Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft
File: K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft (raw, json)
Hash identifier: R8lhR32/GucyrNF0/xD5+xeaO1LEZTsToH+SH1Cje94=
Subject key identifier: E1:81:26:AF:CE:BE:2D:7F:B1:B8:BA:03:EF:59:E6:3B:6F:84:66:CE
Authority key identifier: 2B:CA:12:D4:6D:46:11:ED:6E:F1:88:6F:36:44:68:DF:3D:02:ED:E5
Certificate issuer: /CN=A91AE25A/serialNumber=2BCA12D46D4611ED6EF1886F364468DF3D02EDE5
Certificate serial: 0112
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft
Manifest number: 0110
Signing time: Fri 31 Jan 2025 04:01:40 +0000
Manifest this update: Fri 31 Jan 2025 04:01:39 +0000
Manifest next update: Fri 07 Feb 2025 04:01:39 +0000
Files and hashes: 1: K8oS1G1GEe1u8YhvNkRo3z0C7eU.crl (hash: nJljwVRTh/22UhEFcRLarbIe9jA+4yvld0aO3urYcbk=)
2: AB366D1C409611EE92C55F40C4F9AE02.roa (hash: SQk3Brop+Id762Ic4sBigwZBA29XCDN62FCzcjcGNd0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274 (0x112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE25A/serialNumber=2BCA12D46D4611ED6EF1886F364468DF3D02EDE5
Validity
Not Before: Jan 31 04:01:39 2025 GMT
Not After : Feb 7 04:01:39 2025 GMT
Subject: CN=679c4b23-bc3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0c:e1:6a:7a:49:fb:d9:ec:3a:53:4a:0b:7e:
02:bc:c5:6c:34:8d:7a:36:0d:7a:ff:6a:4a:d0:63:
2d:4d:a5:d5:1c:77:73:cb:cc:11:31:28:b8:2e:9d:
b0:4a:00:d8:2f:97:54:bf:37:c7:d2:4e:58:57:0b:
09:3e:e1:dc:02:81:28:13:54:63:00:d3:25:b6:25:
24:e0:0c:34:b2:8a:31:57:d8:f7:d4:6f:a5:c3:71:
cc:dd:7a:b0:bf:5e:07:db:12:76:02:33:c4:e0:e0:
c3:fd:e8:e5:fa:63:47:fa:81:10:fd:72:b0:6c:8e:
9d:5a:4f:a6:75:8e:37:78:98:e6:2f:a6:15:e2:65:
c4:86:9c:73:cc:b2:de:25:34:7f:99:39:0b:da:97:
58:b2:c4:26:73:4e:14:61:2c:74:26:75:4e:63:d0:
1d:e9:53:c2:01:d0:e0:42:86:76:77:4b:37:74:18:
55:9d:1d:5e:41:43:5a:ef:b5:35:8a:f6:b1:0e:09:
91:7d:38:5a:27:fa:d0:5e:d0:7a:dd:3b:3b:e6:4a:
73:2d:77:6a:e7:08:a8:ca:85:c1:1e:c7:85:9c:9f:
0a:08:fb:b0:63:3a:65:82:24:ab:af:4a:99:2b:92:
ed:79:f5:61:00:5e:63:f2:ec:2d:f3:49:3c:5b:ba:
8b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:81:26:AF:CE:BE:2D:7F:B1:B8:BA:03:EF:59:E6:3B:6F:84:66:CE
X509v3 Authority Key Identifier:
keyid:2B:CA:12:D4:6D:46:11:ED:6E:F1:88:6F:36:44:68:DF:3D:02:ED:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:cb:1d:d5:8b:32:a9:5d:50:3c:61:29:38:d6:6f:67:7d:a6:
