Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.mft
File: OIes3fccvvSnUh2EUe7LrrJRnv0.mft (raw, json)
Hash identifier: xhLuVvW5o1tuPGOibvyy9nh9xGN0E012s1Tn7L414c4=
Subject key identifier: 18:26:02:49:7A:DA:39:FD:99:8C:F5:58:43:4E:3B:4F:DD:9C:8A:92
Authority key identifier: 38:87:AC:DD:F7:1C:BE:F4:A7:52:1D:84:51:EE:CB:AE:B2:51:9E:FD
Certificate issuer: /CN=A91778D4/serialNumber=3887ACDDF71CBEF4A7521D8451EECBAEB2519EFD
Certificate serial: 037E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIes3fccvvSnUh2EUe7LrrJRnv0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.mft
Manifest number: 037A
Signing time: Fri 31 Jan 2025 00:56:27 +0000
Manifest this update: Fri 31 Jan 2025 00:56:27 +0000
Manifest next update: Fri 07 Feb 2025 00:56:27 +0000
Files and hashes: 1: OIes3fccvvSnUh2EUe7LrrJRnv0.crl (hash: c80ty9aZ/uL1XM9V8IiZl248tpcPXuT0ufMeMqmV1N0=)
2: 13F9F650905511EC9A978D19C4F9AE02.roa (hash: CfbtaxsbT8QkNpB+dr8l4I71elKTP/TaO4DWd5BrJjY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 894 (0x37e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91778D4/serialNumber=3887ACDDF71CBEF4A7521D8451EECBAEB2519EFD
Validity
Not Before: Jan 31 00:56:27 2025 GMT
Not After : Feb 7 00:56:27 2025 GMT
Subject: CN=679c1fbb-39ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0c:ff:fc:1a:4d:88:a9:48:56:24:03:07:a4:
c2:0b:3b:c6:9f:53:5c:fa:a1:08:e5:2b:0f:05:32:
16:c9:3e:0a:c8:d8:3c:1f:1c:63:c5:7a:dd:72:ed:
4c:b7:80:86:a7:d5:45:04:54:99:9f:2f:05:0b:49:
f9:3b:99:0b:97:7e:21:79:d6:8d:e2:83:8a:90:2d:
10:4a:00:bb:72:07:97:b3:a5:30:8e:07:a7:cf:53:
db:95:25:ff:e3:a6:25:37:fa:c6:75:80:53:ca:35:
57:79:63:0d:f3:5c:88:5f:d6:fc:40:02:d4:d7:66:
e3:51:40:9b:3c:71:c9:fe:84:31:52:d9:5a:af:09:
65:35:0c:32:70:4f:82:1b:a9:e1:45:3e:a9:1d:61:
d9:fc:2a:d2:8f:e7:51:15:0e:2c:cb:f1:d9:30:de:
27:8f:e5:50:85:f4:fa:f5:03:b3:58:e0:17:c2:ff:
92:ea:af:ba:08:1c:c2:d8:85:9a:cc:41:36:af:c9:
47:a6:2e:83:98:62:be:5d:ec:3c:b2:21:cc:47:e4:
1b:5b:56:bd:f0:c3:ce:e3:c0:64:55:b1:95:02:21:
5f:60:d9:05:7b:0f:bf:a5:d1:2a:08:eb:c9:58:8b:
42:7b:28:92:80:c4:7b:a2:38:9b:2d:29:cd:af:5a:
3f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:26:02:49:7A:DA:39:FD:99:8C:F5:58:43:4E:3B:4F:DD:9C:8A:92
X509v3 Authority Key Identifier:
keyid:38:87:AC:DD:F7:1C:BE:F4:A7:52:1D:84:51:EE:CB:AE:B2:51:9E:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIes3fccvvSnUh2EUe7LrrJRnv0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:5e:70:c6:c8:5a:7c:f2:e0:f1:78:22:f6:a2:67:d5:b4:9b:
b1:3d:f0:d9:05:60:67:10:d9:3b:c8:e3:72:0c:fd:a2:28:c4:
81:67:dd:3b:fc:8d:35:6e:6c:fa:2f:bc:f5:9c:8b:2a:65:b5:
0c:b0:2f:ea:a6:09:8a:0b:99:4e:38:80:4c:bf:38:4c:13:f1:
26:c1:4c:36:0e:47:fd:14:74:20:ee:09:ac:2c:f9:d2:1f:35:
95:6f:29:c3:12:89:c7:5e:99:31:c1:1d:44:4a:ac:96:5a:c0:
47:40:37:2b:a5:d9:dc:fe:72:c5:f5:ed:90:07:fc:44:61:c1:
03:9e:4d:b0:34:ea:b5:72:8c:a1:7f:a1:41:65:70:6b:28:28:
48:2c:b7:e4:86:95:70:55:66:0b:41:d8:cb:ba:c4:33:ef:e1:
e1:bb:c7:b9:1c:f2:4f:20:7b:56:66:f7:93:48:01:0e:14:13:
0e:f9:54:14:96:55:79:10:6c:0c:c9:22:38:17:22:b5:b3:eb:
b8:2c:3f:f5:fd:76:4f:c5:83:67:86:55:7e:38:21:4a:d6:a3:
ae:bf:ae:ed:5a:d7:6a:ac:4e:de:74:5a:11:4b:cc:68:c2:60:
5d:2a:4a:ab:51:d1:6c:45:5e:f5:00:22:ed:8d:17:2b:17:e1:
86:6e:84:43
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzc4RDQxMTAvBgNVBAUTKDM4ODdBQ0RERjcxQ0JFRjRBNzUyMUQ4NDUxRUVDQkFF
QjI1MTlFRkQwHhcNMjUwMTMxMDA1NjI3WhcNMjUwMjA3MDA1NjI3WjAYMRYwFAYD
VQQDEw02NzljMWZiYi0zOWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvwz//BpNiKlIViQDB6TCCzvGn1Nc+qEI5SsPBTIWyT4KyNg8HxxjxXrdcu1M
t4CGp9VFBFSZny8FC0n5O5kLl34hedaN4oOKkC0QSgC7cgeXs6Uwjgenz1PblSX/
46YlN/rGdYBTyjVXeWMN81yIX9b8QALU12bjUUCbPHHJ/oQxUtlarwllNQwycE+C
G6nhRT6pHWHZ/CrSj+dRFQ4sy/HZMN4nj+VQhfT69QOzWOAXwv+S6q+6CBzC2IWa
zEE2r8lHpi6DmGK+Xew8siHMR+QbW1a98MPO48BkVbGVAiFfYNkFew+/pdEqCOvJ
WItCeyiSgMR7ojibLSnNr1o/SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBgmAkl6
2jn9mYz1WENOO0/dnIqSMB8GA1UdIwQYMBaAFDiHrN33HL70p1IdhFHuy66yUZ79
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzhENC9EOUQ1NjkzQTkw
NTExMUVDQTM2OTk2MTVDNEY5QUUwMi9PSWVzM2ZjY3Z2U25VaDJFVWU3THJySlJu
djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09JZXMzZmNjdnZTblVoMkVVZTdMcnJKUm52MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NzhENC9EOUQ1NjkzQTkwNTExMUVDQTM2OTk2MTVDNEY5QUUwMi9PSWVzM2ZjY3Z2
U25VaDJFVWU3THJySlJudjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCXXnDGyFp88uDxeCL2omfVtJuxPfDZBWBnENk7yONyDP2iKMSBZ907
/I01bmz6L7z1nIsqZbUMsC/qpgmKC5lOOIBMvzhME/EmwUw2Dkf9FHQg7gmsLPnS
HzWVbynDEonHXpkxwR1ESqyWWsBHQDcrpdnc/nLF9e2QB/xEYcEDnk2wNOq1coyh
f6FBZXBrKChILLfkhpVwVWYLQdjLusQz7+Hhu8e5HPJPIHtWZveTSAEOFBMO+VQU
llV5EGwMySI4FyK1s+u4LD/1/XZPxYNnhlV+OCFK1qOuv67tWtdqrE7edFoRS8xo
wmBdKkqrUdFsRV71ACLtjRcrF+GGboRD
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:41:43 2025 by rpki-client