Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft
File: -7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft (raw, json)
Hash identifier: vJnxmTEbN0ZhX9TpBfbFE8YGUK4Pm4b1imTeo87VEUE=
Subject key identifier: 01:D7:78:70:2A:AF:B8:C9:BF:CB:A2:2A:7F:AD:AC:B3:76:70:C8:62
Authority key identifier: FB:BA:B6:90:AD:FE:10:EF:43:4B:71:89:54:F1:73:87:D6:38:46:68
Certificate issuer: /CN=A91230B8/serialNumber=FBBAB690ADFE10EF434B718954F17387D6384668
Certificate serial: 018C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft
Manifest number: 0186
Signing time: Fri 31 Jan 2025 03:19:40 +0000
Manifest this update: Fri 31 Jan 2025 03:19:40 +0000
Manifest next update: Fri 07 Feb 2025 03:19:40 +0000
Files and hashes: 1: -7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl (hash: /dmhG3xPq533cbRrSe2djqVPbPcMWIrnYV0HBM60Cb8=)
2: B966D678C0C611EE8F5F0458C4F9AE02.roa (hash: J2faMLBlgt9GzAmsM2dSN7aVP9JzekH0nQNt2xO6dtk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 396 (0x18c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91230B8/serialNumber=FBBAB690ADFE10EF434B718954F17387D6384668
Validity
Not Before: Jan 31 03:19:40 2025 GMT
Not After : Feb 7 03:19:40 2025 GMT
Subject: CN=679c414c-d261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6a:98:44:41:da:f5:43:03:79:14:f5:31:f3:
9a:8d:0f:39:20:5b:e3:ed:01:8f:3a:97:5e:ce:0a:
9f:b1:64:10:c9:97:83:98:5a:aa:2e:3b:3b:e1:ab:
24:04:6a:81:c0:ad:3a:67:4a:08:cd:d0:9b:41:0f:
6a:47:c7:d2:6b:dc:59:c1:6b:ea:2b:1b:b6:4c:6c:
21:c1:93:91:7b:37:72:b8:6c:a9:bc:40:0b:7c:6b:
0a:30:10:0d:f2:95:ad:d0:7b:f3:30:fe:70:2e:3b:
62:ef:0a:d5:c9:1b:ab:de:15:bd:dd:7b:90:62:f9:
69:25:fd:27:92:73:52:36:9f:53:ae:7a:b1:bd:bc:
a7:0c:90:bd:42:c6:61:d1:71:12:68:dc:6b:6f:fc:
d0:77:06:a8:8a:6e:24:ba:58:3f:0e:96:88:13:32:
46:f0:32:63:1d:0d:b7:e8:ac:33:6d:0d:58:59:2d:
82:4d:3a:e6:7f:c1:b4:bc:47:bc:0e:f6:0f:89:09:
0e:a5:f8:c1:2c:e1:b6:60:74:ee:13:12:5b:b1:38:
a7:f8:85:c6:a5:b0:fd:42:4b:bc:91:fb:74:0b:ac:
97:d8:e5:82:4f:f0:4d:07:36:c3:92:e6:5e:f1:9a:
91:1e:27:98:f2:ff:f2:9f:68:4b:04:4c:fd:92:3b:
99:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D7:78:70:2A:AF:B8:C9:BF:CB:A2:2A:7F:AD:AC:B3:76:70:C8:62
X509v3 Authority Key Identifier:
keyid:FB:BA:B6:90:AD:FE:10:EF:43:4B:71:89:54:F1:73:87:D6:38:46:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:b0:50:6f:0d:6b:13:1a:9b:1c:6a:f7:f9:17:d8:aa:4f:ae:
d5:6e:0e:74:fd:9a:13:a6:f5:64:cc:71:d8:9d:59:1b:78:47:
6c:51:c6:58:eb:40:f0:6a:2e:a6:3e:b3:b6:be:26:4e:75:51:
cc:55:94:4c:65:05:7a:80:ab:64:8c:b3:77:db:9e:3b:c5:fd:
5a:46:5e:ad:d9:46:38:11:04:f8:39:c0:ac:90:3c:de:c6:7c:
15:f6:6a:78:1d:c8:77:83:99:6b:33:6b:94:bf:c9:eb:05:5c:
ea:62:83:cb:51:62:67:89:17:4d:45:c2:69:d1:9d:de:24:a2:
84:9b:99:a2:a9:77:21:bf:44:c0:2f:bb:cd:1f:f7:2e:98:53:
c0:b7:74:5e:34:ef:cf:43:94:0b:3c:ab:8d:3b:41:ed:dd:9d:
f9:48:80:86:86:da:5f:5e:e0:ed:a7:8e:e8:63:38:90:7f:08:
a0:69:d0:c0:95:58:f0:34:62:ed:2c:d1:91:e3:71:c7:4f:8c:
e9:fc:99:19:21:4a:c9:76:15:d6:ee:75:03:54:ea:73:4a:14:
24:d7:f4:ec:24:5b:f2:d5:17:54:cc:b5:d6:1f:1a:7c:2b:64:
ec:94:76:6b:0b:05:13:a5:e2:69:07:8f:19:e3:b2:d8:e9:44:
61:6b:d4:36
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjMwQjgxMTAvBgNVBAUTKEZCQkFCNjkwQURGRTEwRUY0MzRCNzE4OTU0RjE3Mzg3
RDYzODQ2NjgwHhcNMjUwMTMxMDMxOTQwWhcNMjUwMjA3MDMxOTQwWjAYMRYwFAYD
VQQDEw02NzljNDE0Yy1kMjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAomqYREHa9UMDeRT1MfOajQ85IFvj7QGPOpdezgqfsWQQyZeDmFqqLjs74ask
BGqBwK06Z0oIzdCbQQ9qR8fSa9xZwWvqKxu2TGwhwZORezdyuGypvEALfGsKMBAN
8pWt0HvzMP5wLjti7wrVyRur3hW93XuQYvlpJf0nknNSNp9TrnqxvbynDJC9QsZh
0XESaNxrb/zQdwaoim4kulg/DpaIEzJG8DJjHQ236KwzbQ1YWS2CTTrmf8G0vEe8
DvYPiQkOpfjBLOG2YHTuExJbsTin+IXGpbD9Qku8kft0C6yX2OWCT/BNBzbDkuZe
8ZqRHieY8v/yn2hLBEz9kjuZ9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAHXeHAq
r7jJv8uiKn+trLN2cMhiMB8GA1UdIwQYMBaAFPu6tpCt/hDvQ0txiVTxc4fWOEZo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzBCOC9GMUY4OTBGMDk2
NTkxMUVEOENDNzhBNjBDNEY5QUUwMi8tN3Eya0szLUVPOURTM0dKVlBGemg5WTRS
bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy03cTJrSzMtRU85RFMzR0pWUEZ6aDlZNFJtZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MzBCOC9GMUY4OTBGMDk2NTkxMUVEOENDNzhBNjBDNEY5QUUwMi8tN3Eya0szLUVP
OURTM0dKVlBGemg5WTRSbWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCwsFBvDWsTGpscavf5F9iqT67Vbg50/ZoTpvVkzHHYnVkbeEdsUcZY
60Dwai6mPrO2viZOdVHMVZRMZQV6gKtkjLN32547xf1aRl6t2UY4EQT4OcCskDze
xnwV9mp4Hch3g5lrM2uUv8nrBVzqYoPLUWJniRdNRcJp0Z3eJKKEm5miqXchv0TA
L7vNH/cumFPAt3ReNO/PQ5QLPKuNO0Ht3Z35SICGhtpfXuDtp47oYziQfwigadDA
lVjwNGLtLNGR43HHT4zp/JkZIUrJdhXW7nUDVOpzShQk1/TsJFvy1RdUzLXWHxp8
K2TslHZrCwUTpeJpB48Z47LY6URha9Q2
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:11:28 2025 by rpki-client