Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft
File: iiZW272QAzaEH_UDU2_5kY_rJcY.mft (raw, json)
Hash identifier: ucsghLFpFFFoFEUyTHQwA/Aj8CLt4WUU7GPpmpK9LL8=
Subject key identifier: 7B:FC:1D:07:ED:90:69:88:64:E7:88:4E:B8:CA:C2:63:77:FB:CE:06
Authority key identifier: 8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6
Certificate issuer: /CN=A91A267C/serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6
Certificate serial: 09AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft
Manifest number: 09A4
Signing time: Thu 30 Jan 2025 20:07:24 +0000
Manifest this update: Thu 30 Jan 2025 20:07:24 +0000
Manifest next update: Thu 06 Feb 2025 20:07:24 +0000
Files and hashes: 1: iiZW272QAzaEH_UDU2_5kY_rJcY.crl (hash: wCgJbHcAucL5j/Mc7v5y0MW2LwjRRAAqjA+xO4JS8EU=)
2: 9244682C7BD711EAA889485EC4F9AE02.roa (hash: p9kCZDh5UAqZ2BMmqpg1+O7Ke6v3jmI1iGjmFDJZpjY=)
3: 8B802D485F2211EC88AA0F84C4F9AE02.roa (hash: K7z8kKU5BqzIOHwB0jfNZHDe2Ivnb5VNPYxOnFpEPT0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2478 (0x9ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A267C/serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6
Validity
Not Before: Jan 30 20:07:24 2025 GMT
Not After : Feb 6 20:07:24 2025 GMT
Subject: CN=679bdbfc-c84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4d:1e:2b:f6:b8:55:cd:23:d2:10:34:41:37:
e8:ab:41:2d:13:31:a6:4d:c6:d7:32:c9:c5:66:53:
34:2b:4c:47:10:39:6a:fe:c0:61:7c:72:c5:12:b3:
c4:77:12:fc:51:15:fd:5a:35:ae:dd:87:b2:8a:14:
39:0c:16:81:24:f6:85:38:59:a8:71:1f:ac:9e:fe:
94:cd:af:55:51:a7:7a:1e:13:35:4a:30:cb:19:69:
1f:1e:28:b4:10:b1:ad:d2:61:0b:13:e8:43:0a:4e:
01:78:7a:47:06:89:3b:7d:ee:f8:f4:e1:2b:d5:9b:
82:13:62:75:92:2e:d6:c9:df:ba:e5:33:86:0a:f8:
88:53:bd:ac:f6:2c:a0:90:26:f9:d1:0e:2a:de:53:
8c:8f:86:1c:38:7c:ec:ac:69:e2:f2:15:7d:ce:ed:
b1:d9:81:54:2a:d1:5d:b6:19:87:33:9c:17:ee:7c:
01:20:75:58:36:2d:d3:e2:45:2f:b2:ce:89:51:65:
97:c9:60:36:72:e5:12:f1:1b:1d:37:84:20:20:b7:
aa:16:0a:3d:3a:8c:2c:8d:53:41:eb:cd:0e:b9:b4:
d1:06:15:90:8f:bf:44:23:50:39:52:86:36:7c:1b:
db:86:9d:61:fe:73:64:79:ff:4d:22:ac:47:2b:39:
d1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FC:1D:07:ED:90:69:88:64:E7:88:4E:B8:CA:C2:63:77:FB:CE:06
X509v3 Authority Key Identifier:
keyid:8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:0a:84:4b:f3:33:10:b4:08:79:01:57:87:d8:26:7b:d7:bd:
