCFR35UP4e4xX1yGWHrpTi1UqhKneTPk+b49SP4oDj7mnwmQT813Kv9
yg6tL64hel63nLazZ3OKJHtcKrrBLOlz
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:01:03 2025 by rpki-client