Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft
File: SyWxRyDwREuz1mj5Y1hDVPf6whM.mft (raw, json)
Hash identifier: 11UhK58q4dWksFVLd+eqAlIskeqw1lvuJmkjExVfrVA=
Subject key identifier: E9:23:2B:F9:1B:0E:1B:55:7E:C0:31:0A:5C:16:DE:7C:C8:9A:53:A8
Authority key identifier: 4B:25:B1:47:20:F0:44:4B:B3:D6:68:F9:63:58:43:54:F7:FA:C2:13
Certificate issuer: /CN=A91650EA/serialNumber=4B25B14720F0444BB3D668F963584354F7FAC213
Certificate serial: AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyWxRyDwREuz1mj5Y1hDVPf6whM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft
Manifest number: AC
Signing time: Fri 31 Jan 2025 05:14:44 +0000
Manifest this update: Fri 31 Jan 2025 05:14:43 +0000
Manifest next update: Fri 07 Feb 2025 05:14:43 +0000
Files and hashes: 1: SyWxRyDwREuz1mj5Y1hDVPf6whM.crl (hash: qaCKQuRikpFAQ9XkcYfjh94smzopff0ZzJF0z/+nNPY=)
2: D0F245E0D76711EE99C72C29C4F9AE02.roa (hash: 9VKla165NEuwDujrYh1FdBvK2ZH/U/K5NZJL+RjIV7c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174 (0xae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91650EA/serialNumber=4B25B14720F0444BB3D668F963584354F7FAC213
Validity
Not Before: Jan 31 05:14:43 2025 GMT
Not After : Feb 7 05:14:43 2025 GMT
Subject: CN=679c5c44-e1d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:15:1a:6e:96:d4:2a:22:cd:f1:d7:7b:48:0a:
86:7e:3b:0c:0e:3b:ed:c7:62:cd:8e:ea:80:28:fb:
99:63:30:d3:b5:f8:f7:4e:66:c6:46:0f:43:72:8d:
c3:34:15:ea:91:21:17:01:b9:38:69:d4:12:2a:50:
d3:6f:5c:da:8a:f7:64:cf:04:b2:4a:09:f6:f1:67:
06:fc:4b:6b:3f:b8:28:7f:6f:ec:32:1e:11:d6:42:
91:76:f9:94:96:d2:76:13:f3:19:42:67:56:45:a5:
ad:6f:4e:66:88:c8:6b:25:a7:5c:60:4a:ea:9c:5d:
29:55:f8:b0:8b:4a:bb:4a:e0:01:e6:36:9f:71:c2:
be:38:da:44:8f:09:b4:b6:f4:c0:18:48:03:ab:ce:
2b:0c:94:b9:20:ce:0b:72:a2:26:e2:72:f6:df:b5:
46:49:8e:05:83:57:73:11:d1:d6:a7:4d:fe:77:dd:
f1:49:b7:a8:39:86:83:f0:56:5a:9f:94:5c:57:d9:
07:f0:3d:a3:69:16:f6:21:45:24:2c:a4:3e:bf:5c:
e5:5d:ad:cb:e0:8a:78:39:b4:31:d5:d4:a5:0a:c3:
95:b0:f1:d2:46:b2:5c:f9:f4:72:c5:f3:b6:b8:35:
cf:f4:13:7c:3b:69:d2:ab:77:5a:3b:7e:9a:9f:ac:
75:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:23:2B:F9:1B:0E:1B:55:7E:C0:31:0A:5C:16:DE:7C:C8:9A:53:A8
X509v3 Authority Key Identifier:
keyid:4B:25:B1:47:20:F0:44:4B:B3:D6:68:F9:63:58:43:54:F7:FA:C2:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyWxRyDwREuz1mj5Y1hDVPf6whM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:16:41:5a:b0:58:1d:34:dc:17:d7:1d:a5:38:ed:94:e7:61:
