Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft
File: EMpiwqdJv5H1YirewPGWGEk8u6k.mft (raw, json)
Hash identifier: 39TjUxNmMlKcjKdUB8//jQEFU97jJvIhHaKGjxCRDn8=
Subject key identifier: DF:C7:77:93:F4:7E:1A:A0:C4:60:01:87:3A:D0:EC:21:9C:FA:B2:FE
Authority key identifier: 10:CA:62:C2:A7:49:BF:91:F5:62:2A:DE:C0:F1:96:18:49:3C:BB:A9
Certificate issuer: /CN=A91306B2/serialNumber=10CA62C2A749BF91F5622ADEC0F19618493CBBA9
Certificate serial: 01B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft
Manifest number: 01AD
Signing time: Fri 31 Jan 2025 02:25:25 +0000
Manifest this update: Fri 31 Jan 2025 02:25:25 +0000
Manifest next update: Fri 07 Feb 2025 02:25:25 +0000
Files and hashes: 1: EMpiwqdJv5H1YirewPGWGEk8u6k.crl (hash: sU/Yk2PBj90ZkZ6SGKSkafFMWcELUAQPWGHuvmc7jF0=)
2: 695CA6D414BF11EEB8B95B7FC4F9AE02.roa (hash: y8u3ZZNWwXMV6EsCoReGtHsNbMX1mb+g+HfYKyQ+Y/Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434 (0x1b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91306B2/serialNumber=10CA62C2A749BF91F5622ADEC0F19618493CBBA9
Validity
Not Before: Jan 31 02:25:25 2025 GMT
Not After : Feb 7 02:25:25 2025 GMT
Subject: CN=679c3495-d6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:27:98:35:49:fc:29:e0:eb:8c:9e:a2:a8:f1:
73:41:f5:25:3a:44:d1:2c:94:76:01:02:6a:25:31:
90:11:15:29:9b:e8:ac:9e:a6:df:5d:6e:32:d6:b0:
cc:c6:5d:84:72:30:fd:ca:c9:61:4d:85:b4:6b:a3:
ed:a0:28:c8:5e:3e:84:72:10:85:a2:d0:30:9a:53:
3a:1d:15:d1:dd:8f:39:11:35:a2:80:98:9a:9d:67:
48:4f:70:75:4e:9c:fb:3f:c0:ef:33:cc:95:2e:85:
c6:09:e1:c4:b8:06:33:0d:82:6e:3c:97:73:f3:0c:
1e:55:f1:4b:e0:ba:d3:88:ee:7e:2f:15:da:b8:47:
70:b1:8b:98:19:37:64:96:a6:a9:ac:dc:3f:41:17:
fb:95:09:ba:6f:cd:7f:83:9b:96:45:2f:2c:98:02:
34:88:a3:1f:70:e7:2d:ee:d9:23:1f:05:05:34:c5:
8f:51:81:e3:85:3b:d4:5e:e2:35:5c:14:f4:58:95:
cb:f1:f0:47:29:09:60:e1:62:67:95:e1:fb:c3:f5:
a3:82:0c:f4:f3:e7:73:8f:65:55:4e:5c:cb:1f:59:
96:54:40:7b:2e:03:dc:94:71:7d:46:d9:62:cb:67:
c5:22:cd:8a:45:4b:94:37:b8:cf:d2:4a:ad:d1:43:
5d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C7:77:93:F4:7E:1A:A0:C4:60:01:87:3A:D0:EC:21:9C:FA:B2:FE
X509v3 Authority Key Identifier:
keyid:10:CA:62:C2:A7:49:BF:91:F5:62:2A:DE:C0:F1:96:18:49:3C:BB:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:8f:a4:ec:f0:36:4f:41:6b:87:de:6d:c6:db:fd:67:e2:99:
