Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft
File: bAgKK6farJXU2TSIqQAVGuOlnfg.mft (raw, json)
Hash identifier: 1GQE0Bqc0mpLs08lW2ldGidMKO+NCFhCHlD1MImB/gM=
Subject key identifier: E8:9B:57:AA:D7:E0:09:DD:8B:84:68:4B:37:48:90:A5:F0:FC:F5:3A
Authority key identifier: 6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8
Certificate issuer: /CN=A91B74E8/serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8
Certificate serial: 0470
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft
Manifest number: 0457
Signing time: Fri 31 Jan 2025 00:20:15 +0000
Manifest this update: Fri 31 Jan 2025 00:20:14 +0000
Manifest next update: Fri 07 Feb 2025 00:20:14 +0000
Files and hashes: 1: bAgKK6farJXU2TSIqQAVGuOlnfg.crl (hash: Fgh99nHk1xUi7PTuBOByjJPaXATEg5dpu5dFsuhQIvs=)
2: CCF1692CC85111EFAEC7B83FC4F9AE02.roa (hash: YNmXXeohBLlW644lJk9sQ0wTlKH8+7poI39Ki1Khyx0=)
3: AD5EE696C0A711EE97A2E984C4F9AE02.roa (hash: 8jti7DRjplfPDOWY06XiRJGfKvNLpJCDztlNbOL025A=)
4: 0D3FD180C85211EF847F7F40C4F9AE02.roa (hash: HyU6jzW2jNHEwhSY5tgkE4VyuV1PbOMpbj114sw2J0Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1136 (0x470)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B74E8/serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8
Validity
Not Before: Jan 31 00:20:14 2025 GMT
Not After : Feb 7 00:20:14 2025 GMT
Subject: CN=679c173f-3cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c5:d0:8e:69:cc:30:d1:3c:f9:10:93:5e:03:
34:14:d2:76:50:42:7f:65:5a:52:74:9b:96:1f:f7:
09:38:a2:a8:62:6c:2b:a3:5d:ea:d3:0a:9b:93:ce:
02:77:ee:62:eb:54:79:60:26:75:2b:74:21:ce:a8:
ad:be:30:7e:55:09:7d:6a:86:2b:a7:63:39:32:81:
37:f7:0d:f3:e4:f7:2c:2f:a5:51:8d:cd:af:69:c5:
2a:69:2d:d0:31:73:be:45:92:1b:c8:e2:6d:80:b3:
64:28:0f:00:9d:8a:16:50:93:65:8a:9d:c0:78:ee:
9f:12:9f:5f:a9:66:d1:39:0d:32:78:8e:c4:50:22:
72:ef:d5:d4:d9:6b:54:f6:c6:a7:df:8c:4c:ec:f1:
c7:27:5e:6e:f8:d3:5d:af:a3:d9:ea:50:39:f5:a8:
f7:20:f7:7d:9c:09:8e:b8:52:72:a0:ef:73:15:04:
b8:09:41:8b:15:7a:11:07:c6:0f:c8:6e:6e:dd:af:
f9:d7:41:2e:4f:7b:49:f1:f2:34:dd:3f:78:ab:8b:
df:ec:c9:98:38:98:69:66:94:0d:a2:3a:fe:1d:8e:
e4:ca:6b:0b:ef:70:30:09:a4:31:12:ee:9d:71:16:
c5:04:c9:a2:85:4c:12:a4:12:f9:ab:2f:60:b2:0f:
c0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9B:57:AA:D7:E0:09:DD:8B:84:68:4B:37:48:90:A5:F0:FC:F5:3A
X509v3 Authority Key Identifier:
