Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft
File: 4C3EOvit-NHbLnTkpsKO-WFVvxU.mft (raw, json)
Hash identifier: d8+ZR3XfCMVj7p8ddLpSebUeFhGG701oxEPNa+5km7Y=
Subject key identifier: 7E:E3:A0:0D:CB:92:2C:2E:3F:D7:B6:0E:87:75:1F:FE:66:69:27:AC
Authority key identifier: E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15
Certificate issuer: /CN=A91AD8CB/serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15
Certificate serial: 345C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft
Manifest number: 3456
Signing time: Fri 31 Jan 2025 14:36:15 +0000
Manifest this update: Fri 31 Jan 2025 14:36:15 +0000
Manifest next update: Fri 07 Feb 2025 14:36:15 +0000
Files and hashes: 1: 4C3EOvit-NHbLnTkpsKO-WFVvxU.crl (hash: 1emgPqKd46OAuqM2AtRNFxPY81SKmsLx8cwOLoB+GiE=)
2: 7E50DB58DE1E11EF96BAF829C4F9AE02.roa (hash: /ycT0LeM2B6SfJOIcutt73CO4dhLu842cRCTArO5hco=)
3: 673DC29606B011EFA665703AC4F9AE02.roa (hash: F5Zy7dXCYPL9clQFpPmuH37XP7Qhuqmf+NBAd1W/CM8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13404 (0x345c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD8CB/serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15
Validity
Not Before: Jan 31 14:36:15 2025 GMT
Not After : Feb 7 14:36:15 2025 GMT
Subject: CN=679cdfdf-abb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:16:91:8c:bb:b6:0b:ce:25:4f:04:94:c7:7b:
b2:62:a7:54:e2:e9:5f:67:4b:85:5f:b9:2d:6e:f2:
e0:6f:86:a2:d8:5c:68:99:07:b8:7a:d1:d7:4b:98:
9e:d6:61:bf:32:c3:c4:07:26:bf:6b:81:4f:3b:07:
42:cc:de:84:b6:c4:21:43:f2:3f:61:92:12:28:01:
2b:8d:e7:e7:06:76:e9:60:66:46:42:16:df:17:bf:
69:b2:6c:3f:cd:81:f4:5d:8d:88:8e:57:0e:36:76:
49:bb:b3:43:15:98:ca:8b:da:c1:47:3f:73:a6:30:
a1:c4:83:d9:b8:1b:70:88:c9:fb:c4:59:8d:02:e0:
38:1f:8c:a6:18:45:db:ac:5b:8d:a5:9e:42:28:33:
4d:eb:fd:41:80:a3:22:60:7a:6f:78:0b:7a:69:62:
34:c3:5a:c2:c7:56:d4:e8:4d:e5:47:2e:ed:1a:1d:
0a:eb:a0:7e:20:dd:49:3e:e2:5e:06:cb:d1:65:52:
00:27:9e:72:0d:50:28:07:09:32:09:5b:b2:81:55:
f3:1d:d2:90:c8:e5:85:24:72:84:5f:aa:a5:05:f3:
2f:f9:19:2a:34:9e:c7:1b:cf:71:7d:e5:6f:ef:52:
93:09:79:f3:17:51:d0:51:66:41:fe:16:34:1c:c6:
ca:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E3:A0:0D:CB:92:2C:2E:3F:D7:B6:0E:87:75:1F:FE:66:69:27:AC
X509v3 Authority Key Identifier:
keyid:E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:a3:e6:a1:57:14:b3:1e:b8:ff:52:2f:3d:0b:08:16:4e:ef:
