Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
File: 7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft (raw, json)
Hash identifier: IaYyNHt44hSEVedMqu889PG6xp24J7j+9xgpMPliClQ=
Subject key identifier: FC:34:CF:3D:0A:F0:09:03:51:EC:49:61:25:3B:57:2B:77:64:E6:05
Authority key identifier: EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE
Certificate issuer: /CN=A91B7BDC/serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE
Certificate serial: BC
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
Manifest number: B5
Signing time: Fri 31 Jan 2025 00:30:53 +0000
Manifest this update: Fri 31 Jan 2025 00:30:52 +0000
Manifest next update: Fri 07 Feb 2025 00:30:52 +0000
Files and hashes: 1: 7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl (hash: /jf+UeTCzmbmJ7TkfQDMun97UNb5SHfO4DI4LHTHF78=)
2: D66D72562EAB11EF9B369566C4F9AE02.roa (hash: vgycUMJflkOKjlkv8zbw+R+KI7mdfPpws5+U5fcO9GA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188 (0xbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7BDC/serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE
Validity
Not Before: Jan 31 00:30:52 2025 GMT
Not After : Feb 7 00:30:52 2025 GMT
Subject: CN=679c19bc-39ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fc:ff:43:b2:5e:3d:f4:16:2e:55:74:c1:fe:
bb:e7:b4:b9:2d:78:18:d5:38:9f:a8:8f:91:c9:93:
0f:1a:f5:b0:eb:3e:0b:a6:4f:6d:e2:b6:ce:f4:38:
ec:49:be:30:c3:be:b1:21:5d:e2:1c:0b:c9:b1:cf:
8f:f8:f7:2e:4f:99:33:d2:fa:26:71:03:d4:a8:66:
0e:4e:82:20:cd:c4:73:10:9d:8a:67:0b:6d:c0:ee:
e9:0a:dd:ca:98:32:e8:c3:8c:d6:fa:23:cc:3b:07:
b1:1f:b4:f6:a9:56:e7:c5:fe:e4:0c:20:64:92:22:
ca:b7:31:df:61:cf:89:98:76:50:db:5b:83:86:bf:
d4:70:e9:dd:10:bb:19:b9:dc:3a:e2:02:5d:4a:d9:
30:a3:5f:11:df:25:72:68:d3:d0:f8:a3:09:4e:67:
5d:bc:06:66:70:ff:e2:7e:3c:1d:15:46:48:68:be:
3c:13:ee:3f:51:58:43:06:71:2d:c7:67:79:1d:94:
5e:c5:e7:02:f1:bb:38:85:87:f2:2e:e4:3c:4f:4e:
43:b4:26:f8:ad:b3:1d:91:98:90:dd:ee:73:81:a6:
53:4e:94:5e:ad:7a:e6:b6:77:8d:99:9b:b7:89:e2:
32:e4:e3:73:b4:87:6a:72:24:9a:9f:0f:00:8d:21:
d6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:34:CF:3D:0A:F0:09:03:51:EC:49:61:25:3B:57:2B:77:64:E6:05
X509v3 Authority Key Identifier:
keyid:EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:94:e1:5a:99:66:ef:06:0d:23:39:dd:86:02:e1:55:b9:8e:
e3:6b:d3:dc:03:6a:88:4f:76:b5:c1:4b:36:a7:4e:78:ed:17:
ed:c1:62:2d:5a:39:07:3d:cd:6c:8f:4e:ad:01:dc:86:20:fc:
52:d1:90:de:a6:63:2e:8d:27:ce:ed:e0:70:9c:03:a2:d1:a3:
58:6a:c2:6c:5f:b6:a0:b2:ce:01:53:ce:bb:23:86:18:6d:85:
f7:1e:b5:46:bc:84:01:e2:f0:04:b4:00:37:49:d6:63:50:7f:
a0:09:33:87:c8:db:55:ac:e1:d0:c4:dd:04:fe:7a:fe:72:6b:
5a:6f:db:43:af:14:93:8e:97:a2:9a:01:a3:75:d6:fe:fd:0f:
9f:9e:c4:b0:ea:53:19:93:96:e7:d3:79:3c:0a:d9:1b:d3:63:
ba:9e:5e:30:f1:9d:59:35:8a:bd:f0:a2:2c:eb:c2:f8:0d:e1:
4e:0c:3e:8b:07:82:1f:fb:c9:0c:4a:4c:56:40:6d:d8:b3:8c:
86:57:8d:37:03:6a:93:68:db:f3:cb:82:e9:56:ec:9c:12:b8:
6e:23:c7:07:17:5b:5e:fc:0d:6d:50:85:83:a8:77:c6:02:8c:
37:3d:b0:dd:15:22:8c:3b:69:d5:5a:47:5c:fd:ba:8f:eb:3c:
2b:7d:4f:f9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjdCREMxMTAvBgNVBAUTKEVGMjVBOTI1QkZCRDRDQkFFRjUyNDU2QUIzQjMwOUI3
NDcwNDBERkUwHhcNMjUwMTMxMDAzMDUyWhcNMjUwMjA3MDAzMDUyWjAYMRYwFAYD
VQQDEw02NzljMTliYy0zOWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuvz/Q7JePfQWLlV0wf6757S5LXgY1TifqI+RyZMPGvWw6z4Lpk9t4rbO9Djs
Sb4ww76xIV3iHAvJsc+P+PcuT5kz0vomcQPUqGYOToIgzcRzEJ2KZwttwO7pCt3K
mDLow4zW+iPMOwexH7T2qVbnxf7kDCBkkiLKtzHfYc+JmHZQ21uDhr/UcOndELsZ
udw64gJdStkwo18R3yVyaNPQ+KMJTmddvAZmcP/ifjwdFUZIaL48E+4/UVhDBnEt
x2d5HZRexecC8bs4hYfyLuQ8T05DtCb4rbMdkZiQ3e5zgaZTTpRerXrmtneNmZu3
ieIy5ONztIdqciSanw8AjSHW1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPw0zz0K
8AkDUexJYSU7Vyt3ZOYFMB8GA1UdIwQYMBaAFO8lqSW/vUy671JFarOzCbdHBA3+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0JEQy83OUVFMEJDNEUy
NzIxMUVFQjgzRDYwNkJDNEY5QUUwMi83eVdwSmItOVRMcnZVa1ZxczdNSnQwY0VE
ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzd5V3BKYi05VExydlVrVnFzN01KdDBjRURmNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
N0JEQy83OUVFMEJDNEUyNzIxMUVFQjgzRDYwNkJDNEY5QUUwMi83eVdwSmItOVRM
cnZVa1ZxczdNSnQwY0VEZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBslOFamWbvBg0jOd2GAuFVuY7ja9PcA2qIT3a1wUs2p0547RftwWIt
WjkHPc1sj06tAdyGIPxS0ZDepmMujSfO7eBwnAOi0aNYasJsX7agss4BU867I4YY
bYX3HrVGvIQB4vAEtAA3SdZjUH+gCTOHyNtVrOHQxN0E/nr+cmtab9tDrxSTjpei
mgGjddb+/Q+fnsSw6lMZk5bn03k8Ctkb02O6nl4w8Z1ZNYq98KIs68L4DeFODD6L
B4If+8kMSkxWQG3Ys4yGV403A2qTaNvzy4LpVuycErhuI8cHF1te/A1tUIWDqHfG
Aow3PbDdFSKMO2nVWkdc/bqP6zwrfU/5
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:52:25 2025 by rpki-client