Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
File: m-KS59FtTo6BYWnDtQLr5O9FwWM.mft (raw, json)
Hash identifier: 4KvtCknnCKSihcWHp5ZuFtUEh2dKsepMzh5ha2hXr5k=
Subject key identifier: 01:D1:58:7C:CF:E2:0B:53:06:36:6E:5B:8F:A0:2F:F2:BB:2A:C0:ED
Authority key identifier: 9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63
Certificate issuer: /CN=A91897B3/serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163
Certificate serial: 0563
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
Manifest number: 0561
Signing time: Thu 30 Jan 2025 23:22:58 +0000
Manifest this update: Thu 30 Jan 2025 23:22:57 +0000
Manifest next update: Thu 06 Feb 2025 23:22:57 +0000
Files and hashes: 1: m-KS59FtTo6BYWnDtQLr5O9FwWM.crl (hash: 8xUbrKRLbW4YJOyJD1Dwl41OD8MJnbsktBR6aG7eTew=)
2: 6D353E4E97F711EFB3A27D59C4F9AE02.roa (hash: 7fqXwcDMViUGksefOIDEbGFQPWAHlvrlXbc5Ijdn5rA=)
3: 372C520CFDFF11EEA6CEDB2FC4F9AE02.roa (hash: 2HSyR9/qDj6A++MWvCQqzP3v4KNQcaxA2Cp1UbFvPlM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1379 (0x563)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91897B3/serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163
Validity
Not Before: Jan 30 23:22:57 2025 GMT
Not After : Feb 6 23:22:57 2025 GMT
Subject: CN=679c09d2-f1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:68:56:28:38:65:3d:5f:3c:64:39:aa:bc:89:
af:00:b5:c3:00:60:59:69:0c:95:e5:af:62:33:1e:
8b:6f:16:87:50:5b:95:e0:25:1e:91:5e:ee:77:c0:
ab:d9:e8:63:eb:f3:1c:3f:19:70:6d:c7:5c:d8:84:
f2:46:eb:ab:2b:ec:78:dc:31:d8:3f:68:8a:e8:f6:
ee:b8:2a:0e:b1:25:f0:87:85:5c:69:bc:d7:73:c2:
af:b6:1b:98:cc:cd:2d:2d:74:e3:6f:a3:f4:14:25:
d9:bb:c4:e1:4b:64:d1:00:e8:54:fe:2f:b0:12:ad:
40:b1:c5:25:bb:84:90:fe:ff:9c:28:30:1c:0e:38:
33:f9:ca:28:07:c3:ca:7a:84:90:49:79:12:67:5e:
22:4d:c7:d8:96:71:fa:b0:ee:38:b5:9e:0d:87:ad:
d6:85:12:0b:ba:73:17:b8:77:2f:1a:49:8c:8c:d7:
b5:92:9e:d7:e9:ab:c7:f2:d2:70:3f:41:cb:0f:44:
91:c1:31:b9:ee:bf:8f:30:88:8c:06:ea:27:24:63:
96:b2:64:43:05:c6:d0:1d:3e:90:1e:26:24:7b:b1:
cd:75:95:da:3f:b8:ae:eb:d6:33:4e:46:5e:96:55:
12:f1:9f:b0:10:9d:08:8b:79:8f:5a:7e:47:98:e3:
53:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D1:58:7C:CF:E2:0B:53:06:36:6E:5B:8F:A0:2F:F2:BB:2A:C0:ED
X509v3 Authority Key Identifier:
keyid:9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:3f:b1:de:38:5e:d1:e7:0c:4f:20:60:05:5d:df:9c:77:c4:
