Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91833A5/CB549D2C76C911ED8EDF6E45C4F9AE02/NRzu3Df4BUcvG2G6xkP-VO4BiWs.mft
File: NRzu3Df4BUcvG2G6xkP-VO4BiWs.mft (raw, json)
Hash identifier: CT5ehErYUy4LIjQTGt2Pm2od5QKHZVf96Ijr7BzQpRA=
Subject key identifier: 9A:19:99:AF:DF:C4:AC:90:83:D4:F8:71:0F:CB:9C:E0:D7:1B:62:98
Authority key identifier: 35:1C:EE:DC:37:F8:05:47:2F:1B:61:BA:C6:43:FE:54:EE:01:89:6B
Certificate issuer: /CN=A91833A5/serialNumber=351CEEDC37F805472F1B61BAC643FE54EE01896B
Certificate serial: 0195
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NRzu3Df4BUcvG2G6xkP-VO4BiWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91833A5/CB549D2C76C911ED8EDF6E45C4F9AE02/NRzu3Df4BUcvG2G6xkP-VO4BiWs.mft
Manifest number: 0192
Signing time: Fri 31 Jan 2025 02:44:50 +0000
Manifest this update: Fri 31 Jan 2025 02:44:49 +0000
Manifest next update: Fri 07 Feb 2025 02:44:49 +0000
Files and hashes: 1: NRzu3Df4BUcvG2G6xkP-VO4BiWs.crl (hash: b8w8gbo7b6ZnTaIfQ5ncIofSIg+8+/RbYRH7bBojcHw=)
2: 9FD3C9A876CD11ED8D13115FC4F9AE02.roa (hash: JQ73d6vfSvqidv93F8yaMEYwVmH6Qg0KkHIcHOt8o0s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405 (0x195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91833A5/serialNumber=351CEEDC37F805472F1B61BAC643FE54EE01896B
Validity
Not Before: Jan 31 02:44:49 2025 GMT
Not After : Feb 7 02:44:49 2025 GMT
Subject: CN=679c3922-3f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:dc:1e:6e:fc:a5:fa:f5:0e:9f:3d:9d:15:79:
d4:1b:85:c5:21:c2:18:ea:0a:25:2a:68:4c:50:dd:
a0:aa:3c:7c:92:33:1f:d2:63:d5:c2:c4:37:4b:ae:
ac:1c:d0:ae:93:e9:0f:b5:60:08:ba:f7:9f:9f:76:
ca:de:f2:87:6d:19:8e:6c:7c:f9:15:2e:95:fe:39:
77:cd:ee:af:12:fb:e4:86:68:0f:8f:77:38:c8:5a:
c1:3e:1a:b2:9a:eb:79:4b:4c:ac:e9:fe:dc:66:59:
b6:3d:a2:eb:57:07:dd:ee:64:d4:c9:7a:4a:c3:84:
56:f8:83:f2:fa:85:01:65:b9:f2:f1:2a:d8:31:9b:
a6:2b:54:c2:67:ed:d8:61:28:5d:30:bb:fd:53:dd:
05:cd:67:18:fc:f4:e9:47:3e:e2:28:1a:c4:2e:7d:
6e:ff:bc:4c:55:51:fb:6f:81:ea:3f:05:7f:30:26:
a7:e3:46:78:bc:6d:8b:c7:83:97:6a:7e:ea:2e:a5:
24:c3:ab:e9:46:9d:5e:01:12:56:1b:a3:b0:a0:27:
95:a0:23:17:34:cf:24:6d:bc:23:be:c9:06:43:c4:
6b:95:44:ac:e2:1f:d7:60:29:c4:a2:68:d4:bb:35:
09:ef:fd:5f:6e:0e:65:41:46:9f:97:aa:7c:c7:a3:
80:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:19:99:AF:DF:C4:AC:90:83:D4:F8:71:0F:CB:9C:E0:D7:1B:62:98
X509v3 Authority Key Identifier:
keyid:35:1C:EE:DC:37:F8:05:47:2F:1B:61:BA:C6:43:FE:54:EE:01:89:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91833A5/CB549D2C76C911ED8EDF6E45C4F9AE02/NRzu3Df4BUcvG2G6xkP-VO4BiWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NRzu3Df4BUcvG2G6xkP-VO4BiWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91833A5/CB549D2C76C911ED8EDF6E45C4F9AE02/NRzu3Df4BUcvG2G6xkP-VO4BiWs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:da:81:1e:28:a3:9b:d5:c2:14:fc:ff:5b:f1:ef:05:84:bc:
b7:5d:36:18:8f:a2:e6:77:7f:ea:45:ed:c2:46:ba:b1:5a:c3:
1a:59:7a:5c:dc:cc:16:b1:4e:66:74:36:2c:51:75:b6:05:8f:
6b:92:14:6e:3e:66:45:23:b9:4b:8a:a9:11:4b:93:c8:0d:ae:
9c:19:fb:18:45:3f:74:b2:61:6d:88:52:8b:82:af:50:41:43:
4d:60:79:f0:2e:b2:77:af:d9:49:8a:10:22:51:33:a7:b3:67:
41:c5:47:72:6a:b5:b7:f9:2f:cd:27:76:97:c6:60:89:bf:fc:
ba:b6:28:8d:b7:ee:97:a7:51:17:77:b2:9f:a2:eb:47:b5:0c:
d0:73:04:18:b9:68:7d:9b:4b:61:94:a7:c7:44:8d:14:68:70:
ad:67:dd:cd:87:8c:cb:0e:b8:7b:17:5b:60:4c:85:a1:8e:6e:
06:e4:97:cd:85:ca:6f:a4:b8:c9:68:ac:fe:d5:bc:96:6c:67:
9d:07:e1:45:99:6e:79:69:73:55:2e:4d:4f:7b:3b:6a:a8:6e:
2b:1a:61:19:22:79:d2:53:ec:3d:2c:97:31:c7:fc:25:28:19:
e6:94:6e:68:cd:58:59:8d:54:35:43:26:24:2b:ab:dc:9d:06:
e5:63:b8:5f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODMzQTUxMTAvBgNVBAUTKDM1MUNFRURDMzdGODA1NDcyRjFCNjFCQUM2NDNGRTU0
RUUwMTg5NkIwHhcNMjUwMTMxMDI0NDQ5WhcNMjUwMjA3MDI0NDQ5WjAYMRYwFAYD
VQQDEw02NzljMzkyMi0zZjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAztwebvyl+vUOnz2dFXnUG4XFIcIY6golKmhMUN2gqjx8kjMf0mPVwsQ3S66s
HNCuk+kPtWAIuvefn3bK3vKHbRmObHz5FS6V/jl3ze6vEvvkhmgPj3c4yFrBPhqy
mut5S0ys6f7cZlm2PaLrVwfd7mTUyXpKw4RW+IPy+oUBZbny8SrYMZumK1TCZ+3Y
YShdMLv9U90FzWcY/PTpRz7iKBrELn1u/7xMVVH7b4HqPwV/MCan40Z4vG2Lx4OX
an7qLqUkw6vpRp1eARJWG6OwoCeVoCMXNM8kbbwjvskGQ8RrlUSs4h/XYCnEomjU
uzUJ7/1fbg5lQUafl6p8x6OAgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJoZma/f
xKyQg9T4cQ/LnODXG2KYMB8GA1UdIwQYMBaAFDUc7tw3+AVHLxthusZD/lTuAYlr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzNBNS9DQjU0OUQyQzc2
QzkxMUVEOEVERjZFNDVDNEY5QUUwMi9OUnp1M0RmNEJVY3ZHMkc2eGtQLVZPNEJp
V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05SenUzRGY0QlVjdkcyRzZ4a1AtVk80QmlXcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MzNBNS9DQjU0OUQyQzc2QzkxMUVEOEVERjZFNDVDNEY5QUUwMi9OUnp1M0RmNEJV
Y3ZHMkc2eGtQLVZPNEJpV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAO2oEeKKOb1cIU/P9b8e8FhLy3XTYYj6Lmd3/qRe3CRrqxWsMaWXpc
3MwWsU5mdDYsUXW2BY9rkhRuPmZFI7lLiqkRS5PIDa6cGfsYRT90smFtiFKLgq9Q
QUNNYHnwLrJ3r9lJihAiUTOns2dBxUdyarW3+S/NJ3aXxmCJv/y6tiiNt+6Xp1EX
d7KfoutHtQzQcwQYuWh9m0thlKfHRI0UaHCtZ93Nh4zLDrh7F1tgTIWhjm4G5JfN
hcpvpLjJaKz+1byWbGedB+FFmW55aXNVLk1PeztqqG4rGmEZInnSU+w9LJcxx/wl
KBnmlG5ozVhZjVQ1QyYkK6vcnQblY7hf
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:52:22 2025 by rpki-client