Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B44D/2B4859EC90FF11EBB6248758C4F9AE02/IOiB-z48CVPBT4i_0t-mkwg0Cxw.mft
File: IOiB-z48CVPBT4i_0t-mkwg0Cxw.mft (raw, json)
Hash identifier: ufMjhy07DGAgNCWJmhZAWuJc8IvrzCrzGdTaEr2x6y8=
Subject key identifier: 05:43:01:18:80:5F:E9:81:3B:17:91:2D:A6:27:8A:49:30:FC:00:5B
Authority key identifier: 20:E8:81:FB:3E:3C:09:53:C1:4F:88:BF:D2:DF:A6:93:08:34:0B:1C
Certificate issuer: /CN=A917B44D/serialNumber=20E881FB3E3C0953C14F88BFD2DFA69308340B1C
Certificate serial: 0609
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IOiB-z48CVPBT4i_0t-mkwg0Cxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B44D/2B4859EC90FF11EBB6248758C4F9AE02/IOiB-z48CVPBT4i_0t-mkwg0Cxw.mft
Manifest number: 05FF
Signing time: Thu 30 Jan 2025 22:50:53 +0000
Manifest this update: Thu 30 Jan 2025 22:50:52 +0000
Manifest next update: Thu 06 Feb 2025 22:50:52 +0000
Files and hashes: 1: IOiB-z48CVPBT4i_0t-mkwg0Cxw.crl (hash: +HfedWfKAZ8j+7Lf0zrHYtMtng0nPXOlOoAaofxCD/I=)
2: BB986168942911EB95E05850C4F9AE02.roa (hash: O3InufNw5MOKaR1h0av3A6+XwnS2yiD42BSBiqzEhX4=)
3: BB0638F6942911EB95E05850C4F9AE02.roa (hash: T6obqpLGz50prrf8S3Sut5ndpP67LQrCtlIp/fWtN4w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1545 (0x609)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B44D/serialNumber=20E881FB3E3C0953C14F88BFD2DFA69308340B1C
Validity
Not Before: Jan 30 22:50:52 2025 GMT
Not After : Feb 6 22:50:52 2025 GMT
Subject: CN=679c024c-be64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:66:97:26:ae:c0:81:62:e5:b9:94:85:94:c4:
6d:39:62:20:e9:8f:b9:d7:e3:e5:26:79:4d:ad:85:
3e:ee:88:ad:58:07:e2:4e:c6:16:7d:96:98:67:7e:
f4:9e:21:32:73:a7:f1:5b:c6:59:32:a4:f2:7c:a5:
bd:0a:b2:81:7d:0e:8c:12:b8:72:b2:55:fb:c9:dd:
a3:e2:bb:41:1d:bf:4d:78:48:77:4f:8f:5b:a0:6f:
61:76:2a:13:cf:18:fa:e3:89:1a:3a:1a:2d:05:98:
94:11:23:10:c9:22:5b:9b:18:20:c1:9d:e9:76:5b:
3c:1d:d5:ae:94:9d:b1:ef:4f:04:8a:ac:3a:a2:9d:
8b:04:75:0d:8f:42:98:8a:1c:7c:02:9b:1b:8a:35:
5e:08:69:72:36:34:ec:b3:bc:67:c0:c2:f4:94:9f:
7e:ea:38:ce:be:47:d7:05:67:bc:ec:77:1a:41:2b:
7a:e8:9e:c3:e5:01:14:bd:7f:56:02:98:67:d3:41:
5f:2d:20:68:6b:99:2a:47:c9:b0:3d:ce:d0:0b:20:
83:d8:da:af:dc:9e:e7:e3:4f:70:18:a0:35:91:e6:
4d:8c:19:77:0c:96:8f:ed:0f:c9:6d:90:80:91:3d:
12:c9:5c:85:f3:03:48:56:66:dc:40:00:d2:78:3b:
a5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:43:01:18:80:5F:E9:81:3B:17:91:2D:A6:27:8A:49:30:FC:00:5B
X509v3 Authority Key Identifier:
keyid:20:E8:81:FB:3E:3C:09:53:C1:4F:88:BF:D2:DF:A6:93:08:34:0B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B44D/2B4859EC90FF11EBB6248758C4F9AE02/IOiB-z48CVPBT4i_0t-mkwg0Cxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IOiB-z48CVPBT4i_0t-mkwg0Cxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B44D/2B4859EC90FF11EBB6248758C4F9AE02/IOiB-z48CVPBT4i_0t-mkwg0Cxw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:aa:da:b3:8a:2e:1f:73:82:82:8f:15:e9:93:07:9c:5b:9a:
8c:27:10:ff:7c:0d:93:45:08:83:b2:44:ab:54:2c:0b:89:ec:
97:0d:7e:9f:53:e5:29:58:e5:89:b4:b5:84:e7:f2:49:d8:ba:
56:a2:ab:10:ed:bc:70:2d:f3:c6:72:54:56:ee:a0:dd:39:d3:
28:f0:50:75:96:3a:aa:ee:49:a3:90:7e:93:86:56:63:f9:39:
02:d5:10:3b:20:ed:07:2c:0c:d3:28:ec:10:4a:60:5d:8d:af:
95:f2:c7:44:7e:f2:a0:16:83:c2:a0:64:05:43:30:a7:12:25:
b7:a5:df:9f:c1:51:09:c0:3a:7e:94:f2:11:01:bc:08:8a:d5:
d8:6d:9d:dd:b9:45:bd:58:f7:5c:1c:a7:5b:42:e0:e9:d4:b0:
c3:96:15:a1:35:8d:85:54:bf:11:87:27:dd:f4:92:72:ee:ae:
9e:68:92:b4:69:8a:ce:76:09:a1:4d:52:ec:ab:e5:86:34:56:
36:f7:d6:bf:f8:e5:9e:bd:0b:ad:19:47:5f:9a:f0:85:83:e8:
ff:03:42:77:e1:9a:77:9f:8f:b9:fd:40:6a:1f:52:93:be:01:
04:cc:8a:44:4a:2c:9e:63:6e:a4:18:ff:2f:34:17:f8:e8:8d:
c5:db:cd:63
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0I0NEQxMTAvBgNVBAUTKDIwRTg4MUZCM0UzQzA5NTNDMTRGODhCRkQyREZBNjkz
MDgzNDBCMUMwHhcNMjUwMTMwMjI1MDUyWhcNMjUwMjA2MjI1MDUyWjAYMRYwFAYD
VQQDEw02NzljMDI0Yy1iZTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnmaXJq7AgWLluZSFlMRtOWIg6Y+51+PlJnlNrYU+7oitWAfiTsYWfZaYZ370
niEyc6fxW8ZZMqTyfKW9CrKBfQ6MErhyslX7yd2j4rtBHb9NeEh3T49boG9hdioT
zxj644kaOhotBZiUESMQySJbmxggwZ3pdls8HdWulJ2x708Eiqw6op2LBHUNj0KY
ihx8ApsbijVeCGlyNjTss7xnwML0lJ9+6jjOvkfXBWe87HcaQSt66J7D5QEUvX9W
Aphn00FfLSBoa5kqR8mwPc7QCyCD2Nqv3J7n409wGKA1keZNjBl3DJaP7Q/JbZCA
kT0SyVyF8wNIVmbcQADSeDul8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAVDARiA
X+mBOxeRLaYnikkw/ABbMB8GA1UdIwQYMBaAFCDogfs+PAlTwU+Iv9LfppMINAsc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjQ0RC8yQjQ4NTlFQzkw
RkYxMUVCQjYyNDg3NThDNEY5QUUwMi9JT2lCLXo0OENWUEJUNGlfMHQtbWt3ZzBD
eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lPaUItejQ4Q1ZQQlQ0aV8wdC1ta3dnMEN4dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QjQ0RC8yQjQ4NTlFQzkwRkYxMUVCQjYyNDg3NThDNEY5QUUwMi9JT2lCLXo0OENW
UEJUNGlfMHQtbWt3ZzBDeHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB9qtqzii4fc4KCjxXpkwecW5qMJxD/fA2TRQiDskSrVCwLieyXDX6f
U+UpWOWJtLWE5/JJ2LpWoqsQ7bxwLfPGclRW7qDdOdMo8FB1ljqq7kmjkH6ThlZj
+TkC1RA7IO0HLAzTKOwQSmBdja+V8sdEfvKgFoPCoGQFQzCnEiW3pd+fwVEJwDp+
lPIRAbwIitXYbZ3duUW9WPdcHKdbQuDp1LDDlhWhNY2FVL8Rhyfd9JJy7q6eaJK0
aYrOdgmhTVLsq+WGNFY299a/+OWevQutGUdfmvCFg+j/A0J34Zp3n4+5/UBqH1KT
vgEEzIpESiyeY26kGP8vNBf46I3F281j
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:57:42 2025 by rpki-client