Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft
File: DYtx2GteICkzvLAqW210CSpSoXw.mft (raw, json)
Hash identifier: OL2gScxSfOHPol4OLwxKwTupBDLEJVF54vwDmar+NdA=
Subject key identifier: C8:13:4C:6C:BC:FB:45:9C:4D:6D:28:77:25:61:11:EF:CE:06:96:91
Authority key identifier: 0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C
Certificate issuer: /CN=A91A395C/serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C
Certificate serial: 349A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft
Manifest number: 346C
Signing time: Fri 31 Jan 2025 14:52:21 +0000
Manifest this update: Fri 31 Jan 2025 14:52:20 +0000
Manifest next update: Fri 07 Feb 2025 14:52:20 +0000
Files and hashes: 1: DYtx2GteICkzvLAqW210CSpSoXw.crl (hash: HDxR3CVL0YT7r8hRan1rADNrJyBXjwbzGcMT1ih4Dis=)
2: 991EB004BE8511EE960E5082C4F9AE02.roa (hash: IR/fxoozFicSxIrUXHGZXGMAUroK6RP4wvdk7z4PV7A=)
3: 9B71FEB0593F11EA9F9FA238C4F9AE02.roa (hash: XQCwNi2PZQw3HwB0S22xbUukUjh1gRPdN0DptoUSl6Q=)
4: D56D9FD87E8711EC9A928B6AC4F9AE02.roa (hash: MzFm0njK9GauK3PVGzL0I/Klqbd6ft5wJ9/podujw/8=)
5: 9A2B0DE4593F11EA9F9FA238C4F9AE02.roa (hash: jv97nGJvaH0WKHe7n31vkT3MMMbNqFjpDhhexD6X6+Q=)
6: 3DBC186C5AD611EF85A4557BC4F9AE02.roa (hash: crg/ljxSxvSurizJ6VoDNQFMCKyOAKHsQIWFOorvrvI=)
7: 65552C3AE8D411ED8D0FAD45C4F9AE02.roa (hash: ifJGYL5q49BedEWwURROMxMLmQuzo6sd4i9VU7gjPWk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13466 (0x349a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A395C/serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C
Validity
Not Before: Jan 31 14:52:20 2025 GMT
Not After : Feb 7 14:52:20 2025 GMT
Subject: CN=679ce3a4-c4b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0d:27:6f:a2:f6:8e:17:d6:a5:3d:c8:c5:5e:
47:33:be:53:fb:a6:44:f4:cd:e2:e4:a6:19:7d:b1:
d5:d9:9a:fe:12:bb:67:d1:b2:a0:de:9b:da:ef:86:
d8:26:c8:d1:f4:ba:c7:52:ab:c7:a2:59:56:30:20:
d3:86:d8:e2:d9:99:a4:b8:54:c3:6b:c4:20:09:e0:
bc:bc:8d:41:ac:e6:5c:e2:48:8a:ae:a6:8a:70:b7:
4a:40:fb:2b:f0:9e:16:bb:96:c9:47:f2:b6:94:ad:
ab:d2:c4:92:55:76:e1:a7:e0:85:a8:e2:71:99:ee:
eb:ee:d0:c1:4f:a7:be:00:36:55:4a:87:ba:5f:3d:
58:f5:2a:8f:ca:a0:25:ae:e3:0d:7a:9d:2d:ae:1d:
8e:b6:59:b7:4d:db:57:2b:3e:e7:23:e9:f7:d3:5d:
79:11:69:fd:84:6a:51:fc:8a:78:c1:7c:28:87:81:
77:de:c6:94:61:e2:6b:f5:64:48:80:6d:ab:e1:b0:
8c:d4:e6:7b:e3:e2:7b:53:60:53:aa:87:45:d0:8a:
c2:33:37:08:62:66:7f:bb:47:6e:40:cd:b0:f8:b8:
60:e3:e6:a7:cb:cb:25:ed:99:39:7d:35:73:9e:4e:
f9:71:c2:ad:a1:db:4d:13:48:f4:01:30:b1:a1:f6:
