Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
File: 7f0U22_TsCp5NdqtR_wCnzpwTEA.mft (raw, json)
Hash identifier: 1FK2i8dvq0C9sVAtNkDNIVzPlTSP6YkSriQsFMNtjBI=
Subject key identifier: C9:9C:FD:7F:2A:C1:70:C2:64:29:44:FA:74:BF:AB:31:89:17:88:1C
Authority key identifier: ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
Certificate issuer: /CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Certificate serial: 0198
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
Manifest number: 0193
Signing time: Fri 31 Jan 2025 02:46:56 +0000
Manifest this update: Fri 31 Jan 2025 02:46:55 +0000
Manifest next update: Fri 07 Feb 2025 02:46:55 +0000
Files and hashes: 1: 7f0U22_TsCp5NdqtR_wCnzpwTEA.crl (hash: m1ngBEfRvesMr7uJKerknPYVhJnGgffIrUGTdDq9IEo=)
2: 780A3032CB3211EE953DEF37C4F9AE02.roa (hash: 8fiulkMzmoz7dwE1F+YA2x7XYbzmFEAme4dQMleRYl8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 408 (0x198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Validity
Not Before: Jan 31 02:46:55 2025 GMT
Not After : Feb 7 02:46:55 2025 GMT
Subject: CN=679c39a0-7adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:10:a4:db:21:32:3e:72:e0:ec:6f:14:02:b5:
2c:98:80:44:cf:c8:3a:47:0a:c0:fc:af:b0:ee:16:
53:b9:e3:58:df:ad:2d:aa:d8:10:ae:57:17:86:e0:
49:45:00:3a:45:0c:4b:fe:ec:f0:ee:05:2b:6d:63:
78:27:7e:4e:79:8d:a8:c2:8b:92:ad:6d:c0:da:3e:
61:42:2d:c9:47:76:14:d3:ac:fc:7a:35:86:d5:6a:
00:0c:f1:78:31:59:af:ab:0c:a6:f3:c5:94:eb:d9:
18:4c:e3:78:dd:88:59:0d:d3:07:17:a4:db:52:56:
ab:5f:b8:e5:87:d7:df:bb:4f:35:b1:89:b9:4b:ea:
63:58:99:ab:3d:e7:03:6b:67:d7:39:94:6f:ba:42:
aa:d5:50:9d:ba:20:09:32:43:6f:96:8a:5c:db:aa:
f5:04:c1:28:ca:67:57:27:46:1a:96:60:9a:29:21:
4e:23:94:cd:6b:22:b0:a9:10:7c:53:2f:c8:b0:58:
42:3e:dc:8a:dd:4e:60:32:f2:fd:79:47:c2:17:6b:
13:16:0f:ca:db:71:1b:c0:d3:fe:20:a3:c6:09:b4:
d6:ed:30:ce:7d:78:04:bf:3c:1f:21:4c:b9:7a:35:
31:18:40:8e:dc:fa:b2:42:4f:ad:75:aa:e4:30:11:
2f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9C:FD:7F:2A:C1:70:C2:64:29:44:FA:74:BF:AB:31:89:17:88:1C
X509v3 Authority Key Identifier:
keyid:ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:2d:9d:7b:df:9e:a6:35:1e:fd:f6:46:83:09:f0:85:58:c6:
01:1f:de:2e:f5:33:f7:27:bd:ad:fa:af:62:5e:4b:ec:fe:5a:
53:ed:30:15:9b:50:f9:00:61:ab:e4:10:88:c8:bb:4a:9e:67:
70:87:7d:b8:14:56:37:8b:60:ad:c0:0a:51:c7:63:df:05:c5:
32:90:00:88:7b:21:14:36:16:e5:9c:91:ab:c2:79:81:a2:27:
04:e9:66:b7:1f:64:a6:4e:5b:af:67:e3:38:57:72:e0:9e:b2:
2d:d3:f9:99:15:f8:63:10:bd:24:25:a7:24:2e:27:cf:83:ae:
d5:eb:3d:a5:13:6a:a2:5d:69:ea:54:35:0f:ba:9a:e6:fa:09:
bb:94:4f:af:10:aa:ff:a4:2e:7f:d8:bc:d5:82:23:be:ac:88:
76:be:62:b4:29:25:21:bd:0c:2d:c1:d8:31:50:db:84:b0:5c:
b7:78:d2:f6:63:b8:a2:58:b1:ea:11:79:d1:88:03:0a:8d:08:
60:9a:88:5f:87:65:91:2b:b8:69:be:78:33:af:cc:06:9c:cb:
18:44:1c:26:01:81:12:3a:ac:1b:8b:c3:ad:30:39:cd:d8:ae:
5d:d0:90:1a:00:1c:1b:b1:6d:d8:ae:b0:fc:28:37:20:a6:56:
78:65:5a:2f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTkzQjYxMTAvBgNVBAUTKEVERkQxNERCNkZEM0IwMkE3OTM1REFBRDQ3RkMwMjlG
M0E3MDRDNDAwHhcNMjUwMTMxMDI0NjU1WhcNMjUwMjA3MDI0NjU1WjAYMRYwFAYD
VQQDEw02NzljMzlhMC03YWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzhCk2yEyPnLg7G8UArUsmIBEz8g6RwrA/K+w7hZTueNY360tqtgQrlcXhuBJ
RQA6RQxL/uzw7gUrbWN4J35OeY2owouSrW3A2j5hQi3JR3YU06z8ejWG1WoADPF4
MVmvqwym88WU69kYTON43YhZDdMHF6TbUlarX7jlh9ffu081sYm5S+pjWJmrPecD
a2fXOZRvukKq1VCduiAJMkNvlopc26r1BMEoymdXJ0YalmCaKSFOI5TNayKwqRB8
Uy/IsFhCPtyK3U5gMvL9eUfCF2sTFg/K23EbwNP+IKPGCbTW7TDOfXgEvzwfIUy5
ejUxGECO3PqyQk+tdarkMBEvFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmc/X8q
wXDCZClE+nS/qzGJF4gcMB8GA1UdIwQYMBaAFO39FNtv07AqeTXarUf8Ap86cExA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTNCNi83MEJDRkNFMDdD
NTcxMUVEQTgxMDc4NjZDNEY5QUUwMi83ZjBVMjJfVHNDcDVOZHF0Ul93Q256cHdU
RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdmMFUyMl9Uc0NwNU5kcXRSX3dDbnpwd1RFQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTNCNi83MEJDRkNFMDdDNTcxMUVEQTgxMDc4NjZDNEY5QUUwMi83ZjBVMjJfVHND
cDVOZHF0Ul93Q256cHdURUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBgLZ17356mNR799kaDCfCFWMYBH94u9TP3J72t+q9iXkvs/lpT7TAV
m1D5AGGr5BCIyLtKnmdwh324FFY3i2CtwApRx2PfBcUykACIeyEUNhblnJGrwnmB
oicE6Wa3H2SmTluvZ+M4V3LgnrIt0/mZFfhjEL0kJackLifPg67V6z2lE2qiXWnq
VDUPuprm+gm7lE+vEKr/pC5/2LzVgiO+rIh2vmK0KSUhvQwtwdgxUNuEsFy3eNL2
Y7iiWLHqEXnRiAMKjQhgmohfh2WRK7hpvngzr8wGnMsYRBwmAYESOqwbi8OtMDnN
2K5d0JAaABwbsW3YrrD8KDcgplZ4ZVov
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:41:41 2025 by rpki-client