Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft
File: phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft (raw, json)
Hash identifier: +EPYp7suwu91+1I5bk3bghznDNeQ0tHTZzK4liyfOpk=
Subject key identifier: 19:C1:1C:74:5D:7E:BF:A8:9E:8E:A5:99:41:81:AA:1C:5E:39:32:DB
Authority key identifier: A6:12:0A:E9:9A:AA:DC:00:A3:5A:0C:8B:F5:16:5E:0B:63:A3:8A:1E
Certificate issuer: /CN=A91456E2/serialNumber=A6120AE99AAADC00A35A0C8BF5165E0B63A38A1E
Certificate serial: 0422
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft
Manifest number: 041D
Signing time: Fri 31 Jan 2025 00:44:49 +0000
Manifest this update: Fri 31 Jan 2025 00:44:48 +0000
Manifest next update: Fri 07 Feb 2025 00:44:48 +0000
Files and hashes: 1: phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl (hash: ZOR7glN8veSlgnYo04JRmvf5jcv4zrXfzKV9oqjk58Q=)
2: 28E9FEB86F0511EDAF35FA28C4F9AE02.roa (hash: HeEMxWbEp596Nl2YyjBu7WmXC2Fx4dfVT+MEH+2m8Ic=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1058 (0x422)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91456E2/serialNumber=A6120AE99AAADC00A35A0C8BF5165E0B63A38A1E
Validity
Not Before: Jan 31 00:44:48 2025 GMT
Not After : Feb 7 00:44:48 2025 GMT
Subject: CN=679c1d00-8be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:38:37:a5:07:92:f6:4c:99:8d:35:e5:d0:e8:
26:fc:4e:0e:75:a9:b0:70:38:4f:a0:1c:5c:19:c2:
b1:9c:62:64:44:19:c2:c6:06:51:ac:b9:79:ff:35:
33:1a:82:9b:d5:22:9d:83:12:81:69:5f:45:96:9b:
cc:55:51:db:9c:5f:5b:f7:85:4f:27:f9:a4:3e:59:
cd:74:df:ca:f9:51:32:7a:82:a2:23:ee:2f:21:31:
3a:a6:1c:7d:ca:42:74:e7:c7:63:24:dd:41:7e:b4:
2f:0c:6b:53:79:9e:25:8a:6b:d6:b1:7f:a8:5a:9c:
fc:9c:ff:a4:35:5b:1b:53:48:a4:92:21:08:c0:df:
6d:bf:f2:c0:88:25:52:0d:a8:ba:16:f5:cc:a6:9c:
12:ee:7a:90:bf:9a:fd:a6:22:6d:d6:32:0d:37:86:
20:0f:99:76:f5:4b:0b:47:42:71:a5:a4:4e:3a:aa:
86:19:96:8a:69:c1:da:de:93:95:33:87:5f:d5:fd:
a6:6b:d0:ea:14:65:69:3e:6d:01:79:99:8e:68:47:
1a:d8:26:f1:d4:d2:d0:b7:82:6c:a0:fb:f6:99:9f:
bf:3e:b9:0e:4b:d9:51:b0:d9:a0:8c:9a:83:79:c7:
89:54:b1:1f:2d:c6:a8:92:1f:68:1b:a0:3d:52:11:
28:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C1:1C:74:5D:7E:BF:A8:9E:8E:A5:99:41:81:AA:1C:5E:39:32:DB
X509v3 Authority Key Identifier:
keyid:A6:12:0A:E9:9A:AA:DC:00:A3:5A:0C:8B:F5:16:5E:0B:63:A3:8A:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:45:be:82:de:0a:15:7d:8f:4e:9d:af:97:48:62:0d:76:27:
48:ff:64:37:72:34:18:21:18:52:e8:e5:7f:1d:a6:3d:8d:8e:
2f:5d:7a:a0:d0:ca:74:93:47:13:44:6f:61:c9:c7:7e:2c:8a:
1d:cb:14:96:b4:40:ab:41:b9:05:29:6e:4c:e2:00:cc:8c:15:
2b:59:cd:2e:ef:59:3b:f3:db:7d:d7:86:de:0b:7a:59:8f:fc:
fd:71:19:83:0c:55:f7:3e:93:f3:11:68:1b:24:52:9c:61:03:
13:fe:43:fd:e6:3c:af:d9:c1:4b:21:b6:54:8c:c5:2f:af:d5:
d9:74:b2:c0:52:a3:76:aa:26:2e:ac:82:81:c7:ee:49:88:8d:
c6:7b:a3:3f:0a:eb:4f:69:85:d4:ef:3f:b8:b2:79:9d:69:14:
d6:3e:e2:15:08:42:03:dc:76:fb:35:63:c2:d5:c8:39:08:e1:
b6:83:f4:85:27:b2:65:b4:e7:60:41:02:2d:29:d7:fb:73:23:
2a:5f:02:c4:ec:5b:cb:0b:b7:4f:55:82:b4:16:65:41:62:30:
7b:8c:a2:0e:c2:78:42:95:e2:35:f6:42:91:d0:d6:4e:ef:26:
dd:7e:9a:92:5b:09:3f:58:cc:f9:d2:6b:c6:4f:8e:d5:6a:00:
40:98:25:1b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDU2RTIxMTAvBgNVBAUTKEE2MTIwQUU5OUFBQURDMDBBMzVBMEM4QkY1MTY1RTBC
NjNBMzhBMUUwHhcNMjUwMTMxMDA0NDQ4WhcNMjUwMjA3MDA0NDQ4WjAYMRYwFAYD
VQQDEw02NzljMWQwMC04YmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2jg3pQeS9kyZjTXl0Ogm/E4OdamwcDhPoBxcGcKxnGJkRBnCxgZRrLl5/zUz
GoKb1SKdgxKBaV9FlpvMVVHbnF9b94VPJ/mkPlnNdN/K+VEyeoKiI+4vITE6phx9
ykJ058djJN1BfrQvDGtTeZ4limvWsX+oWpz8nP+kNVsbU0ikkiEIwN9tv/LAiCVS
Dai6FvXMppwS7nqQv5r9piJt1jINN4YgD5l29UsLR0JxpaROOqqGGZaKacHa3pOV
M4df1f2ma9DqFGVpPm0BeZmOaEca2Cbx1NLQt4JsoPv2mZ+/PrkOS9lRsNmgjJqD
eceJVLEfLcaokh9oG6A9UhEoLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBnBHHRd
fr+ono6lmUGBqhxeOTLbMB8GA1UdIwQYMBaAFKYSCumaqtwAo1oMi/UWXgtjo4oe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTZFMi9BMUZBQ0JGQzUy
MDUxMUVDOTM2QUFCMjJDNEY5QUUwMi9waElLNlpxcTNBQ2pXZ3lMOVJaZUMyT2pp
aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BoSUs2WnFxM0FDaldneUw5UlplQzJPamloNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NTZFMi9BMUZBQ0JGQzUyMDUxMUVDOTM2QUFCMjJDNEY5QUUwMi9waElLNlpxcTNB
Q2pXZ3lMOVJaZUMyT2ppaDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCcRb6C3goVfY9Ona+XSGINdidI/2Q3cjQYIRhS6OV/HaY9jY4vXXqg
0Mp0k0cTRG9hycd+LIodyxSWtECrQbkFKW5M4gDMjBUrWc0u71k789t914beC3pZ
j/z9cRmDDFX3PpPzEWgbJFKcYQMT/kP95jyv2cFLIbZUjMUvr9XZdLLAUqN2qiYu
rIKBx+5JiI3Ge6M/CutPaYXU7z+4snmdaRTWPuIVCEID3Hb7NWPC1cg5COG2g/SF
J7JltOdgQQItKdf7cyMqXwLE7FvLC7dPVYK0FmVBYjB7jKIOwnhCleI19kKR0NZO
7ybdfpqSWwk/WMz50mvGT47VagBAmCUb
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:37:27 2025 by rpki-client