Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft
File: 2Qg5PFuoA1r2i37ACVWOgS7QleA.mft (raw, json)
Hash identifier: S16l9q2SScEbCn8SbyUbttz3VXczKaHnBeyUmFN7nyY=
Subject key identifier: 36:D1:CE:94:D1:B5:FB:7A:C6:6F:94:B6:11:C2:33:0E:A7:91:87:01
Authority key identifier: D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0
Certificate issuer: /CN=A916069A/serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0
Certificate serial: 32
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft
Manifest number: 30
Signing time: Fri 31 Jan 2025 06:44:01 +0000
Manifest this update: Fri 31 Jan 2025 06:44:00 +0000
Manifest next update: Fri 07 Feb 2025 06:44:00 +0000
Files and hashes: 1: 2Qg5PFuoA1r2i37ACVWOgS7QleA.crl (hash: 8PXXReqvyu/Q5IKxJxdNorXu353JonKZgpjRmqgwUnk=)
2: C62E0568C52811EF9EDAD649C4F9AE02.roa (hash: F5uXTjMiJni5HqVRUwrgZPii2IL1VQzAUq1Dx9Qk/Co=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916069A/serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0
Validity
Not Before: Jan 31 06:44:00 2025 GMT
Not After : Feb 7 06:44:00 2025 GMT
Subject: CN=679c7131-29a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a5:81:cb:2d:32:4b:e9:de:c6:1d:d5:ee:26:
b2:c5:d1:e7:5c:5c:62:84:f7:53:61:aa:4b:1e:14:
2f:36:b6:45:1d:94:4c:e0:7c:12:c9:0e:c2:4c:6e:
5d:27:40:bf:62:23:5f:7f:1d:d0:98:9a:2f:a5:06:
6b:c5:9e:ab:f0:19:e4:2b:95:6a:85:10:99:42:8a:
b1:ec:db:f0:99:5a:60:b6:05:53:ec:54:ed:39:47:
b2:e9:40:53:2e:f1:92:2c:31:b8:1f:79:b3:e3:e4:
3d:03:7a:e1:ee:01:56:0f:93:5a:7a:cc:cd:95:de:
19:bf:7b:04:50:82:02:eb:f2:62:00:ed:a8:18:77:
c1:dc:98:90:8b:c9:0a:9b:93:e5:05:54:5f:dc:65:
bc:78:4a:5c:e4:5f:09:2d:10:9f:76:a5:7d:0d:2a:
1f:2c:67:4b:c5:8d:42:7f:62:a4:39:d6:4e:58:72:
db:f9:49:e4:8a:cd:f0:6a:b5:a7:b1:4c:4f:68:f8:
81:37:f6:4c:50:0c:dc:f2:8c:fe:ec:c8:90:b4:c7:
cf:38:8c:f6:8f:5e:9e:31:f4:6c:7f:9b:69:ab:38:
a5:36:e7:b3:7d:99:5b:fc:bf:e8:53:15:af:1b:e5:
c7:90:74:7d:89:62:4e:89:b3:a3:e3:11:05:c9:de:
f6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D1:CE:94:D1:B5:FB:7A:C6:6F:94:B6:11:C2:33:0E:A7:91:87:01
X509v3 Authority Key Identifier:
keyid:D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:3d:7b:1a:ac:23:c1:81:7c:ad:79:8b:98:4b:e5:20:e8:6e:
33:f0:6a:cd:49:ca:e8:5a:c0:06:d8:54:40:1d:b3:5f:1a:64:
a6:fe:e6:96:db:31:cd:64:e5:38:3c:b5:93:11:c9:c8:f8:8b:
41:b6:8a:eb:e5:4d:80:d6:75:86:48:80:66:29:d3:52:d4:d4:
85:c5:e6:b7:36:16:ed:11:89:15:bb:73:66:7a:e0:6f:a6:35:
89:f2:df:ad:df:29:d3:d5:8a:43:6e:a7:6c:4e:6e:fe:a8:d2:
52:e1:a0:a6:94:93:09:0a:42:40:ba:2d:c3:8a:8e:63:ea:d3:
3c:9c:fb:73:51:35:0d:92:ba:8c:a6:26:56:3f:c8:25:dc:f4:
67:ba:92:8e:e9:ca:7b:78:f2:df:6b:75:d6:a4:b4:59:e4:ab:
62:c8:80:d6:cf:e2:c4:62:31:80:a0:3d:d5:d0:79:2c:87:4b:
82:22:09:42:fb:3c:c2:d3:f1:61:f1:7c:06:20:a3:ad:68:ae:
76:15:b9:f4:f2:5b:dd:80:d0:ae:24:d7:57:55:03:6f:df:3d:
68:a7:5b:46:25:42:02:1a:8f:a2:99:18:ca:8f:bb:85:4b:1a:
ed:7a:48:89:27:bc:00:c5:e4:bb:67:67:da:48:0b:fd:c2:14:
0e:c4:89:cc
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
MDY5QTExMC8GA1UEBRMoRDkwODM5M0M1QkE4MDM1QUY2OEI3RUMwMDk1NThFODEy
RUQwOTVFMDAeFw0yNTAxMzEwNjQ0MDBaFw0yNTAyMDcwNjQ0MDBaMBgxFjAUBgNV
BAMTDTY3OWM3MTMxLTI5YTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDipYHLLTJL6d7GHdXuJrLF0edcXGKE91NhqkseFC82tkUdlEzgfBLJDsJMbl0n
QL9iI19/HdCYmi+lBmvFnqvwGeQrlWqFEJlCirHs2/CZWmC2BVPsVO05R7LpQFMu
8ZIsMbgfebPj5D0DeuHuAVYPk1p6zM2V3hm/ewRQggLr8mIA7agYd8HcmJCLyQqb
k+UFVF/cZbx4SlzkXwktEJ92pX0NKh8sZ0vFjUJ/YqQ51k5Yctv5SeSKzfBqtaex
TE9o+IE39kxQDNzyjP7syJC0x884jPaPXp4x9Gx/m2mrOKU257N9mVv8v+hTFa8b
5ceQdH2JYk6Js6PjEQXJ3va1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNtHOlNG1
+3rGb5S2EcIzDqeRhwEwHwYDVR0jBBgwFoAU2Qg5PFuoA1r2i37ACVWOgS7QleAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwNjlBLzJFQjYwNzk2OUJG
MDExRUY4MUM5MDI2N0M0RjlBRTAyLzJRZzVQRnVvQTFyMmkzN0FDVldPZ1M3UWxl
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvMlFnNVBGdW9BMXIyaTM3QUNWV09nUzdRbGVBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw
NjlBLzJFQjYwNzk2OUJGMDExRUY4MUM5MDI2N0M0RjlBRTAyLzJRZzVQRnVvQTFy
MmkzN0FDVldPZ1M3UWxlQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJE9exqsI8GBfK15i5hL5SDobjPwas1JyuhawAbYVEAds18aZKb+5pbb
Mc1k5Tg8tZMRycj4i0G2iuvlTYDWdYZIgGYp01LU1IXF5rc2Fu0RiRW7c2Z64G+m
NYny363fKdPVikNup2xObv6o0lLhoKaUkwkKQkC6LcOKjmPq0zyc+3NRNQ2Suoym
JlY/yCXc9Ge6ko7pynt48t9rddaktFnkq2LIgNbP4sRiMYCgPdXQeSyHS4IiCUL7
PMLT8WHxfAYgo61ornYVufTyW92A0K4k11dVA2/fPWinW0YlQgIaj6KZGMqPu4VL
Gu16SIknvADF5LtnZ9pIC/3CFA7Eicw=
-----END CERTIFICATE-----
Generated at Sun Apr 27 15:38:31 2025 by rpki-client