3c:3f:fb:38:e5:e4:1e:b7:97:3e:c4:25:ef:33:83:85:a1:9e:
28:18:d9:eb:d5:e7:e6:7a:9a:d2:29:95:05:e4:58:98:0f:c6:
17:16:d7:a0:30:de:b8:77:d2:df:87:14:f7:83:a1:a2:fe:5a:
f0:ad:29:6f:b4:5f:f4:31:a3:25:1d:7d:6a:6a:14:9b:64:a0:
5b:62:15:3b:f6:cf:f8:7b:04:0b:2d:d4:bd:17:8e:e5:00:b7:
af:f8:47:db:d2:6f:98:ab:d0:48:b0:cc:fd:ec:86:8b:4b:f4:
00:c4:d6:96:56:12:ee:55:10:77:06:5c:5f:b1:6b:82:e5:62:
20:76:d2:9a:83:b1:21:62:e1:45:76:21:0a:4e:46:fb:0b:0e:
28:bb:6e:8d:34:01:ae:71:39:22:60:67:f4:bc:64:25:1a:69:
98:6a:53:f3:fe:85:e4:02:85:52:94:05:7d:5d:b4:08:e6:5e:
c3:89:5c:aa:e6:73:1b:df:82:9d:e9:d4:b7:de:f9:f8:97:7d:
db:86:57:dc:74:42:3b:cd:c5:79:30:e5:f1:cf:3d:6f:b8:71:
3e:49:f2:53:e8:48:f4:4b:6a:57:3e:ec:f8:29:61:32:03:8d:
3e:bd:17:4f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODk3QjMxMTAvBgNVBAUTKDlCRTI5MkU3RDE2RDRFOEU4MTYxNjlDM0I1MDJFQkU0
RUY0NUMxNjMwHhcNMjUwMTMwMjMyMjU3WhcNMjUwMjA2MjMyMjU3WjAYMRYwFAYD
VQQDEw02NzljMDlkMi1mMWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzWhWKDhlPV88ZDmqvImvALXDAGBZaQyV5a9iMx6LbxaHUFuV4CUekV7ud8Cr
2ehj6/McPxlwbcdc2ITyRuurK+x43DHYP2iK6PbuuCoOsSXwh4VcabzXc8KvthuY
zM0tLXTjb6P0FCXZu8ThS2TRAOhU/i+wEq1AscUlu4SQ/v+cKDAcDjgz+cooB8PK
eoSQSXkSZ14iTcfYlnH6sO44tZ4Nh63WhRILunMXuHcvGkmMjNe1kp7X6avH8tJw
P0HLD0SRwTG57r+PMIiMBuonJGOWsmRDBcbQHT6QHiYke7HNdZXaP7iu69YzTkZe
llUS8Z+wEJ0Ii3mPWn5HmONT1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAHRWHzP
4gtTBjZuW4+gL/K7KsDtMB8GA1UdIwQYMBaAFJvikufRbU6OgWFpw7UC6+TvRcFj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTdCMy82NzIxMkRGRUNF
QTgxMUVCOUE5NjlFMEZDNEY5QUUwMi9tLUtTNTlGdFRvNkJZV25EdFFMcjVPOUZ3
V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL20tS1M1OUZ0VG82QllXbkR0UUxyNU85RndXTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OTdCMy82NzIxMkRGRUNFQTgxMUVCOUE5NjlFMEZDNEY5QUUwMi9tLUtTNTlGdFRv
NkJZV25EdFFMcjVPOUZ3V00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQChP7HeOF7R5wxPIGAFXd+cd8Q8P/s45eQet5c+xCXvM4OFoZ4oGNnr
1efmeprSKZUF5FiYD8YXFtegMN64d9LfhxT3g6Gi/lrwrSlvtF/0MaMlHX1qahSb
ZKBbYhU79s/4ewQLLdS9F47lALev+Efb0m+Yq9BIsMz97IaLS/QAxNaWVhLuVRB3
BlxfsWuC5WIgdtKag7EhYuFFdiEKTkb7Cw4ou26NNAGucTkiYGf0vGQlGmmYalPz
/oXkAoVSlAV9XbQI5l7DiVyq5nMb34Kd6dS33vn4l33bhlfcdEI7zcV5MOXxzz1v
uHE+SfJT6Ej0S2pXPuz4KWEyA40+vRdP
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:31:20 2025 by rpki-client