c6:f5:cf:f9:5d:81:23:b0:57:fa:80:32:40:f3:ed:79:ce:69:
63:be:7a:bd:a5:28:5d:66:49:be:4d:95:d7:1b:28:c4:13:db:
2a:7c:bb:46:70:59:df:87:e5:1e:ac:6e:4e:ea:b7:14:44:b9:
05:79:45:e7:99:66:c1:95:08:ab:6a:73:99:b6:85:fc:0b:7e:
84:0d:21:f6:b3:a2:ea:9b:a3:56:bf:cf:a7:96:9e:23:6d:7b:
61:16:d2:3f:e7:a9:14:84:ab:7f:fc:fb:26:0e:d1:25:76:2f:
71:e2:b2:37:cd:b7:38:45:93:a4:00:29:c5:84:d1:ad:c1:7f:
35:a4:ca:5d:4b:4a:f7:4d:2a:39:09:0a:cb:8b:4b:e2:d5:a4:
85:40:6f:2e:52:a8:a1:82:99:76:58:e5:09:61:44:d9:9c:d1:
45:85:ad:68:0a:6b:bc:e4:6e:d9:47:22:d8:90:ea:12:05:7f:
75:7c:fb:e3:df:14:77:6d:fe:12:a4:25:f1:e3:ae:e2:40:bb:
e7:dc:12:25:55:92:e6:a9:48:d4:c5:07:60:db:50:a7:2f:97:
c9:a3:50:f9:39:a9:a0:b6:6f:c5:e2:c7:45:ef:59:cc:9d:ec:
cf:a4:e8:f1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUQ4Q0IxMTAvBgNVBAUTKEUwMkRDNDNBRjhBREY4RDFEQjJFNzRFNEE2QzI4RUY5
NjE1NUJGMTUwHhcNMjUwMTMxMTQzNjE1WhcNMjUwMjA3MTQzNjE1WjAYMRYwFAYD
VQQDEw02NzljZGZkZi1hYmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwRaRjLu2C84lTwSUx3uyYqdU4ulfZ0uFX7ktbvLgb4ai2FxomQe4etHXS5ie
1mG/MsPEBya/a4FPOwdCzN6EtsQhQ/I/YZISKAErjefnBnbpYGZGQhbfF79psmw/
zYH0XY2IjlcONnZJu7NDFZjKi9rBRz9zpjChxIPZuBtwiMn7xFmNAuA4H4ymGEXb
rFuNpZ5CKDNN6/1BgKMiYHpveAt6aWI0w1rCx1bU6E3lRy7tGh0K66B+IN1JPuJe
BsvRZVIAJ55yDVAoBwkyCVuygVXzHdKQyOWFJHKEX6qlBfMv+RkqNJ7HG89xfeVv
71KTCXnzF1HQUWZB/hY0HMbKfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7joA3L
kiwuP9e2Dod1H/5maSesMB8GA1UdIwQYMBaAFOAtxDr4rfjR2y505KbCjvlhVb8V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDhDQi8zMjhFRDE1NDFE
OEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1OSGJMblRrcHNLTy1XRlZ2
eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRDM0VPdml0LU5IYkxuVGtwc0tPLVdGVnZ4VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RDhDQi8zMjhFRDE1NDFEOEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1O
SGJMblRrcHNLTy1XRlZ2eFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDDo+ahVxSzHrj/Ui89CwgWTu/G9c/5XYEjsFf6gDJA8+15zmljvnq9
pShdZkm+TZXXGyjEE9sqfLtGcFnfh+UerG5O6rcURLkFeUXnmWbBlQiranOZtoX8
C36EDSH2s6Lqm6NWv8+nlp4jbXthFtI/56kUhKt//PsmDtEldi9x4rI3zbc4RZOk
ACnFhNGtwX81pMpdS0r3TSo5CQrLi0vi1aSFQG8uUqihgpl2WOUJYUTZnNFFha1o
Cmu85G7ZRyLYkOoSBX91fPvj3xR3bf4SpCXx467iQLvn3BIlVZLmqUjUxQdg21Cn
L5fJo1D5Oamgtm/F4sdF71nMnezPpOjx
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:17:57 2025 by rpki-client