Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft
File: 5esYDNbcUWxm01KwR7npxaUCcOM.mft (raw, json)
Hash identifier: 3T9YDX4IX5FBBmwFJQEes7rg11eKdFYxI7SkmsRa3jA=
Subject key identifier: E8:84:03:B1:93:D8:71:11:10:D4:B2:09:1F:8B:F6:D2:82:BB:E4:8C
Authority key identifier: E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3
Certificate issuer: /CN=A91ABFD9/serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3
Certificate serial: 0883
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft
Manifest number: 0867
Signing time: Thu 30 Jan 2025 20:42:06 +0000
Manifest this update: Thu 30 Jan 2025 20:42:06 +0000
Manifest next update: Thu 06 Feb 2025 20:42:06 +0000
Files and hashes: 1: 5esYDNbcUWxm01KwR7npxaUCcOM.crl (hash: 4zmD9R/wTvkNOo5CCWO3RhgNH/o6hOGEQRq24s9H748=)
2: E2E21364C4F811EAB8D31113C4F9AE02.roa (hash: KT6K45U/vV1zQkhhfiaxr9a9XeTKLIwG0eEDcyR3ERI=)
3: F1A54AC47A5611EB876D281FC4F9AE02.roa (hash: LbbFjEbhHg5fzKZNW2jokQ6UuaIS/rDPKgFU2q0pJeg=)
4: 36945EC2232711EBA0F14F17C4F9AE02.roa (hash: Gzcr6RaAc7WjlspRH4slQcyVh4i/nmyVkR/RXd4O0KM=)
5: 6AE50E1C21E011EBBF36CD21C4F9AE02.roa (hash: Lg2iSZUiBgCc3+l3q9JExUq+jxWe1fvszct9oy4Ys3k=)
6: E22ECDEAC4F811EAB8D31113C4F9AE02.roa (hash: tlDd7aRrzNeu6uslbfPluCcOk663EDpRsH8KL9nqlD4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2179 (0x883)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ABFD9/serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3
Validity
Not Before: Jan 30 20:42:06 2025 GMT
Not After : Feb 6 20:42:06 2025 GMT
Subject: CN=679be41e-a0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:57:8f:81:f6:cb:1c:1b:f9:3b:c9:b4:32:07:
40:a9:a4:c9:47:7d:00:81:79:cd:8b:1f:eb:73:aa:
a4:37:fc:bf:2f:81:fb:8c:4e:0a:9b:63:72:e4:cd:
1e:d2:2f:2c:82:fa:23:a9:92:94:06:1f:3d:95:15:
47:e6:c5:ed:22:36:a1:fa:17:91:34:cb:c3:65:36:
01:34:14:36:cb:10:35:94:22:10:2f:c1:e3:5a:11:
31:d1:20:94:9c:09:8e:e7:e6:28:23:ae:46:7e:42:
3b:99:68:6e:d6:93:a7:e3:7a:42:dc:a0:d5:d4:fe:
5b:81:49:c5:9b:5a:49:7e:27:0c:64:cd:60:06:3b:
4d:2b:7e:18:9b:6f:1c:0d:c8:51:d1:c8:68:f7:a1:
ac:fb:42:0d:66:1f:85:1e:26:9d:31:f5:7d:cb:4c:
9b:34:6e:45:a0:ce:67:42:4d:55:83:2c:21:06:02:
85:85:d5:9c:00:74:27:a7:4d:4a:61:38:2d:50:37:
5b:8c:ec:36:54:fa:d7:f7:c4:ba:42:33:e8:60:b6:
62:d7:2c:a5:92:01:86:c0:37:82:7a:a7:e3:8e:fa:
cc:a8:50:fd:7b:eb:a4:cf:2b:4a:2d:9e:24:0d:2a:
de:82:39:9b:23:98:dc:cb:55:21:88:8f:f8:ad:a9:
ae:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:84:03:B1:93:D8:71:11:10:D4:B2:09:1F:8B:F6:D2:82:BB:E4:8C
