Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft
File: keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft (raw, json)
Hash identifier: ACKKck/Q16iO9AHRthXdBJFcVlXnqy++p95bKNjHXBY=
Subject key identifier: 86:FB:62:B0:F0:34:A0:52:A6:2F:FE:49:F7:4A:3C:BD:D3:3E:E6:20
Authority key identifier: 91:E6:69:CE:02:15:09:7B:D4:D4:77:A1:A7:44:6B:0D:9D:02:48:FF
Certificate issuer: /CN=A91876D9/serialNumber=91E669CE0215097BD4D477A1A7446B0D9D0248FF
Certificate serial: 04DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZpzgIVCXvU1Hehp0RrDZ0CSP8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft
Manifest number: 04D8
Signing time: Thu 30 Jan 2025 23:50:29 +0000
Manifest this update: Thu 30 Jan 2025 23:50:28 +0000
Manifest next update: Thu 06 Feb 2025 23:50:28 +0000
Files and hashes: 1: keZpzgIVCXvU1Hehp0RrDZ0CSP8.crl (hash: qXYbBjJaK7HDJJ2ZOth4WVjplEjvj9k0SbUvzU6Wo+g=)
2: CDFDBE10061C11ECA4633B32C4F9AE02.roa (hash: CS6F8Mjrr/igLIk1h8UByZf+5cetq2hYhKfKiknacaU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1245 (0x4dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91876D9/serialNumber=91E669CE0215097BD4D477A1A7446B0D9D0248FF
Validity
Not Before: Jan 30 23:50:28 2025 GMT
Not After : Feb 6 23:50:28 2025 GMT
Subject: CN=679c1044-f280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f8:44:c2:8b:56:4c:a7:39:c7:8a:f0:c4:11:
08:57:25:0c:d0:70:8c:e6:e7:4a:0d:2c:b3:85:d1:
b5:2f:d4:c2:19:ca:da:93:9b:87:00:76:60:65:78:
8e:e3:50:f7:ce:35:44:5a:ea:58:29:9f:76:21:ec:
b5:35:48:b6:65:86:65:91:fe:5f:26:e2:60:6d:ca:
89:da:cf:9e:03:a1:69:15:be:a0:b3:50:f5:51:bb:
57:d5:12:03:4d:54:4c:7a:2b:4d:17:c5:c8:31:e4:
f2:bc:3b:60:7e:bd:57:6b:2f:de:c9:45:ad:57:98:
a7:1b:36:72:29:b3:5b:23:00:08:e4:30:b9:31:92:
c2:bb:11:28:f7:89:0f:fd:c6:5a:a8:59:f2:5d:80:
58:8a:f5:9d:88:5d:4e:ee:81:bb:5a:dd:35:0c:da:
ec:7f:89:42:21:41:7e:40:06:33:18:0a:4e:0f:5b:
df:5e:38:36:33:4d:1c:a3:e1:05:53:3f:03:57:a5:
f9:33:f6:36:7f:79:e5:00:f8:c9:c3:88:f4:42:2b:
7c:45:b5:5b:f3:97:18:65:78:1e:a9:ac:0c:5c:9e:
c5:7b:60:bb:51:a2:e9:52:a8:72:f7:e0:27:85:37:
ae:5b:d0:4c:6c:d6:b7:ee:97:a0:6f:82:a0:d2:cd:
e8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FB:62:B0:F0:34:A0:52:A6:2F:FE:49:F7:4A:3C:BD:D3:3E:E6:20
X509v3 Authority Key Identifier:
keyid:91:E6:69:CE:02:15:09:7B:D4:D4:77:A1:A7:44:6B:0D:9D:02:48:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZpzgIVCXvU1Hehp0RrDZ0CSP8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:88:e0:c7:c6:7d:1d:8f:38:ee:9c:3b:bb:1a:25:96:53:eb:
46:f9:3b:39:e9:f2:2c:aa:d3:31:0e:a6:5d:27:9d:35:9e:b8:
a9:14:84:9b:a8:29:03:1c:74:e0:b1:f3:e2:4b:c7:08:d4:7b:
46:8f:a6:bf:39:d2:bd:53:4e:1f:98:3f:b4:53:4d:f8:cd:89:
c4:a7:3e:f5:19:7a:4c:b5:4a:e3:2d:d6:06:99:22:73:64:09:
4d:37:b2:a0:1f:4a:64:9c:1f:ee:38:24:c9:fe:b5:81:ea:34:
60:df:6e:2b:de:f4:80:0c:2a:0e:07:a7:29:f7:a2:c7:97:5e:
d3:a4:00:46:0c:73:a6:b9:63:1e:91:41:5d:ec:c2:fa:06:1f:
a8:80:63:f7:33:f2:50:4d:84:b8:b7:98:65:92:4b:65:fb:01:
d8:78:d9:85:e2:8e:d6:66:ee:4f:de:a4:30:4b:aa:71:34:a5:
05:4e:50:75:85:3a:10:8c:f2:bf:bd:1b:16:83:b0:a3:2c:99:
04:7b:1c:98:be:57:b0:dd:1d:58:42:93:25:50:16:39:30:d9:
f4:17:e1:08:dc:39:15:34:06:19:49:f0:4f:98:7e:bb:ad:6b:
d8:aa:0f:81:48:92:62:f0:2f:ae:04:96:cb:b3:37:c2:5e:dd:
1e:59:ce:02
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODc2RDkxMTAvBgNVBAUTKDkxRTY2OUNFMDIxNTA5N0JENEQ0NzdBMUE3NDQ2QjBE
OUQwMjQ4RkYwHhcNMjUwMTMwMjM1MDI4WhcNMjUwMjA2MjM1MDI4WjAYMRYwFAYD
VQQDEw02NzljMTA0NC1mMjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5fhEwotWTKc5x4rwxBEIVyUM0HCM5udKDSyzhdG1L9TCGcrak5uHAHZgZXiO
41D3zjVEWupYKZ92Iey1NUi2ZYZlkf5fJuJgbcqJ2s+eA6FpFb6gs1D1UbtX1RID
TVRMeitNF8XIMeTyvDtgfr1Xay/eyUWtV5inGzZyKbNbIwAI5DC5MZLCuxEo94kP
/cZaqFnyXYBYivWdiF1O7oG7Wt01DNrsf4lCIUF+QAYzGApOD1vfXjg2M00co+EF
Uz8DV6X5M/Y2f3nlAPjJw4j0Qit8RbVb85cYZXgeqawMXJ7Fe2C7UaLpUqhy9+An
hTeuW9BMbNa37pegb4Kg0s3ofwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIb7YrDw
NKBSpi/+SfdKPL3TPuYgMB8GA1UdIwQYMBaAFJHmac4CFQl71NR3oadEaw2dAkj/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzZEOS85MjYwQzY1ODA2
MTgxMUVDQkIyNjJDNUVDNEY5QUUwMi9rZVpwemdJVkNYdlUxSGVocDBSckRaMENT
UDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tlWnB6Z0lWQ1h2VTFIZWhwMFJyRFowQ1NQOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NzZEOS85MjYwQzY1ODA2MTgxMUVDQkIyNjJDNUVDNEY5QUUwMi9rZVpwemdJVkNY
dlUxSGVocDBSckRaMENTUDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBHiODHxn0djzjunDu7GiWWU+tG+Ts56fIsqtMxDqZdJ501nripFISb
qCkDHHTgsfPiS8cI1HtGj6a/OdK9U04fmD+0U034zYnEpz71GXpMtUrjLdYGmSJz
ZAlNN7KgH0pknB/uOCTJ/rWB6jRg324r3vSADCoOB6cp96LHl17TpABGDHOmuWMe
kUFd7ML6Bh+ogGP3M/JQTYS4t5hlkktl+wHYeNmF4o7WZu5P3qQwS6pxNKUFTlB1
hToQjPK/vRsWg7CjLJkEexyYvlew3R1YQpMlUBY5MNn0F+EI3DkVNAYZSfBPmH67
rWvYqg+BSJJi8C+uBJbLszfCXt0eWc4C
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:37:02 2025 by rpki-client