2a:ca:62:42:33:70:0b:c4:db:6a:a0:be:a3:c5:2a:9e:61:d9:
f9:a8:12:d3:e5:93:e6:87:e9:39:5d:05:b9:05:1d:58:b2:80:
23:d5:9d:a1:d6:bc:2d:86:5c:d4:e3:de:6e:5d:fe:f4:c2:03:
ca:a1:90:bf:ee:6a:6a:4b:ea:49:fe:32:cb:ed:a7:59:7b:d3:
8c:50:db:54:7d:b0:55:f5:16:9c:f3:8e:f1:c2:90:29:cc:2e:
84:74:cd:b0:8c:94:04:5e:b1:17:1c:c4:9d:d1:ca:9a:56:eb:
7a:94:8d:4a:d1:9f:dd:49:26:7c:f0:f8:21:07:49:eb:54:f3:
29:78:12:2c:cf:aa:9c:88:7d:47:0a:9b:29:4b:d0:89:6c:08:
01:c1:d6:3f:0e:ce:87:bf:82:51:e4:4c:55:d1:65:f4:65:10:
48:dd:43:cd:9d:13:fa:19:a5:ce:14:64:88:6c:52:7d:1c:a5:
77:d4:2f:81:28:43:02:8d:72:67:3b:41:b9:dd:c7:5f:75:f6:
87:67:e8:ab:c6:ba:7e:ea:a5:53:14:ac:88:57:14:ac:ea:cc:
d1:bd:06:4f:a3:6f:bb:67:c6:9e:29:c3:49:8d:62:51:a7:b5:
02:17:30:3c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTI2N0MxMTAvBgNVBAUTKDhBMjY1NkRCQkQ5MDAzMzY4NDFGRjUwMzUzNkZGOTkx
OEZFQjI1QzYwHhcNMjUwMTMwMjAwNzI0WhcNMjUwMjA2MjAwNzI0WjAYMRYwFAYD
VQQDEw02NzliZGJmYy1jODRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo00eK/a4Vc0j0hA0QTfoq0EtEzGmTcbXMsnFZlM0K0xHEDlq/sBhfHLFErPE
dxL8URX9WjWu3YeyihQ5DBaBJPaFOFmocR+snv6Uza9VUad6HhM1SjDLGWkfHii0
ELGt0mELE+hDCk4BeHpHBok7fe749OEr1ZuCE2J1ki7Wyd+65TOGCviIU72s9iyg
kCb50Q4q3lOMj4YcOHzsrGni8hV9zu2x2YFUKtFdthmHM5wX7nwBIHVYNi3T4kUv
ss6JUWWXyWA2cuUS8RsdN4QgILeqFgo9OowsjVNB680OubTRBhWQj79EI1A5UoY2
fBvbhp1h/nNkef9NIqxHKznRwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHv8HQft
kGmIZOeITrjKwmN3+84GMB8GA1UdIwQYMBaAFIomVtu9kAM2hB/1A1Nv+ZGP6yXG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjY3Qy81QjUzODk2NjdC
RDYxMUVBODAzRjlCNUNDNEY5QUUwMi9paVpXMjcyUUF6YUVIX1VEVTJfNWtZX3JK
Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lpWlcyNzJRQXphRUhfVURVMl81a1lfckpjWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MjY3Qy81QjUzODk2NjdCRDYxMUVBODAzRjlCNUNDNEY5QUUwMi9paVpXMjcyUUF6
YUVIX1VEVTJfNWtZX3JKY1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC5CoRL8zMQtAh5AVeH2CZ7170qymJCM3ALxNtqoL6jxSqeYdn5qBLT
5ZPmh+k5XQW5BR1YsoAj1Z2h1rwthlzU495uXf70wgPKoZC/7mpqS+pJ/jLL7adZ
e9OMUNtUfbBV9Rac847xwpApzC6EdM2wjJQEXrEXHMSd0cqaVut6lI1K0Z/dSSZ8
8PghB0nrVPMpeBIsz6qciH1HCpspS9CJbAgBwdY/Ds6Hv4JR5ExV0WX0ZRBI3UPN
nRP6GaXOFGSIbFJ9HKV31C+BKEMCjXJnO0G53cdfdfaHZ+irxrp+6qVTFKyIVxSs
6szRvQZPo2+7Z8aeKcNJjWJRp7UCFzA8
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:09:00 2025 by rpki-client