Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft
File: e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft (raw, json)
Hash identifier: 5DWf+Zp6oprs9x/iHDaN9oAW7VFBGxKyxNuDwgGUkyA=
Subject key identifier: 0E:31:A4:C5:2E:39:CB:89:26:6C:30:A6:B9:B3:1B:60:7D:2F:44:33
Authority key identifier: 7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F
Certificate issuer: /CN=A916D36A/serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F
Certificate serial: F3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft
Manifest number: F1
Signing time: Fri 31 Jan 2025 16:32:12 +0000
Manifest this update: Fri 31 Jan 2025 16:32:12 +0000
Manifest next update: Fri 07 Feb 2025 16:32:12 +0000
Files and hashes: 1: e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl (hash: PvcNHoKcPfv7ewH/h/jhsxqzgukkd3k6rqo1mzYtt60=)
2: 21A970BC737211EEB3112437C4F9AE02.roa (hash: aUIyfh4rOAFfQ6V1QGk9Ci9jD2H4crp4Ilb6Y+4J9lg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243 (0xf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D36A/serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F
Validity
Not Before: Jan 31 16:32:12 2025 GMT
Not After : Feb 7 16:32:12 2025 GMT
Subject: CN=679cfb0c-1280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0b:b2:d5:f4:b0:f2:35:01:bd:b7:4b:5b:f0:
6b:8d:78:9e:1e:0b:77:89:a3:5a:8e:32:34:ef:95:
c9:65:5b:d8:fe:d6:b9:16:c2:b5:1c:ec:4b:6b:ee:
93:66:96:c6:a9:ec:c2:21:ea:9f:6f:05:f6:89:e9:
4a:5d:19:d9:6e:2e:43:b4:11:16:3f:78:24:09:20:
78:8e:29:7c:10:62:aa:b7:33:33:67:17:26:c5:a5:
40:d7:41:e7:af:90:82:c4:78:78:c0:be:55:19:93:
60:e3:d5:b2:b5:6e:0f:cb:87:9d:2f:82:88:a4:62:
af:67:d2:59:6b:f9:c2:83:41:d9:cb:5b:76:3c:74:
59:62:b5:d8:2c:c9:13:1d:f7:18:78:9e:ac:c9:e1:
31:8e:b1:5d:7f:43:98:e6:39:a4:4b:93:24:f1:ed:
85:e6:65:37:bb:5f:06:70:bd:f1:73:24:4e:fe:8b:
1f:8c:7c:79:31:21:8b:e4:cc:fe:90:90:08:a0:fd:
45:95:11:31:7a:d4:b9:0b:e9:49:8b:03:3e:0e:e4:
f2:f3:74:8a:08:37:da:69:d8:74:b5:6f:86:50:1d:
39:a0:a2:5d:d1:72:cc:28:9f:87:14:c0:6f:f4:88:
f2:4c:dc:c0:05:28:78:82:18:f1:c0:53:2e:e9:e7:
8e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:31:A4:C5:2E:39:CB:89:26:6C:30:A6:B9:B3:1B:60:7D:2F:44:33
X509v3 Authority Key Identifier:
keyid:7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:34:10:9b:8d:04:5d:df:db:00:90:ef:32:d5:4f:00:84:ce:
54:0d:79:c9:df:fc:99:fd:be:9d:79:62:ba:b2:6b:94:59:52:
81:f7:f2:88:d8:70:13:32:26:f2:1a:47:bd:aa:05:01:81:2c:
e2:87:ad:17:68:0a:d5:e1:95:75:0a:08:c9:82:0d:ad:61:ce:
57:c0:bf:fe:9c:82:28:92:ea:a0:62:df:db:92:dd:4c:56:d4:
a6:5a:a7:ae:14:ab:1b:d5:c0:1d:95:68:a7:c3:85:e9:8a:8a:
f8:96:e3:e6:4f:dd:1d:b8:b3:5e:ef:7b:90:32:74:ac:79:ab:
e3:8a:0f:3b:15:7c:08:00:86:d0:ea:9e:ad:ab:51:f5:bc:a9:
dd:f9:cf:02:be:62:5e:1c:e0:2f:da:e0:5d:5c:86:e7:6d:cb:
cb:52:f2:0a:a2:5a:22:f2:2c:ad:b8:d1:3c:85:ca:18:9c:19:
a6:aa:40:56:96:b6:23:c9:5f:e5:97:84:c7:c5:9d:aa:6f:c7:
21:84:cd:9e:dd:b8:da:8f:d7:53:9b:84:26:2f:92:56:41:31:
16:0f:87:ae:8b:4e:e3:3a:64:b7:ca:59:f0:b3:8b:87:a6:77:
cc:5d:b3:9d:27:a5:fa:b4:90:f8:e4:de:6a:fe:e1:b3:6a:5a:
2d:f7:c0:af
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQzNkExMTAvBgNVBAUTKDdCOUNFREM4MzI4MDI4QTc0NTZFOUM0MTRCQjc3REFG
RUJDRTc2NUYwHhcNMjUwMTMxMTYzMjEyWhcNMjUwMjA3MTYzMjEyWjAYMRYwFAYD
VQQDEw02NzljZmIwYy0xMjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2wuy1fSw8jUBvbdLW/BrjXieHgt3iaNajjI075XJZVvY/ta5FsK1HOxLa+6T
ZpbGqezCIeqfbwX2ielKXRnZbi5DtBEWP3gkCSB4jil8EGKqtzMzZxcmxaVA10Hn
r5CCxHh4wL5VGZNg49WytW4Py4edL4KIpGKvZ9JZa/nCg0HZy1t2PHRZYrXYLMkT
HfcYeJ6syeExjrFdf0OY5jmkS5Mk8e2F5mU3u18GcL3xcyRO/osfjHx5MSGL5Mz+
kJAIoP1FlRExetS5C+lJiwM+DuTy83SKCDfaadh0tW+GUB05oKJd0XLMKJ+HFMBv
9IjyTNzABSh4ghjxwFMu6eeOawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4xpMUu
OcuJJmwwprmzG2B9L0QzMB8GA1UdIwQYMBaAFHuc7cgygCinRW6cQUu3fa/rznZf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDM2QS9DNkRENTFCNDcz
NkYxMUVFOTE3RDAzMzRDNEY5QUUwMi9lNXp0eURLQUtLZEZicHhCUzdkOXItdk9k
bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2U1enR5REtBS0tkRmJweEJTN2Q5ci12T2RsOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RDM2QS9DNkRENTFCNDczNkYxMUVFOTE3RDAzMzRDNEY5QUUwMi9lNXp0eURLQUtL
ZEZicHhCUzdkOXItdk9kbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAANBCbjQRd39sAkO8y1U8AhM5UDXnJ3/yZ/b6deWK6smuUWVKB9/KI
2HATMibyGke9qgUBgSzih60XaArV4ZV1CgjJgg2tYc5XwL/+nIIokuqgYt/bkt1M
VtSmWqeuFKsb1cAdlWinw4Xpior4luPmT90duLNe73uQMnSseavjig87FXwIAIbQ
6p6tq1H1vKnd+c8CvmJeHOAv2uBdXIbnbcvLUvIKoloi8iytuNE8hcoYnBmmqkBW
lrYjyV/ll4THxZ2qb8chhM2e3bjaj9dTm4QmL5JWQTEWD4eui07jOmS3ylnws4uH
pnfMXbOdJ6X6tJD45N5q/uGzalot98Cv
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:17:16 2025 by rpki-client