Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft
File: L4dzyVEFOxQ4vCfsxV45KvteK7I.mft (raw, json)
Hash identifier: 7cwBy419hG1aIB6I05RcBv37z+rOp+O6SwM9MiT1kOQ=
Subject key identifier: C3:25:AB:CC:CE:77:32:6B:CB:2B:FD:A1:3B:5D:91:24:26:BF:00:50
Authority key identifier: 2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2
Certificate issuer: /CN=A91B56F0/serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2
Certificate serial: 0B19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft
Manifest number: 0B05
Signing time: Thu 30 Jan 2025 19:19:44 +0000
Manifest this update: Thu 30 Jan 2025 19:19:44 +0000
Manifest next update: Thu 06 Feb 2025 19:19:44 +0000
Files and hashes: 1: L4dzyVEFOxQ4vCfsxV45KvteK7I.crl (hash: otDQVgnsB4OKzKR+0ZrGcCGfj7X8omdci9hrPrJG1so=)
2: 84AC17989B0811EDB5FDAF75C4F9AE02.roa (hash: oocbcY3iFDyepn5SUv3wuDXzWJtrjmxt4UkH5Dd68Ak=)
3: 837821AA9B0811EDB5FDAF75C4F9AE02.roa (hash: kTlw3wh1lAf36RxrCeqt67ctmc2qb6ZS1z3/jQIhcLU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2841 (0xb19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B56F0/serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2
Validity
Not Before: Jan 30 19:19:44 2025 GMT
Not After : Feb 6 19:19:44 2025 GMT
Subject: CN=679bd0d0-c587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:66:b7:64:a9:9f:bd:2b:e7:a7:2d:ee:3d:42:
5f:00:32:89:b9:01:97:dc:50:bf:f4:72:17:89:6f:
14:a8:f3:16:0a:e6:1b:ab:28:0b:95:61:6b:66:26:
74:12:01:c1:6b:be:2a:88:c5:87:5a:5e:97:98:a2:
a8:ee:94:5b:f9:85:c8:11:ae:84:db:f4:67:d5:94:
2f:91:12:df:2d:95:e3:c2:9b:58:a0:fc:02:b3:90:
76:1a:36:28:5d:9f:a3:62:5b:76:4d:7f:24:7d:9e:
6f:f5:f3:b9:f4:57:25:e8:23:de:dd:98:78:8e:5f:
ae:d6:8b:ff:b3:1b:13:1c:14:9d:8c:87:6e:e2:1d:
eb:73:95:3a:dd:08:5c:42:8b:68:37:38:b1:ec:d8:
f0:6e:d9:41:f6:f3:0a:5d:9f:75:4d:cc:5b:8f:a0:
67:7d:14:be:5a:85:12:e1:de:ea:58:f9:be:c8:ad:
8a:df:c1:39:fb:d9:4f:7d:36:8c:83:00:b7:e3:d0:
40:a5:1b:b6:38:77:a7:05:ee:f5:c8:f2:45:ea:31:
bc:58:e1:4d:da:10:61:12:37:24:79:31:ea:fc:c6:
e6:01:17:5e:58:f9:4a:cf:45:4a:bf:0a:49:66:b2:
e4:2f:a8:47:3e:91:b1:38:ce:54:00:c4:24:e6:65:
28:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:25:AB:CC:CE:77:32:6B:CB:2B:FD:A1:3B:5D:91:24:26:BF:00:50
X509v3 Authority Key Identifier:
keyid:2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:7b:21:8b:b9:ed:f3:46:f0:0c:6a:50:18:82:e2:dc:0d:e0:
a9:a8:70:fa:b9:e8:64:60:41:6f:24:a7:15:15:40:65:32:f9:
71:5f:84:46:2f:6e:df:c5:0d:6b:12:25:5e:21:18:fb:0e:51:
34:a4:26:69:c4:cb:f0:dd:1c:35:18:e0:ff:45:02:a9:bd:30:
cf:58:40:90:42:97:d0:8c:a7:16:f2:c6:58:b9:b6:37:47:3f:
32:67:18:6f:4b:62:98:a9:e3:9f:cb:b2:07:85:f5:5f:8e:13:
70:c3:10:df:24:54:dc:e3:61:05:fa:41:0e:21:1a:25:1b:67:
b3:ba:83:8e:df:38:fd:d0:b4:6c:6a:2d:bd:8b:e0:dd:26:f2:
6d:47:59:b7:cf:96:be:64:06:55:bc:43:3d:db:a2:bc:e0:62:
f8:c1:a3:fa:b8:7a:1a:d5:39:4b:d1:76:81:ad:dd:fe:09:01:
48:da:12:af:91:5d:8f:eb:b4:a5:c1:94:41:e4:b6:0c:12:da:
7c:8d:ee:6d:07:aa:07:f5:0b:6b:8c:ec:14:87:f5:7b:20:a8:
43:4c:6f:e8:db:ea:bf:c8:fb:3d:52:7a:5a:bf:19:08:e1:0e:
2c:65:0f:0c:68:c1:b7:d0:68:0b:9d:b7:97:72:68:ef:21:8e:
6c:22:af:98
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjU2RjAxMTAvBgNVBAUTKDJGODc3M0M5NTEwNTNCMTQzOEJDMjdFQ0M1NUUzOTJB
RkI1RTJCQjIwHhcNMjUwMTMwMTkxOTQ0WhcNMjUwMjA2MTkxOTQ0WjAYMRYwFAYD
VQQDEw02NzliZDBkMC1jNTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsGa3ZKmfvSvnpy3uPUJfADKJuQGX3FC/9HIXiW8UqPMWCuYbqygLlWFrZiZ0
EgHBa74qiMWHWl6XmKKo7pRb+YXIEa6E2/Rn1ZQvkRLfLZXjwptYoPwCs5B2GjYo
XZ+jYlt2TX8kfZ5v9fO59Fcl6CPe3Zh4jl+u1ov/sxsTHBSdjIdu4h3rc5U63Qhc
QotoNzix7NjwbtlB9vMKXZ91Tcxbj6BnfRS+WoUS4d7qWPm+yK2K38E5+9lPfTaM
gwC349BApRu2OHenBe71yPJF6jG8WOFN2hBhEjckeTHq/MbmARdeWPlKz0VKvwpJ
ZrLkL6hHPpGxOM5UAMQk5mUoXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMMlq8zO
dzJryyv9oTtdkSQmvwBQMB8GA1UdIwQYMBaAFC+Hc8lRBTsUOLwn7MVeOSr7Xiuy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTZGMC83RDY3RTRENDM4
NEMxMUVBQkVBMkRCNzFDNEY5QUUwMi9MNGR6eVZFRk94UTR2Q2ZzeFY0NUt2dGVL
N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0w0ZHp5VkVGT3hRNHZDZnN4VjQ1S3Z0ZUs3SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NTZGMC83RDY3RTRENDM4NEMxMUVBQkVBMkRCNzFDNEY5QUUwMi9MNGR6eVZFRk94
UTR2Q2ZzeFY0NUt2dGVLN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCUeyGLue3zRvAMalAYguLcDeCpqHD6uehkYEFvJKcVFUBlMvlxX4RG
L27fxQ1rEiVeIRj7DlE0pCZpxMvw3Rw1GOD/RQKpvTDPWECQQpfQjKcW8sZYubY3
Rz8yZxhvS2KYqeOfy7IHhfVfjhNwwxDfJFTc42EF+kEOIRolG2ezuoOO3zj90LRs
ai29i+DdJvJtR1m3z5a+ZAZVvEM926K84GL4waP6uHoa1TlL0XaBrd3+CQFI2hKv
kV2P67SlwZRB5LYMEtp8je5tB6oH9QtrjOwUh/V7IKhDTG/o2+q/yPs9UnpavxkI
4Q4sZQ8MaMG30GgLnbeXcmjvIY5sIq+Y
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:56:04 2025 by rpki-client