Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft
File: b814Gaj5P69A0OOH8htG6E3p1ws.mft (raw, json)
Hash identifier: yX4lF9Xud48EouDErczSEuLNAbRNdGbsrj8eVD3uQFM=
Subject key identifier: B7:D7:62:1D:5A:FC:99:CE:A8:8B:F8:39:61:29:ED:40:82:70:8E:A5
Authority key identifier: 6F:CD:78:19:A8:F9:3F:AF:40:D0:E3:87:F2:1B:46:E8:4D:E9:D7:0B
Certificate issuer: /CN=A91B02A2/serialNumber=6FCD7819A8F93FAF40D0E387F21B46E84DE9D70B
Certificate serial: ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft
Manifest number: EB
Signing time: Fri 31 Jan 2025 04:28:53 +0000
Manifest this update: Fri 31 Jan 2025 04:28:53 +0000
Manifest next update: Fri 07 Feb 2025 04:28:53 +0000
Files and hashes: 1: b814Gaj5P69A0OOH8htG6E3p1ws.crl (hash: BKmLN1OjVnx52IfWUY6YffrUF0dq8MWOnMoK2zjBNuI=)
2: 5D98833C77EC11EEA06F373BC4F9AE02.roa (hash: PTNlCaFqxgAXX8dh1a7LSvNmOXF/4erL00o7/e/JlJk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237 (0xed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B02A2/serialNumber=6FCD7819A8F93FAF40D0E387F21B46E84DE9D70B
Validity
Not Before: Jan 31 04:28:53 2025 GMT
Not After : Feb 7 04:28:53 2025 GMT
Subject: CN=679c5185-a818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:77:8b:b4:62:3d:8b:58:cc:2d:4b:1e:36:7f:
e3:d9:c2:a7:b3:65:6a:38:32:48:6f:c4:c1:4c:f9:
d0:04:ad:33:8c:9a:6b:84:a4:80:14:40:fd:67:07:
b3:92:9f:ed:1d:b2:78:d8:87:45:b0:d0:43:fe:87:
9f:35:a2:62:6d:4c:34:82:71:92:f5:88:b1:87:34:
0e:8f:73:3c:62:41:ad:1d:9e:e4:17:21:17:42:04:
c7:81:86:e1:78:67:01:18:0a:ab:86:79:ca:66:18:
84:3e:85:c4:f2:ec:c0:e0:0d:43:f7:a4:b6:a6:59:
e3:d3:e6:72:e8:e4:22:28:58:f9:50:5f:6c:5e:f0:
70:66:6e:9f:19:89:4f:90:91:f0:3d:51:90:0d:b6:
ea:b5:28:78:42:46:24:fe:47:ae:06:73:d1:c7:17:
9e:d2:0d:5b:ae:f4:c5:71:db:2a:c3:34:2e:db:69:
06:7c:3a:5f:75:4b:ee:5f:b2:36:db:dc:8c:4e:05:
5d:87:22:9b:b8:5c:81:24:4f:3a:aa:75:cb:25:a0:
fc:83:e4:45:0b:04:0a:ef:ca:03:64:21:1d:3c:db:
bf:a4:10:3d:82:fa:9f:93:2b:84:f5:d6:c1:e3:0f:
0e:1b:34:fa:b1:d9:40:9a:83:5e:33:58:85:5e:de:
a8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D7:62:1D:5A:FC:99:CE:A8:8B:F8:39:61:29:ED:40:82:70:8E:A5
X509v3 Authority Key Identifier:
keyid:6F:CD:78:19:A8:F9:3F:AF:40:D0:E3:87:F2:1B:46:E8:4D:E9:D7:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:da:fb:09:11:3e:35:a5:e9:b4:f2:d2:7e:ff:41:8c:87:65:
2a:3d:31:d8:2f:65:77:af:1d:09:7c:0f:18:f2:6e:2e:9f:9b:
98:32:9a:5a:82:3f:e1:8a:d3:e7:86:d1:eb:f8:9a:da:96:27:
db:9a:e2:a6:47:69:4f:96:d5:89:8d:23:6e:9b:c4:5d:78:1f:
45:7d:c7:99:f0:dc:7f:47:2e:a6:38:c3:78:e9:30:16:54:41:
23:46:1a:26:45:13:2e:dd:af:3b:d9:9f:2b:fd:0c:65:e2:03:
1d:d5:5e:da:13:75:89:dc:de:61:79:0d:3c:35:21:bb:38:8d:
78:dc:ad:ff:a0:87:61:27:cc:e8:44:6a:56:fc:0b:6d:35:c1:
c0:cf:89:33:8b:e3:91:91:ed:d7:bb:b5:09:89:30:e2:c7:2a:
14:af:d5:ad:60:98:c1:26:c7:7b:f2:04:c6:c4:06:68:7f:88:
6d:de:78:bb:a4:2e:d4:a5:fb:f8:4e:ae:3c:46:5f:ea:01:66:
8e:36:3d:f7:34:84:94:ed:36:e9:a5:66:f6:52:bb:23:c7:8b:
03:2f:20:c8:4d:4d:58:bb:13:d4:e3:64:7b:1f:81:5f:4c:75:
2e:fd:e0:8e:56:5a:81:5e:42:6d:34:ef:3a:d8:f5:ac:a9:22:
0c:a9:2c:64
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjAyQTIxMTAvBgNVBAUTKDZGQ0Q3ODE5QThGOTNGQUY0MEQwRTM4N0YyMUI0NkU4
NERFOUQ3MEIwHhcNMjUwMTMxMDQyODUzWhcNMjUwMjA3MDQyODUzWjAYMRYwFAYD
VQQDEw02NzljNTE4NS1hODE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm3eLtGI9i1jMLUseNn/j2cKns2VqODJIb8TBTPnQBK0zjJprhKSAFED9Zwez
kp/tHbJ42IdFsNBD/oefNaJibUw0gnGS9YixhzQOj3M8YkGtHZ7kFyEXQgTHgYbh
eGcBGAqrhnnKZhiEPoXE8uzA4A1D96S2plnj0+Zy6OQiKFj5UF9sXvBwZm6fGYlP
kJHwPVGQDbbqtSh4QkYk/keuBnPRxxee0g1brvTFcdsqwzQu22kGfDpfdUvuX7I2
29yMTgVdhyKbuFyBJE86qnXLJaD8g+RFCwQK78oDZCEdPNu/pBA9gvqfkyuE9dbB
4w8OGzT6sdlAmoNeM1iFXt6olQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLfXYh1a
/JnOqIv4OWEp7UCCcI6lMB8GA1UdIwQYMBaAFG/NeBmo+T+vQNDjh/IbRuhN6dcL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDJBMi9FRkQyMTU4NDc3
RUIxMUVFOTNCNjhCM0FDNEY5QUUwMi9iODE0R2FqNVA2OUEwT09IOGh0RzZFM3Ax
d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I4MTRHYWo1UDY5QTBPT0g4aHRHNkUzcDF3cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MDJBMi9FRkQyMTU4NDc3RUIxMUVFOTNCNjhCM0FDNEY5QUUwMi9iODE0R2FqNVA2
OUEwT09IOGh0RzZFM3Axd3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA42vsJET41pem08tJ+/0GMh2UqPTHYL2V3rx0JfA8Y8m4un5uYMppa
gj/hitPnhtHr+JralifbmuKmR2lPltWJjSNum8RdeB9FfceZ8Nx/Ry6mOMN46TAW
VEEjRhomRRMu3a872Z8r/Qxl4gMd1V7aE3WJ3N5heQ08NSG7OI143K3/oIdhJ8zo
RGpW/AttNcHAz4kzi+ORke3Xu7UJiTDixyoUr9WtYJjBJsd78gTGxAZof4ht3ni7
pC7Upfv4Tq48Rl/qAWaONj33NISU7TbppWb2Ursjx4sDLyDITU1YuxPU42R7H4Ff
THUu/eCOVlqBXkJtNO862PWsqSIMqSxk
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:47:12 2025 by rpki-client