Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft
File: NfWNhhxBvf6ka4xykLGqxnDnzBs.mft (raw, json)
Hash identifier: kfKPhMhlPDBfyyxCN9VHVYtieh6aB4c4d8mi5e1Yrg0=
Subject key identifier: C6:27:99:A2:83:21:26:BE:82:4B:CA:F0:EF:24:6A:62:BC:A4:39:F5
Authority key identifier: 35:F5:8D:86:1C:41:BD:FE:A4:6B:8C:72:90:B1:AA:C6:70:E7:CC:1B
Certificate issuer: /CN=A91B35BB/serialNumber=35F58D861C41BDFEA46B8C7290B1AAC670E7CC1B
Certificate serial: 0AF9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft
Manifest number: 0AEC
Signing time: Thu 30 Jan 2025 19:21:28 +0000
Manifest this update: Thu 30 Jan 2025 19:21:27 +0000
Manifest next update: Thu 06 Feb 2025 19:21:27 +0000
Files and hashes: 1: NfWNhhxBvf6ka4xykLGqxnDnzBs.crl (hash: jo1H/PWTUWBHln8qzz4F1m6QLu4jpzfRENjNReAjuoo=)
2: 902F47663C0111EAB6CB9936C4F9AE02.roa (hash: acFvO9bu1rt0q/DWuZiDKhsK7ehrIUh6eT7Acr8ax4w=)
3: 8F9F2F823C0111EAB6CB9936C4F9AE02.roa (hash: mdWU9Nw7uLjUwxluWYPCfhZ2OHszlUXX70G/VFtrvgE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2809 (0xaf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B35BB/serialNumber=35F58D861C41BDFEA46B8C7290B1AAC670E7CC1B
Validity
Not Before: Jan 30 19:21:27 2025 GMT
Not After : Feb 6 19:21:27 2025 GMT
Subject: CN=679bd137-0556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1d:e0:40:ae:70:e5:b9:7a:b5:cc:32:ec:b5:
0e:18:4c:34:fa:75:16:43:d6:95:0a:d2:1c:99:96:
6b:84:6a:37:98:1b:95:2e:5b:a1:26:d5:e1:e9:53:
cf:4a:42:df:81:41:aa:64:98:25:77:c2:da:30:20:
f9:43:87:2f:27:31:07:f2:81:43:fc:97:6c:d7:6c:
87:21:cd:48:2d:b2:5d:5c:d8:64:34:81:be:df:4d:
ab:59:70:1d:dd:04:0c:13:cf:86:47:dc:7a:6a:d8:
5e:33:f5:3a:d6:d9:c8:1b:ba:3d:bb:df:a5:ff:90:
fe:99:6f:57:93:81:08:1f:96:11:b7:51:0f:6b:65:
56:df:61:33:b9:cd:f8:94:d3:b0:c9:3a:8c:db:e4:
59:c9:87:5a:2b:dc:5b:fa:9c:bf:6d:fe:75:67:ea:
23:39:47:2a:9e:2b:58:41:37:00:de:af:2a:ed:54:
99:89:23:cc:88:a7:d1:b6:e1:b0:0e:9d:a7:64:60:
ab:97:e0:7e:37:8a:7a:c6:df:6d:2c:07:4e:01:74:
44:7b:5d:46:a7:ed:05:6c:8a:25:a4:c1:d3:93:1d:
95:f7:7f:7a:ce:ed:83:2d:d9:e5:1d:29:cb:2e:cc:
c6:0a:c5:83:93:22:e0:89:db:2a:69:3b:75:6e:30:
5e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:27:99:A2:83:21:26:BE:82:4B:CA:F0:EF:24:6A:62:BC:A4:39:F5
X509v3 Authority Key Identifier:
keyid:35:F5:8D:86:1C:41:BD:FE:A4:6B:8C:72:90:B1:AA:C6:70:E7:CC:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:d9:05:b4:57:8e:48:12:50:68:ff:dc:21:60:cf:9b:27:7e:
06:d3:ef:09:84:5d:79:e7:c7:a0:96:44:99:02:6f:ed:53:57:
94:be:f4:39:e2:9b:1c:34:34:a3:82:9c:76:5f:7e:86:65:57:
db:d9:d7:6f:d4:7f:f5:ed:15:47:0e:7f:7d:db:a2:5b:0c:71:
68:6a:04:1e:d7:ac:0d:27:6c:1d:9d:e4:71:f2:17:7c:9a:a4:
6e:7d:e7:87:a2:4f:87:78:38:ec:e4:97:15:2f:0e:58:f8:46:
a6:6b:ab:52:5f:25:ab:61:9b:2e:ca:48:af:04:24:30:f4:7a:
3d:79:a1:4c:ad:3b:b9:42:7d:8a:35:0a:83:e2:4e:e9:17:12:
8e:cb:e4:01:d7:f3:ae:20:a2:03:8d:b7:5e:3f:3e:78:c9:1a:
b1:61:e9:c0:58:0f:e8:38:3e:7e:78:83:24:f7:ad:6b:86:df:
cf:77:ec:91:8b:72:e3:f7:b0:4a:5b:fb:0e:f7:bf:f8:6d:05:
4a:9f:f1:3e:5b:bc:ad:cb:fe:3c:59:da:13:27:cf:3d:d7:35:
ce:ea:c0:a0:17:e2:a1:2d:00:e1:d3:d0:f5:17:e9:f5:7b:cc:
f5:49:ed:5e:fc:de:50:a1:e6:f5:d3:7a:a3:b6:c8:4f:ad:c2:
07:35:17:67
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjM1QkIxMTAvBgNVBAUTKDM1RjU4RDg2MUM0MUJERkVBNDZCOEM3MjkwQjFBQUM2
NzBFN0NDMUIwHhcNMjUwMTMwMTkyMTI3WhcNMjUwMjA2MTkyMTI3WjAYMRYwFAYD
VQQDEw02NzliZDEzNy0wNTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvh3gQK5w5bl6tcwy7LUOGEw0+nUWQ9aVCtIcmZZrhGo3mBuVLluhJtXh6VPP
SkLfgUGqZJgld8LaMCD5Q4cvJzEH8oFD/Jds12yHIc1ILbJdXNhkNIG+302rWXAd
3QQME8+GR9x6atheM/U61tnIG7o9u9+l/5D+mW9Xk4EIH5YRt1EPa2VW32Ezuc34
lNOwyTqM2+RZyYdaK9xb+py/bf51Z+ojOUcqnitYQTcA3q8q7VSZiSPMiKfRtuGw
Dp2nZGCrl+B+N4p6xt9tLAdOAXREe11Gp+0FbIolpMHTkx2V9396zu2DLdnlHSnL
LszGCsWDkyLgidsqaTt1bjBeWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMYnmaKD
ISa+gkvK8O8kamK8pDn1MB8GA1UdIwQYMBaAFDX1jYYcQb3+pGuMcpCxqsZw58wb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzVCQi81Nzg5QjFBNDND
MDAxMUVBQjgxNzk3MzRDNEY5QUUwMi9OZldOaGh4QnZmNmthNHh5a0xHcXhuRG56
QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05mV05oaHhCdmY2a2E0eHlrTEdxeG5EbnpCcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MzVCQi81Nzg5QjFBNDNDMDAxMUVBQjgxNzk3MzRDNEY5QUUwMi9OZldOaGh4QnZm
NmthNHh5a0xHcXhuRG56QnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBw2QW0V45IElBo/9whYM+bJ34G0+8JhF1558eglkSZAm/tU1eUvvQ5
4pscNDSjgpx2X36GZVfb2ddv1H/17RVHDn9926JbDHFoagQe16wNJ2wdneRx8hd8
mqRufeeHok+HeDjs5JcVLw5Y+Eama6tSXyWrYZsuykivBCQw9Ho9eaFMrTu5Qn2K
NQqD4k7pFxKOy+QB1/OuIKIDjbdePz54yRqxYenAWA/oOD5+eIMk961rht/Pd+yR
i3Lj97BKW/sO97/4bQVKn/E+W7yty/48WdoTJ8891zXO6sCgF+KhLQDh09D1F+n1
e8z1Se1e/N5Qoeb103qjtshPrcIHNRdn
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:36:36 2025 by rpki-client