Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft
File: b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft (raw, json)
Hash identifier: bh1DdT72W9BeMFnomvOpyK0T3L9d9MfRuVrbUGRi6o8=
Subject key identifier: 03:F1:17:27:93:DE:AA:34:69:F1:7B:CB:EB:48:1B:DC:E4:3F:7B:CD
Authority key identifier: 6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8
Certificate issuer: /CN=A91A54FE/serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8
Certificate serial: 9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft
Manifest number: 9B
Signing time: Fri 31 Jan 2025 05:27:50 +0000
Manifest this update: Fri 31 Jan 2025 05:27:49 +0000
Manifest next update: Fri 07 Feb 2025 05:27:49 +0000
Files and hashes: 1: b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl (hash: wojfuPWqDFfK1O4WvR0wOv/J2nkhxI0w7IPZE6GGIAQ=)
2: CD24A702015411EF83144341C4F9AE02.roa (hash: IQlxGBDm0ccdjlpT18ECed9Odt+DoMhDg+up6Oc4ECg=)
3: CC9ED4E2015411EF83144341C4F9AE02.roa (hash: J2KwLe8SPWIWD1mMVkmMfy+3ZRxSXbUQ7iUXVfTcvng=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A54FE/serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8
Validity
Not Before: Jan 31 05:27:49 2025 GMT
Not After : Feb 7 05:27:49 2025 GMT
Subject: CN=679c5f56-8487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:cc:24:24:20:30:ad:b2:9e:0d:f6:6d:90:3b:
ce:8d:6a:67:b6:62:58:c5:8f:3b:47:fe:d2:03:8f:
2b:e8:30:cf:10:e3:c0:9a:2d:d8:dc:e8:30:6a:dd:
b5:11:e0:7c:41:91:2b:d9:a9:1c:e2:af:f9:ac:ae:
fc:74:08:86:ee:8e:2f:b4:2b:c7:a8:60:b1:28:95:
8e:8c:19:7f:43:8d:1f:0d:c9:db:2f:f3:1d:73:a4:
fe:ee:59:3a:b8:e8:7f:f0:47:ab:15:46:16:f8:c9:
63:a2:34:5d:3f:82:4a:0f:86:f5:ab:be:92:3e:8c:
c4:39:cc:09:c0:08:3d:68:14:fa:f8:b2:b3:8a:74:
78:e3:60:c0:5f:4b:d2:71:71:a4:3a:c4:78:7a:4d:
6e:67:3f:19:f8:54:dd:30:39:71:5c:c5:ad:9f:94:
31:bb:d2:5d:0b:4f:ec:52:78:a3:42:fa:a7:78:9d:
c2:ea:34:de:6e:96:2b:e1:14:59:04:50:02:b0:ef:
b2:7d:46:ce:bb:a9:d2:87:9b:57:59:df:de:2c:78:
46:7d:ef:74:29:5f:76:94:3f:03:a2:2a:4c:4b:bf:
b1:71:71:57:c1:a5:5e:23:63:32:2f:40:59:eb:6f:
6d:f0:f8:a0:f6:db:d9:79:10:a5:a8:87:bd:1c:8e:
ce:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F1:17:27:93:DE:AA:34:69:F1:7B:CB:EB:48:1B:DC:E4:3F:7B:CD
X509v3 Authority Key Identifier:
keyid:6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d2:fe:2a:51:0a:e7:69:01:b9:38:fd:2d:23:cb:10:9e:e4:
