Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.mft
File: 3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.mft (raw, json)
Hash identifier: Gu+rS+Bq0PAsGmvVJy4P9pIZI6D+YT2y8KpInmwuKiE=
Subject key identifier: D3:A3:FC:EF:26:A7:40:4B:0C:CE:06:31:C1:C0:06:B3:17:B7:6A:16
Authority key identifier: DC:B8:39:31:9F:D5:2E:AD:9F:CB:97:78:29:84:FD:1F:D4:49:2C:17
Certificate issuer: /CN=A91B569E/serialNumber=DCB839319FD52EAD9FCB97782984FD1FD4492C17
Certificate serial: 01BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.mft
Manifest number: 01B8
Signing time: Fri 31 Jan 2025 02:25:19 +0000
Manifest this update: Fri 31 Jan 2025 02:25:18 +0000
Manifest next update: Fri 07 Feb 2025 02:25:18 +0000
Files and hashes: 1: 3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.crl (hash: LZrLPHZiw791SsNeipSYYl33AWvmYT6VTTSOM9oF4fw=)
2: B0AAB49CCE9811EFAE326A6BC4F9AE02.roa (hash: bfGJawfmm7pJYTF3kPX18GVBhX/MgQVOARkAoHZnPTQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447 (0x1bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B569E/serialNumber=DCB839319FD52EAD9FCB97782984FD1FD4492C17
Validity
Not Before: Jan 31 02:25:18 2025 GMT
Not After : Feb 7 02:25:18 2025 GMT
Subject: CN=679c348e-ff3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:46:4d:aa:18:02:53:4a:40:0a:91:65:01:e3:
3e:36:ff:66:10:d4:2b:ba:f9:56:6b:b8:e1:89:18:
a6:9b:05:a8:4a:05:cb:a1:d8:03:40:fa:da:2b:4f:
03:18:de:19:8f:e8:41:45:33:7b:c6:89:af:76:79:
22:e1:36:c9:0d:d6:88:ca:07:05:9c:89:12:2f:53:
8b:c3:3c:24:43:8b:e8:b3:4c:10:02:17:ed:26:7b:
2d:e3:69:b3:69:7f:f6:98:a3:09:e8:e6:5c:63:e9:
67:88:d0:d9:20:36:35:44:dc:b3:9c:50:db:ca:ef:
2b:2d:37:f4:1c:13:0c:fa:6e:6f:cb:5b:fd:dd:f7:
d8:67:50:f4:bb:26:c9:0a:c4:6a:2d:93:ee:4a:50:
95:52:d1:d0:2d:4f:a6:ba:57:78:6f:fa:a7:1d:93:
a5:37:3d:bd:b9:89:3b:ec:f2:bc:9c:9b:c7:ab:a7:
81:c1:d0:2c:5e:05:1d:35:c3:18:6a:1d:05:c8:d9:
9a:7a:c2:44:c0:81:7c:78:ed:36:83:5f:1b:7b:cb:
02:b9:20:8a:09:18:df:d8:94:d3:0c:c9:18:7d:82:
ba:16:72:36:7a:3f:75:b8:d4:75:6d:3b:17:2b:da:
e9:6b:58:8e:90:c6:ea:98:2d:d1:92:f6:ee:75:42:
62:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A3:FC:EF:26:A7:40:4B:0C:CE:06:31:C1:C0:06:B3:17:B7:6A:16
X509v3 Authority Key Identifier:
keyid:DC:B8:39:31:9F:D5:2E:AD:9F:CB:97:78:29:84:FD:1F:D4:49:2C:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:0c:1c:9b:7a:1d:ca:f9:4e:15:f1:4e:cf:90:bc:8c:1c:3b:
22:39:6e:e0:39:eb:20:d6:65:60:1f:27:09:44:7c:df:74:4f:
f2:6b:d0:1f:74:08:3f:1e:00:4d:ca:78:a1:89:18:8c:65:68:
b8:ed:93:c2:e6:4e:b2:ba:2d:f1:8e:0c:ba:78:a0:74:5a:4e:
71:ac:ff:cd:99:38:6d:f0:b7:c8:67:e3:e3:89:12:31:78:82:
b3:81:6d:c2:82:90:76:10:82:a7:fb:26:71:3c:38:65:d9:09:
5e:a0:9d:30:83:c3:5b:b5:ef:27:72:4c:b5:7a:eb:ef:1d:1e:
45:db:d7:18:5b:96:05:50:5d:03:0e:20:5b:7e:9b:8d:40:36:
c6:31:31:a4:65:27:b2:07:13:71:58:5b:5b:aa:c9:f7:a0:51:
72:a5:3a:e9:b8:2c:7c:88:d9:d4:68:5f:50:e1:b0:fa:98:c3:
f1:3d:ba:90:7a:8e:b1:3d:df:4e:2e:fc:04:f9:69:97:4d:4b:
49:63:36:82:6f:fa:4a:59:62:13:4c:05:30:d8:60:ce:07:dd:
6d:da:ab:2a:bd:66:bf:29:08:54:b8:63:ea:85:b7:4d:fa:75:
23:ee:09:6f:02:ed:a2:13:00:05:9d:b2:21:49:a6:c2:85:fc:
0c:f5:da:57
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjU2OUUxMTAvBgNVBAUTKERDQjgzOTMxOUZENTJFQUQ5RkNCOTc3ODI5ODRGRDFG
RDQ0OTJDMTcwHhcNMjUwMTMxMDIyNTE4WhcNMjUwMjA3MDIyNTE4WjAYMRYwFAYD
VQQDEw02NzljMzQ4ZS1mZjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArUZNqhgCU0pACpFlAeM+Nv9mENQruvlWa7jhiRimmwWoSgXLodgDQPraK08D
GN4Zj+hBRTN7xomvdnki4TbJDdaIygcFnIkSL1OLwzwkQ4vos0wQAhftJnst42mz
aX/2mKMJ6OZcY+lniNDZIDY1RNyznFDbyu8rLTf0HBMM+m5vy1v93ffYZ1D0uybJ
CsRqLZPuSlCVUtHQLU+muld4b/qnHZOlNz29uYk77PK8nJvHq6eBwdAsXgUdNcMY
ah0FyNmaesJEwIF8eO02g18be8sCuSCKCRjf2JTTDMkYfYK6FnI2ej91uNR1bTsX
K9rpa1iOkMbqmC3RkvbudUJi5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNOj/O8m
p0BLDM4GMcHABrMXt2oWMB8GA1UdIwQYMBaAFNy4OTGf1S6tn8uXeCmE/R/USSwX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTY5RS8yNTI1QzdDODRE
MjUxMUVEQTZEREQyMkVDNEY5QUUwMi8zTGc1TVpfVkxxMmZ5NWQ0S1lUOUg5UkpM
QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNMZzVNWl9WTHEyZnk1ZDRLWVQ5SDlSSkxCYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NTY5RS8yNTI1QzdDODREMjUxMUVEQTZEREQyMkVDNEY5QUUwMi8zTGc1TVpfVkxx
MmZ5NWQ0S1lUOUg5UkpMQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAiDBybeh3K+U4V8U7PkLyMHDsiOW7gOesg1mVgHycJRHzfdE/ya9Af
dAg/HgBNynihiRiMZWi47ZPC5k6yui3xjgy6eKB0Wk5xrP/NmTht8LfIZ+PjiRIx
eIKzgW3CgpB2EIKn+yZxPDhl2QleoJ0wg8Nbte8ncky1euvvHR5F29cYW5YFUF0D
DiBbfpuNQDbGMTGkZSeyBxNxWFtbqsn3oFFypTrpuCx8iNnUaF9Q4bD6mMPxPbqQ
eo6xPd9OLvwE+WmXTUtJYzaCb/pKWWITTAUw2GDOB91t2qsqvWa/KQhUuGPqhbdN
+nUj7glvAu2iEwAFnbIhSabChfwM9dpX
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:46 2025 by rpki-client