Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft
File: FKbKvDAuwePc503pi_VYoEK-rFY.mft (raw, json)
Hash identifier: FammakHLWwJ34tQu1OS/nyqDCnYdeCKtEQWT2EMtFwQ=
Subject key identifier: 42:DD:7C:1A:DE:21:65:87:F0:EE:EE:B3:41:9C:67:AE:E9:92:6C:80
Authority key identifier: 14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56
Certificate issuer: /CN=A91409DC/serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56
Certificate serial: 0821
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft
Manifest number: 13F7
Signing time: Fri 31 Jan 2025 18:33:54 +0000
Manifest this update: Fri 31 Jan 2025 18:33:54 +0000
Manifest next update: Fri 07 Feb 2025 18:33:54 +0000
Files and hashes: 1: FKbKvDAuwePc503pi_VYoEK-rFY.crl (hash: Z9w946TcvSKIVQtUAXq04azXQPCK3FhQcb50+LrlPI4=)
2: 3E35840C523211EE84408677C4F9AE02.roa (hash: odJkbnbFNGEzA/PRiNLIwgSKK/+yDHEM4DmIe+O5Su4=)
3: DB78B2684BCD11EE8F976B7EC4F9AE02.roa (hash: KUS4Ox2gEpezMstwpX1CTC0qzfRNi3wV04onRKW1ycI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2081 (0x821)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91409DC/serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56
Validity
Not Before: Jan 31 18:33:54 2025 GMT
Not After : Feb 7 18:33:54 2025 GMT
Subject: CN=679d1792-02dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c5:38:ec:25:3f:6c:84:29:9c:4c:d0:83:ba:
96:fb:44:8d:6f:5e:5b:cf:bb:2f:86:17:63:51:bb:
4b:7b:d8:ec:a9:94:9e:2b:ac:32:55:53:03:d7:03:
51:cc:5f:64:f4:1f:14:8f:6c:96:2c:ba:de:49:15:
32:d9:16:40:6d:6d:ca:95:06:bd:e1:ae:60:5e:9d:
83:43:c5:bb:ff:4c:d2:b1:77:bd:d6:b6:3f:49:ae:
ca:02:45:a2:43:94:e2:0b:a2:d5:0f:57:6c:68:aa:
de:f0:54:85:f6:30:f1:9f:83:12:0e:55:dd:5a:da:
11:a0:1f:d2:8f:31:9b:19:fd:39:e8:dd:88:46:9f:
ab:fc:fe:4a:66:ee:bd:d8:12:78:75:c0:15:35:fd:
df:30:f3:95:82:b5:fa:f8:3a:cb:3c:55:5d:6c:a3:
42:1c:c0:31:ff:8e:2b:65:dd:57:73:0a:b6:af:82:
d7:87:ca:be:25:d9:38:10:03:d5:5c:80:f9:d4:d0:
70:dc:96:ae:d9:cb:48:ba:db:ab:2c:85:8b:5a:8b:
cf:8f:4a:c5:f4:67:ca:13:02:d3:65:42:a2:b7:d3:
f3:65:79:b9:c7:6e:8f:eb:31:06:13:a7:5c:68:0c:
76:e1:c2:73:47:e6:16:d0:94:0c:6b:2f:44:a1:04:
92:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DD:7C:1A:DE:21:65:87:F0:EE:EE:B3:41:9C:67:AE:E9:92:6C:80
X509v3 Authority Key Identifier:
keyid:14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:60:f9:5f:e2:0e:5c:30:cc:0c:75:93:9d:6d:44:df:8a:21:
4f:cd:aa:01:40:25:47:ec:13:4a:3b:e9:ec:d4:a1:48:44:69:
8d:e9:ea:cf:1d:7d:05:f4:c6:2c:40:ef:42:c9:6c:ea:a7:fa:
62:f5:fe:5b:04:55:3c:25:4d:10:c4:e9:32:a0:5c:dd:9a:8f:
04:be:77:ca:f6:f5:6d:ca:29:fd:df:7a:16:24:32:d5:69:57:
aa:2d:96:7c:f8:fb:8b:a1:dc:af:b1:1a:de:bc:2f:f2:62:f0:
5d:f1:80:10:35:67:74:33:4d:68:0d:80:33:72:12:37:10:5b:
ed:0d:09:50:76:27:e5:39:e9:72:a0:f7:02:77:e2:90:88:1a:
38:f2:28:ac:f5:f6:75:e3:c6:77:d1:ec:39:44:1c:74:02:a8:
26:f1:e1:d4:ff:a4:7c:f5:4b:64:4a:cd:33:91:85:14:b8:75:
bb:11:7a:00:76:2b:d9:9d:9b:a2:91:f6:b4:d9:07:3c:78:9d:
5f:e6:6c:60:6c:55:26:32:ed:b0:82:4a:42:85:3c:f3:64:09:
6d:72:3f:f8:f5:0a:a4:6f:78:b1:dc:60:44:a3:1c:33:f3:f0:
e3:da:11:27:b3:12:3d:38:ad:79:67:8b:e3:15:99:cf:f1:13:
97:94:46:de
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDA5REMxMTAvBgNVBAUTKDE0QTZDQUJDMzAyRUMxRTNEQ0U3NERFOThCRjU1OEEw
NDJCRUFDNTYwHhcNMjUwMTMxMTgzMzU0WhcNMjUwMjA3MTgzMzU0WjAYMRYwFAYD
VQQDEw02NzlkMTc5Mi0wMmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6cU47CU/bIQpnEzQg7qW+0SNb15bz7svhhdjUbtLe9jsqZSeK6wyVVMD1wNR
zF9k9B8Uj2yWLLreSRUy2RZAbW3KlQa94a5gXp2DQ8W7/0zSsXe91rY/Sa7KAkWi
Q5TiC6LVD1dsaKre8FSF9jDxn4MSDlXdWtoRoB/SjzGbGf056N2IRp+r/P5KZu69
2BJ4dcAVNf3fMPOVgrX6+DrLPFVdbKNCHMAx/44rZd1Xcwq2r4LXh8q+Jdk4EAPV
XID51NBw3Jau2ctIuturLIWLWovPj0rF9GfKEwLTZUKit9PzZXm5x26P6zEGE6dc
aAx24cJzR+YW0JQMay9EoQSS+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELdfBre
IWWH8O7us0GcZ67pkmyAMB8GA1UdIwQYMBaAFBSmyrwwLsHj3OdN6Yv1WKBCvqxW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDlEQy9BNUJCRkFBNjA5
MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi9GS2JLdkRBdXdlUGM1MDNwaV9WWW9FSy1y
RlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZLYkt2REF1d2VQYzUwM3BpX1ZZb0VLLXJGWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MDlEQy9BNUJCRkFBNjA5MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi9GS2JLdkRBdXdl
UGM1MDNwaV9WWW9FSy1yRlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBVYPlf4g5cMMwMdZOdbUTfiiFPzaoBQCVH7BNKO+ns1KFIRGmN6erP
HX0F9MYsQO9CyWzqp/pi9f5bBFU8JU0QxOkyoFzdmo8EvnfK9vVtyin933oWJDLV
aVeqLZZ8+PuLodyvsRrevC/yYvBd8YAQNWd0M01oDYAzchI3EFvtDQlQdiflOely
oPcCd+KQiBo48iis9fZ148Z30ew5RBx0Aqgm8eHU/6R89UtkSs0zkYUUuHW7EXoA
divZnZuikfa02Qc8eJ1f5mxgbFUmMu2wgkpChTzzZAltcj/49Qqkb3ix3GBEoxwz
8/Dj2hEnsxI9OK15Z4vjFZnP8ROXlEbe
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:40:58 2025 by rpki-client