Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.mft
File: V09tVmTqm98xXPZMjl5n0mODwgU.mft (raw, json)
Hash identifier: QkTgwiaxYpYmNt2gWS3XhH+FFJBMXQpwmCwhnu1RJYQ=
Subject key identifier: 86:ED:72:4C:66:6E:E6:F3:7B:C3:56:CE:6D:9B:25:04:7F:8D:DB:0E
Authority key identifier: 57:4F:6D:56:64:EA:9B:DF:31:5C:F6:4C:8E:5E:67:D2:63:83:C2:05
Certificate issuer: /CN=A91B85FC/serialNumber=574F6D5664EA9BDF315CF64C8E5E67D26383C205
Certificate serial: 0AAB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V09tVmTqm98xXPZMjl5n0mODwgU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.mft
Manifest number: 0AA5
Signing time: Thu 30 Jan 2025 19:38:22 +0000
Manifest this update: Thu 30 Jan 2025 19:38:22 +0000
Manifest next update: Thu 06 Feb 2025 19:38:22 +0000
Files and hashes: 1: V09tVmTqm98xXPZMjl5n0mODwgU.crl (hash: IDcL/tAXOE+6cSVmlY/SZKCI9oeEbQVpQsnGT6KkDm4=)
2: 52216250493611EAA0968624C4F9AE02.roa (hash: XjkXLtL5CTFLl3MU4C1ptKiUasRS1cFai/QK6ioOeWA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2731 (0xaab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B85FC/serialNumber=574F6D5664EA9BDF315CF64C8E5E67D26383C205
Validity
Not Before: Jan 30 19:38:22 2025 GMT
Not After : Feb 6 19:38:22 2025 GMT
Subject: CN=679bd52e-2a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ad:8c:5a:13:aa:61:90:f5:71:47:00:ab:9c:
e3:2c:82:05:d6:ca:3f:90:92:35:03:a2:8b:c6:49:
37:a5:ce:b1:24:c4:bb:f5:51:fc:38:c7:f3:12:a5:
12:19:2a:07:77:6e:4e:00:71:6f:8a:6d:ee:11:41:
90:fc:fa:2b:3f:c2:ed:01:be:c2:1a:3c:11:34:45:
ab:5f:80:a0:1c:68:6c:00:f5:ff:08:98:d8:95:95:
e6:f9:39:f5:19:74:4c:81:43:b7:ad:06:e9:0c:0a:
e5:86:9c:95:d0:23:97:06:3c:06:5d:39:70:36:b1:
9a:fc:83:4e:49:eb:dd:e3:fa:1f:40:3f:88:22:49:
e9:41:a3:bf:d5:fe:1f:71:b1:4b:ea:ad:09:0d:d2:
71:09:08:db:d7:ca:db:16:00:79:1d:7f:1f:c6:aa:
a4:d8:f0:4b:bd:5b:0f:aa:6a:7c:bc:93:72:f1:6c:
08:fe:47:62:1a:59:a2:c3:e1:0d:5a:63:f3:6f:7c:
af:e7:88:e1:74:b0:e2:37:39:75:65:dc:14:d1:2a:
5a:3c:e7:08:84:6e:7e:2d:e9:88:37:7b:9b:e7:9a:
6f:5e:1e:5b:c3:14:4e:41:fb:a3:55:42:2f:a7:55:
59:e0:6e:ad:4d:ce:55:c5:59:64:1d:9b:67:78:7f:
cb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:ED:72:4C:66:6E:E6:F3:7B:C3:56:CE:6D:9B:25:04:7F:8D:DB:0E
X509v3 Authority Key Identifier:
keyid:57:4F:6D:56:64:EA:9B:DF:31:5C:F6:4C:8E:5E:67:D2:63:83:C2:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V09tVmTqm98xXPZMjl5n0mODwgU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:27:e7:c8:18:3b:8f:22:19:d4:e0:87:b5:9e:f7:af:df:05:
