Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.mft
File: 7loKCg1eD1xijRpwW1rGj-8gxG8.mft (raw, json)
Hash identifier: HDV4kY0pm1pFHYLTGJSEZz64qOuUy52j8Pw/+qKDCTU=
Subject key identifier: 1E:91:7F:F6:B0:B4:23:83:3A:A0:27:5E:48:BB:20:0A:DC:2D:7C:A0
Authority key identifier: EE:5A:0A:0A:0D:5E:0F:5C:62:8D:1A:70:5B:5A:C6:8F:EF:20:C4:6F
Certificate issuer: /CN=A91AB574/serialNumber=EE5A0A0A0D5E0F5C628D1A705B5AC68FEF20C46F
Certificate serial: A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7loKCg1eD1xijRpwW1rGj-8gxG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.mft
Manifest number: A4
Signing time: Fri 31 Jan 2025 05:21:24 +0000
Manifest this update: Fri 31 Jan 2025 05:21:23 +0000
Manifest next update: Fri 07 Feb 2025 05:21:23 +0000
Files and hashes: 1: 7loKCg1eD1xijRpwW1rGj-8gxG8.crl (hash: eMwU+RQxSdcdvQDAtNr305xnF6I6vgh4DZQv/qeSqpo=)
2: 521FC3D8E74211EE9A78EC6EC4F9AE02.roa (hash: Evu2uB2GkC2WPAp+Ym3GMN1P169UzI1o+wjhgoORlbU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167 (0xa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB574/serialNumber=EE5A0A0A0D5E0F5C628D1A705B5AC68FEF20C46F
Validity
Not Before: Jan 31 05:21:23 2025 GMT
Not After : Feb 7 05:21:23 2025 GMT
Subject: CN=679c5dd4-9af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ca:a8:00:9d:a0:b0:64:ee:28:3d:f5:94:c0:
e9:26:68:ab:01:de:21:f3:4f:1c:5a:f2:f3:f6:60:
93:1c:8c:68:6e:77:59:c0:df:15:c4:43:c3:e8:7b:
dd:30:da:a6:3d:e7:e3:98:a3:e9:f4:5d:63:f3:76:
06:a4:24:e6:57:22:1d:36:b2:48:66:d1:46:32:9b:
64:0f:21:d2:05:1a:71:b9:b5:2b:da:c3:3a:04:f0:
8d:7f:2c:f1:1e:27:eb:62:45:c3:0b:54:3b:95:e2:
ad:9d:0a:06:f6:ad:13:bb:ba:d8:49:b3:61:ab:de:
ef:1c:33:66:46:c7:b8:98:a2:eb:e6:d0:e9:fd:41:
63:93:8f:30:f9:6e:d6:a0:c5:cd:5c:e4:f6:a6:0f:
34:b4:2e:6d:22:9f:61:d6:6a:89:4a:7f:4d:f7:b7:
1b:ea:05:35:6f:a2:11:82:88:62:6a:72:87:68:f7:
71:93:26:2f:b2:f1:a5:e9:98:67:76:9d:2b:12:9f:
34:8e:ec:4c:29:dd:bf:66:70:f8:c8:52:65:21:92:
e6:fd:92:5d:aa:27:84:ee:4c:99:0e:01:cf:ba:f9:
85:0d:6e:67:1a:9e:ad:e8:81:ea:21:a2:ae:50:b5:
d0:5a:80:9a:98:08:d7:9a:ff:ad:57:e1:ac:af:bc:
b9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:91:7F:F6:B0:B4:23:83:3A:A0:27:5E:48:BB:20:0A:DC:2D:7C:A0
X509v3 Authority Key Identifier:
keyid:EE:5A:0A:0A:0D:5E:0F:5C:62:8D:1A:70:5B:5A:C6:8F:EF:20:C4:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7loKCg1eD1xijRpwW1rGj-8gxG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:ac:a4:1e:fd:79:e1:01:e4:a7:e4:46:2e:89:a4:f0:25:54:
16:e5:d4:98:ae:5b:5f:0f:03:5c:73:33:49:cd:10:94:df:c2:
d4:ab:16:74:cc:ea:f9:02:70:fc:af:0f:f6:1c:eb:7c:b0:e2:
9a:63:2a:84:55:0c:18:b3:82:fe:a3:fa:0f:0b:d8:0e:3e:be:
9d:d0:31:e2:5a:da:02:6a:4e:bc:26:02:54:99:c3:e5:c0:2e:
ee:af:30:04:fc:7a:a9:32:b1:59:a5:da:f8:c3:de:72:07:fa:
d4:ae:46:c0:7b:af:6f:0e:68:4d:be:d4:fe:7e:52:bc:16:da:
ca:14:79:ac:46:0b:f3:a3:e4:79:03:92:a9:9b:a1:ee:25:40:
46:cf:0d:d1:2f:27:4e:34:90:ee:d5:b6:34:a7:79:8f:2b:c1:
15:28:40:ce:69:fa:2b:96:47:cc:11:b2:f7:66:0f:24:82:17:
be:40:e0:84:24:90:46:49:4d:c1:eb:56:00:cc:0d:2c:60:20:
4f:ff:d8:66:b0:3c:72:8a:5c:14:41:00:7e:4e:c3:f7:7c:ed:
ba:8c:f0:26:39:ef:18:c0:d3:9c:19:fc:ad:d7:a3:9e:d9:b7:
66:82:ed:eb:25:11:48:13:fe:07:22:39:00:c5:24:80:f4:86:
50:0a:f8:54
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUI1NzQxMTAvBgNVBAUTKEVFNUEwQTBBMEQ1RTBGNUM2MjhEMUE3MDVCNUFDNjhG
RUYyMEM0NkYwHhcNMjUwMTMxMDUyMTIzWhcNMjUwMjA3MDUyMTIzWjAYMRYwFAYD
VQQDEw02NzljNWRkNC05YWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0cqoAJ2gsGTuKD31lMDpJmirAd4h808cWvLz9mCTHIxobndZwN8VxEPD6Hvd
MNqmPefjmKPp9F1j83YGpCTmVyIdNrJIZtFGMptkDyHSBRpxubUr2sM6BPCNfyzx
HifrYkXDC1Q7leKtnQoG9q0Tu7rYSbNhq97vHDNmRse4mKLr5tDp/UFjk48w+W7W
oMXNXOT2pg80tC5tIp9h1mqJSn9N97cb6gU1b6IRgohianKHaPdxkyYvsvGl6Zhn
dp0rEp80juxMKd2/ZnD4yFJlIZLm/ZJdqieE7kyZDgHPuvmFDW5nGp6t6IHqIaKu
ULXQWoCamAjXmv+tV+Gsr7y5cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6Rf/aw
tCODOqAnXki7IArcLXygMB8GA1UdIwQYMBaAFO5aCgoNXg9cYo0acFtaxo/vIMRv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjU3NC9GMDdFQkEyNkU3
NDExMUVFOTNFOEZDNkRDNEY5QUUwMi83bG9LQ2cxZUQxeGlqUnB3VzFyR2otOGd4
RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdsb0tDZzFlRDF4aWpScHdXMXJHai04Z3hHOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QjU3NC9GMDdFQkEyNkU3NDExMUVFOTNFOEZDNkRDNEY5QUUwMi83bG9LQ2cxZUQx
eGlqUnB3VzFyR2otOGd4RzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB0rKQe/XnhAeSn5EYuiaTwJVQW5dSYrltfDwNcczNJzRCU38LUqxZ0
zOr5AnD8rw/2HOt8sOKaYyqEVQwYs4L+o/oPC9gOPr6d0DHiWtoCak68JgJUmcPl
wC7urzAE/HqpMrFZpdr4w95yB/rUrkbAe69vDmhNvtT+flK8FtrKFHmsRgvzo+R5
A5Kpm6HuJUBGzw3RLydONJDu1bY0p3mPK8EVKEDOaforlkfMEbL3Zg8kghe+QOCE
JJBGSU3B61YAzA0sYCBP/9hmsDxyilwUQQB+TsP3fO26jPAmOe8YwNOcGfyt16Oe
2bdmgu3rJRFIE/4HIjkAxSSA9IZQCvhU
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:16:27 2025 by rpki-client