Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft
File: 2j9P_11GRonTiYj1-yL2VVCz7_g.mft (raw, json)
Hash identifier: gCzNWRxMGVvLQul0CvZ2D8uVYFtEWzedqXl0xGZPmuw=
Subject key identifier: 82:E7:4E:0B:02:57:60:E4:FB:F1:88:A6:CB:F7:39:13:17:03:89:76
Authority key identifier: DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8
Certificate issuer: /CN=A91A3FFF/serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8
Certificate serial: 0435
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft
Manifest number: 0429
Signing time: Fri 31 Jan 2025 00:24:04 +0000
Manifest this update: Fri 31 Jan 2025 00:24:04 +0000
Manifest next update: Fri 07 Feb 2025 00:24:03 +0000
Files and hashes: 1: 2j9P_11GRonTiYj1-yL2VVCz7_g.crl (hash: hjL/CUKHMtszfDOuLsbTyaUlN9j6SYX/zRzv3U8EfFA=)
2: 952AA4424DAF11EC86ED5273C4F9AE02.roa (hash: 70pXo7TPZehC7uJ0XdtVRKfDG1GkFpY/5x3mmDYZSxI=)
3: AC63C4A4A62E11ECBDD6843FC4F9AE02.roa (hash: w67HRNi/yFu6FrtkXk67zQVeYi9FWWK0Yn59oMaToP8=)
4: 75426BC6A8C511EC8F560C42C4F9AE02.roa (hash: c26DXYzcpQgya2lb6mPXdMatF2eIuHc37QpxkKWbfsc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1077 (0x435)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3FFF/serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8
Validity
Not Before: Jan 31 00:24:04 2025 GMT
Not After : Feb 7 00:24:03 2025 GMT
Subject: CN=679c1824-6384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:69:07:43:99:c6:d5:8e:cf:3e:8d:0b:34:74:
fc:85:52:46:26:78:fa:2b:9c:5d:97:30:ee:22:e4:
da:9d:3d:5d:5e:97:57:0b:3a:13:bf:9d:53:ff:93:
a3:f2:5e:bd:12:c3:ee:e8:03:f2:37:29:57:ec:93:
bc:f0:29:11:76:35:b1:1b:f7:2a:b5:8e:dc:3d:a9:
3e:23:9e:28:87:de:8b:b6:2b:4b:fd:58:92:db:77:
6f:59:06:73:9d:3a:64:37:11:88:5b:49:b5:4a:30:
0a:52:95:dc:a0:73:fd:16:87:2e:0b:53:02:20:40:
c4:56:9b:f5:8b:8d:29:7c:3f:e0:27:06:f6:49:16:
28:64:dc:a9:de:27:b1:ab:ca:91:aa:8e:c4:93:a2:
f0:60:17:08:fc:67:c1:5b:0e:61:f2:c7:74:87:26:
46:eb:ff:1d:51:f5:06:e3:2b:ab:4d:46:5f:af:fb:
41:bc:59:4b:93:5b:01:9b:12:7c:8a:7f:96:45:aa:
26:a3:52:e9:f7:58:21:fc:33:52:18:62:ce:53:2f:
a5:80:c8:45:aa:d3:7a:48:db:0b:d3:af:dd:51:a8:
d8:d8:65:f4:d0:f9:c4:eb:c3:68:c4:4e:2c:c7:4c:
b9:44:3a:6d:a9:91:2b:b9:fe:d9:2f:0d:42:e0:53:
08:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E7:4E:0B:02:57:60:E4:FB:F1:88:A6:CB:F7:39:13:17:03:89:76
X509v3 Authority Key Identifier:
