Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
File: 5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft (raw, json)
Hash identifier: LbcyQGp3i427FH6cygouB7kJHqG6m63w19wEMcVlOcw=
Subject key identifier: 34:BB:3F:40:73:1F:21:8B:CE:F8:4B:BB:63:B6:7E:47:CA:05:47:75
Authority key identifier: E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83
Certificate issuer: /CN=A91B59E5/serialNumber=E47BF70254532697D20D0D3110F625370D65FA83
Certificate serial: 0188
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
Manifest number: 015B
Signing time: Fri 31 Jan 2025 04:00:07 +0000
Manifest this update: Fri 31 Jan 2025 04:00:07 +0000
Manifest next update: Fri 07 Feb 2025 04:00:06 +0000
Files and hashes: 1: 5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl (hash: yJuU3vcOhniP9tiuQDUSAX2z/OCzqIKPQcpp9o0TR9E=)
2: D0104354BCED11EF9C3A7983C4F9AE02.roa (hash: 4Ah6T7xaUSGUhVoEQJzj4OxmJ0pIH3pkVlB9pwmr0jI=)
3: 9EEE3C44D94F11EF916BCF23C4F9AE02.roa (hash: JTgCQ/a/n5QlsjMCTHDArlAgGVjedlWxdAR2U4v5LnA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392 (0x188)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B59E5/serialNumber=E47BF70254532697D20D0D3110F625370D65FA83
Validity
Not Before: Jan 31 04:00:07 2025 GMT
Not After : Feb 7 04:00:06 2025 GMT
Subject: CN=679c4ac7-88ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8e:5d:72:88:9b:81:90:d6:30:02:d0:be:f9:
9d:b1:6e:fa:cc:9d:2a:16:78:cf:3b:4b:a8:75:64:
3f:72:0c:75:0e:26:1f:30:f2:c4:8e:62:eb:f8:c0:
88:83:59:57:0a:d9:a6:bc:31:bf:15:83:03:ab:24:
1a:20:f4:a5:db:b3:87:26:08:b8:dc:e7:f1:74:13:
bb:3d:ba:a6:59:9c:43:0a:16:9a:49:2b:0f:5b:9a:
51:20:0c:ad:4f:45:a0:67:9b:2f:50:48:b3:1c:c5:
93:c9:07:d5:e0:f4:e6:56:a0:9b:24:ab:32:49:b1:
c6:11:3d:07:a0:d3:d4:88:65:c5:7b:74:98:ef:02:
d7:20:97:9d:b6:66:8e:63:8a:a7:06:2d:75:16:3f:
9f:76:9f:2c:d6:e2:64:6b:cd:e1:0c:02:79:b8:12:
3c:d4:24:6a:54:80:e9:45:49:1a:a7:3f:4b:96:90:
c4:ac:3a:27:a5:ab:b8:ad:02:2d:42:92:63:b0:d5:
0f:77:ed:ee:ad:cd:54:a3:05:9d:29:41:87:65:62:
81:2f:26:1d:b1:73:d9:30:fd:fe:88:75:60:74:bb:
d0:2f:34:cf:ef:de:ad:d6:a4:b2:bd:e7:43:14:e7:
3c:e1:4e:8c:49:99:19:d6:e2:41:25:d7:7f:d7:4a:
19:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BB:3F:40:73:1F:21:8B:CE:F8:4B:BB:63:B6:7E:47:CA:05:47:75
X509v3 Authority Key Identifier:
keyid:E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:91:8e:26:5c:38:89:bd:34:db:ab:02:e0:a7:bc:78:d2:65:
f5:73:04:36:df:e6:ed:8c:87:e4:a1:eb:84:c7:2b:ee:86:ad:
34:94:c4:45:f9:68:45:3a:a2:7a:45:d9:b9:77:6d:5b:b9:bb:
ae:e5:81:a8:91:44:7a:2e:0b:6c:9c:0e:32:9c:6c:b4:70:57:
53:9b:b7:51:24:13:38:49:ad:b6:b5:5e:b2:81:a3:79:78:29:
a1:19:a6:f1:c2:05:9d:d4:fc:53:aa:51:a2:7e:59:2d:3c:19:
57:3f:e3:64:c4:aa:77:b8:f0:8c:c8:ae:ff:c6:c1:28:af:3a:
72:f2:ce:98:6f:95:d9:74:46:61:a1:55:da:82:64:77:76:58:
61:46:e3:23:71:13:ba:0f:02:a6:47:5a:e8:ad:fa:b3:0d:96:
f6:f3:2d:af:9b:46:5d:8f:d7:92:1f:7d:3d:d3:88:c2:5b:5d:
cb:52:1b:ac:11:9e:01:36:b9:b4:eb:07:8d:da:4f:98:a7:1d:
a0:9e:19:11:5b:52:54:ac:a1:05:bf:64:b6:17:b6:b7:1a:25:
4b:28:75:b2:4a:20:27:59:00:d3:f1:59:bd:f8:1c:eb:af:06:
9c:b8:02:ff:50:cd:aa:73:8d:e0:a7:82:7b:21:0c:97:d5:82:
6e:36:f5:2f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjU5RTUxMTAvBgNVBAUTKEU0N0JGNzAyNTQ1MzI2OTdEMjBEMEQzMTEwRjYyNTM3
MEQ2NUZBODMwHhcNMjUwMTMxMDQwMDA3WhcNMjUwMjA3MDQwMDA2WjAYMRYwFAYD
VQQDEw02NzljNGFjNy04OGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp45dcoibgZDWMALQvvmdsW76zJ0qFnjPO0uodWQ/cgx1DiYfMPLEjmLr+MCI
g1lXCtmmvDG/FYMDqyQaIPSl27OHJgi43OfxdBO7PbqmWZxDChaaSSsPW5pRIAyt
T0WgZ5svUEizHMWTyQfV4PTmVqCbJKsySbHGET0HoNPUiGXFe3SY7wLXIJedtmaO
Y4qnBi11Fj+fdp8s1uJka83hDAJ5uBI81CRqVIDpRUkapz9LlpDErDonpau4rQIt
QpJjsNUPd+3urc1UowWdKUGHZWKBLyYdsXPZMP3+iHVgdLvQLzTP796t1qSyvedD
FOc84U6MSZkZ1uJBJdd/10oZNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDS7P0Bz
HyGLzvhLu2O2fkfKBUd1MB8GA1UdIwQYMBaAFOR79wJUUyaX0g0NMRD2JTcNZfqD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTlFNS9ERDlGMUY3QzND
MDExMUVFOTFDQkUxNTdDNEY5QUUwMi81SHYzQWxSVEpwZlNEUTB4RVBZbE53MWwt
b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVIdjNBbFJUSnBmU0RRMHhFUFlsTncxbC1vTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NTlFNS9ERDlGMUY3QzNDMDExMUVFOTFDQkUxNTdDNEY5QUUwMi81SHYzQWxSVEpw
ZlNEUTB4RVBZbE53MWwtb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCPkY4mXDiJvTTbqwLgp7x40mX1cwQ23+btjIfkoeuExyvuhq00lMRF
+WhFOqJ6Rdm5d21bubuu5YGokUR6LgtsnA4ynGy0cFdTm7dRJBM4Sa22tV6ygaN5
eCmhGabxwgWd1PxTqlGiflktPBlXP+NkxKp3uPCMyK7/xsEorzpy8s6Yb5XZdEZh
oVXagmR3dlhhRuMjcRO6DwKmR1rorfqzDZb28y2vm0Zdj9eSH30904jCW13LUhus
EZ4BNrm06weN2k+Ypx2gnhkRW1JUrKEFv2S2F7a3GiVLKHWySiAnWQDT8Vm9+Bzr
rwacuAL/UM2qc43gp4J7IQyX1YJuNvUv
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:03:20 2025 by rpki-client