ba:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:13:4C:6C:BC:FB:45:9C:4D:6D:28:77:25:61:11:EF:CE:06:96:91
X509v3 Authority Key Identifier:
keyid:0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:c8:56:0d:09:02:28:9f:73:1b:3f:a3:eb:03:78:0a:9b:57:
7b:17:b2:dd:9f:5f:e3:7d:e9:63:ce:ab:87:27:95:4b:c4:2d:
bc:91:9e:9a:54:83:27:25:15:13:5a:6d:22:d3:0b:45:b1:09:
a8:18:55:e3:3f:c1:a2:06:80:58:71:e0:22:ef:1f:29:18:c4:
ad:15:ab:38:59:39:12:e5:0a:b5:6b:58:fd:d4:74:f1:e3:26:
26:35:14:88:2e:62:0d:79:a2:9f:0c:6e:32:f6:f3:b0:02:37:
4b:8e:ed:5f:ee:3d:ca:0b:7f:df:8d:f6:48:9b:86:97:f9:6f:
db:62:5f:85:35:12:02:a9:48:11:7d:fa:cc:08:dd:5a:6f:fe:
93:e1:ec:8b:ed:0b:ff:61:87:4e:72:3f:6e:2f:37:32:f6:04:
38:21:26:81:09:ec:ed:f8:9f:8c:9c:95:7b:13:ef:78:ba:57:
08:74:42:1f:de:d7:7a:9a:68:45:21:f7:ef:9e:fc:b1:6b:ad:
94:f9:2e:ad:e4:6a:ea:e9:5a:73:2f:2b:1d:21:c8:9c:79:3b:
2a:15:2b:33:56:bd:3f:3e:ce:af:db:11:3d:f7:82:ba:bd:e1:
6f:45:fc:b5:55:8c:5c:f6:01:27:bb:85:f5:f6:6a:55:f9:5a:
9b:0b:18:24
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTM5NUMxMTAvBgNVBAUTKDBEOEI3MUQ4NkI1RTIwMjkzM0JDQjAyQTVCNkQ3NDA5
MkE1MkExN0MwHhcNMjUwMTMxMTQ1MjIwWhcNMjUwMjA3MTQ1MjIwWjAYMRYwFAYD
VQQDEw02NzljZTNhNC1jNGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1Q0nb6L2jhfWpT3IxV5HM75T+6ZE9M3i5KYZfbHV2Zr+Ertn0bKg3pva74bY
JsjR9LrHUqvHollWMCDThtji2ZmkuFTDa8QgCeC8vI1BrOZc4kiKrqaKcLdKQPsr
8J4Wu5bJR/K2lK2r0sSSVXbhp+CFqOJxme7r7tDBT6e+ADZVSoe6Xz1Y9SqPyqAl
ruMNep0trh2Otlm3TdtXKz7nI+n30115EWn9hGpR/Ip4wXwoh4F33saUYeJr9WRI
gG2r4bCM1OZ74+J7U2BTqodF0IrCMzcIYmZ/u0duQM2w+Lhg4+any8sl7Zk5fTVz
nk75ccKtodtNE0j0ATCxofa6+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMgTTGy8
+0WcTW0odyVhEe/OBpaRMB8GA1UdIwQYMBaAFA2LcdhrXiApM7ywKlttdAkqUqF8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzk1Qy9CQjM0MTdDMDFE
OTYxMUUyQjhCQjgyN0YwOEIwMkNEMi9EWXR4Mkd0ZUlDa3p2TEFxVzIxMENTcFNv
WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RZdHgyR3RlSUNrenZMQXFXMjEwQ1NwU29Ydy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
Mzk1Qy9CQjM0MTdDMDFEOTYxMUUyQjhCQjgyN0YwOEIwMkNEMi9EWXR4Mkd0ZUlD
a3p2TEFxVzIxMENTcFNvWHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA1yFYNCQIon3MbP6PrA3gKm1d7F7Ldn1/jfeljzquHJ5VLxC28kZ6a
VIMnJRUTWm0i0wtFsQmoGFXjP8GiBoBYceAi7x8pGMStFas4WTkS5Qq1a1j91HTx
4yYmNRSILmINeaKfDG4y9vOwAjdLju1f7j3KC3/fjfZIm4aX+W/bYl+FNRICqUgR
ffrMCN1ab/6T4eyL7Qv/YYdOcj9uLzcy9gQ4ISaBCezt+J+MnJV7E+94ulcIdEIf
3td6mmhFIffvnvyxa62U+S6t5Grq6VpzLysdIciceTsqFSszVr0/Ps6v2xE994K6
veFvRfy1VYxc9gEnu4X19mpV+VqbCxgk
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:27:18 2025 by rpki-client