Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft
File: 5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft (raw, json)
Hash identifier: rjyqO2PJahxbUBBvK06bVpN0hZYSbU1od6b+dP4aq7o=
Subject key identifier: CC:78:B9:7B:15:EE:D1:C5:64:AC:84:D8:1E:FA:52:D9:99:05:F9:1A
Authority key identifier: E5:88:C7:3E:6C:B4:FD:B3:8B:84:EE:40:F8:F9:B6:4C:50:BE:4B:73
Certificate issuer: /CN=A913ABFE/serialNumber=E588C73E6CB4FDB38B84EE40F8F9B64C50BE4B73
Certificate serial: 0136
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft
Manifest number: 012C
Signing time: Fri 31 Jan 2025 03:50:34 +0000
Manifest this update: Fri 31 Jan 2025 03:50:34 +0000
Manifest next update: Fri 07 Feb 2025 03:50:34 +0000
Files and hashes: 1: 5YjHPmy0_bOLhO5A-Pm2TFC-S3M.crl (hash: G/yL0ZS2q3zu8bfJb2EoanMqXl+IYBnmZQzy2FxvRto=)
2: 837010CCBC6311EFBF1D4E55C4F9AE02.roa (hash: s/iGSYsXSdIoPwRTbGZBmg8riHCqbMvtcL58Zk17wI0=)
3: A7885708BC6311EFA24E9055C4F9AE02.roa (hash: HDBQ3hj+FAu6YsJ1msMkqW/NUftIznm3i3wzYzudBWE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310 (0x136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913ABFE/serialNumber=E588C73E6CB4FDB38B84EE40F8F9B64C50BE4B73
Validity
Not Before: Jan 31 03:50:34 2025 GMT
Not After : Feb 7 03:50:34 2025 GMT
Subject: CN=679c488a-2507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:35:de:c4:8f:0c:6a:0b:cb:3d:da:cd:8c:5c:
00:3e:f5:c0:65:be:d4:46:09:69:7d:23:a5:17:32:
7e:4f:a3:5b:88:11:a4:c7:ec:2c:47:e0:26:ee:84:
c7:49:32:8d:7a:b4:ff:83:84:48:96:e6:88:60:e5:
6b:74:87:ba:c3:0f:e5:24:98:01:24:b2:07:c6:4a:
ee:cc:11:26:a0:c7:14:d7:c2:77:26:d1:a0:b9:d3:
d5:45:f3:67:2c:bf:03:bf:d2:e2:3f:d1:ca:1d:d1:
d8:31:aa:e4:b7:83:54:6c:47:a4:fc:a9:55:07:66:
ff:6f:f2:e2:e4:b6:f7:40:c5:2b:64:63:c8:38:df:
08:77:4e:75:ab:9e:8f:90:1c:e5:e0:6c:06:d9:c6:
9d:13:9b:56:f0:ef:b5:e1:4f:cf:23:11:79:88:98:
26:c4:a4:21:6a:8f:ed:43:c2:58:4b:02:73:02:b7:
10:9d:e6:21:a9:7b:71:a7:8b:d2:9c:3a:d7:b4:e3:
a4:78:81:0a:23:09:50:0e:31:95:4d:2d:94:e8:7a:
47:df:c0:73:f7:43:2d:e0:1e:11:8b:d5:6e:db:c0:
72:d6:4a:34:11:2c:bb:c8:6d:d2:e8:a8:43:d2:4d:
ea:29:d4:34:be:32:d0:7f:e6:5c:d7:ee:89:73:0d:
c7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:78:B9:7B:15:EE:D1:C5:64:AC:84:D8:1E:FA:52:D9:99:05:F9:1A
X509v3 Authority Key Identifier:
keyid:E5:88:C7:3E:6C:B4:FD:B3:8B:84:EE:40:F8:F9:B6:4C:50:BE:4B:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:5b:7e:aa:59:90:4f:eb:49:0c:17:d9:fe:59:a1:02:07:bc:
