Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft
File: 72i9vAcsq0VbbaMWDt-PtsSI3RU.mft (raw, json)
Hash identifier: mZ1jgNQGlgHF5l0uJ16u7U+bwRZbqPnHpkug6wIcIUE=
Subject key identifier: C7:07:EC:4C:8B:4A:16:87:BF:6B:73:E1:4D:9D:56:D8:DF:01:FE:80
Authority key identifier: EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15
Certificate issuer: /CN=A91A4B9D/serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15
Certificate serial: 346F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft
Manifest number: 3465
Signing time: Fri 31 Jan 2025 15:05:07 +0000
Manifest this update: Fri 31 Jan 2025 15:05:07 +0000
Manifest next update: Fri 07 Feb 2025 15:05:07 +0000
Files and hashes: 1: 72i9vAcsq0VbbaMWDt-PtsSI3RU.crl (hash: 8sXjuKkzAqSzmYAEUlv03tjlUyadcVxF/pN/h+2IFFo=)
2: 43BD42D8C6FA11EEB1BFF11FC4F9AE02.roa (hash: +Z1Ldyuz4HB0yeC9kiN8GX7/0TnuMGaHDVLqOr783Qw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13423 (0x346f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4B9D/serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15
Validity
Not Before: Jan 31 15:05:07 2025 GMT
Not After : Feb 7 15:05:07 2025 GMT
Subject: CN=679ce6a3-3e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1e:3e:75:77:95:2b:f4:2d:78:e4:81:35:04:
7e:51:04:fe:00:e2:0a:e4:f9:9c:02:6c:c7:29:47:
5b:7e:f2:e1:9f:4b:9b:28:65:2a:25:10:52:89:c1:
21:e3:f3:0e:46:f8:22:e3:2e:06:b8:85:57:54:d1:
21:73:a6:74:cf:94:5c:94:f0:4b:25:74:ec:9f:72:
c6:83:ca:23:35:99:3a:77:3d:7c:4f:0c:fc:69:cc:
4e:50:54:b0:e9:d6:31:ef:f1:a2:42:6e:aa:12:e1:
ea:48:8a:c2:8a:a5:27:b3:6f:36:ec:ae:35:7f:01:
d7:3f:9d:c6:59:fd:0a:02:c6:de:bc:f5:67:56:a8:
a9:e5:a8:ad:4c:47:b2:61:93:c9:73:68:00:29:78:
c4:16:ee:26:08:d4:76:e0:72:66:d4:17:8a:43:83:
48:cd:d6:2a:d4:00:d8:5a:54:11:bf:bf:b0:c5:98:
c8:9b:04:a2:37:d2:13:6f:59:a7:76:70:ec:6b:ae:
5e:86:3b:c2:50:8e:7d:4c:91:5e:c2:ae:96:83:fb:
4a:7a:91:59:d5:ba:d8:43:af:85:f1:fa:0c:2e:8d:
72:ba:02:49:5d:d6:4e:cb:7a:a1:29:18:04:09:60:
2e:fa:76:00:da:fb:0a:3a:30:4d:c1:c5:69:23:79:
79:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:07:EC:4C:8B:4A:16:87:BF:6B:73:E1:4D:9D:56:D8:DF:01:FE:80
X509v3 Authority Key Identifier:
keyid:EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:9a:b9:34:95:f4:71:e4:41:c0:55:21:9f:43:73:0b:3b:7e:
7f:1a:86:ef:b6:94:b5:29:dd:7e:65:87:b8:08:6a:12:62:a3:
c4:08:a4:de:f3:dd:a9:a4:55:ae:7d:6d:75:0b:3b:7f:58:1b:
70:14:eb:7e:ab:27:0a:b5:7d:58:2a:cb:8d:fc:e7:53:c0:52:
31:dd:4a:e1:31:ca:26:bd:9e:af:d8:99:b6:ee:be:cf:0b:ad:
8d:1c:d4:63:81:54:ee:3b:a9:df:b8:67:a1:ca:0f:ad:d9:d3:
ff:b1:57:8a:5e:d7:de:2b:db:b9:39:88:c6:ae:94:b0:55:7c:
8c:64:60:ea:d4:11:fb:85:27:06:9e:48:a2:51:3a:76:3b:4c:
e8:84:5b:a3:2b:7d:57:d8:2e:55:a1:00:eb:80:45:79:a7:9c:
99:35:a3:82:89:15:d5:21:fb:36:60:2e:3e:46:8d:e6:b5:3e:
f4:4f:23:fe:c9:d8:a2:86:58:96:9d:c7:ec:fd:d1:b5:5c:1e:
4f:f5:71:a0:db:6b:32:80:9c:74:57:15:58:9b:d0:9a:83:db:
6d:2c:df:13:bd:6c:30:b4:54:e0:03:ed:d0:93:31:61:f6:68:
3e:66:a7:7c:5c:40:b3:4b:51:a5:75:8c:e3:08:13:b7:9b:54:
fb:33:b4:9e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRCOUQxMTAvBgNVBAUTKEVGNjhCREJDMDcyQ0FCNDU1QjZEQTMxNjBFREY4RkI2
QzQ4OEREMTUwHhcNMjUwMTMxMTUwNTA3WhcNMjUwMjA3MTUwNTA3WjAYMRYwFAYD
VQQDEw02NzljZTZhMy0zZTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4B4+dXeVK/QteOSBNQR+UQT+AOIK5PmcAmzHKUdbfvLhn0ubKGUqJRBSicEh
4/MORvgi4y4GuIVXVNEhc6Z0z5RclPBLJXTsn3LGg8ojNZk6dz18Twz8acxOUFSw
6dYx7/GiQm6qEuHqSIrCiqUns2827K41fwHXP53GWf0KAsbevPVnVqip5aitTEey
YZPJc2gAKXjEFu4mCNR24HJm1BeKQ4NIzdYq1ADYWlQRv7+wxZjImwSiN9ITb1mn
dnDsa65ehjvCUI59TJFewq6Wg/tKepFZ1brYQ6+F8foMLo1yugJJXdZOy3qhKRgE
CWAu+nYA2vsKOjBNwcVpI3l5hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMcH7EyL
ShaHv2tz4U2dVtjfAf6AMB8GA1UdIwQYMBaAFO9ovbwHLKtFW22jFg7fj7bEiN0V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEI5RC85NUFEMDM4ODFE
OUUxMUUyODgwRTg2OEUwOEIwMkNEMi83Mmk5dkFjc3EwVmJiYU1XRHQtUHRzU0kz
UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzcyaTl2QWNzcTBWYmJhTVdEdC1QdHNTSTNSVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NEI5RC85NUFEMDM4ODFEOUUxMUUyODgwRTg2OEUwOEIwMkNEMi83Mmk5dkFjc3Ew
VmJiYU1XRHQtUHRzU0kzUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCLmrk0lfRx5EHAVSGfQ3MLO35/GobvtpS1Kd1+ZYe4CGoSYqPECKTe
892ppFWufW11Czt/WBtwFOt+qycKtX1YKsuN/OdTwFIx3UrhMcomvZ6v2Jm27r7P
C62NHNRjgVTuO6nfuGehyg+t2dP/sVeKXtfeK9u5OYjGrpSwVXyMZGDq1BH7hScG
nkiiUTp2O0zohFujK31X2C5VoQDrgEV5p5yZNaOCiRXVIfs2YC4+Ro3mtT70TyP+
ydiihliWncfs/dG1XB5P9XGg22sygJx0VxVYm9Cag9ttLN8TvWwwtFTgA+3QkzFh
9mg+Zqd8XECzS1GldYzjCBO3m1T7M7Se
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:40:56 2025 by rpki-client