keyid:6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:ac:b5:fc:f4:34:1c:92:8d:b1:57:2f:52:47:d3:97:94:97:
13:46:1e:ec:7b:bc:78:f8:e8:78:13:de:9f:0c:ec:20:0f:82:
ba:aa:5a:d7:e7:f2:68:11:57:5b:11:a7:55:40:00:d9:1f:31:
46:8b:0c:74:b8:5d:be:1c:0c:75:71:d6:90:c0:db:58:61:00:
6f:d0:dc:59:14:7b:9e:33:21:b2:c4:bc:ef:ad:f5:8e:6a:8a:
1a:89:29:b2:99:8c:74:df:a5:3f:f3:2e:62:f8:24:4e:39:1a:
f2:d6:82:f0:ec:83:79:fe:4b:28:b0:89:1d:eb:15:7e:73:65:
da:7f:0b:15:10:09:01:3f:98:1f:95:d7:fe:e6:3f:0a:39:25:
5a:6f:a3:1d:78:c3:93:5a:4f:e3:87:eb:33:bd:de:c0:73:7e:
33:d2:8c:94:43:e6:b0:36:6f:75:17:88:49:7e:20:8a:e6:37:
82:6f:07:af:96:12:85:bc:9e:29:e3:a9:64:00:05:13:1d:17:
f3:93:3d:47:4d:e2:4f:72:6e:98:f3:9a:55:f3:f7:f1:04:46:
5f:6f:83:e4:fa:16:59:88:fb:41:45:77:88:1a:e7:a8:04:ae:
ab:11:1a:5d:d6:a7:c7:de:f0:e1:c4:1b:e9:8c:8c:b3:2b:01:
f9:6a:24:67
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjc0RTgxMTAvBgNVBAUTKDZDMDgwQTJCQTdEQUFDOTVENEQ5MzQ4OEE5MDAxNTFB
RTNBNTlERjgwHhcNMjUwMTMxMDAyMDE0WhcNMjUwMjA3MDAyMDE0WjAYMRYwFAYD
VQQDEw02NzljMTczZi0zY2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq8XQjmnMMNE8+RCTXgM0FNJ2UEJ/ZVpSdJuWH/cJOKKoYmwro13q0wqbk84C
d+5i61R5YCZ1K3QhzqitvjB+VQl9aoYrp2M5MoE39w3z5PcsL6VRjc2vacUqaS3Q
MXO+RZIbyOJtgLNkKA8AnYoWUJNlip3AeO6fEp9fqWbROQ0yeI7EUCJy79XU2WtU
9san34xM7PHHJ15u+NNdr6PZ6lA59aj3IPd9nAmOuFJyoO9zFQS4CUGLFXoRB8YP
yG5u3a/510EuT3tJ8fI03T94q4vf7MmYOJhpZpQNojr+HY7kymsL73AwCaQxEu6d
cRbFBMmihUwSpBL5qy9gsg/ANwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOibV6rX
4Andi4RoSzdIkKXw/PU6MB8GA1UdIwQYMBaAFGwICiun2qyV1Nk0iKkAFRrjpZ34
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzRFOC80N0Y2MjAxMjQz
RUExMUVDODRBQjYzNDdDNEY5QUUwMi9iQWdLSzZmYXJKWFUyVFNJcVFBVkd1T2xu
ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JBZ0tLNmZhckpYVTJUU0lxUUFWR3VPbG5mZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NzRFOC80N0Y2MjAxMjQzRUExMUVDODRBQjYzNDdDNEY5QUUwMi9iQWdLSzZmYXJK
WFUyVFNJcVFBVkd1T2xuZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAYrLX89DQcko2xVy9SR9OXlJcTRh7se7x4+Oh4E96fDOwgD4K6qlrX
5/JoEVdbEadVQADZHzFGiwx0uF2+HAx1cdaQwNtYYQBv0NxZFHueMyGyxLzvrfWO
aooaiSmymYx036U/8y5i+CROORry1oLw7IN5/ksosIkd6xV+c2XafwsVEAkBP5gf
ldf+5j8KOSVab6MdeMOTWk/jh+szvd7Ac34z0oyUQ+awNm91F4hJfiCK5jeCbwev
lhKFvJ4p46lkAAUTHRfzkz1HTeJPcm6Y85pV8/fxBEZfb4Pk+hZZiPtBRXeIGueo
BK6rERpd1qfH3vDhxBvpjIyzKwH5aiRn
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:27:53 2025 by rpki-client