Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.mft
File: aWYanwY1V84rVDewGIk9fZ_dvtA.mft (raw, json)
Hash identifier: /xxDbm45m3+IhjxkSyu/nIl7YdmObyMFODALYlERQBU=
Subject key identifier: EB:5A:8B:0E:93:42:70:39:4D:AB:72:0D:D7:8F:A7:EE:41:BC:DD:F3
Authority key identifier: 69:66:1A:9F:06:35:57:CE:2B:54:37:B0:18:89:3D:7D:9F:DD:BE:D0
Certificate issuer: /CN=A91431A6/serialNumber=69661A9F063557CE2B5437B018893D7D9FDDBED0
Certificate serial: 060F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWYanwY1V84rVDewGIk9fZ_dvtA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.mft
Manifest number: 0608
Signing time: Thu 30 Jan 2025 22:49:05 +0000
Manifest this update: Thu 30 Jan 2025 22:49:05 +0000
Manifest next update: Thu 06 Feb 2025 22:49:05 +0000
Files and hashes: 1: aWYanwY1V84rVDewGIk9fZ_dvtA.crl (hash: r8ya61L0ui9mc0y3I+3YVVbVnaq1h2Mdtr4IUCPx0Vs=)
2: DDCD4C168EC611EBAB7F3476C4F9AE02.roa (hash: vYh53kbQx56u84oKA/xd3ROknCRDM7pHTjRvm9U4uGU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1551 (0x60f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91431A6/serialNumber=69661A9F063557CE2B5437B018893D7D9FDDBED0
Validity
Not Before: Jan 30 22:49:05 2025 GMT
Not After : Feb 6 22:49:05 2025 GMT
Subject: CN=679c01e1-4b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3c:d7:41:9b:bd:8b:1c:71:e1:d5:d9:eb:8b:
6e:8d:31:08:c4:e4:09:8e:44:22:a9:3f:19:97:49:
61:56:41:56:52:0b:09:ee:53:1b:c4:9e:32:d2:e1:
03:46:71:75:4f:bc:fe:c8:f0:7c:60:05:e2:ba:74:
24:c0:b6:4a:3d:f4:e9:d2:51:1a:f5:d7:dc:ab:1b:
bf:0c:e3:3a:f3:92:02:57:bd:79:50:02:cd:56:58:
ad:c8:6b:a1:4b:e2:10:db:8d:2e:7e:b4:db:f6:3e:
3f:c4:04:52:12:30:67:a4:b4:ab:eb:45:83:d1:00:
f2:90:90:38:c7:e1:a4:4a:39:7c:fb:92:4f:ab:d9:
ad:8b:95:28:60:b1:9d:b8:57:05:26:99:ac:77:d9:
c6:00:24:cc:f6:55:ae:44:3b:79:4f:05:e3:78:74:
25:2a:dc:24:d6:b0:52:dd:62:e9:26:ce:70:9b:1c:
7d:4a:f4:02:ef:dc:64:da:17:de:5e:d1:c9:e7:de:
2b:21:0d:c0:76:bd:b7:22:75:73:73:52:aa:74:0a:
38:9a:b0:7b:f4:9d:d2:96:56:dd:9c:60:c6:53:8a:
a0:64:7f:4b:0e:1f:6e:b8:7e:77:d0:b6:f0:b5:4d:
c1:bf:85:ec:08:ba:de:52:8c:55:b2:04:7f:c5:73:
e6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5A:8B:0E:93:42:70:39:4D:AB:72:0D:D7:8F:A7:EE:41:BC:DD:F3
X509v3 Authority Key Identifier:
keyid:69:66:1A:9F:06:35:57:CE:2B:54:37:B0:18:89:3D:7D:9F:DD:BE:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWYanwY1V84rVDewGIk9fZ_dvtA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:22:e4:f9:1a:be:ac:ad:34:54:be:5c:a2:99:75:00:99:4a:
a1:15:1f:13:01:5c:6f:53:81:48:69:5d:a3:b8:02:1c:2c:28:
30:66:04:a3:98:41:78:6d:dd:f3:fa:51:c1:88:0e:ed:fe:9a:
94:86:ef:4f:a1:a1:cb:f3:5e:7c:0a:27:cc:ad:7d:7c:b3:d0:
9a:63:a1:fe:1f:8c:e1:94:1b:96:b2:41:a8:d6:da:7a:54:5e:
8f:92:e3:48:75:77:7f:c8:d3:34:12:06:ef:91:f2:7e:99:ed:
09:f6:0d:41:5d:0e:d4:1c:7e:ca:d1:dc:98:a2:9b:73:19:94:
f1:b1:fb:3b:c6:e4:df:d2:bc:95:3a:dc:fb:35:e3:87:49:40:
57:67:21:7e:21:00:a4:73:b8:69:5e:72:92:3c:ac:0d:dc:2e:
6e:f8:bf:8f:d7:ee:a8:c1:2b:49:64:3f:da:e2:55:6c:b8:00:
80:48:39:44:57:4e:99:e7:ea:76:cf:bb:ea:2c:22:69:38:da:
87:31:7c:9b:50:3b:e1:e6:b5:45:ce:38:2c:e9:e2:45:78:52:
bd:48:a1:b5:29:32:25:55:a5:c8:a3:77:22:cd:94:5a:8b:27:
cf:f8:f9:1e:c2:14:79:6c:3d:52:45:76:ed:e5:93:bc:4c:b7:
8f:7c:ba:78
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDMxQTYxMTAvBgNVBAUTKDY5NjYxQTlGMDYzNTU3Q0UyQjU0MzdCMDE4ODkzRDdE
OUZEREJFRDAwHhcNMjUwMTMwMjI0OTA1WhcNMjUwMjA2MjI0OTA1WjAYMRYwFAYD
VQQDEw02NzljMDFlMS00YjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuzzXQZu9ixxx4dXZ64tujTEIxOQJjkQiqT8Zl0lhVkFWUgsJ7lMbxJ4y0uED
RnF1T7z+yPB8YAXiunQkwLZKPfTp0lEa9dfcqxu/DOM685ICV715UALNVlityGuh
S+IQ240ufrTb9j4/xARSEjBnpLSr60WD0QDykJA4x+GkSjl8+5JPq9mti5UoYLGd
uFcFJpmsd9nGACTM9lWuRDt5TwXjeHQlKtwk1rBS3WLpJs5wmxx9SvQC79xk2hfe
XtHJ594rIQ3Adr23InVzc1KqdAo4mrB79J3SllbdnGDGU4qgZH9LDh9uuH530Lbw
tU3Bv4XsCLreUoxVsgR/xXPmDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOtaiw6T
QnA5TatyDdePp+5BvN3zMB8GA1UdIwQYMBaAFGlmGp8GNVfOK1Q3sBiJPX2f3b7Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzFBNi80NEQ4OTBDQThF
QzUxMUVCOTdCMTIwNzRDNEY5QUUwMi9hV1lhbndZMVY4NHJWRGV3R0lrOWZaX2R2
dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FXWWFud1kxVjg0clZEZXdHSWs5ZlpfZHZ0QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MzFBNi80NEQ4OTBDQThFQzUxMUVCOTdCMTIwNzRDNEY5QUUwMi9hV1lhbndZMVY4
NHJWRGV3R0lrOWZaX2R2dEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBQIuT5Gr6srTRUvlyimXUAmUqhFR8TAVxvU4FIaV2juAIcLCgwZgSj
mEF4bd3z+lHBiA7t/pqUhu9PoaHL8158CifMrX18s9CaY6H+H4zhlBuWskGo1tp6
VF6PkuNIdXd/yNM0EgbvkfJ+me0J9g1BXQ7UHH7K0dyYoptzGZTxsfs7xuTf0ryV
Otz7NeOHSUBXZyF+IQCkc7hpXnKSPKwN3C5u+L+P1+6owStJZD/a4lVsuACASDlE
V06Z5+p2z7vqLCJpONqHMXybUDvh5rVFzjgs6eJFeFK9SKG1KTIlVaXIo3cizZRa
iyfP+PkewhR5bD1SRXbt5ZO8TLePfLp4
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:11:59 2025 by rpki-client