Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft
File: 2kcELjdqlHP8Dt_IRFc53RMorg4.mft (raw, json)
Hash identifier: j2NSZnaWQfjbtNFKzjy3HZrKBcr479TcPs9IilQ2np8=
Subject key identifier: 83:21:99:C6:ED:AE:56:35:10:97:86:67:35:11:CC:3A:98:A1:C6:56
Authority key identifier: DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E
Certificate issuer: /CN=A9191DF4/serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E
Certificate serial: 0DCB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft
Manifest number: 0DB4
Signing time: Fri 31 Jan 2025 17:54:22 +0000
Manifest this update: Fri 31 Jan 2025 17:54:21 +0000
Manifest next update: Fri 07 Feb 2025 17:54:21 +0000
Files and hashes: 1: 2kcELjdqlHP8Dt_IRFc53RMorg4.crl (hash: ubzi+AZugkdy3uzBnaRHqPLwSoNkcgA2oTpfubPpjrg=)
2: B5D4A156598B11EC82C8685CC4F9AE02.roa (hash: 9N5REIY+2HrtITjoJdJhm20sPzs6LfTpozJyTEhJPKI=)
3: B922DB22E84211EA918B8F09C4F9AE02.roa (hash: 0xCnVozQZWjgc3AYs562bOg5LeDIgNinyp8El/uXPPA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3531 (0xdcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191DF4/serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E
Validity
Not Before: Jan 31 17:54:21 2025 GMT
Not After : Feb 7 17:54:21 2025 GMT
Subject: CN=679d0e4d-0a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:32:63:24:10:28:86:20:b9:1d:e7:2c:60:93:
f9:7e:47:e0:cd:ca:46:c1:75:8c:b7:67:5b:48:d6:
d0:1c:37:98:48:5a:f7:62:84:e1:b8:a9:2b:1c:4e:
ff:d9:2f:8e:8b:72:88:c0:77:9d:25:68:c7:6e:c5:
77:29:3b:97:82:c1:ca:59:e0:c6:e2:e2:03:ed:6b:
14:3c:34:f1:25:9e:de:d0:6d:a3:64:0b:93:af:37:
fb:1f:af:c6:c4:63:c7:2e:cc:1a:17:f2:16:d5:fa:
df:63:ef:22:1c:1f:9c:a0:af:1c:2f:99:45:61:ab:
f8:e9:02:64:bd:2c:ee:ba:03:d4:d8:5a:3f:cd:63:
f8:e8:e3:a0:59:08:5c:78:8a:8f:90:03:1d:28:f7:
06:57:27:45:6a:21:e4:b9:0d:13:27:38:d5:6a:0d:
29:40:58:6e:f9:35:2a:76:50:e7:a6:32:18:7e:05:
d6:90:19:3a:6e:1c:f3:b5:d1:80:25:e5:d4:de:3c:
b9:a2:7f:8f:96:7e:fc:62:db:96:68:b1:14:63:a1:
9d:35:fb:43:18:9d:06:0d:24:f9:0b:62:d4:08:a0:
9e:c9:33:5f:b3:63:ff:fd:3f:3c:17:e6:16:9a:e9:
7d:57:d3:f7:14:e7:22:d8:72:6d:64:c3:09:d2:2f:
f1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:21:99:C6:ED:AE:56:35:10:97:86:67:35:11:CC:3A:98:A1:C6:56
X509v3 Authority Key Identifier:
keyid:DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:08:c9:66:00:9f:bc:ef:18:c6:e5:ee:0c:22:3b:52:d3:54:
c8:90:5e:27:0c:9b:62:c8:0d:69:37:fc:da:0b:ca:10:5c:db:
b9:a2:7b:ad:ea:b2:a5:b9:48:2a:e9:20:6a:e6:3a:bc:88:44:
b2:9e:4d:14:d8:56:47:ec:54:23:23:fd:98:44:a6:52:8d:84:
1d:c9:b8:fe:54:89:47:b3:ce:ee:2d:27:45:ae:2d:d9:2d:b8:
4a:b9:43:db:25:26:4b:6b:74:fd:b2:50:ab:1f:14:ac:a7:15:
6c:44:ab:78:40:44:90:db:6a:ed:d5:09:41:0d:ef:46:aa:20:
3e:7a:e9:e4:f8:9b:61:19:34:df:ab:14:62:1d:5c:b1:95:8f:
a5:e8:41:c1:ec:13:c8:1a:39:d9:62:46:f5:7c:cc:87:97:42:
bd:b9:98:9e:43:8b:97:81:04:5c:14:39:07:c8:10:bb:00:04:
a0:84:b4:5f:2b:80:e0:fc:66:8f:63:fb:cd:5c:66:7d:40:3f:
bc:b5:79:e6:ab:2f:17:f2:9f:24:6e:58:5f:7d:5a:12:6c:3d:
f5:20:60:bb:18:02:1f:ad:99:60:7c:37:19:12:a9:84:0a:1a:
ff:70:1c:c7:5f:81:74:6b:8f:73:16:53:1e:5b:88:d0:3c:8c:
30:5d:4f:63
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTFERjQxMTAvBgNVBAUTKERBNDcwNDJFMzc2QTk0NzNGQzBFREZDODQ0NTczOURE
MTMyOEFFMEUwHhcNMjUwMTMxMTc1NDIxWhcNMjUwMjA3MTc1NDIxWjAYMRYwFAYD
VQQDEw02NzlkMGU0ZC0wYTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsjJjJBAohiC5HecsYJP5fkfgzcpGwXWMt2dbSNbQHDeYSFr3YoThuKkrHE7/
2S+Oi3KIwHedJWjHbsV3KTuXgsHKWeDG4uID7WsUPDTxJZ7e0G2jZAuTrzf7H6/G
xGPHLswaF/IW1frfY+8iHB+coK8cL5lFYav46QJkvSzuugPU2Fo/zWP46OOgWQhc
eIqPkAMdKPcGVydFaiHkuQ0TJzjVag0pQFhu+TUqdlDnpjIYfgXWkBk6bhzztdGA
JeXU3jy5on+Pln78YtuWaLEUY6GdNftDGJ0GDST5C2LUCKCeyTNfs2P//T88F+YW
mul9V9P3FOci2HJtZMMJ0i/xZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMhmcbt
rlY1EJeGZzURzDqYocZWMB8GA1UdIwQYMBaAFNpHBC43apRz/A7fyERXOd0TKK4O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MURGNC9GNDFEMUMxOEIz
OEUxMUU5ODYyODJCNzNDNEY5QUUwMi8ya2NFTGpkcWxIUDhEdF9JUkZjNTNSTW9y
ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJrY0VMamRxbEhQOER0X0lSRmM1M1JNb3JnNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MURGNC9GNDFEMUMxOEIzOEUxMUU5ODYyODJCNzNDNEY5QUUwMi8ya2NFTGpkcWxI
UDhEdF9JUkZjNTNSTW9yZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBgCMlmAJ+87xjG5e4MIjtS01TIkF4nDJtiyA1pN/zaC8oQXNu5onut
6rKluUgq6SBq5jq8iESynk0U2FZH7FQjI/2YRKZSjYQdybj+VIlHs87uLSdFri3Z
LbhKuUPbJSZLa3T9slCrHxSspxVsRKt4QESQ22rt1QlBDe9GqiA+eunk+JthGTTf
qxRiHVyxlY+l6EHB7BPIGjnZYkb1fMyHl0K9uZieQ4uXgQRcFDkHyBC7AASghLRf
K4Dg/GaPY/vNXGZ9QD+8tXnmqy8X8p8kblhffVoSbD31IGC7GAIfrZlgfDcZEqmE
Chr/cBzHX4F0a49zFlMeW4jQPIwwXU9j
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:37:29 2025 by rpki-client