Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft
File: 5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft (raw, json)
Hash identifier: SFtQiqR38mBQAQTzt6d+te5LcjQ7136raoeA2lhqMaw=
Subject key identifier: 62:9F:7E:8F:B3:7E:59:BF:B8:3D:64:22:80:81:57:DE:C1:A4:BA:E7
Authority key identifier: E6:DF:97:60:BC:D1:A1:59:66:51:2C:D4:7B:72:94:C0:6C:02:EE:CF
Certificate issuer: /CN=A9173B07/serialNumber=E6DF9760BCD1A15966512CD47B7294C06C02EECF
Certificate serial: 0783
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5t-XYLzRoVlmUSzUe3KUwGwC7s8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft
Manifest number: 0771
Signing time: Thu 30 Jan 2025 21:22:52 +0000
Manifest this update: Thu 30 Jan 2025 21:22:52 +0000
Manifest next update: Thu 06 Feb 2025 21:22:52 +0000
Files and hashes: 1: 5t-XYLzRoVlmUSzUe3KUwGwC7s8.crl (hash: rnfOv/QUTJf7WgMtuH3QU9HNDBk4ClKStmiTR+FSY+o=)
2: 493468827C1A11EBABA86F44C4F9AE02.roa (hash: TXTzY/F3yf3l1VfRyIe96MrKk1ufy7L7siNNP44CR3I=)
3: CB3F39368F9711EE927E086FC4F9AE02.roa (hash: FNwGRYPy9cwA+TIey5E9ATjMEP5oIhq7+WwZv3YLboE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1923 (0x783)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173B07/serialNumber=E6DF9760BCD1A15966512CD47B7294C06C02EECF
Validity
Not Before: Jan 30 21:22:52 2025 GMT
Not After : Feb 6 21:22:52 2025 GMT
Subject: CN=679bedac-1812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:63:8c:81:fb:c8:94:4b:97:09:60:d0:7b:6c:
35:84:e4:13:a3:45:af:12:6e:c9:09:fc:ad:44:34:
a8:5d:9c:70:73:8a:d3:a4:60:e2:f2:1c:d3:80:ef:
c0:ae:2d:11:c9:e8:87:62:9e:6d:5b:7b:d2:4c:55:
c1:1d:c1:d3:aa:5a:23:01:0c:d2:4a:43:26:e7:d4:
d2:82:64:ab:f4:c4:e8:fe:aa:f7:55:89:83:8f:7d:
77:70:c6:cc:03:5b:6b:b0:7f:92:bd:0c:a2:be:40:
b6:ab:99:60:24:df:b8:64:2d:3a:3f:65:da:d8:75:
f8:8b:e4:3f:95:58:08:5d:7b:ff:06:d9:df:cb:8c:
7a:8b:3b:45:71:2f:c5:a4:8a:4e:42:66:89:ed:01:
c5:5d:b3:c7:b0:b4:a1:66:89:6b:4e:be:09:8a:f5:
e1:4c:84:6b:22:2c:84:1a:40:6e:77:72:4e:8d:93:
ea:e1:42:59:2b:df:0b:c0:7b:e1:c4:9d:b2:ea:cb:
b2:85:5d:53:8a:b1:08:4b:f3:a8:40:c2:5d:3b:4f:
0f:3d:11:b5:28:0a:52:7d:1a:97:d0:94:32:1b:94:
9d:21:2b:b0:0e:bd:e2:66:05:d2:cb:c0:1e:6c:f1:
9a:cc:e3:f3:44:4e:5a:f1:58:75:31:48:b4:cd:6c:
f1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9F:7E:8F:B3:7E:59:BF:B8:3D:64:22:80:81:57:DE:C1:A4:BA:E7
X509v3 Authority Key Identifier:
