Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
File: 1yELbplCSp6CpNRQAnNvZIOqJ5o.mft (raw, json)
Hash identifier: KjgNgs6OUGeMYrIWiUU/48URBNcYJhbdFHeiqDkI+zw=
Subject key identifier: F8:3B:70:89:C4:1F:F9:BF:C5:21:34:88:7C:12:57:1C:DA:8D:4D:58
Authority key identifier: D7:21:0B:6E:99:42:4A:9E:82:A4:D4:50:02:73:6F:64:83:AA:27:9A
Certificate issuer: /CN=A919A909/serialNumber=D7210B6E99424A9E82A4D45002736F6483AA279A
Certificate serial: 80
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
Manifest number: 7C
Signing time: Fri 31 Jan 2025 05:48:14 +0000
Manifest this update: Fri 31 Jan 2025 05:48:13 +0000
Manifest next update: Fri 07 Feb 2025 05:48:13 +0000
Files and hashes: 1: 1yELbplCSp6CpNRQAnNvZIOqJ5o.crl (hash: uXrtSr1KtGvHZ81zEEA8f69pqaOTqyNeKritmOzKXq8=)
2: 2F5FEDD02E4811EFA2C93552C4F9AE02.roa (hash: /2rgCrByQXfEl3QFcxBS9yU2VX/WpSZOCuakY+zsero=)
3: 1D5C0B90475D11EFBD75C15EC4F9AE02.roa (hash: THvSuu89zBwF6bcGi2lQr5DOft4c27TPpxpcQHdJvh8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A909/serialNumber=D7210B6E99424A9E82A4D45002736F6483AA279A
Validity
Not Before: Jan 31 05:48:13 2025 GMT
Not After : Feb 7 05:48:13 2025 GMT
Subject: CN=679c641d-1eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:70:4b:06:9c:78:44:9e:c6:98:1e:4d:48:a9:
f7:45:a7:21:25:d1:6d:ed:aa:57:47:88:95:8d:0d:
4b:b1:2e:a8:63:e7:86:78:5d:ad:9d:9d:8f:96:33:
40:96:15:da:84:8e:7d:90:ed:a4:de:db:9d:a5:cc:
f5:5c:aa:8c:e2:2c:6c:01:bb:fe:de:2d:87:20:fe:
62:f7:77:c2:80:80:b0:20:4e:26:c0:b6:cf:63:54:
33:8b:8d:58:50:0e:e7:9d:2a:89:b0:3d:b8:40:57:
e2:43:a1:84:98:d0:d6:47:86:2c:5f:d6:f1:70:1d:
09:fa:6c:14:cf:80:03:35:2f:08:97:1c:57:6f:2d:
b1:a3:be:0f:32:7a:ff:ac:ab:cf:1a:36:6e:2b:6f:
20:df:38:3d:ec:2f:fe:88:33:25:2c:7a:d4:a7:93:
f9:6d:77:ee:f1:a2:a5:50:a3:43:ed:f9:a9:5f:b1:
08:05:84:f3:b7:fa:33:2d:db:a1:3d:b7:8c:d9:7b:
cf:18:f5:c4:43:10:2f:3f:dd:13:a7:0b:68:76:cd:
3d:ac:84:ac:19:58:97:a1:8e:38:1e:b3:07:4a:2a:
2c:ca:86:0b:71:ec:2b:6e:28:1e:17:be:fa:18:4a:
b4:c8:43:44:ba:f4:41:1b:30:2d:db:43:31:46:05:
dc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3B:70:89:C4:1F:F9:BF:C5:21:34:88:7C:12:57:1C:DA:8D:4D:58
X509v3 Authority Key Identifier:
keyid:D7:21:0B:6E:99:42:4A:9E:82:A4:D4:50:02:73:6F:64:83:AA:27:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:66:48:39:c7:6c:6f:53:8f:09:f6:eb:9a:b1:1f:04:b0:61:
13:dc:95:74:5f:76:f1:24:69:d0:20:74:9e:dc:3f:f2:7a:42:
da:aa:d8:6e:54:2f:dd:d3:7c:45:d4:e7:32:b7:45:fe:db:fa:
2c:31:c5:8c:91:ff:f4:e5:8a:6d:b2:d9:76:25:3e:f1:e4:4f:
32:58:26:8a:6b:a7:9b:ad:9d:ae:cd:ef:b5:47:b2:76:8d:55:
d4:00:29:a7:53:ec:d6:4e:26:0d:31:af:ed:f2:d6:9e:0e:75:
b4:23:5a:78:65:98:04:6d:6d:a8:36:b8:00:fb:1f:62:e0:53:
81:bd:e1:a5:ee:2c:7b:be:1c:b5:6f:f9:ba:87:3f:27:1a:3c:
ba:08:68:e6:db:f8:c2:32:12:b2:ab:e4:57:cd:83:b3:80:eb:
6b:6e:99:b4:71:d2:4c:70:96:be:54:d6:57:5b:1d:58:f8:31:
84:3e:c1:1b:39:ef:6e:b5:75:a8:a7:d8:91:39:c6:51:c8:14:
c3:bc:a9:5a:b5:04:17:2f:29:02:51:ab:61:30:18:e2:09:f9:
a3:e5:f4:b6:de:79:86:a1:9f:b8:10:43:cf:99:bc:b2:c3:33:
ab:47:85:af:14:63:f5:8d:dd:f5:28:98:fb:6c:37:49:3f:20:
c2:c6:af:43
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUE5MDkxMTAvBgNVBAUTKEQ3MjEwQjZFOTk0MjRBOUU4MkE0RDQ1MDAyNzM2RjY0
ODNBQTI3OUEwHhcNMjUwMTMxMDU0ODEzWhcNMjUwMjA3MDU0ODEzWjAYMRYwFAYD
VQQDEw02NzljNjQxZC0xZWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApXBLBpx4RJ7GmB5NSKn3RachJdFt7apXR4iVjQ1LsS6oY+eGeF2tnZ2PljNA
lhXahI59kO2k3tudpcz1XKqM4ixsAbv+3i2HIP5i93fCgICwIE4mwLbPY1Qzi41Y
UA7nnSqJsD24QFfiQ6GEmNDWR4YsX9bxcB0J+mwUz4ADNS8IlxxXby2xo74PMnr/
rKvPGjZuK28g3zg97C/+iDMlLHrUp5P5bXfu8aKlUKND7fmpX7EIBYTzt/ozLduh
PbeM2XvPGPXEQxAvP90Tpwtods09rISsGViXoY44HrMHSiosyoYLcewrbigeF776
GEq0yENEuvRBGzAt20MxRgXcDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPg7cInE
H/m/xSE0iHwSVxzajU1YMB8GA1UdIwQYMBaAFNchC26ZQkqegqTUUAJzb2SDqiea
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTkwOS8xNjZFNzQ3QzJB
MzMxMUVGQkU5QUE4NTlDNEY5QUUwMi8xeUVMYnBsQ1NwNkNwTlJRQW5OdlpJT3FK
NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzF5RUxicGxDU3A2Q3BOUlFBbk52WklPcUo1by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QTkwOS8xNjZFNzQ3QzJBMzMxMUVGQkU5QUE4NTlDNEY5QUUwMi8xeUVMYnBsQ1Nw
NkNwTlJRQW5OdlpJT3FKNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAoZkg5x2xvU48J9uuasR8EsGET3JV0X3bxJGnQIHSe3D/yekLaqthu
VC/d03xF1Ocyt0X+2/osMcWMkf/05Yptstl2JT7x5E8yWCaKa6ebrZ2uze+1R7J2
jVXUACmnU+zWTiYNMa/t8taeDnW0I1p4ZZgEbW2oNrgA+x9i4FOBveGl7ix7vhy1
b/m6hz8nGjy6CGjm2/jCMhKyq+RXzYOzgOtrbpm0cdJMcJa+VNZXWx1Y+DGEPsEb
Oe9utXWop9iROcZRyBTDvKlatQQXLykCUathMBjiCfmj5fS23nmGoZ+4EEPPmbyy
wzOrR4WvFGP1jd31KJj7bDdJPyDCxq9D
-----END CERTIFICATE-----
Generated at Sun Apr 27 15:38:49 2025 by rpki-client