Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft
File: hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft (raw, json)
Hash identifier: bU84QKVBFc/sMz5AldeocPLFQHwwvJswVB73qoDNksI=
Subject key identifier: 95:F3:C2:38:75:F5:CE:F3:CD:F1:32:2E:B2:69:65:FD:F6:7A:7B:B7
Authority key identifier: 85:9D:18:4F:41:C3:48:98:B7:29:8C:99:10:75:CC:CF:51:67:9A:F1
Certificate issuer: /CN=A91A5BCD/serialNumber=859D184F41C34898B7298C991075CCCF51679AF1
Certificate serial: 09B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft
Manifest number: 09AD
Signing time: Thu 30 Jan 2025 20:06:17 +0000
Manifest this update: Thu 30 Jan 2025 20:06:17 +0000
Manifest next update: Thu 06 Feb 2025 20:06:17 +0000
Files and hashes: 1: hZ0YT0HDSJi3KYyZEHXMz1FnmvE.crl (hash: ncIamAhF75fWOD47AR1NA8iEgJ95Gx2sB97zWelAwwE=)
2: 5B5A8050DDBC11EC8378E737C4F9AE02.roa (hash: kuaeWW5XDtEss8OMi7KAX48faILNgvVIFP8CkKJ2iU4=)
3: 5A3B7CECDDBC11EC8378E737C4F9AE02.roa (hash: +hSvjMhozV6jQZDqNkt9a1+7X0UawZcr6mRFLa7AaGc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2488 (0x9b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5BCD/serialNumber=859D184F41C34898B7298C991075CCCF51679AF1
Validity
Not Before: Jan 30 20:06:17 2025 GMT
Not After : Feb 6 20:06:17 2025 GMT
Subject: CN=679bdbb9-d614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:54:5f:fc:6d:9b:40:b7:85:d3:4a:e1:07:34:
a0:29:db:c3:e9:4c:76:1d:d2:29:fd:47:33:74:f8:
8f:c7:e3:48:86:ef:01:14:66:fe:7a:5b:8b:9a:e4:
d9:2c:fc:10:5a:43:f2:8f:9e:19:c0:12:9f:ee:18:
fc:1e:88:62:ed:a5:2c:93:93:9c:e9:71:e3:6f:83:
89:c6:4f:9c:e7:7b:0b:6f:ae:69:a9:93:e2:fb:e6:
b9:e7:7c:35:eb:1e:a0:2c:24:79:c4:0a:51:4f:15:
2f:16:bb:30:d8:eb:c0:99:bd:8e:d7:50:87:9c:fc:
46:0a:5a:97:45:74:bd:24:24:49:32:89:3c:2a:7c:
f5:5d:f0:6d:70:32:7d:4c:25:83:be:75:9a:dc:e9:
4b:1a:15:53:e8:ab:9d:bd:7c:90:0c:5b:16:40:44:
16:b4:80:b1:17:96:46:51:79:94:e6:85:3d:97:cb:
ec:16:55:52:a4:85:94:ad:0b:e3:04:9a:45:14:31:
47:ec:30:de:72:50:ba:bf:95:c8:94:34:e5:de:e6:
11:4b:ae:2e:f9:23:33:b3:a6:ab:51:68:80:bc:7d:
dc:26:41:67:6e:bf:56:fd:7a:02:89:8a:b4:a7:2f:
98:de:a5:23:95:5d:3d:8a:98:3a:37:32:43:58:db:
f9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F3:C2:38:75:F5:CE:F3:CD:F1:32:2E:B2:69:65:FD:F6:7A:7B:B7
X509v3 Authority Key Identifier:
keyid:85:9D:18:4F:41:C3:48:98:B7:29:8C:99:10:75:CC:CF:51:67:9A:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:cb:39:b5:16:16:71:4e:8f:02:b3:85:d9:c3:fb:fc:48:17:
c1:00:8e:d5:16:96:a7:13:76:b6:0c:0c:82:fb:d3:cd:89:5d:
5f:85:14:c0:20:fb:5c:be:76:12:80:21:69:23:c9:04:6f:1e:
bd:6a:eb:79:00:e0:96:a8:f2:b5:60:2f:68:87:dc:4a:66:ae:
a9:4f:ca:2e:8e:b6:57:6b:87:3b:dc:48:c6:bd:cd:7f:c2:fc:
d0:0a:b3:9c:01:a3:99:58:bb:f6:99:6e:67:f6:e9:fd:7a:1b:
53:c9:c9:6c:24:07:2b:c4:fa:5f:46:64:8c:14:c9:79:f8:cd:
94:56:38:39:e0:90:d1:7c:c0:06:54:ef:b9:08:74:09:da:72:
7c:a0:c7:82:13:1d:dd:8f:4e:f4:34:5c:7c:c1:8c:56:d7:b9:
81:d6:34:8b:37:dc:2c:c1:d1:59:ed:b6:e5:1c:a2:bc:fe:42:
4c:12:b5:05:6c:ef:de:90:6b:44:35:6c:27:1b:87:6c:46:22:
02:06:7a:1b:4d:9c:93:1e:8f:33:37:9e:0d:95:b2:42:d6:ae:
35:14:7d:32:a7:c7:1c:23:26:57:e1:12:66:8c:62:c0:05:3a:
d1:74:42:b5:26:6f:0d:da:11:9f:8d:cf:5f:bd:56:cb:b2:ec:
0d:be:6f:57
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTVCQ0QxMTAvBgNVBAUTKDg1OUQxODRGNDFDMzQ4OThCNzI5OEM5OTEwNzVDQ0NG
NTE2NzlBRjEwHhcNMjUwMTMwMjAwNjE3WhcNMjUwMjA2MjAwNjE3WjAYMRYwFAYD
VQQDEw02NzliZGJiOS1kNjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyVRf/G2bQLeF00rhBzSgKdvD6Ux2HdIp/UczdPiPx+NIhu8BFGb+eluLmuTZ
LPwQWkPyj54ZwBKf7hj8Hohi7aUsk5Oc6XHjb4OJxk+c53sLb65pqZPi++a553w1
6x6gLCR5xApRTxUvFrsw2OvAmb2O11CHnPxGClqXRXS9JCRJMok8Knz1XfBtcDJ9
TCWDvnWa3OlLGhVT6KudvXyQDFsWQEQWtICxF5ZGUXmU5oU9l8vsFlVSpIWUrQvj
BJpFFDFH7DDeclC6v5XIlDTl3uYRS64u+SMzs6arUWiAvH3cJkFnbr9W/XoCiYq0
py+Y3qUjlV09ipg6NzJDWNv5MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJXzwjh1
9c7zzfEyLrJpZf32enu3MB8GA1UdIwQYMBaAFIWdGE9Bw0iYtymMmRB1zM9RZ5rx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUJDRC82MUQwQzQ4NjdB
M0ExMUVBQkY4QjU4MjZDNEY5QUUwMi9oWjBZVDBIRFNKaTNLWXlaRUhYTXoxRm5t
dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2haMFlUMEhEU0ppM0tZeVpFSFhNejFGbm12RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NUJDRC82MUQwQzQ4NjdBM0ExMUVBQkY4QjU4MjZDNEY5QUUwMi9oWjBZVDBIRFNK
aTNLWXlaRUhYTXoxRm5tdkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQApyzm1FhZxTo8Cs4XZw/v8SBfBAI7VFpanE3a2DAyC+9PNiV1fhRTA
IPtcvnYSgCFpI8kEbx69aut5AOCWqPK1YC9oh9xKZq6pT8oujrZXa4c73EjGvc1/
wvzQCrOcAaOZWLv2mW5n9un9ehtTyclsJAcrxPpfRmSMFMl5+M2UVjg54JDRfMAG
VO+5CHQJ2nJ8oMeCEx3dj070NFx8wYxW17mB1jSLN9wswdFZ7bblHKK8/kJMErUF
bO/ekGtENWwnG4dsRiICBnobTZyTHo8zN54NlbJC1q41FH0yp8ccIyZX4RJmjGLA
BTrRdEK1Jm8N2hGfjc9fvVbLsuwNvm9X
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:55:13 2025 by rpki-client