keyid:E6:DF:97:60:BC:D1:A1:59:66:51:2C:D4:7B:72:94:C0:6C:02:EE:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5t-XYLzRoVlmUSzUe3KUwGwC7s8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:a2:25:84:39:d3:ff:24:9c:b8:5a:30:51:87:7d:20:21:83:
51:25:cc:b9:6b:a5:da:28:71:e2:34:40:68:b8:65:10:bd:5f:
1a:80:0f:ef:57:10:f9:74:d8:3c:ef:17:31:f1:a4:74:53:11:
3e:b3:1c:2a:21:f1:79:2a:2f:9d:81:67:9e:fb:ba:ad:10:2a:
06:20:a0:14:41:2b:a4:7b:db:d1:8a:6e:77:3d:10:6a:a6:b6:
56:0e:e7:81:26:cb:b3:b2:56:df:7e:e2:81:f6:3d:22:be:03:
f0:c2:91:e2:8b:c0:4f:ed:4e:0f:3c:d9:7e:47:ca:67:98:a3:
c7:71:86:18:4e:4a:09:2e:c3:62:39:65:a5:aa:f6:e2:76:8a:
21:e6:8c:9a:a6:8f:89:64:c0:ec:df:33:81:c2:f1:f5:fc:7f:
52:ba:4d:a3:d5:a9:c3:56:d9:b1:93:9f:30:9b:74:c7:71:e8:
8b:00:04:7e:50:4b:c9:28:cb:01:64:d1:0d:b4:ed:80:bb:64:
b8:73:75:94:e9:2d:4e:44:0f:63:46:bd:0b:fa:59:06:cf:eb:
ed:02:2c:f6:34:2d:c5:91:13:46:cb:5e:8a:7a:6e:fb:19:cd:
0a:7a:df:3e:53:29:b6:8c:79:d3:35:e2:aa:e1:61:39:45:61:
60:b9:c6:55
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzNCMDcxMTAvBgNVBAUTKEU2REY5NzYwQkNEMUExNTk2NjUxMkNENDdCNzI5NEMw
NkMwMkVFQ0YwHhcNMjUwMTMwMjEyMjUyWhcNMjUwMjA2MjEyMjUyWjAYMRYwFAYD
VQQDEw02NzliZWRhYy0xODEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv2OMgfvIlEuXCWDQe2w1hOQTo0WvEm7JCfytRDSoXZxwc4rTpGDi8hzTgO/A
ri0RyeiHYp5tW3vSTFXBHcHTqlojAQzSSkMm59TSgmSr9MTo/qr3VYmDj313cMbM
A1trsH+SvQyivkC2q5lgJN+4ZC06P2Xa2HX4i+Q/lVgIXXv/Btnfy4x6iztFcS/F
pIpOQmaJ7QHFXbPHsLShZolrTr4JivXhTIRrIiyEGkBud3JOjZPq4UJZK98LwHvh
xJ2y6suyhV1TirEIS/OoQMJdO08PPRG1KApSfRqX0JQyG5SdISuwDr3iZgXSy8Ae
bPGazOPzRE5a8Vh1MUi0zWzxDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGKffo+z
flm/uD1kIoCBV97BpLrnMB8GA1UdIwQYMBaAFObfl2C80aFZZlEs1HtylMBsAu7P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0IwNy9FRDlEM0RFODAy
RjUxMUVCQkNCOTEyMEJDNEY5QUUwMi81dC1YWUx6Um9WbG1VU3pVZTNLVXdHd0M3
czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzV0LVhZTHpSb1ZsbVVTelVlM0tVd0d3QzdzOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
M0IwNy9FRDlEM0RFODAyRjUxMUVCQkNCOTEyMEJDNEY5QUUwMi81dC1YWUx6Um9W
bG1VU3pVZTNLVXdHd0M3czgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAjoiWEOdP/JJy4WjBRh30gIYNRJcy5a6XaKHHiNEBouGUQvV8agA/v
VxD5dNg87xcx8aR0UxE+sxwqIfF5Ki+dgWee+7qtECoGIKAUQSuke9vRim53PRBq
prZWDueBJsuzslbffuKB9j0ivgPwwpHii8BP7U4PPNl+R8pnmKPHcYYYTkoJLsNi
OWWlqvbidooh5oyapo+JZMDs3zOBwvH1/H9Suk2j1anDVtmxk58wm3THceiLAAR+
UEvJKMsBZNENtO2Au2S4c3WU6S1ORA9jRr0L+lkGz+vtAiz2NC3FkRNGy16Kem77
Gc0Ket8+Uym2jHnTNeKq4WE5RWFgucZV
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:02:36 2025 by rpki-client