X509v3 Authority Key Identifier:
keyid:E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:05:26:32:11:0f:1a:df:be:6c:51:e4:0e:70:80:ef:4f:77:
58:44:98:cb:bf:51:33:8e:9c:48:6c:65:03:05:3e:88:16:02:
bc:35:7a:bc:28:34:29:b0:ae:d7:4d:8d:29:6f:23:88:78:b0:
11:49:a5:e1:53:b9:a6:ea:a0:e1:a7:9d:78:70:88:10:55:f7:
0e:3f:00:13:42:a2:7e:8c:29:d2:cc:91:e9:53:c8:c3:33:4b:
b5:e6:ac:8e:be:80:c6:a7:8a:e7:a1:db:9a:e9:6b:18:6e:11:
27:ef:9e:9a:f8:f0:e8:b1:06:c6:d5:13:c7:b6:75:f1:48:54:
3a:2b:b3:30:fd:91:2b:8a:57:72:c4:91:72:74:1e:0d:f1:e6:
af:68:4f:38:a9:61:ff:3a:17:93:7b:65:a1:7f:55:8e:cd:b1:
97:95:fe:69:f3:1e:1a:51:f0:86:4d:48:6c:04:e9:86:74:18:
cb:39:00:40:5a:8b:da:d0:c2:21:07:5a:1f:17:18:10:3b:27:
a9:7f:fd:e5:8a:a8:da:bf:4a:ee:e1:37:56:48:b0:10:db:9c:
26:57:ff:a1:79:f9:4c:08:bc:e9:95:6a:37:2a:7e:da:f3:dd:
e6:f8:68:2c:4e:6a:25:19:16:77:98:0b:7a:9a:5d:a4:7b:bb:
d4:31:9e:81
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUJGRDkxMTAvBgNVBAUTKEU1RUIxODBDRDZEQzUxNkM2NkQzNTJCMDQ3QjlFOUM1
QTUwMjcwRTMwHhcNMjUwMTMwMjA0MjA2WhcNMjUwMjA2MjA0MjA2WjAYMRYwFAYD
VQQDEw02NzliZTQxZS1hMGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA41ePgfbLHBv5O8m0MgdAqaTJR30AgXnNix/rc6qkN/y/L4H7jE4Km2Ny5M0e
0i8sgvojqZKUBh89lRVH5sXtIjah+heRNMvDZTYBNBQ2yxA1lCIQL8HjWhEx0SCU
nAmO5+YoI65GfkI7mWhu1pOn43pC3KDV1P5bgUnFm1pJficMZM1gBjtNK34Ym28c
DchR0cho96Gs+0INZh+FHiadMfV9y0ybNG5FoM5nQk1VgywhBgKFhdWcAHQnp01K
YTgtUDdbjOw2VPrX98S6QjPoYLZi1yylkgGGwDeCeqfjjvrMqFD9e+ukzytKLZ4k
DSregjmbI5jcy1UhiI/4ramu/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOiEA7GT
2HERENSyCR+L9tKCu+SMMB8GA1UdIwQYMBaAFOXrGAzW3FFsZtNSsEe56cWlAnDj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkZEOS80QUU4MDQxRUI5
RDcxMUVBOUNGNTFFNUZDNEY5QUUwMi81ZXNZRE5iY1VXeG0wMUt3UjducHhhVUNj
T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVlc1lETmJjVVd4bTAxS3dSN25weGFVQ2NPTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QkZEOS80QUU4MDQxRUI5RDcxMUVBOUNGNTFFNUZDNEY5QUUwMi81ZXNZRE5iY1VX
eG0wMUt3UjducHhhVUNjT00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBxBSYyEQ8a375sUeQOcIDvT3dYRJjLv1EzjpxIbGUDBT6IFgK8NXq8
KDQpsK7XTY0pbyOIeLARSaXhU7mm6qDhp514cIgQVfcOPwATQqJ+jCnSzJHpU8jD
M0u15qyOvoDGp4rnodua6WsYbhEn756a+PDosQbG1RPHtnXxSFQ6K7Mw/ZErildy
xJFydB4N8eavaE84qWH/OheTe2Whf1WOzbGXlf5p8x4aUfCGTUhsBOmGdBjLOQBA
Wova0MIhB1ofFxgQOyepf/3liqjav0ru4TdWSLAQ25wmV/+heflMCLzplWo3Kn7a
893m+GgsTmolGRZ3mAt6ml2ke7vUMZ6B
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:37:50 2025 by rpki-client