Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft
File: yDkkRRVKIRRXRo3JJnXGsrycRIs.mft (raw, json)
Hash identifier: XbWAlso8mWaR2ldqxpdMZ54OLzFVUr5IQZhP5qvEy00=
Subject key identifier: A6:EE:EF:16:52:FF:16:2F:BB:A4:BB:B3:07:90:51:80:F7:77:76:5F
Authority key identifier: C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B
Certificate issuer: /CN=A91A7890/serialNumber=C8392445154A211457468DC92675C6B2BC9C448B
Certificate serial: 0157
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft
Manifest number: 0153
Signing time: Fri 31 Jan 2025 03:24:07 +0000
Manifest this update: Fri 31 Jan 2025 03:24:06 +0000
Manifest next update: Fri 07 Feb 2025 03:24:06 +0000
Files and hashes: 1: yDkkRRVKIRRXRo3JJnXGsrycRIs.crl (hash: kLrgwLtuLpbc2pkkgI6VVPgmrdgxFChhfgHZyjWRnsg=)
2: EC8CA72CDAE311EDA0A6B03DC4F9AE02.roa (hash: zBXFPWfaswR6Z/aWy5q3A7gzOnqOgIOIPnKiNURo3D0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343 (0x157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7890/serialNumber=C8392445154A211457468DC92675C6B2BC9C448B
Validity
Not Before: Jan 31 03:24:06 2025 GMT
Not After : Feb 7 03:24:06 2025 GMT
Subject: CN=679c4257-ad59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4b:72:6c:f4:a0:87:24:a0:73:db:d6:e5:78:
11:c6:ad:c7:76:87:95:20:5c:c7:44:ba:ac:77:56:
b2:a9:11:b0:83:9a:a3:47:78:bb:d7:10:88:57:0b:
63:4f:32:cc:c3:ca:f0:83:98:52:d3:8a:60:07:51:
e1:62:5c:60:f8:e7:d0:c9:46:d7:45:1f:73:5e:4a:
27:46:cb:9d:37:22:81:08:06:8e:2a:1a:86:4a:51:
5e:d0:f1:ad:42:e2:27:c8:2a:35:1d:03:93:ca:46:
ea:4a:2d:d7:5a:3b:9e:4c:4c:f2:71:fb:84:92:49:
c3:1d:68:94:78:ad:64:94:b9:15:5c:09:1a:ea:d5:
a1:2f:4a:82:41:71:e9:ed:41:9e:83:68:4b:7e:37:
52:43:b0:f3:81:9f:c1:a5:70:7e:83:6b:c9:1e:53:
32:6f:8f:0f:c5:c7:67:f0:92:4b:29:e0:30:8f:69:
41:bf:e9:6a:a5:5a:b7:58:9f:ab:98:cf:3e:aa:92:
bc:19:cf:e4:b1:e0:50:eb:8c:41:69:77:2e:12:db:
40:81:b1:f2:da:4a:2e:d7:72:a0:a5:15:ce:1a:b6:
98:f3:5d:7a:77:0d:7b:78:b7:9d:a2:f7:8d:65:16:
e0:cd:57:3a:cf:9c:54:19:69:4f:c8:18:c5:99:87:
c4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:EE:EF:16:52:FF:16:2F:BB:A4:BB:B3:07:90:51:80:F7:77:76:5F
X509v3 Authority Key Identifier:
keyid:C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:df:09:2c:63:31:ae:b9:75:75:50:16:3a:86:55:11:b1:2e:
81:68:22:ed:1a:38:b5:3b:c4:d5:63:2c:b3:c1:10:70:4e:f5:
6c:fe:19:e4:7b:b1:f0:32:82:2c:48:e8:a5:be:04:64:76:7d:
b6:4d:8d:e0:d2:2b:0d:12:6a:66:55:aa:31:a8:62:56:03:c3:
ac:65:08:b9:25:1f:25:7a:3a:c7:97:76:54:dc:2c:ba:4f:6b:
42:3f:2e:ec:4c:44:e2:2e:8a:f6:9d:9a:23:a4:9c:ec:87:7a:
1a:c9:4d:24:47:0d:df:ac:f1:b9:8a:75:56:71:db:26:97:fb:
c7:76:b4:12:05:f5:9c:d3:89:19:c2:16:eb:da:0f:50:cf:45:
5d:56:ae:13:e8:09:a4:6a:af:b3:3e:29:e5:5c:59:9b:ef:a5:
7b:6a:55:c2:39:94:60:f7:2d:ef:78:c2:fb:fc:2c:a7:8d:b1:
62:93:b4:47:df:b1:63:d0:2b:c9:e8:59:de:07:45:02:59:17:
17:19:85:4a:7e:e6:8c:c7:90:97:ac:dc:01:6e:7f:5b:3b:1f:
e1:ea:b3:72:fa:5c:83:03:62:ca:8b:99:b8:1d:7d:13:30:64:
28:7f:5e:c9:9b:aa:33:14:48:36:b6:f8:03:5c:e5:b9:ff:1c:
5c:70:16:82
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTc4OTAxMTAvBgNVBAUTKEM4MzkyNDQ1MTU0QTIxMTQ1NzQ2OERDOTI2NzVDNkIy
QkM5QzQ0OEIwHhcNMjUwMTMxMDMyNDA2WhcNMjUwMjA3MDMyNDA2WjAYMRYwFAYD
VQQDEw02NzljNDI1Ny1hZDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoktybPSghySgc9vW5XgRxq3HdoeVIFzHRLqsd1ayqRGwg5qjR3i71xCIVwtj
TzLMw8rwg5hS04pgB1HhYlxg+OfQyUbXRR9zXkonRsudNyKBCAaOKhqGSlFe0PGt
QuInyCo1HQOTykbqSi3XWjueTEzycfuEkknDHWiUeK1klLkVXAka6tWhL0qCQXHp
7UGeg2hLfjdSQ7DzgZ/BpXB+g2vJHlMyb48Pxcdn8JJLKeAwj2lBv+lqpVq3WJ+r
mM8+qpK8Gc/kseBQ64xBaXcuEttAgbHy2kou13KgpRXOGraY8116dw17eLedoveN
ZRbgzVc6z5xUGWlPyBjFmYfEiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKbu7xZS
/xYvu6S7sweQUYD3d3ZfMB8GA1UdIwQYMBaAFMg5JEUVSiEUV0aNySZ1xrK8nESL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzg5MC9BREUxMzE4NkRB
REYxMUVEQjFGOUQ3MTlDNEY5QUUwMi95RGtrUlJWS0lSUlhSbzNKSm5YR3NyeWNS
SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lEa2tSUlZLSVJSWFJvM0pKblhHc3J5Y1JJcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
Nzg5MC9BREUxMzE4NkRBREYxMUVEQjFGOUQ3MTlDNEY5QUUwMi95RGtrUlJWS0lS
UlhSbzNKSm5YR3NyeWNSSXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCw3wksYzGuuXV1UBY6hlURsS6BaCLtGji1O8TVYyyzwRBwTvVs/hnk
e7HwMoIsSOilvgRkdn22TY3g0isNEmpmVaoxqGJWA8OsZQi5JR8lejrHl3ZU3Cy6
T2tCPy7sTETiLor2nZojpJzsh3oayU0kRw3frPG5inVWcdsml/vHdrQSBfWc04kZ
whbr2g9Qz0VdVq4T6Amkaq+zPinlXFmb76V7alXCOZRg9y3veML7/CynjbFik7RH
37Fj0CvJ6FneB0UCWRcXGYVKfuaMx5CXrNwBbn9bOx/h6rNy+lyDA2LKi5m4HX0T
MGQof17Jm6ozFEg2tvgDXOW5/xxccBaC
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:45:12 2025 by rpki-client