da:5c:c1:d1:1b:6d:b2:5c:af:35:ec:66:b0:f5:bd:08:5d:78:
cf:bf:62:e6:5c:04:3e:f0:da:54:96:81:b2:36:34:40:00:e3:
08:49:49:6f:cb:ac:0a:f2:0e:11:ee:80:09:b3:a0:c0:c9:4a:
08:b7:2f:7c:67:a3:a2:12:d2:51:eb:a6:45:db:e3:ac:59:97:
8b:d8:40:f8:b2:cb:69:40:26:9f:f4:73:89:db:a2:a7:d0:16:
e6:f9:ba:71:a1:57:9f:a5:d6:89:fe:8c:66:07:e0:64:e5:9d:
cf:18:f7:a6:0d:04:d1:e9:ff:49:9e:71:49:5b:ee:88:9a:23:
dd:5b:87:b6:93:43:e3:e4:88:81:4e:1c:3a:e4:11:c0:1e:7b:
14:0a:c6:50:72:f3:92:5e:fb:ab:88:29:17:43:50:f2:f3:95:
9a:2f:5d:4c:43:6e:dd:4a:45:7c:c6:5f:ea:13:70:d5:a9:e0:
e0:f5:ea:46:d0:31:0a:cc:c7:1f:12:a3:84:a3:16:f8:e0:e8:
41:e4:1e:4d:5d:54:52:d1:da:8e:cd:4e:ae:e0:36:83:c3:f8:
ba:61:f2:98:19:17:fc:a9:a0:5c:64:15:50:a1:fc:11:35:7c:
cc:f2:43:65
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUUyNUExMTAvBgNVBAUTKDJCQ0ExMkQ0NkQ0NjExRUQ2RUYxODg2RjM2NDQ2OERG
M0QwMkVERTUwHhcNMjUwMTMxMDQwMTM5WhcNMjUwMjA3MDQwMTM5WjAYMRYwFAYD
VQQDEw02NzljNGIyMy1iYzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnAzhanpJ+9nsOlNKC34CvMVsNI16Ng16/2pK0GMtTaXVHHdzy8wRMSi4Lp2w
SgDYL5dUvzfH0k5YVwsJPuHcAoEoE1RjANMltiUk4Aw0sooxV9j31G+lw3HM3Xqw
v14H2xJ2AjPE4ODD/ejl+mNH+oEQ/XKwbI6dWk+mdY43eJjmL6YV4mXEhpxzzLLe
JTR/mTkL2pdYssQmc04UYSx0JnVOY9Ad6VPCAdDgQoZ2d0s3dBhVnR1eQUNa77U1
ivaxDgmRfThaJ/rQXtB63Ts75kpzLXdq5wioyoXBHseFnJ8KCPuwYzplgiSrr0qZ
K5LtefVhAF5j8uwt80k8W7qLzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGBJq/O
vi1/sbi6A+9Z5jtvhGbOMB8GA1UdIwQYMBaAFCvKEtRtRhHtbvGIbzZEaN89Au3l
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTI1QS8yQzk2RjUwODQw
OTYxMUVFQjQ2RTZGM0ZDNEY5QUUwMi9LOG9TMUcxR0VlMXU4WWh2TmtSbzN6MEM3
ZVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0s4b1MxRzFHRWUxdThZaHZOa1JvM3owQzdlVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RTI1QS8yQzk2RjUwODQwOTYxMUVFQjQ2RTZGM0ZDNEY5QUUwMi9LOG9TMUcxR0Vl
MXU4WWh2TmtSbzN6MEM3ZVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAByx3VizKpXVA8YSk41m9nfabaXMHRG22yXK817Gaw9b0IXXjPv2Lm
XAQ+8NpUloGyNjRAAOMISUlvy6wK8g4R7oAJs6DAyUoIty98Z6OiEtJR66ZF2+Os
WZeL2ED4sstpQCaf9HOJ26Kn0Bbm+bpxoVefpdaJ/oxmB+Bk5Z3PGPemDQTR6f9J
nnFJW+6ImiPdW4e2k0Pj5IiBThw65BHAHnsUCsZQcvOSXvuriCkXQ1Dy85WaL11M
Q27dSkV8xl/qE3DVqeDg9epG0DEKzMcfEqOEoxb44OhB5B5NXVRS0dqOzU6u4DaD
w/i6YfKYGRf8qaBcZBVQofwRNXzM8kNl
-----END CERTIFICATE-----
Generated at Sun Apr 27 15:47:47 2025 by rpki-client