Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft
File: OddGjPgMUFXp0EybT60xF1wU1l8.mft (raw, json)
Hash identifier: Zbz3YK9F5phbdUCg5XmSFONLhM2c/Gc0uX8lZiCM6UE=
Subject key identifier: 2D:CA:3F:E9:3E:76:7A:C3:36:18:1D:89:B2:18:0F:5D:DF:E3:45:72
Authority key identifier: 39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F
Certificate issuer: /CN=A91AD643/serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F
Certificate serial: 0699
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft
Manifest number: 068D
Signing time: Thu 30 Jan 2025 22:18:36 +0000
Manifest this update: Thu 30 Jan 2025 22:18:35 +0000
Manifest next update: Thu 06 Feb 2025 22:18:35 +0000
Files and hashes: 1: OddGjPgMUFXp0EybT60xF1wU1l8.crl (hash: pKKACvwjP6xjtFUIyaIcMUR5WVyReKqzpjY7QjVoBXQ=)
2: 865F2F80EE8911EBB390AC76C4F9AE02.roa (hash: 0ULrTT5sEmnlV5jXg9GCbo9G2IRIBRTqvgY01zsRTW8=)
3: 81E9653E5B8A11EB857A3F77C4F9AE02.roa (hash: hFkz2Rxz8bjHa9W5ewxpkxAw84TOeg9mnyL9BGUNw+E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1689 (0x699)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD643/serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F
Validity
Not Before: Jan 30 22:18:35 2025 GMT
Not After : Feb 6 22:18:35 2025 GMT
Subject: CN=679bfabb-77ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:98:ea:3d:94:7b:ff:bf:2a:ac:f4:75:dd:36:
5a:13:4d:b0:92:44:1c:c4:7c:6d:b8:c4:70:97:a5:
ac:70:fa:fd:5b:01:67:16:c0:ce:d2:08:eb:a9:f0:
4d:32:2e:45:b8:50:ac:b9:62:87:b2:84:fe:93:f0:
7d:07:c2:48:a0:e5:12:32:d8:ef:bf:96:c6:b0:59:
4d:a3:3f:92:20:17:91:bd:0a:cc:13:40:7a:c0:c5:
8b:27:c4:38:1c:df:57:ca:d3:62:e6:8d:d8:a3:56:
5d:48:8e:4e:b3:2d:52:96:6c:f6:02:3e:95:ae:96:
48:f7:bc:a3:8f:f3:25:c7:f8:08:55:ca:99:db:f7:
f7:ce:c9:d4:70:ca:f9:74:e9:0b:04:5d:78:74:83:
43:e3:3d:a6:40:bc:cc:50:57:bd:43:9c:fd:35:d1:
5e:17:2a:d8:50:ad:23:2b:f3:f6:54:4f:71:d8:88:
37:09:37:6d:b4:3c:5b:fb:cf:e3:b0:6c:c3:4d:dd:
bc:24:ec:52:90:49:b2:39:e0:f5:23:55:cd:84:9b:
4f:b1:d9:47:6d:64:d3:8d:3a:fe:41:0d:4e:5b:16:
82:be:49:95:a7:e5:bf:99:3b:00:9f:24:f9:9c:44:
1c:fb:9d:40:06:19:92:11:07:3e:60:90:13:c2:fb:
c2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CA:3F:E9:3E:76:7A:C3:36:18:1D:89:B2:18:0F:5D:DF:E3:45:72
X509v3 Authority Key Identifier:
keyid:39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:c0:bf:ea:06:37:2b:bb:2f:9c:99:0d:70:92:60:54:44:04:
