Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft
File: a5tdFBgYlY1zBFgvJU6hddhD4_0.mft (raw, json)
Hash identifier: OVcMifogIles0mXpR0G+K8S4yFzq0CO0iuqEM5AQGi0=
Subject key identifier: DA:5D:49:A3:DF:7F:B6:F3:7B:41:4A:30:52:C4:7E:8D:24:37:F4:1C
Authority key identifier: 6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD
Certificate issuer: /CN=A91359CD/serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD
Certificate serial: 0986
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft
Manifest number: 0980
Signing time: Thu 30 Jan 2025 20:11:28 +0000
Manifest this update: Thu 30 Jan 2025 20:11:27 +0000
Manifest next update: Thu 06 Feb 2025 20:11:27 +0000
Files and hashes: 1: a5tdFBgYlY1zBFgvJU6hddhD4_0.crl (hash: pVHJHh/698JjEcj30Riq207sGNHzlVs69JdORz/jIy0=)
2: 8F467E0082DD11EABD325010C4F9AE02.roa (hash: 8UoETv43NCbg359unaKa056KSfIsJT8AiDvuudbYvko=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2438 (0x986)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91359CD/serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD
Validity
Not Before: Jan 30 20:11:27 2025 GMT
Not After : Feb 6 20:11:27 2025 GMT
Subject: CN=679bdcf0-d446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:43:be:f4:58:02:79:6f:25:16:e6:ab:a3:19:
d0:f2:ae:11:e1:3b:54:df:ed:23:83:e5:e1:01:a0:
6f:b5:e5:e5:c2:e1:e1:b9:08:92:75:58:ec:45:5e:
eb:fa:ad:a1:90:65:12:cf:45:df:d5:d8:ed:1a:59:
86:52:da:4b:cc:b2:0b:9f:5b:49:cf:85:01:ab:82:
04:03:64:7e:22:f9:7b:c5:a1:50:7b:f3:68:7d:80:
22:7c:f2:ed:a9:22:2d:9c:a6:41:fd:5c:03:c0:a4:
ff:c0:b2:6f:e3:49:fc:aa:b4:51:f8:c2:49:9d:de:
72:16:60:db:3a:cf:47:39:c6:4a:8d:a7:a3:57:ed:
08:57:50:e2:e7:ac:ec:f8:28:10:7e:d8:08:dc:b4:
14:f2:39:ea:9d:41:bd:47:fb:db:9e:6c:38:12:d8:
eb:0d:cc:9a:4e:d9:e6:16:39:da:3e:2a:9c:fc:ea:
c2:fc:22:d0:6d:10:d7:aa:9b:1c:95:42:c6:e8:7f:
fe:4e:00:45:5f:c8:e5:8f:64:40:b7:12:84:f1:37:
7c:18:4f:c6:f3:f8:2c:c5:a2:ce:f5:82:3a:b5:42:
7a:50:bf:7a:a5:24:70:e9:93:67:ca:91:85:8d:15:
2d:ef:da:33:28:02:48:41:53:65:46:3c:aa:d2:9e:
6c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5D:49:A3:DF:7F:B6:F3:7B:41:4A:30:52:C4:7E:8D:24:37:F4:1C
X509v3 Authority Key Identifier:
keyid:6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:02:c7:86:90:3b:de:66:f6:8b:ee:11:d9:fd:b9:1f:df:f4:
07:b0:aa:1d:14:4b:43:12:84:0b:a7:ba:f5:fa:69:1d:cb:34:
2c:d5:5a:29:ac:1f:3f:65:8b:d3:cc:5e:25:a7:4e:1d:b8:6e:
dc:9f:18:c2:b7:6b:a0:b6:d9:05:03:e9:b9:c6:9b:ce:59:da:
af:63:f5:0d:f6:5e:8c:82:28:09:6d:31:97:15:d6:fb:6d:9d:
b5:7a:9c:09:3a:8d:76:d0:a2:b3:9f:c9:11:93:6e:5f:52:56:
c8:d4:28:2d:87:36:8b:b8:33:f6:fa:90:4e:16:80:b5:b2:fe:
8e:e2:bf:bb:99:7c:88:0d:88:54:97:92:a3:73:3d:ab:85:e8:
c7:b0:98:bd:1a:15:d9:40:17:7b:87:d1:d9:57:6a:9e:8c:c1:
28:05:4e:0c:ef:20:68:e7:8f:ae:3d:1a:9b:06:03:39:0c:95:
17:2c:2a:d2:c4:8d:f1:f6:a7:35:d0:f9:74:41:8d:f7:ff:7b:
1b:45:6c:ce:5b:fd:f1:0b:58:7b:4d:9a:e1:e5:5c:22:15:56:
6b:bb:e5:67:c5:3b:77:60:a5:ad:f5:e4:38:53:3f:95:77:77:
77:c9:7a:11:a6:7a:83:c5:f2:fa:59:84:2c:e2:8b:ca:9e:12:
a2:8c:fd:5d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzU5Q0QxMTAvBgNVBAUTKDZCOUI1RDE0MTgxODk1OEQ3MzA0NTgyRjI1NEVBMTc1
RDg0M0UzRkQwHhcNMjUwMTMwMjAxMTI3WhcNMjUwMjA2MjAxMTI3WjAYMRYwFAYD
VQQDEw02NzliZGNmMC1kNDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA20O+9FgCeW8lFuaroxnQ8q4R4TtU3+0jg+XhAaBvteXlwuHhuQiSdVjsRV7r
+q2hkGUSz0Xf1djtGlmGUtpLzLILn1tJz4UBq4IEA2R+Ivl7xaFQe/NofYAifPLt
qSItnKZB/VwDwKT/wLJv40n8qrRR+MJJnd5yFmDbOs9HOcZKjaejV+0IV1Di56zs
+CgQftgI3LQU8jnqnUG9R/vbnmw4EtjrDcyaTtnmFjnaPiqc/OrC/CLQbRDXqpsc
lULG6H/+TgBFX8jlj2RAtxKE8Td8GE/G8/gsxaLO9YI6tUJ6UL96pSRw6ZNnypGF
jRUt79ozKAJIQVNlRjyq0p5sJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNpdSaPf
f7bze0FKMFLEfo0kN/QcMB8GA1UdIwQYMBaAFGubXRQYGJWNcwRYLyVOoXXYQ+P9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTlDRC8xODVGRkMyODgy
REIxMUVBQUMyQ0Q2MEFDNEY5QUUwMi9hNXRkRkJnWWxZMXpCRmd2SlU2aGRkaEQ0
XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2E1dGRGQmdZbFkxekJGZ3ZKVTZoZGRoRDRfMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NTlDRC8xODVGRkMyODgyREIxMUVBQUMyQ0Q2MEFDNEY5QUUwMi9hNXRkRkJnWWxZ
MXpCRmd2SlU2aGRkaEQ0XzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAwAseGkDveZvaL7hHZ/bkf3/QHsKodFEtDEoQLp7r1+mkdyzQs1Vop
rB8/ZYvTzF4lp04duG7cnxjCt2ugttkFA+m5xpvOWdqvY/UN9l6MgigJbTGXFdb7
bZ21epwJOo120KKzn8kRk25fUlbI1CgthzaLuDP2+pBOFoC1sv6O4r+7mXyIDYhU
l5Kjcz2rhejHsJi9GhXZQBd7h9HZV2qejMEoBU4M7yBo54+uPRqbBgM5DJUXLCrS
xI3x9qc10Pl0QY33/3sbRWzOW/3xC1h7TZrh5VwiFVZru+VnxTt3YKWt9eQ4Uz+V
d3d3yXoRpnqDxfL6WYQs4ovKnhKijP1d
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:12:24 2025 by rpki-client