Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft
File: eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft (raw, json)
Hash identifier: GwMmuKxARHsR/yhov3DAdBguLe2MFjQFmEsXH8H/vHI=
Subject key identifier: EE:D5:2A:0F:FC:72:D1:88:EA:E3:4C:75:52:58:90:24:53:05:C1:CC
Authority key identifier: 78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29
Certificate issuer: /CN=A91A495C/serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429
Certificate serial: 0D03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft
Manifest number: 0CDF
Signing time: Fri 31 Jan 2025 18:06:11 +0000
Manifest this update: Fri 31 Jan 2025 18:06:10 +0000
Manifest next update: Fri 07 Feb 2025 18:06:10 +0000
Files and hashes: 1: eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl (hash: itggc36/uTb0HWdelUn1z/YTjMB+WAS306RcmnpBkzE=)
2: 9F12E3A025A511EE87132E45C4F9AE02.roa (hash: o1E2TDzfrYXVJOP/YJY3szBmvDulSoV6uw7KuOgewO4=)
3: 055A1A7A05FC11EFB61A7767C4F9AE02.roa (hash: +In7lqAfHKKuHVBt4b296chjrd7RaFgigBnxlxSxJ4Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3331 (0xd03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A495C/serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429
Validity
Not Before: Jan 31 18:06:10 2025 GMT
Not After : Feb 7 18:06:10 2025 GMT
Subject: CN=679d1113-b810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ca:44:b0:08:a5:96:98:ab:68:50:fe:a4:0f:
72:56:1e:ac:68:b0:8c:0c:a2:1b:fa:5e:36:64:8e:
85:16:b7:33:d2:43:23:86:14:e5:b2:bd:b9:cc:49:
16:4d:16:1b:93:d7:79:24:f9:b6:4d:8e:9a:7c:b7:
be:5b:7c:49:d2:c3:aa:9b:0b:0a:c2:70:b0:47:b8:
9f:a8:2c:c2:fd:20:25:3d:eb:46:9d:c7:ea:78:92:
a5:d9:b4:a4:f3:83:98:5f:54:67:1e:63:67:e7:3e:
01:db:fb:14:bb:a9:cc:b1:50:8f:86:96:51:aa:a0:
3f:27:df:f8:56:d1:2e:3a:55:34:82:dd:be:d8:c5:
74:30:2e:71:6c:e0:61:4d:c3:41:49:61:04:0e:0d:
ab:6e:da:f1:df:9b:e9:9a:1a:8c:d3:47:7e:94:0e:
44:ce:63:93:b3:bf:4a:b7:c1:b3:85:7a:2e:a7:08:
fa:9d:ff:e4:a0:00:69:09:c3:a1:2f:86:db:c5:16:
5e:68:0b:df:f7:be:41:07:8a:8e:fd:f4:1a:f9:5c:
c5:9f:cc:2c:2e:a1:7c:a4:08:1e:c6:88:8e:f7:bf:
36:13:38:51:7b:39:e5:a0:0a:c5:59:1e:80:0a:12:
09:d4:90:15:cb:8b:e2:7d:94:c4:55:b7:64:d9:30:
c7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D5:2A:0F:FC:72:D1:88:EA:E3:4C:75:52:58:90:24:53:05:C1:CC
X509v3 Authority Key Identifier:
keyid:78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:70:51:0b:24:b0:6b:e3:1e:34:8a:2b:3d:c0:76:8d:58:64:
82:8a:9a:0d:e8:27:d9:03:bd:08:58:36:8d:7d:a0:bd:e0:25:
b2:6a:83:b7:ee:c7:4d:12:ec:04:56:21:61:28:d4:c5:67:da:
fe:01:06:11:a0:24:bd:d9:ea:b7:11:1c:45:a9:b4:05:18:15:
38:0f:7b:4c:6e:0b:79:50:cb:ff:a5:f2:5c:75:9f:cc:f8:84:
45:89:3f:21:ea:2e:10:12:42:1d:1c:32:b4:47:37:81:9c:b2:
6b:75:06:8e:f1:7f:a0:da:0e:5e:0e:f9:0f:e1:c5:80:a3:7a:
bb:b3:d0:32:cc:36:23:aa:3c:da:bd:de:88:7e:df:9d:4c:f1:
b8:eb:9f:68:2f:e4:1a:b2:74:da:00:af:52:25:ba:1f:42:5d:
08:1f:79:a5:93:0d:20:9f:66:3c:01:00:54:db:e1:41:2e:14:
4a:ea:5f:07:0c:85:37:0d:a0:22:2f:6b:19:1a:1f:c1:44:a5:
29:36:50:2a:e5:28:ab:fc:1c:d3:bb:8b:65:33:f6:05:44:99:
40:eb:f0:98:26:7e:48:e7:ea:1d:2a:f5:57:51:2b:bd:9f:82:
79:07:66:f1:5f:cf:87:88:f8:2f:4a:5e:67:8f:ed:1c:b2:e9:
e0:75:23:f8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQ5NUMxMTAvBgNVBAUTKDc4QkVEQkVEQzA0NTlCOTAwQzI4Mjg5MkYxM0IxNzgy
QTk1NjA0MjkwHhcNMjUwMTMxMTgwNjEwWhcNMjUwMjA3MTgwNjEwWjAYMRYwFAYD
VQQDEw02NzlkMTExMy1iODEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqcpEsAillpiraFD+pA9yVh6saLCMDKIb+l42ZI6FFrcz0kMjhhTlsr25zEkW
TRYbk9d5JPm2TY6afLe+W3xJ0sOqmwsKwnCwR7ifqCzC/SAlPetGncfqeJKl2bSk
84OYX1RnHmNn5z4B2/sUu6nMsVCPhpZRqqA/J9/4VtEuOlU0gt2+2MV0MC5xbOBh
TcNBSWEEDg2rbtrx35vpmhqM00d+lA5EzmOTs79Kt8GzhXoupwj6nf/koABpCcOh
L4bbxRZeaAvf975BB4qO/fQa+VzFn8wsLqF8pAgexoiO9782EzhReznloArFWR6A
ChIJ1JAVy4vifZTEVbdk2TDHTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO7VKg/8
ctGI6uNMdVJYkCRTBcHMMB8GA1UdIwQYMBaAFHi+2+3ARZuQDCgokvE7F4KpVgQp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDk1Qy81NTkxODAwNEUy
QUQxMUU5QjRBMjc1NDZDNEY5QUUwMi9lTDdiN2NCRm01QU1LQ2lTOFRzWGdxbFdC
Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VMN2I3Y0JGbTVBTUtDaVM4VHNYZ3FsV0JDay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NDk1Qy81NTkxODAwNEUyQUQxMUU5QjRBMjc1NDZDNEY5QUUwMi9lTDdiN2NCRm01
QU1LQ2lTOFRzWGdxbFdCQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBEcFELJLBr4x40iis9wHaNWGSCipoN6CfZA70IWDaNfaC94CWyaoO3
7sdNEuwEViFhKNTFZ9r+AQYRoCS92eq3ERxFqbQFGBU4D3tMbgt5UMv/pfJcdZ/M
+IRFiT8h6i4QEkIdHDK0RzeBnLJrdQaO8X+g2g5eDvkP4cWAo3q7s9AyzDYjqjza
vd6Ift+dTPG4659oL+QasnTaAK9SJbofQl0IH3mlkw0gn2Y8AQBU2+FBLhRK6l8H
DIU3DaAiL2sZGh/BRKUpNlAq5Sir/BzTu4tlM/YFRJlA6/CYJn5I5+odKvVXUSu9
n4J5B2bxX8+HiPgvSl5nj+0csungdSP4
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:50:38 2025 by rpki-client