Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft
File: FjMWdiEa7mdzSFtlIzxiw6RYev0.mft (raw, json)
Hash identifier: nTSi+t9NtFyNPfu/ZsOlR3QGSh9q+rJemjK4oumLp1U=
Subject key identifier: 40:83:7B:9D:7D:B8:19:FE:6B:73:1F:F3:01:EB:F4:A4:9B:69:00:2C
Authority key identifier: 16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD
Certificate issuer: /CN=A91A86D0/serialNumber=16331676211AEE6773485B65233C62C3A4587AFD
Certificate serial: 0BF6
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft
Manifest number: 0BE9
Signing time: Fri 31 Jan 2025 17:36:31 +0000
Manifest this update: Fri 31 Jan 2025 17:36:31 +0000
Manifest next update: Fri 07 Feb 2025 17:36:31 +0000
Files and hashes: 1: FjMWdiEa7mdzSFtlIzxiw6RYev0.crl (hash: s5Y/5ScjMcaeDkpBUuE2GSDdjQfzJfN9nwKMyI4ifbY=)
2: CDD0C38ECCE111EB90AF2C7AC4F9AE02.roa (hash: e16SVTPpwjEg2RE9Hpi4GSSEsMxTTKPyjdQEKVYgs6Q=)
3: CF1B3152CCE111EB90AF2C7AC4F9AE02.roa (hash: ZahlDvvl4xqyMO4InfL5NLuVKGcItekitU1WQ9tGmBk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3062 (0xbf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A86D0/serialNumber=16331676211AEE6773485B65233C62C3A4587AFD
Validity
Not Before: Jan 31 17:36:31 2025 GMT
Not After : Feb 7 17:36:31 2025 GMT
Subject: CN=679d0a1f-87cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9a:d3:f1:3d:be:11:b0:92:d7:3c:47:d9:bc:
0c:25:a0:c2:7b:eb:01:24:67:e1:f5:0d:16:92:59:
cb:b1:68:ab:79:76:cf:fe:41:fa:35:70:bb:55:50:
4a:14:42:09:29:38:27:d3:bf:11:c3:12:42:6c:4a:
44:2b:51:03:25:be:c6:6d:6b:ee:d9:e1:49:6a:98:
70:22:8d:32:ab:a5:aa:eb:92:56:d9:5b:f0:55:bd:
a7:d6:ba:0b:38:55:cd:79:e0:4d:20:5f:07:28:a0:
64:2e:da:db:0b:a1:cb:c2:2b:e3:cf:8b:bd:35:a3:
9f:22:cb:ce:85:13:40:9a:43:ac:e2:d1:e9:10:45:
ac:11:b2:1e:0b:86:b5:73:db:68:eb:f3:27:3d:01:
ab:c9:78:c7:c1:fe:e4:1f:99:e3:dd:44:e2:c1:f0:
04:ba:29:4d:9c:2b:02:13:f5:f9:12:23:9b:e7:ee:
5e:82:18:ea:64:19:c8:65:01:aa:64:c7:01:4e:ab:
06:76:69:b1:53:72:af:51:cc:0b:00:a1:46:58:5a:
a0:83:39:57:43:ea:1c:72:36:53:ce:8c:6d:78:d0:
a2:a8:4a:d7:14:35:a8:cf:de:36:4f:e0:40:c2:0c:
7f:bb:78:3c:b9:26:6e:b7:da:09:ac:e4:cf:5a:63:
09:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:83:7B:9D:7D:B8:19:FE:6B:73:1F:F3:01:EB:F4:A4:9B:69:00:2C
X509v3 Authority Key Identifier:
keyid:16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:cb:97:65:a6:b0:e0:27:1b:c4:62:bc:c8:e0:7d:17:f7:08:
14:28:3f:dc:51:a7:95:3b:26:e5:26:22:5a:bd:ab:a3:12:0b:
75:38:1f:dc:3e:7e:27:4b:ec:44:99:37:97:6e:88:44:8a:00:
ce:44:f1:2e:89:b5:e2:c9:3c:e8:f6:f2:5c:ea:d2:3b:99:4e:
00:5f:17:1a:5a:96:48:c3:1f:87:3c:78:ff:4f:c1:7f:d0:36:
25:54:f3:4e:7b:e7:f2:2d:6c:fe:62:c3:1d:44:98:fe:01:17:
01:ee:09:ab:5e:97:7f:52:f8:09:fc:59:d0:31:c2:c5:7d:37:
df:d7:e5:2f:42:c6:32:71:fb:d9:9e:68:00:a4:94:03:f3:b8:
fa:8b:0c:95:70:e3:cb:81:ba:68:46:ce:12:6c:e1:ee:a5:28:
c2:ce:87:93:58:e4:31:48:21:92:3d:a3:84:64:fd:1e:25:f5:
75:a2:17:af:16:f9:81:3d:43:83:4a:d1:60:a0:af:2c:e7:5f:
e8:ab:9c:7b:0c:6c:bd:e8:fa:e2:c8:02:c7:f2:62:42:bb:06:
13:be:ea:63:4a:94:f4:6c:7a:d9:20:31:c2:13:f7:bc:ed:78:
a4:45:1d:7e:04:44:50:4e:8e:0b:e0:08:f4:ea:c8:5b:db:20:
f4:2c:58:aa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTg2RDAxMTAvBgNVBAUTKDE2MzMxNjc2MjExQUVFNjc3MzQ4NUI2NTIzM0M2MkMz
QTQ1ODdBRkQwHhcNMjUwMTMxMTczNjMxWhcNMjUwMjA3MTczNjMxWjAYMRYwFAYD
VQQDEw02NzlkMGExZi04N2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqZrT8T2+EbCS1zxH2bwMJaDCe+sBJGfh9Q0WklnLsWireXbP/kH6NXC7VVBK
FEIJKTgn078RwxJCbEpEK1EDJb7GbWvu2eFJaphwIo0yq6Wq65JW2VvwVb2n1roL
OFXNeeBNIF8HKKBkLtrbC6HLwivjz4u9NaOfIsvOhRNAmkOs4tHpEEWsEbIeC4a1
c9to6/MnPQGryXjHwf7kH5nj3UTiwfAEuilNnCsCE/X5EiOb5+5eghjqZBnIZQGq
ZMcBTqsGdmmxU3KvUcwLAKFGWFqggzlXQ+occjZTzoxteNCiqErXFDWoz942T+BA
wgx/u3g8uSZut9oJrOTPWmMJAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFECDe519
uBn+a3Mf8wHr9KSbaQAsMB8GA1UdIwQYMBaAFBYzFnYhGu5nc0hbZSM8YsOkWHr9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODZEMC84RDhGMEFCRTBC
NUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdtZHpTRnRsSXp4aXc2Ulll
djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0ZqTVdkaUVhN21kelNGdGxJenhpdzZSWWV2MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
ODZEMC84RDhGMEFCRTBCNUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdt
ZHpTRnRsSXp4aXc2UllldjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBMy5dlprDgJxvEYrzI4H0X9wgUKD/cUaeVOyblJiJavaujEgt1OB/c
Pn4nS+xEmTeXbohEigDORPEuibXiyTzo9vJc6tI7mU4AXxcaWpZIwx+HPHj/T8F/
0DYlVPNOe+fyLWz+YsMdRJj+ARcB7gmrXpd/UvgJ/FnQMcLFfTff1+UvQsYycfvZ
nmgApJQD87j6iwyVcOPLgbpoRs4SbOHupSjCzoeTWOQxSCGSPaOEZP0eJfV1ohev
FvmBPUODStFgoK8s51/oq5x7DGy96PriyALH8mJCuwYTvupjSpT0bHrZIDHCE/e8
7XikRR1+BERQTo4L4Aj06shb2yD0LFiq
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:59:34 2025 by rpki-client