Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft
File: 5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft (raw, json)
Hash identifier: HNS4CNnG+NUIcxxUAqmehS/q/3RT0eNuaLowo/3SvyM=
Subject key identifier: A6:39:3A:79:6A:AB:97:AB:DE:31:9C:67:18:3A:8B:1A:7F:1C:E7:EF
Authority key identifier: E6:99:DB:CD:E0:9C:0A:A5:F8:E6:6A:E0:A7:32:54:DC:A0:5D:85:D4
Certificate issuer: /CN=A915C15F/serialNumber=E699DBCDE09C0AA5F8E66AE0A73254DCA05D85D4
Certificate serial: 0633
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft
Manifest number: 0624
Signing time: Thu 30 Jan 2025 22:46:14 +0000
Manifest this update: Thu 30 Jan 2025 22:46:13 +0000
Manifest next update: Thu 06 Feb 2025 22:46:13 +0000
Files and hashes: 1: 5pnbzeCcCqX45mrgpzJU3KBdhdQ.crl (hash: OtU0tgUY8WuU3/SK82gjeCT68Q2JGeLURxLYkeuUyi8=)
2: 581485C0590911EE9C70C86EC4F9AE02.roa (hash: 4Ss+y80pdvb3E6dpgTF293UbJ9J8OkxHMsUb6tspv+w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1587 (0x633)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C15F/serialNumber=E699DBCDE09C0AA5F8E66AE0A73254DCA05D85D4
Validity
Not Before: Jan 30 22:46:13 2025 GMT
Not After : Feb 6 22:46:13 2025 GMT
Subject: CN=679c0135-a595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b8:71:60:a3:57:c4:bb:d0:a1:03:e4:d8:8f:
4f:00:be:59:35:8c:92:58:b7:7d:1d:ba:24:ee:54:
6b:89:30:4e:a3:e7:66:ee:fc:03:cc:ee:fd:e6:a8:
18:87:a6:3b:7c:5f:fc:a6:34:1e:ad:0e:a0:3b:28:
04:de:cf:49:52:a4:80:37:15:21:7d:b4:bd:e0:ba:
ca:74:ec:94:7a:fe:74:e7:60:6d:75:2b:7a:02:cc:
e8:24:b7:43:52:0f:6f:3e:9c:73:65:e3:f7:be:e3:
06:1b:81:1e:63:02:4b:60:d3:50:bb:09:d1:40:37:
48:2d:d1:85:09:61:00:e1:d9:4a:bf:1a:02:c7:c9:
0d:74:ca:5f:f7:49:8d:0c:98:b8:10:c6:b0:fc:a5:
e2:13:5f:04:2a:14:03:55:30:b7:87:5a:ca:a3:9f:
69:b7:4b:50:80:f6:65:d8:43:e5:35:0d:8c:25:62:
15:46:70:de:b6:1d:df:bb:e3:7e:f7:41:d0:35:68:
5b:ca:1b:b7:b6:e7:d3:0b:94:23:f5:a4:7f:5e:70:
bd:86:43:50:ed:9f:89:be:fe:8a:35:21:63:1b:a5:
cd:4a:8b:2a:6e:86:87:66:9b:fa:73:36:93:57:6c:
e7:1b:33:cb:41:fe:7c:6d:cc:5a:6f:8a:f2:ea:f0:
9d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:39:3A:79:6A:AB:97:AB:DE:31:9C:67:18:3A:8B:1A:7F:1C:E7:EF
X509v3 Authority Key Identifier:
keyid:E6:99:DB:CD:E0:9C:0A:A5:F8:E6:6A:E0:A7:32:54:DC:A0:5D:85:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:7d:3c:41:91:65:29:2b:e3:42:9c:3a:e3:f1:b5:64:15:6d:
