Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft
File: 5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft (raw, json)
Hash identifier: nj8SsLuEt4Sqvs9SPi8qJzvsj5aJ3DcONvpwB97SddY=
Subject key identifier: CD:89:16:75:AF:AA:CA:D7:10:5F:36:4A:49:34:51:BE:B0:A4:9F:7D
Authority key identifier: E5:09:63:D7:04:68:72:73:56:B7:8B:7F:C4:38:09:74:42:9B:64:E1
Certificate issuer: /CN=A914C7F8/serialNumber=E50963D70468727356B78B7FC4380974429B64E1
Certificate serial: 013E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft
Manifest number: 0138
Signing time: Fri 31 Jan 2025 03:43:27 +0000
Manifest this update: Fri 31 Jan 2025 03:43:27 +0000
Manifest next update: Fri 07 Feb 2025 03:43:27 +0000
Files and hashes: 1: 5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl (hash: lQ1WJXAJT12NVOHevxWbp9lhUDg7YCPFrvplM4YonP8=)
2: 47862E7E129C11EEA43CFD46C4F9AE02.roa (hash: M9MqZsVmz62prCxeOcSq9CpUw3/czHK+Un3uXWoG0WQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 318 (0x13e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C7F8/serialNumber=E50963D70468727356B78B7FC4380974429B64E1
Validity
Not Before: Jan 31 03:43:27 2025 GMT
Not After : Feb 7 03:43:27 2025 GMT
Subject: CN=679c46df-d743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d5:3f:b2:66:4a:89:3d:52:b8:2a:cf:50:21:
7f:81:5b:c3:c4:75:45:61:82:1e:4f:43:13:7b:95:
61:09:73:6b:29:1c:7e:73:65:b0:09:28:6c:42:52:
76:da:ca:60:18:39:eb:a8:f1:c7:56:ac:0e:2a:8f:
65:7e:33:00:24:c3:af:89:8a:c3:f5:fe:55:4f:79:
63:b1:75:f0:ac:49:ad:d9:3c:d6:4a:f2:0c:41:bc:
be:b9:6d:8f:b7:ed:81:0a:d5:db:10:5c:47:e1:eb:
ca:fa:c4:19:82:2d:38:d2:29:f5:da:52:ea:81:69:
3e:ed:5b:8b:90:53:45:9f:ec:9b:92:be:1b:3b:30:
96:5d:ae:74:e9:aa:c5:29:4e:83:74:cd:02:70:fb:
58:fc:19:2e:99:77:d5:4d:2d:c8:40:24:41:a2:95:
a6:a9:8e:2a:9c:85:d5:8a:7a:3c:ba:8e:f3:8e:6f:
3b:91:f5:65:59:3e:2f:e5:d6:57:c0:68:00:a8:6f:
14:c7:26:67:99:75:ed:76:82:d8:af:5b:23:84:40:
f8:54:cd:96:be:a7:8d:ae:39:bf:b0:fa:85:44:81:
24:b8:bf:49:48:00:66:bb:52:7f:43:ff:f7:ee:c5:
cd:ed:18:46:0a:50:d7:e7:f6:a1:e9:57:59:7f:75:
46:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:89:16:75:AF:AA:CA:D7:10:5F:36:4A:49:34:51:BE:B0:A4:9F:7D
X509v3 Authority Key Identifier:
keyid:E5:09:63:D7:04:68:72:73:56:B7:8B:7F:C4:38:09:74:42:9B:64:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:a7:90:45:92:0f:46:72:d0:21:a4:b9:c2:e5:1a:a0:2d:8d:
30:7f:b8:82:ba:d7:de:d0:90:0b:09:b6:06:32:d2:86:4d:57:
81:00:f4:8d:42:aa:45:8b:40:d8:ec:a8:04:8f:55:0f:ff:2c:
90:5b:77:5c:3d:6e:67:63:bd:45:cb:47:3c:da:5d:4f:30:43:
ac:0d:26:85:d7:c5:2e:c5:3e:1f:7f:01:dc:a6:c9:b6:1d:dd:
e9:13:30:6e:2b:d6:26:d7:11:01:10:7e:65:ad:f6:b8:ac:a2:
35:48:ce:81:05:ee:65:4f:0b:bf:90:9c:d4:ae:10:9f:1a:71:
d6:db:f2:d3:85:d7:06:38:7f:0c:1e:bb:73:7e:90:f1:4d:35:
6d:a3:d4:61:71:7a:07:b2:f2:cf:b6:bf:a6:62:a1:da:5e:06:
03:e1:58:8f:b1:57:ec:ec:a5:06:32:bd:41:f1:a4:12:be:57:
3b:92:8a:36:5a:1f:64:d9:5c:54:02:36:d5:99:e1:60:c0:5f:
b9:45:d6:5b:ea:f7:27:fc:59:c4:b2:55:07:64:8c:1e:59:4e:
be:b6:6f:34:b4:24:eb:7e:8e:a8:1e:5d:db:c1:fa:a6:a8:06:
68:7a:e2:8d:b9:a1:38:bb:1a:77:02:b7:53:ed:7e:8f:6c:74:
5a:41:8e:3b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEM3RjgxMTAvBgNVBAUTKEU1MDk2M0Q3MDQ2ODcyNzM1NkI3OEI3RkM0MzgwOTc0
NDI5QjY0RTEwHhcNMjUwMTMxMDM0MzI3WhcNMjUwMjA3MDM0MzI3WjAYMRYwFAYD
VQQDEw02NzljNDZkZi1kNzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6dU/smZKiT1SuCrPUCF/gVvDxHVFYYIeT0MTe5VhCXNrKRx+c2WwCShsQlJ2
2spgGDnrqPHHVqwOKo9lfjMAJMOviYrD9f5VT3ljsXXwrEmt2TzWSvIMQby+uW2P
t+2BCtXbEFxH4evK+sQZgi040in12lLqgWk+7VuLkFNFn+ybkr4bOzCWXa506arF
KU6DdM0CcPtY/BkumXfVTS3IQCRBopWmqY4qnIXVino8uo7zjm87kfVlWT4v5dZX
wGgAqG8UxyZnmXXtdoLYr1sjhED4VM2WvqeNrjm/sPqFRIEkuL9JSABmu1J/Q//3
7sXN7RhGClDX5/ah6VdZf3VG2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2JFnWv
qsrXEF82Skk0Ub6wpJ99MB8GA1UdIwQYMBaAFOUJY9cEaHJzVreLf8Q4CXRCm2Th
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzdGOC9FMjUxMEUxQzEy
OTUxMUVFODRCQUQ3NDZDNEY5QUUwMi81UWxqMXdSb2NuTld0NHRfeERnSmRFS2Ja
T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVRbGoxd1JvY25OV3Q0dF94RGdKZEVLYlpPRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QzdGOC9FMjUxMEUxQzEyOTUxMUVFODRCQUQ3NDZDNEY5QUUwMi81UWxqMXdSb2Nu
Tld0NHRfeERnSmRFS2JaT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBRp5BFkg9GctAhpLnC5RqgLY0wf7iCutfe0JALCbYGMtKGTVeBAPSN
QqpFi0DY7KgEj1UP/yyQW3dcPW5nY71Fy0c82l1PMEOsDSaF18UuxT4ffwHcpsm2
Hd3pEzBuK9Ym1xEBEH5lrfa4rKI1SM6BBe5lTwu/kJzUrhCfGnHW2/LThdcGOH8M
HrtzfpDxTTVto9RhcXoHsvLPtr+mYqHaXgYD4ViPsVfs7KUGMr1B8aQSvlc7koo2
Wh9k2VxUAjbVmeFgwF+5RdZb6vcn/FnEslUHZIweWU6+tm80tCTrfo6oHl3bwfqm
qAZoeuKNuaE4uxp3ArdT7X6PbHRaQY47
-----END CERTIFICATE-----
Generated at Sun Apr 27 00:35:18 2025 by rpki-client