Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft
File: fSkuhkI7U8Czc7eZZYghkTSp5hA.mft (raw, json)
Hash identifier: 4izYGJkieccsOi5I7rFOqj4d9fhrzWC1aZRPWAEnSNs=
Subject key identifier: CC:5A:4C:19:2A:99:C9:68:82:44:7E:52:4C:EA:3D:7D:DB:CE:BB:AF
Authority key identifier: 7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10
Certificate issuer: /CN=A91A3430/serialNumber=7D292E86423B53C0B373B7996588219134A9E610
Certificate serial: 0CA5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft
Manifest number: 0C9C
Signing time: Fri 31 Jan 2025 18:08:06 +0000
Manifest this update: Fri 31 Jan 2025 18:08:05 +0000
Manifest next update: Fri 07 Feb 2025 18:08:05 +0000
Files and hashes: 1: fSkuhkI7U8Czc7eZZYghkTSp5hA.crl (hash: No5N2ip2wl/jEJC0zrDB+aWafIiA1uFRw0e6jOhGedo=)
2: 7B3163F0072A11EA9E314D4CC4F9AE02.roa (hash: 8KRCIYlWeIU1RFVFOTA+MnkOIQ/xaefXlo2pRQaFi20=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3237 (0xca5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3430/serialNumber=7D292E86423B53C0B373B7996588219134A9E610
Validity
Not Before: Jan 31 18:08:05 2025 GMT
Not After : Feb 7 18:08:05 2025 GMT
Subject: CN=679d1185-f4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:91:a2:34:f2:f8:e1:21:55:69:e1:12:ad:32:
81:46:9a:30:ca:3b:4c:37:59:71:84:6a:a5:72:99:
93:e9:8f:87:cb:d8:26:e7:78:58:92:c2:47:71:e1:
bb:c3:f4:14:28:bd:5c:fc:da:38:e4:53:17:3c:4b:
c6:c2:86:57:29:ec:cf:98:9c:fa:87:23:93:b1:5b:
3f:f8:cf:d3:60:a8:83:33:c4:bd:ae:95:c9:83:81:
0d:2c:66:d9:b0:f4:73:90:07:1b:af:a3:cf:ac:ac:
6f:ce:28:8a:e2:72:2a:37:65:7b:ef:5a:9a:b8:ef:
34:71:4a:15:ef:cd:c5:8e:53:41:f6:3d:63:14:9e:
5f:8a:df:e3:f2:05:38:44:6e:87:c9:a1:e2:d9:05:
48:14:22:d6:10:d7:84:95:a4:2e:61:10:59:65:b1:
c1:84:14:d6:b7:53:ca:84:83:0c:8b:59:ab:62:9a:
9c:fd:83:a0:52:2f:d2:14:32:c5:90:be:c0:51:cf:
68:e6:64:0e:ef:77:77:01:19:d4:e8:18:c5:93:02:
67:6b:00:d6:c2:a6:be:74:06:df:8c:5f:00:1e:e9:
7a:c8:03:b5:e5:4a:6f:f2:25:81:22:75:fa:c8:75:
2f:29:21:64:ff:ea:75:b5:69:c2:3d:89:4b:0a:4a:
ae:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5A:4C:19:2A:99:C9:68:82:44:7E:52:4C:EA:3D:7D:DB:CE:BB:AF
X509v3 Authority Key Identifier:
keyid:7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:9e:1f:72:d1:e5:35:f1:2f:72:84:0f:fd:39:a4:fd:04:65:
d7:72:8e:58:58:d5:40:1f:d9:1f:87:cf:39:24:6b:5e:98:65:
7b:16:3e:db:e9:d1:a8:5e:73:87:99:81:50:52:d0:88:e9:5b:
81:d4:37:0c:cf:ed:97:5d:1e:0e:f7:55:6f:93:74:66:c7:78:
17:13:df:90:01:f6:a1:c8:7e:3f:50:9c:b4:09:24:a7:72:06:
18:87:55:3d:d6:83:7b:dd:f7:32:2d:46:42:f0:d9:31:b0:80:
4a:52:a5:3d:a1:58:a7:e4:3d:dd:d4:f3:44:9f:a7:7e:df:0b:
79:02:39:e2:72:e6:d2:a9:f3:80:18:8a:d2:a1:b9:48:f6:cf:
c2:96:c8:47:09:b4:d6:fa:26:4d:93:a5:da:ad:48:1e:64:df:
85:f4:d2:20:95:ef:9d:ba:e7:68:4d:66:95:59:9e:ff:19:17:
f9:d7:4c:6a:d5:51:65:f0:d5:9c:c6:53:dd:33:77:84:30:6f:
00:37:61:88:63:94:7f:dd:ae:39:e7:ce:5a:e2:8d:4a:6c:64:
2f:a5:36:87:f5:51:f5:e3:bd:b9:cb:2f:8f:b1:0a:fd:e8:a2:
aa:69:51:ad:7f:82:55:9d:1d:6d:ac:80:9d:51:4a:d4:4f:82:
bb:ea:93:8a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTM0MzAxMTAvBgNVBAUTKDdEMjkyRTg2NDIzQjUzQzBCMzczQjc5OTY1ODgyMTkx
MzRBOUU2MTAwHhcNMjUwMTMxMTgwODA1WhcNMjUwMjA3MTgwODA1WjAYMRYwFAYD
VQQDEw02NzlkMTE4NS1mNGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlZGiNPL44SFVaeESrTKBRpowyjtMN1lxhGqlcpmT6Y+Hy9gm53hYksJHceG7
w/QUKL1c/No45FMXPEvGwoZXKezPmJz6hyOTsVs/+M/TYKiDM8S9rpXJg4ENLGbZ
sPRzkAcbr6PPrKxvziiK4nIqN2V771qauO80cUoV783FjlNB9j1jFJ5fit/j8gU4
RG6HyaHi2QVIFCLWENeElaQuYRBZZbHBhBTWt1PKhIMMi1mrYpqc/YOgUi/SFDLF
kL7AUc9o5mQO73d3ARnU6BjFkwJnawDWwqa+dAbfjF8AHul6yAO15Upv8iWBInX6
yHUvKSFk/+p1tWnCPYlLCkquBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMxaTBkq
mclogkR+UkzqPX3bzruvMB8GA1UdIwQYMBaAFH0pLoZCO1PAs3O3mWWIIZE0qeYQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzQzMC84NkFDODlEMEU4
N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4Q3pjN2VaWllnaGtUU3A1
aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZTa3Voa0k3VThDemM3ZVpaWWdoa1RTcDVoQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MzQzMC84NkFDODlEMEU4N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4
Q3pjN2VaWllnaGtUU3A1aEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBknh9y0eU18S9yhA/9OaT9BGXXco5YWNVAH9kfh885JGtemGV7Fj7b
6dGoXnOHmYFQUtCI6VuB1DcMz+2XXR4O91Vvk3Rmx3gXE9+QAfahyH4/UJy0CSSn
cgYYh1U91oN73fcyLUZC8NkxsIBKUqU9oVin5D3d1PNEn6d+3wt5AjnicubSqfOA
GIrSoblI9s/ClshHCbTW+iZNk6XarUgeZN+F9NIgle+duudoTWaVWZ7/GRf510xq
1VFl8NWcxlPdM3eEMG8AN2GIY5R/3a45585a4o1KbGQvpTaH9VH14725yy+PsQr9
6KKqaVGtf4JVnR1trICdUUrUT4K76pOK
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:57:03 2025 by rpki-client