Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
File: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft (raw, json)
Hash identifier: s6O9mF/5nVaPQfm68Ku0d8axYsCljaURtsxsxsB5SHY=
Subject key identifier: 15:44:BF:97:D8:73:2C:DE:EB:00:6D:EF:2D:E2:91:EC:60:E2:DC:24
Authority key identifier: E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79
Certificate issuer: /CN=A91698EC/serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79
Certificate serial: 88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
Manifest number: 85
Signing time: Fri 31 Jan 2025 05:43:32 +0000
Manifest this update: Fri 31 Jan 2025 05:43:32 +0000
Manifest next update: Fri 07 Feb 2025 05:43:32 +0000
Files and hashes: 1: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl (hash: Y0TrLjYoGDWOvoVefdUdIgGIqmrG/HQy2yeeig/VicQ=)
2: 1FCE5CE0214F11EFAB245D49C4F9AE02.roa (hash: MjGt04itAcx8gNx2WflFnwPVZOKhZPX7R3K5xPavI28=)
3: 02BCE50286AF11EF9EFFD52FC4F9AE02.roa (hash: erN7f1B2CkGS1+dEWje+lQKXL/zVRbw1MSrnrEP1M7Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91698EC/serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79
Validity
Not Before: Jan 31 05:43:32 2025 GMT
Not After : Feb 7 05:43:32 2025 GMT
Subject: CN=679c6304-9826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ef:d3:f0:46:32:f8:d8:55:be:b6:db:72:d9:
33:bb:aa:6e:ff:7b:0e:7d:85:30:6d:91:93:5d:0a:
ce:04:76:9b:10:19:14:64:38:07:17:39:af:e1:cd:
ee:1f:3a:dc:af:20:9d:df:0e:90:23:ed:bf:c7:2b:
3b:72:fe:a6:74:60:54:a1:3a:57:4f:39:38:6b:e1:
40:e0:e6:c0:3c:77:b6:d7:3e:19:6b:b4:56:77:ef:
5e:85:b1:45:14:b6:0b:30:fd:87:9f:df:8c:4e:90:
c0:84:02:56:6f:3b:93:05:d1:ed:1e:37:fd:46:36:
50:08:cc:68:71:7a:2a:6e:76:0c:24:09:84:97:f0:
6a:8c:5f:bc:3a:68:90:0a:54:9d:e6:33:a8:74:2b:
d7:a3:c1:24:1d:e1:fe:a9:a9:a0:4a:8d:21:f0:ac:
43:57:76:11:55:b4:cf:96:eb:bc:fa:08:1a:83:f5:
1a:74:48:eb:63:a6:87:f1:e0:62:49:89:fe:99:7a:
26:11:0b:bb:bb:fe:b9:9c:a5:25:f3:d2:78:ae:08:
4d:f7:92:d2:cf:f6:d5:d5:b8:49:67:ce:01:1f:9c:
65:5e:94:d4:92:61:ee:e1:78:08:2c:fc:0f:b0:76:
69:50:03:45:de:89:1e:f5:b2:15:e8:07:31:c3:6d:
5b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:44:BF:97:D8:73:2C:DE:EB:00:6D:EF:2D:E2:91:EC:60:E2:DC:24
X509v3 Authority Key Identifier:
keyid:E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:38:4a:af:26:71:4e:43:e7:c7:14:4c:95:f2:dc:2f:38:83:
6f:86:99:5f:56:41:d3:d4:30:4a:aa:d3:aa:35:99:e3:b4:81:
6e:8d:d1:a5:bb:4a:79:1d:07:36:dd:f2:9e:b8:cc:7c:aa:01:
d8:47:0f:8f:76:1a:6f:c5:b2:b7:07:f2:9d:00:f4:6d:6e:50:
e3:60:52:21:6e:69:46:37:b6:ae:00:23:fb:6a:a7:4d:32:db:
50:75:72:8e:12:76:43:2c:66:b4:91:c2:94:91:c5:60:51:70:
b7:69:e9:26:12:9c:60:1a:47:6b:3d:58:b1:2d:87:79:ff:75:
23:05:a4:7b:b9:67:b1:6b:29:4b:44:40:9b:1b:97:a2:12:a1:
e6:1c:29:e2:cd:c1:2d:20:be:7c:f5:a7:91:f7:4a:44:87:e7:
06:6e:fa:b7:89:06:02:62:9b:6c:45:05:92:3e:d7:c9:3e:77:
d0:c2:96:bd:c1:b0:71:79:46:dc:81:a8:7e:67:ac:4f:32:8b:
44:e8:3d:7b:df:5d:88:6c:bd:a2:3c:e8:98:48:12:6a:1b:02:
21:d5:45:e2:6c:68:04:06:7b:07:a8:d7:3a:08:8b:0b:bc:43:
4f:b0:2a:00:6b:70:be:e0:b6:d1:c9:7a:ea:d2:7a:ee:24:da:
95:a7:c4:39
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njk4RUMxMTAvBgNVBAUTKEU1OEYwRjUyQTREMkQxREU0NDY3NUFDQTE3NTU3QkY5
ODJFQzdENzkwHhcNMjUwMTMxMDU0MzMyWhcNMjUwMjA3MDU0MzMyWjAYMRYwFAYD
VQQDEw02NzljNjMwNC05ODI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2O/T8EYy+NhVvrbbctkzu6pu/3sOfYUwbZGTXQrOBHabEBkUZDgHFzmv4c3u
HzrcryCd3w6QI+2/xys7cv6mdGBUoTpXTzk4a+FA4ObAPHe21z4Za7RWd+9ehbFF
FLYLMP2Hn9+MTpDAhAJWbzuTBdHtHjf9RjZQCMxocXoqbnYMJAmEl/BqjF+8OmiQ
ClSd5jOodCvXo8EkHeH+qamgSo0h8KxDV3YRVbTPluu8+ggag/UadEjrY6aH8eBi
SYn+mXomEQu7u/65nKUl89J4rghN95LSz/bV1bhJZ84BH5xlXpTUkmHu4XgILPwP
sHZpUANF3oke9bIV6Acxw21bnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBVEv5fY
cyze6wBt7y3ikexg4twkMB8GA1UdIwQYMBaAFOWPD1Kk0tHeRGdayhdVe/mC7H15
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OThFQy8yMUU1QTMwQTFF
RTExMUVGOTNGOTg1M0RDNEY5QUUwMi81WThQVXFUUzBkNUVaMXJLRjFWNy1ZTHNm
WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVZOFBVcVRTMGQ1RVoxcktGMVY3LVlMc2ZYay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OThFQy8yMUU1QTMwQTFFRTExMUVGOTNGOTg1M0RDNEY5QUUwMi81WThQVXFUUzBk
NUVaMXJLRjFWNy1ZTHNmWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCpOEqvJnFOQ+fHFEyV8twvOINvhplfVkHT1DBKqtOqNZnjtIFujdGl
u0p5HQc23fKeuMx8qgHYRw+PdhpvxbK3B/KdAPRtblDjYFIhbmlGN7auACP7aqdN
MttQdXKOEnZDLGa0kcKUkcVgUXC3aekmEpxgGkdrPVixLYd5/3UjBaR7uWexaylL
RECbG5eiEqHmHCnizcEtIL589aeR90pEh+cGbvq3iQYCYptsRQWSPtfJPnfQwpa9
wbBxeUbcgah+Z6xPMotE6D17312IbL2iPOiYSBJqGwIh1UXibGgEBnsHqNc6CIsL
vENPsCoAa3C+4LbRyXrq0nruJNqVp8Q5
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:44:23 2025 by rpki-client