36:4a:a9:50:7e:bf:14:2f:ef:69:b9:de:01:c2:33:70:a2:d0:
fa:58:fc:27:02:de:73:a8:7a:58:76:e5:06:22:60:60:44:59:
ba:92:f3:75:57:20:e3:0d:8b:e3:ef:e1:5c:bf:1b:e0:08:df:
47:ce:a8:25:d6:d2:c3:76:5c:53:c7:26:c2:7e:4d:09:8e:ee:
8b:3d:2e:5e:73:18:cc:82:91:f4:20:b3:b0:fb:bb:e7:a0:f0:
49:c0:37:e9:25:55:05:01:ad:d8:fb:34:36:ca:3d:aa:27:47:
17:01:05:b0:1b:a4:a5:3f:ab:60:4f:1b:88:37:bb:f5:39:d0:
6c:f1:3b:a3:fa:6f:c1:a1:b9:10:34:62:2f:e9:d9:99:b7:2d:
2b:ec:cf:e6:99:7a:7b:6e:17:57:ab:f1:4f:25:6f:ae:b3:7e:
d5:7c:97:a9:e9:16:01:9b:3a:1f:27:25:93:f2:c3:91:f9:51:
95:b8:54:c7:91:51:22:1a:89:09:d5:a8:67:ca:db:11:ce:22:
a0:ca:e8:dc:9c:ad:cd:db:df:b2:78:21:ba:79:37:40:94:7d:
0c:a2:91:a7:1a:3a:43:60:c7:c9:da:20:1d:b1:ce:89:5d:3d:
f1:68:e8:0e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjg1RkMxMTAvBgNVBAUTKDU3NEY2RDU2NjRFQTlCREYzMTVDRjY0QzhFNUU2N0Qy
NjM4M0MyMDUwHhcNMjUwMTMwMTkzODIyWhcNMjUwMjA2MTkzODIyWjAYMRYwFAYD
VQQDEw02NzliZDUyZS0yYTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz62MWhOqYZD1cUcAq5zjLIIF1so/kJI1A6KLxkk3pc6xJMS79VH8OMfzEqUS
GSoHd25OAHFvim3uEUGQ/PorP8LtAb7CGjwRNEWrX4CgHGhsAPX/CJjYlZXm+Tn1
GXRMgUO3rQbpDArlhpyV0COXBjwGXTlwNrGa/INOSevd4/ofQD+IIknpQaO/1f4f
cbFL6q0JDdJxCQjb18rbFgB5HX8fxqqk2PBLvVsPqmp8vJNy8WwI/kdiGlmiw+EN
WmPzb3yv54jhdLDiNzl1ZdwU0SpaPOcIhG5+LemIN3ub55pvXh5bwxROQfujVUIv
p1VZ4G6tTc5VxVlkHZtneH/L5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbtckxm
bubze8NWzm2bJQR/jdsOMB8GA1UdIwQYMBaAFFdPbVZk6pvfMVz2TI5eZ9Jjg8IF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODVGQy84ODE2RUZGODQ5
MzQxMUVBQUQ4NEJGMUVDNEY5QUUwMi9WMDl0Vm1UcW05OHhYUFpNamw1bjBtT0R3
Z1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1YwOXRWbVRxbTk4eFhQWk1qbDVuMG1PRHdnVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
ODVGQy84ODE2RUZGODQ5MzQxMUVBQUQ4NEJGMUVDNEY5QUUwMi9WMDl0Vm1UcW05
OHhYUFpNamw1bjBtT0R3Z1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQByJ+fIGDuPIhnU4Ie1nvev3wU2SqlQfr8UL+9pud4BwjNwotD6WPwn
At5zqHpYduUGImBgRFm6kvN1VyDjDYvj7+FcvxvgCN9Hzqgl1tLDdlxTxybCfk0J
ju6LPS5ecxjMgpH0ILOw+7vnoPBJwDfpJVUFAa3Y+zQ2yj2qJ0cXAQWwG6SlP6tg
TxuIN7v1OdBs8Tuj+m/BobkQNGIv6dmZty0r7M/mmXp7bhdXq/FPJW+us37VfJep
6RYBmzofJyWT8sOR+VGVuFTHkVEiGokJ1ahnytsRziKgyujcnK3N29+yeCG6eTdA
lH0MopGnGjpDYMfJ2iAdsc6JXT3xaOgO
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:44:00 2025 by rpki-client