keyid:DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:1c:39:61:b0:d2:d1:06:2e:0d:f0:18:a4:28:58:38:e4:5b:
69:0d:04:68:25:7d:14:8d:f6:07:a5:fc:d8:6b:a1:6d:df:23:
8a:35:51:a6:40:b3:42:71:f5:0f:05:25:70:5c:e1:c3:9a:28:
20:b9:f6:42:70:53:92:3e:47:bd:e9:a4:ee:a1:99:0d:8e:ab:
28:ac:83:a5:b4:48:a8:2b:c6:6e:8b:ea:69:bd:47:7d:92:2a:
5f:44:1d:ed:73:e8:be:2a:19:4d:26:89:b1:61:9a:ce:8b:6e:
57:57:e5:4e:53:9a:26:e6:76:bc:03:e7:39:49:59:7d:0f:39:
90:9a:1f:70:9a:e9:76:4e:7a:28:e8:e2:9c:70:5b:da:a1:4b:
33:4b:fe:8f:53:88:97:e9:86:ad:d4:54:9e:94:49:94:97:16:
49:a9:ec:49:65:66:18:8b:2a:d0:06:ca:4a:04:65:43:30:65:
f3:03:f1:d2:8a:64:f8:db:a3:a4:6a:e7:a7:bd:a8:9a:ab:53:
fd:cc:ac:f5:75:10:73:4d:66:8f:9e:18:db:15:3e:84:56:b6:
f7:9e:59:a3:f3:07:43:cd:af:74:ca:70:ee:d7:44:8a:6b:16:
dd:54:e3:01:36:ec:e3:4a:4a:93:aa:7f:66:da:9f:2b:65:b9:
9b:b7:7d:59
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTNGRkYxMTAvBgNVBAUTKERBM0Y0RkZGNUQ0NjQ2ODlEMzg5ODhGNUZCMjJGNjU1
NTBCM0VGRjgwHhcNMjUwMTMxMDAyNDA0WhcNMjUwMjA3MDAyNDAzWjAYMRYwFAYD
VQQDEw02NzljMTgyNC02Mzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlmkHQ5nG1Y7PPo0LNHT8hVJGJnj6K5xdlzDuIuTanT1dXpdXCzoTv51T/5Oj
8l69EsPu6APyNylX7JO88CkRdjWxG/cqtY7cPak+I54oh96LtitL/ViS23dvWQZz
nTpkNxGIW0m1SjAKUpXcoHP9FocuC1MCIEDEVpv1i40pfD/gJwb2SRYoZNyp3iex
q8qRqo7Ek6LwYBcI/GfBWw5h8sd0hyZG6/8dUfUG4yurTUZfr/tBvFlLk1sBmxJ8
in+WRaomo1Lp91gh/DNSGGLOUy+lgMhFqtN6SNsL06/dUajY2GX00PnE68NoxE4s
x0y5RDptqZEruf7ZLw1C4FMIMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFILnTgsC
V2Dk+/GIpsv3ORMXA4l2MB8GA1UdIwQYMBaAFNo/T/9dRkaJ04mI9fsi9lVQs+/4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0ZGRi84MkFEMzc3QTRE
QUIxMUVDOTIxNEY1MjFDNEY5QUUwMi8yajlQXzExR1JvblRpWWoxLXlMMlZWQ3o3
X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJqOVBfMTFHUm9uVGlZajEteUwyVlZDejdfZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
M0ZGRi84MkFEMzc3QTREQUIxMUVDOTIxNEY1MjFDNEY5QUUwMi8yajlQXzExR1Jv
blRpWWoxLXlMMlZWQ3o3X2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBfHDlhsNLRBi4N8BikKFg45FtpDQRoJX0UjfYHpfzYa6Ft3yOKNVGm
QLNCcfUPBSVwXOHDmiggufZCcFOSPke96aTuoZkNjqsorIOltEioK8Zui+ppvUd9
kipfRB3tc+i+KhlNJomxYZrOi25XV+VOU5om5na8A+c5SVl9DzmQmh9wmul2Tnoo
6OKccFvaoUszS/6PU4iX6Yat1FSelEmUlxZJqexJZWYYiyrQBspKBGVDMGXzA/HS
imT426Okauenvaiaq1P9zKz1dRBzTWaPnhjbFT6EVrb3nlmj8wdDza90ynDu10SK
axbdVOMBNuzjSkqTqn9m2p8rZbmbt31Z
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:05:06 2025 by rpki-client