Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft
File: PTiRpGy8urR0eN6kDSkI9nzOOyo.mft (raw, json)
Hash identifier: naxC2PUn2kg/E090oPf2cvmsPOm1EMVlPtDT+NGCC1M=
Subject key identifier: 7C:5C:FF:AE:53:4D:5C:E8:CF:28:46:75:44:12:29:00:1D:2F:9C:ED
Authority key identifier: 3D:38:91:A4:6C:BC:BA:B4:74:78:DE:A4:0D:29:08:F6:7C:CE:3B:2A
Certificate issuer: /CN=A91AAEC2/serialNumber=3D3891A46CBCBAB47478DEA40D2908F67CCE3B2A
Certificate serial: 0844
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft
Manifest number: 083C
Signing time: Thu 30 Jan 2025 20:49:28 +0000
Manifest this update: Thu 30 Jan 2025 20:49:27 +0000
Manifest next update: Thu 06 Feb 2025 20:49:27 +0000
Files and hashes: 1: PTiRpGy8urR0eN6kDSkI9nzOOyo.crl (hash: yKuAcg+Lkwj19AtkuA1jEfYJrKbECW1YMYxUAnf5RZA=)
2: DFEA30745C3011EEB250DE0EC4F9AE02.roa (hash: tsMkLvjKn0Jno43pXfv561BkhcMo5hMdRzf+ZccASKU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2116 (0x844)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAEC2/serialNumber=3D3891A46CBCBAB47478DEA40D2908F67CCE3B2A
Validity
Not Before: Jan 30 20:49:27 2025 GMT
Not After : Feb 6 20:49:27 2025 GMT
Subject: CN=679be5d8-f8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:95:ac:0a:fd:30:1f:72:48:14:b9:6d:e2:d4:
11:f0:20:74:c4:93:1f:85:a3:98:a6:3b:16:d1:b5:
aa:09:8c:76:f8:f8:09:60:5e:04:21:61:b6:4d:e7:
95:d9:50:80:16:db:3d:d9:20:5e:65:a2:2e:2f:bc:
ee:b0:7d:ef:90:7e:ec:2c:13:85:85:a3:e2:c2:35:
3d:1d:9a:08:ab:a5:e4:27:5a:b4:d2:e5:fc:c3:a6:
94:dc:09:19:3c:d5:fd:58:5d:95:fc:f0:cc:b5:01:
ca:8f:0a:94:94:bd:2b:7c:3f:db:8c:c7:5a:bb:77:
dc:78:1b:6c:fc:70:7c:02:cb:f5:db:4b:7a:5d:1c:
1e:78:b0:f9:fc:11:20:1b:76:f2:8f:11:d9:b7:0b:
8a:98:e1:ee:47:9f:15:01:bf:81:28:64:6f:72:1b:
41:8e:77:c8:54:8c:d3:d0:fc:96:19:27:f6:3e:57:
96:29:55:b1:d4:a5:8f:c3:eb:c0:16:da:59:fd:06:
de:a5:b3:c9:66:d9:cf:81:2d:f1:38:b4:33:c1:5b:
19:2f:49:08:22:bc:6a:b0:60:dd:65:0a:27:d7:2f:
de:02:e0:f2:15:66:d0:fa:72:74:9e:55:48:7c:a8:
a0:72:af:f5:0a:c4:fa:9b:39:19:56:bd:39:c0:02:
7a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5C:FF:AE:53:4D:5C:E8:CF:28:46:75:44:12:29:00:1D:2F:9C:ED
X509v3 Authority Key Identifier:
keyid:3D:38:91:A4:6C:BC:BA:B4:74:78:DE:A4:0D:29:08:F6:7C:CE:3B:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c3:5f:cb:f3:3f:91:f4:66:da:a4:49:ad:c7:6b:99:2b:b7:
5c:39:be:d3:36:29:43:53:26:cf:28:fc:d1:9d:60:74:48:09:
9f:6e:55:84:21:d2:3d:2f:7b:35:0c:35:a3:aa:02:c1:ca:46:
1d:05:cb:12:3b:66:a9:a5:d0:b0:2f:63:82:7e:50:1c:23:19:
6c:03:41:a6:d8:5f:25:95:90:9e:9d:3e:07:bf:d7:b3:81:aa:
73:ed:99:01:48:29:12:da:6e:b7:19:91:75:8e:dd:42:b9:e4:
8d:7d:2f:0b:cf:01:72:e6:cc:ba:ba:09:0e:39:2e:4d:ce:34:
5f:81:de:9f:54:f0:46:f5:9d:22:63:67:a0:00:c9:a7:e1:49:
b3:e4:92:2d:84:ee:8b:72:5e:9e:51:0f:84:29:cd:dc:2d:6f:
ae:3a:07:e1:cc:b3:3d:96:9d:8a:52:ab:26:8e:ba:26:17:73:
c4:73:9b:0e:b9:77:1b:2b:48:d8:83:34:04:9d:bb:38:7d:6f:
3d:a5:2f:32:ac:ac:50:83:75:80:12:81:19:3b:bc:0b:de:51:
c8:29:2d:f3:73:6d:8b:46:5c:64:b6:52:43:0e:61:9e:6c:e8:
e2:67:ae:68:23:79:01:a7:c3:f8:6c:c9:77:43:92:f2:a4:a4:
a9:41:f8:e4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFFQzIxMTAvBgNVBAUTKDNEMzg5MUE0NkNCQ0JBQjQ3NDc4REVBNDBEMjkwOEY2
N0NDRTNCMkEwHhcNMjUwMTMwMjA0OTI3WhcNMjUwMjA2MjA0OTI3WjAYMRYwFAYD
VQQDEw02NzliZTVkOC1mOGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoZWsCv0wH3JIFLlt4tQR8CB0xJMfhaOYpjsW0bWqCYx2+PgJYF4EIWG2TeeV
2VCAFts92SBeZaIuL7zusH3vkH7sLBOFhaPiwjU9HZoIq6XkJ1q00uX8w6aU3AkZ
PNX9WF2V/PDMtQHKjwqUlL0rfD/bjMdau3fceBts/HB8Asv120t6XRweeLD5/BEg
G3byjxHZtwuKmOHuR58VAb+BKGRvchtBjnfIVIzT0PyWGSf2PleWKVWx1KWPw+vA
FtpZ/QbepbPJZtnPgS3xOLQzwVsZL0kIIrxqsGDdZQon1y/eAuDyFWbQ+nJ0nlVI
fKigcq/1CsT6mzkZVr05wAJ6bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHxc/65T
TVzozyhGdUQSKQAdL5ztMB8GA1UdIwQYMBaAFD04kaRsvLq0dHjepA0pCPZ8zjsq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVDMi8yRERERDI2Q0My
QzAxMUVBOTNENTg1N0ZDNEY5QUUwMi9QVGlScEd5OHVyUjBlTjZrRFNrSTluek9P
eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BUaVJwR3k4dXJSMGVONmtEU2tJOW56T095by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QUVDMi8yRERERDI2Q0MyQzAxMUVBOTNENTg1N0ZDNEY5QUUwMi9QVGlScEd5OHVy
UjBlTjZrRFNrSTluek9PeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCew1/L8z+R9GbapEmtx2uZK7dcOb7TNilDUybPKPzRnWB0SAmfblWE
IdI9L3s1DDWjqgLBykYdBcsSO2appdCwL2OCflAcIxlsA0Gm2F8llZCenT4Hv9ez
gapz7ZkBSCkS2m63GZF1jt1CueSNfS8LzwFy5sy6ugkOOS5NzjRfgd6fVPBG9Z0i
Y2egAMmn4Umz5JIthO6Lcl6eUQ+EKc3cLW+uOgfhzLM9lp2KUqsmjromF3PEc5sO
uXcbK0jYgzQEnbs4fW89pS8yrKxQg3WAEoEZO7wL3lHIKS3zc22LRlxktlJDDmGe
bOjiZ65oI3kBp8P4bMl3Q5LypKSpQfjk
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:56:17 2025 by rpki-client