Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
File: ips7kjmTluj8a4YwntVzMMlOEX0.mft (raw, json)
Hash identifier: 5VE3pdhZbSMBYa4C1kDqvTJ37fQy1JLL+7IGAy4QrI4=
Subject key identifier: C5:8B:B6:60:21:A0:86:14:B9:09:90:F2:11:CC:36:2F:89:98:6F:92
Authority key identifier: 8A:9B:3B:92:39:93:96:E8:FC:6B:86:30:9E:D5:73:30:C9:4E:11:7D
Certificate issuer: /CN=A919A3CA/serialNumber=8A9B3B92399396E8FC6B86309ED57330C94E117D
Certificate serial: 094E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
Manifest number: 0945
Signing time: Thu 30 Jan 2025 20:39:13 +0000
Manifest this update: Thu 30 Jan 2025 20:39:12 +0000
Manifest next update: Thu 06 Feb 2025 20:39:12 +0000
Files and hashes: 1: ips7kjmTluj8a4YwntVzMMlOEX0.crl (hash: g53h+loaPhlDXRoxfdEefKCkdFYcBqV9v88+JPyvmng=)
2: B972C58C8FA611EAB095C928C4F9AE02.roa (hash: pd0z6Py0ljyQXcBSw2555Qfaeo+rQ0qMyZ2LLvuE2Pc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2382 (0x94e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A3CA/serialNumber=8A9B3B92399396E8FC6B86309ED57330C94E117D
Validity
Not Before: Jan 30 20:39:12 2025 GMT
Not After : Feb 6 20:39:12 2025 GMT
Subject: CN=679be371-789d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:31:79:00:8b:4c:e4:53:06:40:e0:59:fc:e3:
21:a8:2a:c3:4d:74:53:d2:b9:d5:07:d0:60:d1:4d:
c1:d2:6c:34:33:b7:2c:5f:b6:47:07:05:16:9f:74:
74:08:d4:c6:da:e8:79:bd:36:40:79:4d:9b:44:52:
05:58:42:0d:62:64:cb:4d:4a:d0:ee:ca:68:e0:d1:
de:b9:e3:ea:2a:d1:cc:cc:ff:7f:2b:67:a7:e8:4f:
c2:22:93:a6:34:91:c1:b7:56:0b:2d:4b:ab:49:13:
41:3d:4f:2f:35:c0:5b:4b:ac:b3:81:79:d5:df:85:
78:15:b7:0b:8e:fd:f9:07:00:98:a6:f8:16:7b:6d:
0b:f0:67:56:74:d0:c8:6e:d4:c8:2a:3a:43:2d:55:
72:6b:89:93:8e:3a:b4:c3:18:18:2d:0a:b9:3d:ae:
f7:18:75:54:fb:cc:57:d2:40:16:68:bb:a5:0e:98:
47:1b:fe:61:56:bc:58:e3:6f:e2:be:ec:09:47:b3:
a6:b6:f4:08:2c:bf:16:37:8e:db:ce:6d:28:b0:85:
f2:5e:03:67:f8:6d:1e:4f:3e:bc:58:7b:f0:04:46:
50:88:45:13:8d:16:e4:79:e5:24:e5:e0:82:b0:c4:
a9:70:e6:6d:77:c8:5a:b8:ca:87:44:7f:59:61:01:
35:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8B:B6:60:21:A0:86:14:B9:09:90:F2:11:CC:36:2F:89:98:6F:92
X509v3 Authority Key Identifier:
keyid:8A:9B:3B:92:39:93:96:E8:FC:6B:86:30:9E:D5:73:30:C9:4E:11:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:ac:33:6e:fd:bd:3a:ff:91:52:e3:0a:3c:c4:01:f1:b0:7c:
14:e3:a3:8b:19:22:ae:e1:97:a0:ec:b5:a5:2b:80:44:50:76:
ca:fe:f9:29:4e:49:06:3f:0b:a8:ea:f0:bb:22:c1:3a:5d:8f:
ec:c2:42:28:9f:87:9b:79:a0:fc:23:55:86:62:05:46:c1:a6:
3c:86:3c:df:e9:ae:f2:c7:3e:70:81:e0:1f:f8:f7:ab:75:c1:
c8:cd:e2:ad:45:d8:77:63:50:44:df:03:3e:00:3a:ef:22:7f:
ed:bf:8c:2d:a8:4d:84:b6:7c:0a:00:a8:66:8d:d3:7a:6b:89:
e9:29:13:8c:41:c1:3d:ed:9e:21:4f:86:00:47:f8:0b:b5:9e:
a1:34:49:70:ee:03:94:e6:1a:1c:64:18:2c:ea:c0:d1:3a:35:
08:7e:a2:3f:0b:b3:0d:80:20:4d:74:5e:59:8d:c0:87:84:da:
a2:7a:6e:8b:23:47:70:cd:83:16:9e:14:d5:75:90:fe:77:6e:
55:1d:78:5f:3e:38:44:88:9e:f7:cf:7f:b3:8b:4d:4f:db:76:
ff:de:99:8d:73:28:cd:02:f6:34:4e:d5:eb:c5:f1:43:69:c4:
e0:0e:fe:0b:54:67:cf:10:61:44:cb:13:f3:e9:63:f6:29:fb:
83:f4:c6:77
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUEzQ0ExMTAvBgNVBAUTKDhBOUIzQjkyMzk5Mzk2RThGQzZCODYzMDlFRDU3MzMw
Qzk0RTExN0QwHhcNMjUwMTMwMjAzOTEyWhcNMjUwMjA2MjAzOTEyWjAYMRYwFAYD
VQQDEw02NzliZTM3MS03ODlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArTF5AItM5FMGQOBZ/OMhqCrDTXRT0rnVB9Bg0U3B0mw0M7csX7ZHBwUWn3R0
CNTG2uh5vTZAeU2bRFIFWEINYmTLTUrQ7spo4NHeuePqKtHMzP9/K2en6E/CIpOm
NJHBt1YLLUurSRNBPU8vNcBbS6yzgXnV34V4FbcLjv35BwCYpvgWe20L8GdWdNDI
btTIKjpDLVVya4mTjjq0wxgYLQq5Pa73GHVU+8xX0kAWaLulDphHG/5hVrxY42/i
vuwJR7OmtvQILL8WN47bzm0osIXyXgNn+G0eTz68WHvwBEZQiEUTjRbkeeUk5eCC
sMSpcOZtd8hauMqHRH9ZYQE1fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWLtmAh
oIYUuQmQ8hHMNi+JmG+SMB8GA1UdIwQYMBaAFIqbO5I5k5bo/GuGMJ7VczDJThF9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTNDQS81N0QyMzgwMjhG
QTIxMUVBOEVDMDZFMUNDNEY5QUUwMi9pcHM3a2ptVGx1ajhhNFl3bnRWek1NbE9F
WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lwczdram1UbHVqOGE0WXdudFZ6TU1sT0VYMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QTNDQS81N0QyMzgwMjhGQTIxMUVBOEVDMDZFMUNDNEY5QUUwMi9pcHM3a2ptVGx1
ajhhNFl3bnRWek1NbE9FWDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCGrDNu/b06/5FS4wo8xAHxsHwU46OLGSKu4Zeg7LWlK4BEUHbK/vkp
TkkGPwuo6vC7IsE6XY/swkIon4ebeaD8I1WGYgVGwaY8hjzf6a7yxz5wgeAf+Per
dcHIzeKtRdh3Y1BE3wM+ADrvIn/tv4wtqE2EtnwKAKhmjdN6a4npKROMQcE97Z4h
T4YAR/gLtZ6hNElw7gOU5hocZBgs6sDROjUIfqI/C7MNgCBNdF5ZjcCHhNqiem6L
I0dwzYMWnhTVdZD+d25VHXhfPjhEiJ73z3+zi01P23b/3pmNcyjNAvY0TtXrxfFD
acTgDv4LVGfPEGFEyxPz6WP2KfuD9MZ3
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:17:17 2025 by rpki-client