12:42:1e:d0:41:03:82:46:0c:7f:69:18:7c:4d:5e:b9:04:e2:
12:ac:f7:ed:85:f6:ac:b2:7d:5e:3f:d9:fa:75:b6:9b:12:f4:
64:65:a1:fe:7c:c1:28:84:9c:4b:e4:9a:aa:39:c9:49:1b:15:
a2:cb:41:d2:8d:a3:60:7f:4b:03:e8:32:7d:4d:6c:04:2c:17:
88:f1:1f:5c:09:20:17:f8:35:1f:8f:c8:f7:32:5e:61:48:b1:
af:ca:40:7f:53:b9:70:9f:0c:53:31:e7:e0:09:4e:be:04:9e:
59:5f:ba:d7:db:54:a7:b2:d2:54:b0:3d:89:21:d2:bd:cd:e1:
e6:63:a7:c5:83:84:df:2f:7a:4d:ae:6d:76:5c:79:7a:65:de:
7e:c5:45:90:2b:b0:a7:a0:41:a4:9a:4f:88:e6:b0:a0:cf:36:
25:5c:f3:22:14:83:0b:0d:f5:dc:3a:62:dc:ea:93:8d:7e:1b:
77:22:2b:12:27:d7:28:03:03:b0:d3:13:ba:d5:67:f1:63:a3:
e5:02:a6:44:28:6c:0e:4b:45:11:39:0a:06:c0:c0:f3:a8:3e:
bf:bb:30:1a:c9:1a:1d:ce:38:69:c7:04:5b:4e:51:cb:31:a5:
3b:d4:69:a6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUQ2NDMxMTAvBgNVBAUTKDM5RDc0NjhDRjgwQzUwNTVFOUQwNEM5QjRGQUQzMTE3
NUMxNEQ2NUYwHhcNMjUwMTMwMjIxODM1WhcNMjUwMjA2MjIxODM1WjAYMRYwFAYD
VQQDEw02NzliZmFiYi03N2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAypjqPZR7/78qrPR13TZaE02wkkQcxHxtuMRwl6WscPr9WwFnFsDO0gjrqfBN
Mi5FuFCsuWKHsoT+k/B9B8JIoOUSMtjvv5bGsFlNoz+SIBeRvQrME0B6wMWLJ8Q4
HN9XytNi5o3Yo1ZdSI5Osy1Slmz2Aj6VrpZI97yjj/Mlx/gIVcqZ2/f3zsnUcMr5
dOkLBF14dIND4z2mQLzMUFe9Q5z9NdFeFyrYUK0jK/P2VE9x2Ig3CTdttDxb+8/j
sGzDTd28JOxSkEmyOeD1I1XNhJtPsdlHbWTTjTr+QQ1OWxaCvkmVp+W/mTsAnyT5
nEQc+51ABhmSEQc+YJATwvvC9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3KP+k+
dnrDNhgdibIYD13f40VyMB8GA1UdIwQYMBaAFDnXRoz4DFBV6dBMm0+tMRdcFNZf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDY0My9FRkJFNkVCMjVC
ODgxMUVCQkQ1RjMwNzZDNEY5QUUwMi9PZGRHalBnTVVGWHAwRXliVDYweEYxd1Ux
bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09kZEdqUGdNVUZYcDBFeWJUNjB4RjF3VTFsOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RDY0My9FRkJFNkVCMjVCODgxMUVCQkQ1RjMwNzZDNEY5QUUwMi9PZGRHalBnTVVG
WHAwRXliVDYweEYxd1UxbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBpwL/qBjcruy+cmQ1wkmBURAQSQh7QQQOCRgx/aRh8TV65BOISrPft
hfassn1eP9n6dbabEvRkZaH+fMEohJxL5JqqOclJGxWiy0HSjaNgf0sD6DJ9TWwE
LBeI8R9cCSAX+DUfj8j3Ml5hSLGvykB/U7lwnwxTMefgCU6+BJ5ZX7rX21SnstJU
sD2JIdK9zeHmY6fFg4TfL3pNrm12XHl6Zd5+xUWQK7CnoEGkmk+I5rCgzzYlXPMi
FIMLDfXcOmLc6pONfht3IisSJ9coAwOw0xO61WfxY6PlAqZEKGwOS0UROQoGwMDz
qD6/uzAayRodzjhpxwRbTlHLMaU71Gmm
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:28:50 2025 by rpki-client