Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft
File: o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft (raw, json)
Hash identifier: MzC2uUAwaFCDBQG2HPO1NhU4fZT2ZIG/jIg9mGpKT2I=
Subject key identifier: DF:78:0E:07:F7:61:A9:20:EB:B0:A5:2A:16:E2:79:ED:82:F5:9F:D2
Authority key identifier: A3:65:2D:9E:54:E9:64:68:B2:30:47:93:73:17:FA:4E:CD:7B:36:48
Certificate issuer: /CN=A91A36A7/serialNumber=A3652D9E54E96468B23047937317FA4ECD7B3648
Certificate serial: 05A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft
Manifest number: 059C
Signing time: Thu 30 Jan 2025 23:11:15 +0000
Manifest this update: Thu 30 Jan 2025 23:11:14 +0000
Manifest next update: Thu 06 Feb 2025 23:11:14 +0000
Files and hashes: 1: o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl (hash: BjsVS2ffKC0RciXd117bAuUWeLb6a/8QXbPtOjC+TGI=)
2: F0CA090EB94A11EBAF5BDD5AC4F9AE02.roa (hash: fk9bO30yZhfQjn+0VF9i0JM9DergUcdFFDpFTyp3X+4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1442 (0x5a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A36A7/serialNumber=A3652D9E54E96468B23047937317FA4ECD7B3648
Validity
Not Before: Jan 30 23:11:14 2025 GMT
Not After : Feb 6 23:11:14 2025 GMT
Subject: CN=679c0713-885d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fd:40:2c:fb:cd:42:da:0f:6a:52:8c:31:f3:
41:51:4f:94:ff:ca:e2:73:58:eb:3c:81:d2:1e:42:
f8:c5:be:a6:9f:5a:dd:cc:9f:ec:44:db:cd:50:12:
9a:f8:18:cc:00:32:ec:fc:f5:2e:a4:72:55:87:71:
38:46:b6:85:26:07:d0:4c:c1:63:46:07:dd:7b:a1:
f7:b5:76:21:4e:eb:a2:e0:a1:13:dd:bd:7b:b1:f0:
98:7f:54:b2:ed:f2:ef:38:4f:8e:0a:13:01:38:57:
f3:cb:71:cd:42:e2:f5:5a:17:be:11:36:3f:61:e8:
c8:6e:ab:d4:08:e1:3c:90:4d:ec:b4:3f:59:ba:c7:
53:f5:ec:be:f6:8c:40:23:dd:d7:60:43:e0:d2:29:
0c:f8:67:86:30:4d:ac:3a:81:35:ec:c8:98:38:11:
d5:f5:0d:50:d3:ad:b6:96:e0:3b:da:74:7b:80:b5:
f7:17:93:b4:cf:24:dd:07:31:0c:10:ef:a0:6d:fc:
44:ea:f6:8e:e6:c6:66:6b:4a:b9:d7:60:b8:39:36:
76:87:a9:d3:47:91:52:84:d0:f3:3d:ad:57:80:77:
f2:02:ee:15:2f:85:cf:13:ae:de:94:fa:6d:f1:63:
67:ab:fb:21:83:8a:bb:d7:24:45:61:33:69:5a:aa:
22:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:78:0E:07:F7:61:A9:20:EB:B0:A5:2A:16:E2:79:ED:82:F5:9F:D2
X509v3 Authority Key Identifier:
keyid:A3:65:2D:9E:54:E9:64:68:B2:30:47:93:73:17:FA:4E:CD:7B:36:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a3:4a:28:9f:6c:06:a8:36:ce:3c:bc:f7:88:d0:88:0d:6c:
