Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft
File: FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft (raw, json)
Hash identifier: o2HL4dAgxgP20j34Vr/pgVV9N9u41Kjv7pW8//QM9jU=
Subject key identifier: EC:52:58:93:2E:FF:D3:54:C4:11:1D:B1:9D:96:7B:63:D2:37:C7:8F
Authority key identifier: 16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14
Certificate issuer: /CN=A91314BC/serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14
Certificate serial: 01B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft
Manifest number: 01AC
Signing time: Fri 31 Jan 2025 02:30:06 +0000
Manifest this update: Fri 31 Jan 2025 02:30:06 +0000
Manifest next update: Fri 07 Feb 2025 02:30:06 +0000
Files and hashes: 1: FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl (hash: pBWkilYFlxatPoIAKRtd9MelMZqnXsRARgCjtBTbdGE=)
2: 1083BE64499711EE86AE452DC4F9AE02.roa (hash: slu67F8KWLFn/RxCNvxBYhj1V1Mx5+noN3O9kww2W8Y=)
3: 7DD0E8845A3211EDB637E665C4F9AE02.roa (hash: wtWT4PZFgcn64rOhtqw01Kyp1pjejdqieeode8aJT6o=)
4: 7D0DFE0A5A3211EDB637E665C4F9AE02.roa (hash: K4zq7amWLtDyT+UqSOR4oOsSasN49MRy2b9Pfvweln4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 441 (0x1b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91314BC/serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14
Validity
Not Before: Jan 31 02:30:06 2025 GMT
Not After : Feb 7 02:30:06 2025 GMT
Subject: CN=679c35ae-6a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:35:88:cb:49:34:d8:37:a0:14:96:b4:d9:39:
65:44:90:86:67:f3:83:41:ab:7f:04:a0:49:80:67:
18:f7:50:a5:b7:d4:62:c1:50:be:b1:0b:cb:0f:0f:
ee:df:8d:e0:e1:d7:1c:27:36:40:c0:12:df:1a:55:
fb:bf:f6:a2:fc:b3:62:cd:42:56:18:4d:8f:1b:6b:
f1:1d:71:37:dc:16:db:ee:4b:4d:cc:e9:5d:55:b3:
8f:ca:ab:1e:21:e3:d6:ea:5e:bf:f0:d7:ba:77:f3:
0d:3f:58:07:e2:fb:8d:d2:5d:71:c8:a2:6c:6e:66:
c6:92:44:50:55:ff:e0:da:89:9a:5c:32:87:0c:e0:
37:d6:80:20:3b:68:df:ce:8e:bb:a3:2f:d7:9e:94:
b5:ac:a3:60:cc:7f:54:61:ab:8a:1f:0e:41:24:6f:
44:47:e5:25:d7:3e:3f:b2:e2:23:c6:dc:e6:09:ef:
28:e3:92:af:2c:5c:72:ae:a6:e1:f5:28:85:b1:25:
54:53:c7:55:d8:79:ad:98:fe:41:75:21:c0:f2:f3:
b6:85:1b:3b:ed:ee:e3:b2:30:32:67:8d:21:fc:07:
6b:af:e0:65:2b:30:34:7d:69:90:ef:99:66:cd:b2:
ef:64:28:96:d4:ed:b6:89:b7:44:74:cf:ce:9f:6c:
bc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:52:58:93:2E:FF:D3:54:C4:11:1D:B1:9D:96:7B:63:D2:37:C7:8F
X509v3 Authority Key Identifier:
keyid:16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:fa:13:9d:89:8a:06:da:a3:29:6f:17:b0:c0:63:c9:17:4a:
c8:14:8f:91:13:dc:6a:e5:e6:54:02:6b:4f:c9:7a:88:cb:5a:
4f:d9:92:51:5d:91:ae:46:51:8f:23:53:6e:bf:bd:cb:a2:56:
c2:bc:2a:fc:ec:65:31:7f:fa:1c:81:f3:8a:d1:3f:d5:75:34:
7c:c6:5b:e3:af:ce:99:c6:ef:da:fd:06:87:3c:f0:fa:ed:16:
74:c6:77:4a:ab:30:21:28:75:6b:f3:1c:1c:88:c4:a8:aa:5f:
45:c0:08:1b:bf:77:98:9c:84:1d:6a:28:d8:5e:66:cb:0c:07:
79:62:66:59:5a:9a:9f:fa:48:78:ad:6d:15:eb:5d:f9:e1:e4:
83:0a:ed:ed:2b:4a:7c:95:bf:ab:52:59:04:80:18:9f:a9:df:
bb:31:d7:1e:a2:23:f3:8a:97:42:6d:35:87:56:fd:1f:a8:16:
16:9d:a2:0b:b0:21:8f:cb:14:4c:38:ad:9c:70:f5:96:3e:77:
f9:57:b0:f0:29:16:25:28:ed:91:a2:eb:06:5c:aa:60:b1:bb:
d7:b9:22:8a:7f:8f:b6:ec:64:1f:6e:f0:6c:de:08:01:2f:9d:
82:ae:3d:aa:65:c7:e3:2e:e1:54:f4:d6:74:d9:39:8b:0f:91:
7f:3b:5f:17
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzE0QkMxMTAvBgNVBAUTKDE2ODQxNUMwQzEzNDAxQzBENzcxNTcxREY4NkY4Q0Q1
Rjg1MDNCMTQwHhcNMjUwMTMxMDIzMDA2WhcNMjUwMjA3MDIzMDA2WjAYMRYwFAYD
VQQDEw02NzljMzVhZS02YTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyjWIy0k02DegFJa02TllRJCGZ/ODQat/BKBJgGcY91Clt9RiwVC+sQvLDw/u
343g4dccJzZAwBLfGlX7v/ai/LNizUJWGE2PG2vxHXE33Bbb7ktNzOldVbOPyqse
IePW6l6/8Ne6d/MNP1gH4vuN0l1xyKJsbmbGkkRQVf/g2omaXDKHDOA31oAgO2jf
zo67oy/XnpS1rKNgzH9UYauKHw5BJG9ER+Ul1z4/suIjxtzmCe8o45KvLFxyrqbh
9SiFsSVUU8dV2HmtmP5BdSHA8vO2hRs77e7jsjAyZ40h/Adrr+BlKzA0fWmQ75lm
zbLvZCiW1O22ibdEdM/On2y8OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOxSWJMu
/9NUxBEdsZ2We2PSN8ePMB8GA1UdIwQYMBaAFBaEFcDBNAHA13FXHfhvjNX4UDsU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTRCQy83RkQwMTY2QzVB
MkYxMUVEQTE5RTVFNjFDNEY5QUUwMi9Gb1FWd01FMEFjRFhjVmNkLUctTTFmaFFP
eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZvUVZ3TUUwQWNEWGNWY2QtRy1NMWZoUU94US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTRCQy83RkQwMTY2QzVBMkYxMUVEQTE5RTVFNjFDNEY5QUUwMi9Gb1FWd01FMEFj
RFhjVmNkLUctTTFmaFFPeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBZ+hOdiYoG2qMpbxewwGPJF0rIFI+RE9xq5eZUAmtPyXqIy1pP2ZJR
XZGuRlGPI1Nuv73LolbCvCr87GUxf/ocgfOK0T/VdTR8xlvjr86Zxu/a/QaHPPD6
7RZ0xndKqzAhKHVr8xwciMSoql9FwAgbv3eYnIQdaijYXmbLDAd5YmZZWpqf+kh4
rW0V61354eSDCu3tK0p8lb+rUlkEgBifqd+7MdceoiPzipdCbTWHVv0fqBYWnaIL
sCGPyxRMOK2ccPWWPnf5V7DwKRYlKO2RousGXKpgsbvXuSKKf4+27GQfbvBs3ggB
L52Crj2qZcfjLuFU9NZ02TmLD5F/O18X
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:46:53 2025 by rpki-client