e3:c2:34:8b:dd:a3:a2:53:fc:6e:35:3c:5b:cd:0e:31:d4:ad:
7d:8d:72:6b:12:f6:06:22:d3:59:07:39:59:c4:27:b8:fb:66:
64:f4:06:36:64:f5:1c:0e:14:25:54:6a:ac:62:50:5a:8b:59:
b3:ba:17:ee:4a:1d:12:a6:77:56:81:c0:8d:24:dd:17:a2:c6:
f6:36:c7:a6:17:b9:d3:ea:c1:41:1a:07:c0:a2:3d:2e:a6:35:
ba:1d:e4:33:78:96:3d:34:c1:cc:3c:77:f0:d1:7e:a9:91:e2:
57:97:25:51:82:85:cc:80:df:68:1f:29:50:33:de:47:7a:82:
66:1b:4a:18:84:a0:e2:97:22:0b:cb:eb:0a:83:27:cd:a2:3b:
f7:fd:d1:d2:be:93:d5:f0:09:69:cf:f4:e9:06:26:46:20:f8:
2e:20:34:f1:18:fa:d0:ac:a3:9b:89:67:10:16:a6:b3:c7:36:
4c:a0:bb:33:75:b3:e9:ee:ff:a4:76:73:95:1f:dc:d8:2d:6e:
21:f9:21:e0:dc:5b:43:40:62:12:6e:ee:03:72:88:a5:80:52:
3f:d2:ba:5c:fa:6d:a7:21:22:af:26:76:4e:c7:4b:fa:35:19:
26:b3:ed:82
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU0RkUxMTAvBgNVBAUTKDZGQzcwOTA2RkJBNkY0NTM5NDUyMDkxOTMyQzQ1RkZB
NEQ4NTcyQjgwHhcNMjUwMTMxMDUyNzQ5WhcNMjUwMjA3MDUyNzQ5WjAYMRYwFAYD
VQQDEw02NzljNWY1Ni04NDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA58wkJCAwrbKeDfZtkDvOjWpntmJYxY87R/7SA48r6DDPEOPAmi3Y3Ogwat21
EeB8QZEr2akc4q/5rK78dAiG7o4vtCvHqGCxKJWOjBl/Q40fDcnbL/Mdc6T+7lk6
uOh/8EerFUYW+MljojRdP4JKD4b1q76SPozEOcwJwAg9aBT6+LKzinR442DAX0vS
cXGkOsR4ek1uZz8Z+FTdMDlxXMWtn5Qxu9JdC0/sUnijQvqneJ3C6jTebpYr4RRZ
BFACsO+yfUbOu6nSh5tXWd/eLHhGfe90KV92lD8DoipMS7+xcXFXwaVeI2MyL0BZ
629t8Pig9tvZeRClqIe9HI7O/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAPxFyeT
3qo0afF7y+tIG9zkP3vNMB8GA1UdIwQYMBaAFG/HCQb7pvRTlFIJGTLEX/pNhXK4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTRGRS9ENjExN0RGNkY2
RTkxMUVFQURCRkZCNTJDNEY5QUUwMi9iOGNKQnZ1bTlGT1VVZ2taTXNSZi1rMkZj
cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I4Y0pCdnVtOUZPVVVna1pNc1JmLWsyRmNyZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NTRGRS9ENjExN0RGNkY2RTkxMUVFQURCRkZCNTJDNEY5QUUwMi9iOGNKQnZ1bTlG
T1VVZ2taTXNSZi1rMkZjcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAN0v4qUQrnaQG5OP0tI8sQnuTjwjSL3aOiU/xuNTxbzQ4x1K19jXJr
EvYGItNZBzlZxCe4+2Zk9AY2ZPUcDhQlVGqsYlBai1mzuhfuSh0SpndWgcCNJN0X
osb2NsemF7nT6sFBGgfAoj0upjW6HeQzeJY9NMHMPHfw0X6pkeJXlyVRgoXMgN9o
HylQM95HeoJmG0oYhKDilyILy+sKgyfNojv3/dHSvpPV8Alpz/TpBiZGIPguIDTx
GPrQrKObiWcQFqazxzZMoLszdbPp7v+kdnOVH9zYLW4h+SHg3FtDQGISbu4Dcoil
gFI/0rpc+m2nISKvJnZOx0v6NRkms+2C
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:14:05 2025 by rpki-client