Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
File: nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft (raw, json)
Hash identifier: klm1aUxBrY7E5IQFR0GGeW94f+Nz74/fp8FHu6Cm5kk=
Subject key identifier: C1:9E:67:A6:C2:55:E8:77:A8:2E:C4:D2:75:97:DB:24:FC:89:23:42
Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
Certificate issuer: /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Certificate serial: 0495
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
Manifest number: 0485
Signing time: Fri 31 Jan 2025 00:07:54 +0000
Manifest this update: Fri 31 Jan 2025 00:07:54 +0000
Manifest next update: Fri 07 Feb 2025 00:07:54 +0000
Files and hashes: 1: nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl (hash: MINcs7xDicBK6AbmjVubDN7R9wbYM7NHjLnriWnZY0M=)
2: E747402C940211EFAAB77C3DC4F9AE02.roa (hash: V4kNzC9BCFB4bEAtUd+qwvHLEbfnpMX9a/DaKQbhUdI=)
3: DA655484CF0811EF9CF05B4FC4F9AE02.roa (hash: OtFmSPwV6EFHA0PFmeCzNbPWu4B2WoMirQl5I+it6TQ=)
4: 9C3B0AB8911A11EFB0F2DB5DC4F9AE02.roa (hash: 1ZwXIYT8WEQ8AXmik6kQ0iyXkhUrX8a9G8G1OnokxHI=)
5: DF2C7C5E8A3E11EF96BEBB3AC4F9AE02.roa (hash: Po0zIGF8aATq1hFnPm65zoH3mTgzDOjtTV7rd5eqe/A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1173 (0x495)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Validity
Not Before: Jan 31 00:07:54 2025 GMT
Not After : Feb 7 00:07:54 2025 GMT
Subject: CN=679c145a-60f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:15:24:79:c0:73:05:30:de:84:8d:c8:4f:28:
13:95:7f:a1:b0:46:2a:e5:06:9a:dc:c6:60:96:4a:
bb:09:5c:1f:0d:92:4f:c4:6f:de:3e:c3:ba:2f:08:
a4:38:60:d0:64:1f:a5:7a:14:e8:81:03:15:c6:ad:
a9:7c:15:ad:2d:5e:26:29:23:70:28:10:39:f4:c0:
2c:05:a8:01:92:f8:9b:af:ed:0d:3c:cb:73:56:aa:
29:3a:c1:79:88:77:b2:17:0b:26:3c:65:aa:0f:72:
09:70:fb:57:65:21:a9:2b:e2:52:95:95:f5:bb:0c:
43:2f:37:05:b2:13:da:b5:17:59:1a:0f:16:8d:6a:
28:6a:ab:5c:e4:68:b0:b9:8a:81:13:a5:c5:55:d6:
72:b6:f5:b8:09:c6:10:e5:26:86:1c:51:86:1e:22:
a3:41:f8:75:d0:3e:9f:1f:cd:34:4b:1a:ba:fa:81:
27:b2:f5:a9:11:02:6b:e8:42:2a:c2:02:a2:10:67:
5a:8e:83:c5:e9:ac:e0:e0:df:d8:a2:f2:1d:87:48:
bd:f5:65:ec:29:60:07:2a:13:cb:ce:af:b9:0c:ef:
18:7a:5e:31:0d:1d:35:b4:52:e5:1a:a2:1a:8f:85:
7e:c0:5a:36:28:9c:4c:44:c7:7f:62:5b:3a:5f:10:
99:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9E:67:A6:C2:55:E8:77:A8:2E:C4:D2:75:97:DB:24:FC:89:23:42
X509v3 Authority Key Identifier:
keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:a5:b2:20:66:19:78:c9:08:d2:f1:58:d3:37:7c:66:fe:3a:
c2:95:f5:a9:21:d6:98:52:22:7e:f4:0d:02:b0:f6:d6:1b:36:
4a:0b:78:f9:2b:20:ce:9e:df:d3:3d:0c:ca:f7:6a:3b:a5:76:
9a:d0:24:e4:8e:e5:bb:f4:7c:65:6b:fc:2b:0d:f9:5d:f9:99:
ef:67:f9:31:fa:21:fd:02:79:fe:65:6f:03:33:c1:c7:b4:3d:
59:9e:37:9b:c0:b3:f2:c0:d3:8d:ab:33:d4:05:a9:64:36:b5:
78:09:59:eb:15:f0:71:76:49:9d:ac:75:4f:69:f3:fa:4a:73:
b9:8b:21:c5:33:e7:16:16:13:8f:93:63:fd:b4:66:10:7a:8f:
ea:cc:f0:a0:54:d4:43:a0:28:7b:e5:db:05:5e:dd:c5:f2:85:
b4:71:f5:03:b7:dc:a0:36:c6:f7:47:31:ed:74:23:e0:96:36:
57:68:2b:5a:59:73:c5:d9:1a:de:59:d9:c8:0e:b7:f7:f6:4d:
70:f7:4e:c1:a8:e0:8e:3a:b9:4a:6e:c5:8b:c4:29:e8:82:29:
89:ba:dd:67:3c:d2:c4:09:7e:d9:e8:e4:b4:b2:a8:a6:18:ef:
a5:04:6a:94:e9:c9:88:ca:cf:31:8d:ca:51:9f:22:e2:ee:b2:
37:b5:dd:16
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg4RDQxMTAvBgNVBAUTKDlDOEFFM0RDN0IwNUIzODUzOTY3OTBDQTczMjNEM0Ew
OTA2RkVEODIwHhcNMjUwMTMxMDAwNzU0WhcNMjUwMjA3MDAwNzU0WjAYMRYwFAYD
VQQDEw02NzljMTQ1YS02MGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArBUkecBzBTDehI3ITygTlX+hsEYq5Qaa3MZglkq7CVwfDZJPxG/ePsO6Lwik
OGDQZB+lehTogQMVxq2pfBWtLV4mKSNwKBA59MAsBagBkvibr+0NPMtzVqopOsF5
iHeyFwsmPGWqD3IJcPtXZSGpK+JSlZX1uwxDLzcFshPatRdZGg8WjWooaqtc5Giw
uYqBE6XFVdZytvW4CcYQ5SaGHFGGHiKjQfh10D6fH800Sxq6+oEnsvWpEQJr6EIq
wgKiEGdajoPF6azg4N/YovIdh0i99WXsKWAHKhPLzq+5DO8Yel4xDR01tFLlGqIa
j4V+wFo2KJxMRMd/Yls6XxCZ+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGeZ6bC
Veh3qC7E0nWX2yT8iSNCMB8GA1UdIwQYMBaAFJyK49x7BbOFOWeQynMj06CQb+2C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODhENC8yRjU4RTQ3MjJF
NTAxMUVDQTA0QjZDMjVDNEY5QUUwMi9uSXJqM0hzRnM0VTVaNURLY3lQVG9KQnY3
WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25JcmozSHNGczRVNVo1REtjeVBUb0pCdjdZSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODhENC8yRjU4RTQ3MjJFNTAxMUVDQTA0QjZDMjVDNEY5QUUwMi9uSXJqM0hzRnM0
VTVaNURLY3lQVG9KQnY3WUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB5pbIgZhl4yQjS8VjTN3xm/jrClfWpIdaYUiJ+9A0CsPbWGzZKC3j5
KyDOnt/TPQzK92o7pXaa0CTkjuW79Hxla/wrDfld+ZnvZ/kx+iH9Ann+ZW8DM8HH
tD1ZnjebwLPywNONqzPUBalkNrV4CVnrFfBxdkmdrHVPafP6SnO5iyHFM+cWFhOP
k2P9tGYQeo/qzPCgVNRDoCh75dsFXt3F8oW0cfUDt9ygNsb3RzHtdCPgljZXaCta
WXPF2RreWdnIDrf39k1w907BqOCOOrlKbsWLxCnogimJut1nPNLECX7Z6OS0sqim
GO+lBGqU6cmIys8xjcpRnyLi7rI3td0W
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:58:52 2025 by rpki-client