f3:f8:57:b9:8d:4d:23:a0:29:90:00:52:71:8b:0d:92:1c:68:
8e:e0:1c:38:40:0d:97:d3:80:dd:40:a8:ad:af:f3:aa:0f:0c:
4a:cb:11:ee:39:07:e2:cb:f4:90:cc:ce:37:08:d8:ce:b8:27:
db:88:3d:2b:31:c9:e4:d2:5a:ab:1b:58:8d:e9:78:97:e2:2b:
72:28:ee:32:dc:94:92:10:85:6a:96:fb:79:51:8d:72:c7:15:
be:25:d2:9c:80:3d:6f:77:6a:6f:f0:c6:52:cf:29:c5:ab:88:
7b:ff:43:70:ef:48:84:52:6a:55:9c:74:75:33:8d:a7:bd:17:
1c:55:f8:6a:5b:73:bf:9a:40:a8:76:bf:43:ee:d4:95:3e:5e:
bb:18:39:40:6b:45:53:f4:6d:24:fb:34:7c:8d:4c:6b:a9:d5:
14:7e:5c:3e:fe:c1:cb:cf:c4:1d:9b:10:76:13:05:e4:11:c4:
d7:bc:8f:23:61:ac:17:a4:01:2a:e0:86:27:d5:87:4a:36:a2:
eb:bf:93:af:92:60:84:5c:bb:d0:89:e7:cc:44:d6:ab:c9:d6:
90:b1:49:e7:5d:7f:60:c0:6a:22:7b:de:8d:df:28:b7:6e:89:
f2:94:14:15
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUMxNUYxMTAvBgNVBAUTKEU2OTlEQkNERTA5QzBBQTVGOEU2NkFFMEE3MzI1NERD
QTA1RDg1RDQwHhcNMjUwMTMwMjI0NjEzWhcNMjUwMjA2MjI0NjEzWjAYMRYwFAYD
VQQDEw02NzljMDEzNS1hNTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsrhxYKNXxLvQoQPk2I9PAL5ZNYySWLd9Hbok7lRriTBOo+dm7vwDzO795qgY
h6Y7fF/8pjQerQ6gOygE3s9JUqSANxUhfbS94LrKdOyUev5052BtdSt6AszoJLdD
Ug9vPpxzZeP3vuMGG4EeYwJLYNNQuwnRQDdILdGFCWEA4dlKvxoCx8kNdMpf90mN
DJi4EMaw/KXiE18EKhQDVTC3h1rKo59pt0tQgPZl2EPlNQ2MJWIVRnDeth3fu+N+
90HQNWhbyhu3tufTC5Qj9aR/XnC9hkNQ7Z+Jvv6KNSFjG6XNSosqboaHZpv6czaT
V2znGzPLQf58bcxab4ry6vCdFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKY5Onlq
q5er3jGcZxg6ixp/HOfvMB8GA1UdIwQYMBaAFOaZ283gnAql+OZq4KcyVNygXYXU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzE1Ri85MzI5QjBCNjhD
NjcxMUVCQjdFRTg2M0VDNEY5QUUwMi81cG5iemVDY0NxWDQ1bXJncHpKVTNLQmRo
ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVwbmJ6ZUNjQ3FYNDVtcmdwekpVM0tCZGhkUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QzE1Ri85MzI5QjBCNjhDNjcxMUVCQjdFRTg2M0VDNEY5QUUwMi81cG5iemVDY0Nx
WDQ1bXJncHpKVTNLQmRoZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAJfTxBkWUpK+NCnDrj8bVkFW3z+Fe5jU0joCmQAFJxiw2SHGiO4Bw4
QA2X04DdQKitr/OqDwxKyxHuOQfiy/SQzM43CNjOuCfbiD0rMcnk0lqrG1iN6XiX
4ityKO4y3JSSEIVqlvt5UY1yxxW+JdKcgD1vd2pv8MZSzynFq4h7/0Nw70iEUmpV
nHR1M42nvRccVfhqW3O/mkCodr9D7tSVPl67GDlAa0VT9G0k+zR8jUxrqdUUflw+
/sHLz8QdmxB2EwXkEcTXvI8jYawXpAEq4IYn1YdKNqLrv5OvkmCEXLvQiefMRNar
ydaQsUnnXX9gwGoie96N3yi3bonylBQV
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:28 2025 by rpki-client