25:4e:33:4a:1f:a4:57:d4:c1:24:8c:3b:1a:9b:eb:3a:07:ec:
69:f7:3a:24:77:14:31:70:4c:2e:7c:90:6a:3c:24:85:c8:73:
ba:66:96:fd:7e:c4:3b:ca:ca:cb:88:17:47:61:00:91:3d:a3:
c3:56:f7:1a:16:c9:d3:76:8b:3f:c1:3f:4c:26:54:ab:98:74:
80:5a:d3:89:d0:66:26:4a:f4:e1:4a:d5:4e:0d:78:bf:8a:7c:
ab:00:35:1b:64:ac:fa:c9:d7:db:d1:01:31:fe:42:19:1e:0d:
f2:3d:27:a1:ab:9c:df:d0:73:9c:fb:3a:44:47:ef:79:c9:94:
34:4b:30:83:ff:ed:8c:8b:dc:b9:b0:14:16:1a:da:33:52:31:
97:30:4f:26:ad:b9:59:91:dd:c5:12:b4:27:f0:e2:08:3b:cc:
e8:61:ba:24:b2:43:04:f0:15:5b:e2:ac:0b:95:af:ef:cd:f3:
a8:d0:ef:25:c5:21:8c:67:5a:de:b1:2a:c4:67:b7:ca:cb:d5:
f7:1c:9e:07:09:b6:5a:eb:be:d2:08:0b:39:ec:81:22:49:27:
8e:01:12:23:58:1a:17:07:41:81:ae:c8:b7:bb:f9:5c:04:16:
5a:8d:c9:86
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTM2QTcxMTAvBgNVBAUTKEEzNjUyRDlFNTRFOTY0NjhCMjMwNDc5MzczMTdGQTRF
Q0Q3QjM2NDgwHhcNMjUwMTMwMjMxMTE0WhcNMjUwMjA2MjMxMTE0WjAYMRYwFAYD
VQQDEw02NzljMDcxMy04ODVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1P1ALPvNQtoPalKMMfNBUU+U/8ric1jrPIHSHkL4xb6mn1rdzJ/sRNvNUBKa
+BjMADLs/PUupHJVh3E4RraFJgfQTMFjRgfde6H3tXYhTuui4KET3b17sfCYf1Sy
7fLvOE+OChMBOFfzy3HNQuL1Whe+ETY/YejIbqvUCOE8kE3stD9ZusdT9ey+9oxA
I93XYEPg0ikM+GeGME2sOoE17MiYOBHV9Q1Q0622luA72nR7gLX3F5O0zyTdBzEM
EO+gbfxE6vaO5sZma0q512C4OTZ2h6nTR5FShNDzPa1XgHfyAu4VL4XPE67elPpt
8WNnq/shg4q71yRFYTNpWqoivwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN94Dgf3
Yakg67ClKhbiee2C9Z/SMB8GA1UdIwQYMBaAFKNlLZ5U6WRosjBHk3MX+k7NezZI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzZBNy84QUE2NUFGQ0I5
NDkxMUVCQkJCMzI1NUFDNEY5QUUwMi9vMlV0bmxUcFpHaXlNRWVUY3hmNlRzMTdO
a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL28yVXRubFRwWkdpeU1FZVRjeGY2VHMxN05rZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MzZBNy84QUE2NUFGQ0I5NDkxMUVCQkJCMzI1NUFDNEY5QUUwMi9vMlV0bmxUcFpH
aXlNRWVUY3hmNlRzMTdOa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA9o0oon2wGqDbOPLz3iNCIDWwlTjNKH6RX1MEkjDsam+s6B+xp9zok
dxQxcEwufJBqPCSFyHO6Zpb9fsQ7ysrLiBdHYQCRPaPDVvcaFsnTdos/wT9MJlSr
mHSAWtOJ0GYmSvThStVODXi/inyrADUbZKz6ydfb0QEx/kIZHg3yPSehq5zf0HOc
+zpER+95yZQ0SzCD/+2Mi9y5sBQWGtozUjGXME8mrblZkd3FErQn8OIIO8zoYbok
skME8BVb4qwLla/vzfOo0O8lxSGMZ1resSrEZ7fKy9X3HJ4HCbZa677SCAs57IEi
SSeOARIjWBoXB0GBrsi3u/lcBBZajcmG
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:43:25 2025 by rpki-client