06:68:26:1e:d4:8d:42:ee:45:07:ed:07:4b:ee:e3:be:9f:6e:
1a:58:6c:5b:f4:3f:e3:5e:e4:b2:c7:dd:5f:1a:55:d5:fa:ec:
79:2b:18:d9:46:3c:97:93:89:32:b9:94:64:8c:10:5d:cd:18:
6e:d6:77:5c:19:7d:cc:cc:06:fd:2e:27:67:de:c1:d1:f1:4c:
31:86:08:dd:5b:36:5a:81:9d:7c:f1:ce:2f:1f:fe:38:a7:95:
4e:f3:3d:d9:fc:ba:63:19:fe:6a:d2:4f:3d:c0:14:89:52:92:
d0:2a:57:7e:0d:1a:89:a5:cf:d2:a5:34:1a:16:3e:21:4d:3f:
de:04:92:4e:52:2a:47:5e:17:bc:9a:da:46:40:96:49:f8:b1:
f3:ad:b1:5f:58:42:dc:1f:4b:b0:50:ee:4a:04:8a:5b:41:f2:
84:d8:8a:0f:42:a8:b0:7a:a1:11:48:bc:c2:cd:7f:1a:b1:b9:
20:d9:ab:b8:a7:c5:4c:9f:38:09:f3:7b:0f:e6:b0:63:11:69:
65:c9:ca:69:99:46:8c:56:8f:86:17:40:6c:d4:0f:05:de:4e:
a5:ee:b3:c8:cc:c5:0a:36:7e:90:c9:06:c8:64:c6:66:ac:c7:
7f:c2:b1:8b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0FCRkUxMTAvBgNVBAUTKEU1ODhDNzNFNkNCNEZEQjM4Qjg0RUU0MEY4RjlCNjRD
NTBCRTRCNzMwHhcNMjUwMTMxMDM1MDM0WhcNMjUwMjA3MDM1MDM0WjAYMRYwFAYD
VQQDEw02NzljNDg4YS0yNTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7DXexI8MagvLPdrNjFwAPvXAZb7URglpfSOlFzJ+T6NbiBGkx+wsR+Am7oTH
STKNerT/g4RIluaIYOVrdIe6ww/lJJgBJLIHxkruzBEmoMcU18J3JtGgudPVRfNn
LL8Dv9LiP9HKHdHYMarkt4NUbEek/KlVB2b/b/Li5Lb3QMUrZGPION8Id051q56P
kBzl4GwG2cadE5tW8O+14U/PIxF5iJgmxKQhao/tQ8JYSwJzArcQneYhqXtxp4vS
nDrXtOOkeIEKIwlQDjGVTS2U6HpH38Bz90Mt4B4Ri9Vu28By1ko0ESy7yG3S6KhD
0k3qKdQ0vjLQf+Zc1+6Jcw3HgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMx4uXsV
7tHFZKyE2B76UtmZBfkaMB8GA1UdIwQYMBaAFOWIxz5stP2zi4TuQPj5tkxQvktz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUJGRS9GMUQ1NTg3RTI1
RjExMUVFQjdCNDgwNThDNEY5QUUwMi81WWpIUG15MF9iT0xoTzVBLVBtMlRGQy1T
M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVZakhQbXkwX2JPTGhPNUEtUG0yVEZDLVMzTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QUJGRS9GMUQ1NTg3RTI1RjExMUVFQjdCNDgwNThDNEY5QUUwMi81WWpIUG15MF9i
T0xoTzVBLVBtMlRGQy1TM00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAuW36qWZBP60kMF9n+WaECB7wGaCYe1I1C7kUH7QdL7uO+n24aWGxb
9D/jXuSyx91fGlXV+ux5KxjZRjyXk4kyuZRkjBBdzRhu1ndcGX3MzAb9Lidn3sHR
8UwxhgjdWzZagZ188c4vH/44p5VO8z3Z/LpjGf5q0k89wBSJUpLQKld+DRqJpc/S
pTQaFj4hTT/eBJJOUipHXhe8mtpGQJZJ+LHzrbFfWELcH0uwUO5KBIpbQfKE2IoP
QqiweqERSLzCzX8asbkg2au4p8VMnzgJ83sP5rBjEWllycppmUaMVo+GF0Bs1A8F
3k6l7rPIzMUKNn6QyQbIZMZmrMd/wrGL
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:32 2025 by rpki-client