77:ce:a8:38:b1:37:59:b0:88:97:16:cc:9b:3f:14:66:0c:94:
4d:a2:b9:2b:b8:0c:8c:0a:8b:87:84:d8:bc:e2:8c:cc:62:c1:
c4:20:b9:c2:c9:cf:27:fb:be:ca:49:29:ea:1e:af:96:5c:88:
eb:16:25:ec:bc:00:aa:a3:1c:22:10:bb:40:d2:04:27:a4:a3:
f2:59:63:7c:6b:ba:c9:09:20:94:23:c0:11:e6:ac:4d:eb:a5:
0a:6a:d8:ec:5e:0b:db:af:15:0d:ed:41:b3:4c:44:0c:1a:c4:
80:e5:97:6e:6c:da:de:d5:37:f2:02:71:d7:0a:15:5b:5d:1b:
b8:f6:db:c0:7e:c6:0d:b9:8b:c3:29:5d:10:7c:30:6c:41:43:
62:6d:33:a0:91:c1:70:83:76:b8:7d:50:3d:9a:93:5a:a6:47:
0f:18:67:b6:44:00:73:11:a5:91:a2:9d:1e:7d:6e:ff:f4:39:
1d:f1:66:d0:dd:73:aa:bb:8b:13:43:a3:66:89:0d:dc:aa:e4:
87:10:f5:af:db:eb:00:78:a3:b9:37:5b:da:38:26:f1:1d:53:
2d:f6:36:ec:6e:03:2f:b5:54:17:96:68:ad:a0:87:9f:18:b0:
06:5b:4c:d8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA2QjIxMTAvBgNVBAUTKDEwQ0E2MkMyQTc0OUJGOTFGNTYyMkFERUMwRjE5NjE4
NDkzQ0JCQTkwHhcNMjUwMTMxMDIyNTI1WhcNMjUwMjA3MDIyNTI1WjAYMRYwFAYD
VQQDEw02NzljMzQ5NS1kNmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5SeYNUn8KeDrjJ6iqPFzQfUlOkTRLJR2AQJqJTGQERUpm+isnqbfXW4y1rDM
xl2EcjD9yslhTYW0a6PtoCjIXj6EchCFotAwmlM6HRXR3Y85ETWigJianWdIT3B1
Tpz7P8DvM8yVLoXGCeHEuAYzDYJuPJdz8wweVfFL4LrTiO5+LxXauEdwsYuYGTdk
lqaprNw/QRf7lQm6b81/g5uWRS8smAI0iKMfcOct7tkjHwUFNMWPUYHjhTvUXuI1
XBT0WJXL8fBHKQlg4WJnleH7w/Wjggz08+dzj2VVTlzLH1mWVEB7LgPclHF9Rtli
y2fFIs2KRUuUN7jP0kqt0UNdUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/Hd5P0
fhqgxGABhzrQ7CGc+rL+MB8GA1UdIwQYMBaAFBDKYsKnSb+R9WIq3sDxlhhJPLup
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDZCMi8zMjFGREQzRTRE
ODMxMUVEODdGQjFFNkZDNEY5QUUwMi9FTXBpd3FkSnY1SDFZaXJld1BHV0dFazh1
NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VNcGl3cWRKdjVIMVlpcmV3UEdXR0VrOHU2ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MDZCMi8zMjFGREQzRTREODMxMUVEODdGQjFFNkZDNEY5QUUwMi9FTXBpd3FkSnY1
SDFZaXJld1BHV0dFazh1NmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA3j6Ts8DZPQWuH3m3G2/1n4pl3zqg4sTdZsIiXFsybPxRmDJRNorkr
uAyMCouHhNi84ozMYsHEILnCyc8n+77KSSnqHq+WXIjrFiXsvACqoxwiELtA0gQn
pKPyWWN8a7rJCSCUI8AR5qxN66UKatjsXgvbrxUN7UGzTEQMGsSA5ZdubNre1Tfy
AnHXChVbXRu49tvAfsYNuYvDKV0QfDBsQUNibTOgkcFwg3a4fVA9mpNapkcPGGe2
RABzEaWRop0efW7/9Dkd8WbQ3XOqu4sTQ6NmiQ3cquSHEPWv2+sAeKO5N1vaOCbx
HVMt9jbsbgMvtVQXlmitoIefGLAGW0zY
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:36:46 2025 by rpki-client