fe:35:d0:f4:ac:97:21:cf:5c:e0:5d:05:2c:7e:3c:1c:03:7f:
40:f7:ea:f5:fb:19:f4:b6:9e:84:76:71:0a:62:b9:ba:a9:18:
ca:23:f9:81:75:3a:9a:1c:59:0e:a4:63:37:ec:c2:2b:c5:9e:
54:24:ac:13:66:0c:a2:f1:cf:e3:f2:00:1c:94:43:96:79:56:
51:56:ea:0c:fe:67:88:ec:52:5b:e1:cd:49:72:12:ee:f7:3e:
a5:76:a4:c3:cb:36:60:da:02:b1:27:41:89:b4:53:f2:cb:1a:
4b:4e:3d:96:d2:3e:7a:b3:aa:c7:bf:aa:4d:98:44:6d:22:41:
3b:fe:12:25:bf:26:c5:c8:b3:c2:76:a9:04:bb:ee:f5:f7:c0:
56:49:37:18:a0:b0:66:d9:94:a6:2c:0b:57:9e:0f:51:19:d5:
b8:2c:7a:dd:4b:57:87:30:c9:eb:59:ce:13:4f:ef:7b:05:96:
db:7a:da:7d:c8:51:43:85:76:a7:11:b8:f6:92:a2:00:dc:df:
89:b4:2f:6a:e1:19:22:33:df:1b:e0:ec:6c:09:f0:46:67:7d:
f4:56:b3:45:b0:cc:9d:46:09:2e:f7:94:bf:47:ad:25:52:e7:
e7:e0:ac:71
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjUwRUExMTAvBgNVBAUTKDRCMjVCMTQ3MjBGMDQ0NEJCM0Q2NjhGOTYzNTg0MzU0
RjdGQUMyMTMwHhcNMjUwMTMxMDUxNDQzWhcNMjUwMjA3MDUxNDQzWjAYMRYwFAYD
VQQDEw02NzljNWM0NC1lMWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxhUabpbUKiLN8dd7SAqGfjsMDjvtx2LNjuqAKPuZYzDTtfj3TmbGRg9Dco3D
NBXqkSEXAbk4adQSKlDTb1zaivdkzwSySgn28WcG/EtrP7gof2/sMh4R1kKRdvmU
ltJ2E/MZQmdWRaWtb05miMhrJadcYErqnF0pVfiwi0q7SuAB5jafccK+ONpEjwm0
tvTAGEgDq84rDJS5IM4LcqIm4nL237VGSY4Fg1dzEdHWp03+d93xSbeoOYaD8FZa
n5RcV9kH8D2jaRb2IUUkLKQ+v1zlXa3L4Ip4ObQx1dSlCsOVsPHSRrJc+fRyxfO2
uDXP9BN8O2nSq3daO36an6x1GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOkjK/kb
DhtVfsAxClwW3nzImlOoMB8GA1UdIwQYMBaAFEslsUcg8ERLs9Zo+WNYQ1T3+sIT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTBFQS81MjFEMUFEOEQ3
NjcxMUVFQUYyMkMwNjZDNEY5QUUwMi9TeVd4UnlEd1JFdXoxbWo1WTFoRFZQZjZ3
aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1N5V3hSeUR3UkV1ejFtajVZMWhEVlBmNndoTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NTBFQS81MjFEMUFEOEQ3NjcxMUVFQUYyMkMwNjZDNEY5QUUwMi9TeVd4UnlEd1JF
dXoxbWo1WTFoRFZQZjZ3aE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAUFkFasFgdNNwX1x2lOO2U52H+NdD0rJchz1zgXQUsfjwcA39A9+r1
+xn0tp6EdnEKYrm6qRjKI/mBdTqaHFkOpGM37MIrxZ5UJKwTZgyi8c/j8gAclEOW
eVZRVuoM/meI7FJb4c1JchLu9z6ldqTDyzZg2gKxJ0GJtFPyyxpLTj2W0j56s6rH
v6pNmERtIkE7/hIlvybFyLPCdqkEu+7198BWSTcYoLBm2ZSmLAtXng9RGdW4LHrd
S1eHMMnrWc4TT+97BZbbetp9yFFDhXanEbj2kqIA3N+JtC9q4RkiM98b4OxsCfBG
Z330VrNFsMydRgku95S/R60lUufn4Kxx
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:38:38 2025 by rpki-client