Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft
File: 5wLFqnTYyWzI7vVhjk_-79UdN_k.mft (raw, json)
Hash identifier: UlmjibNz2dE88hdDqVfBbaNKaZdXNofeJoF27eBtu58=
Subject key identifier: 94:69:EC:AD:01:F2:CF:61:38:84:07:5E:BD:D7:03:10:34:5C:70:24
Authority key identifier: E7:02:C5:AA:74:D8:C9:6C:C8:EE:F5:61:8E:4F:FE:EF:D5:1D:37:F9
Certificate issuer: /CN=A918CA0E/serialNumber=E702C5AA74D8C96CC8EEF5618E4FFEEFD51D37F9
Certificate serial: 062D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wLFqnTYyWzI7vVhjk_-79UdN_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft
Manifest number: 0628
Signing time: Thu 30 Jan 2025 22:37:30 +0000
Manifest this update: Thu 30 Jan 2025 22:37:30 +0000
Manifest next update: Thu 06 Feb 2025 22:37:30 +0000
Files and hashes: 1: 5wLFqnTYyWzI7vVhjk_-79UdN_k.crl (hash: bapPSiSJ4jSga+vi4Qhi0FW1IjtNC+XlxNEcfYKRAPM=)
2: 98C0AE7E808411EBA15C9251C4F9AE02.roa (hash: 4dUVKwERkH/QTGoIXRLz0nS6ysGT9dt9/C/hSIpCKRg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1581 (0x62d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918CA0E/serialNumber=E702C5AA74D8C96CC8EEF5618E4FFEEFD51D37F9
Validity
Not Before: Jan 30 22:37:30 2025 GMT
Not After : Feb 6 22:37:30 2025 GMT
Subject: CN=679bff2a-5bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4a:3f:d3:86:08:31:fb:07:cf:c6:b9:6f:88:
f3:55:63:59:56:58:5a:da:ee:c1:c3:34:9a:18:ec:
1f:dc:a2:c0:c3:08:4e:e0:66:1a:3d:1f:da:2b:f7:
d8:52:82:4e:ad:99:cb:77:c6:9b:49:2c:8d:87:51:
d0:5b:f1:a9:aa:22:d9:fb:34:d8:e2:06:03:62:b2:
2e:85:59:6d:db:c8:24:40:8f:b3:07:32:c6:be:2f:
8e:94:1f:4c:e7:71:8f:cc:fb:3a:50:78:44:5d:44:
db:6c:47:d6:8e:19:6a:46:85:49:51:d9:79:00:93:
d7:3d:99:2c:17:5a:f0:4e:f1:60:17:e1:96:2d:6e:
1f:20:82:20:df:20:04:1e:6d:5d:59:f3:98:78:7e:
c1:86:ed:f7:61:51:82:82:9f:fa:65:93:f3:64:77:
8d:a9:64:1e:d9:ea:df:f9:88:ce:7e:59:a0:eb:3a:
50:e4:b8:b7:87:32:3a:ee:62:5a:bf:b2:bd:d5:46:
7e:de:8e:1e:e0:3d:57:f6:20:6e:c8:9d:e6:73:7e:
53:8f:93:1d:d4:61:62:a7:db:9d:6c:2e:69:63:ca:
b8:06:f0:63:5d:76:e4:b7:43:e0:a1:ed:f7:a6:d0:
8a:32:03:6f:21:7d:70:ca:c9:ce:84:2a:c4:82:1d:
87:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:69:EC:AD:01:F2:CF:61:38:84:07:5E:BD:D7:03:10:34:5C:70:24
X509v3 Authority Key Identifier:
keyid:E7:02:C5:AA:74:D8:C9:6C:C8:EE:F5:61:8E:4F:FE:EF:D5:1D:37:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wLFqnTYyWzI7vVhjk_-79UdN_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:9c:82:fa:a3:05:4d:6d:2e:54:00:68:0b:04:34:63:40:8a:
8b:bb:09:67:26:5b:58:00:05:ca:6d:6f:a7:9c:9b:be:94:67:
31:49:e3:41:66:8f:de:9e:8b:f9:1c:b8:3b:e8:58:3d:7f:be:
32:ca:3d:8b:a4:82:c2:68:de:ec:a9:50:78:9a:96:1a:79:76:
e0:71:0d:4b:36:a1:ec:52:a7:2b:39:c0:a6:4c:ee:2a:39:7f:
ff:48:6c:4c:cc:74:d1:d4:5f:3e:15:ac:da:c7:1b:52:ea:22:
9c:94:bb:20:90:64:54:b6:17:e1:e9:35:9b:6f:26:30:0b:7d:
fc:6e:f0:89:61:56:cf:49:61:09:8b:48:dc:18:d5:a5:88:05:
8a:8c:8a:0a:d5:b9:8a:c1:a4:6f:c7:f0:85:2c:2c:4c:36:96:
51:32:51:c6:2e:70:31:c0:ad:3b:3a:17:41:8f:33:71:19:37:
77:4a:59:e9:82:64:d1:a9:ae:57:cb:02:3d:31:93:c7:d9:5a:
5e:3c:fc:a9:ae:4b:e0:d2:8d:47:82:74:a3:38:27:15:80:f7:
78:f3:22:96:cd:dc:00:21:36:36:75:94:1b:7e:f4:07:5a:db:
5c:88:2b:0c:4e:a1:99:f3:8a:83:ae:38:7f:1b:9a:3b:ef:7c:
79:82:3b:c6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OENBMEUxMTAvBgNVBAUTKEU3MDJDNUFBNzREOEM5NkNDOEVFRjU2MThFNEZGRUVG
RDUxRDM3RjkwHhcNMjUwMTMwMjIzNzMwWhcNMjUwMjA2MjIzNzMwWjAYMRYwFAYD
VQQDEw02NzliZmYyYS01YmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkko/04YIMfsHz8a5b4jzVWNZVlha2u7BwzSaGOwf3KLAwwhO4GYaPR/aK/fY
UoJOrZnLd8abSSyNh1HQW/GpqiLZ+zTY4gYDYrIuhVlt28gkQI+zBzLGvi+OlB9M
53GPzPs6UHhEXUTbbEfWjhlqRoVJUdl5AJPXPZksF1rwTvFgF+GWLW4fIIIg3yAE
Hm1dWfOYeH7Bhu33YVGCgp/6ZZPzZHeNqWQe2erf+YjOflmg6zpQ5Li3hzI67mJa
v7K91UZ+3o4e4D1X9iBuyJ3mc35Tj5Md1GFip9udbC5pY8q4BvBjXXbkt0Pgoe33
ptCKMgNvIX1wysnOhCrEgh2HmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJRp7K0B
8s9hOIQHXr3XAxA0XHAkMB8GA1UdIwQYMBaAFOcCxap02MlsyO71YY5P/u/VHTf5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0EwRS84QTExNjRDQTgw
NzcxMUVCOTdEOTQwNTRDNEY5QUUwMi81d0xGcW5UWXlXekk3dlZoamtfLTc5VWRO
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzV3TEZxblRZeVd6STd2Vmhqa18tNzlVZE5fay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Q0EwRS84QTExNjRDQTgwNzcxMUVCOTdEOTQwNTRDNEY5QUUwMi81d0xGcW5UWXlX
ekk3dlZoamtfLTc5VWROX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA5nIL6owVNbS5UAGgLBDRjQIqLuwlnJltYAAXKbW+nnJu+lGcxSeNB
Zo/enov5HLg76Fg9f74yyj2LpILCaN7sqVB4mpYaeXbgcQ1LNqHsUqcrOcCmTO4q
OX//SGxMzHTR1F8+FazaxxtS6iKclLsgkGRUthfh6TWbbyYwC338bvCJYVbPSWEJ
i0jcGNWliAWKjIoK1bmKwaRvx/CFLCxMNpZRMlHGLnAxwK07OhdBjzNxGTd3Slnp
gmTRqa5XywI9MZPH2VpePPyprkvg0o1HgnSjOCcVgPd48yKWzdwAITY2dZQbfvQH
WttciCsMTqGZ84qDrjh/G5o773x5gjvG
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:14:50 2025 by rpki-client