Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft
File: J38SJEpQvGVO5WP-c5_k63GZZrY.mft (raw, json)
Hash identifier: r4pZvjji9GEcbnVde7RFDxkk6bkq+GmBhFEptCvVTvY=
Subject key identifier: 13:CA:07:0B:B8:F4:72:BA:66:D5:7B:52:86:E5:71:97:B9:63:A3:BA
Authority key identifier: 27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6
Certificate issuer: /CN=A91B89AA/serialNumber=277F12244A50BC654EE563FE739FE4EB719966B6
Certificate serial: 23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft
Manifest number: 1F
Signing time: Fri 31 Jan 2025 07:02:13 +0000
Manifest this update: Fri 31 Jan 2025 07:02:13 +0000
Manifest next update: Fri 07 Feb 2025 07:02:13 +0000
Files and hashes: 1: J38SJEpQvGVO5WP-c5_k63GZZrY.crl (hash: YoYiRJyNiVFWhOuyJOULvzx6L550OZYwYFBT4k36upI=)
2: 29084344D3CD11EF8A4E905AC4F9AE02.roa (hash: l0HBl1dSVhf2hOj+No6WipbGq3X5ND6DIGWqXhRgX5E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B89AA/serialNumber=277F12244A50BC654EE563FE739FE4EB719966B6
Validity
Not Before: Jan 31 07:02:13 2025 GMT
Not After : Feb 7 07:02:13 2025 GMT
Subject: CN=679c7575-b4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2b:4c:c8:8c:75:60:d3:34:b9:2a:c9:d0:c1:
e9:50:27:80:96:a3:0a:f8:3c:13:f7:dc:4a:ef:6a:
fa:47:4d:a6:07:d5:bd:4e:a8:3e:fb:52:75:46:f4:
b0:eb:0a:a5:bd:ba:9e:e3:dc:25:52:3a:26:b3:b1:
87:08:6f:03:0a:2f:20:20:e2:34:c0:13:78:9b:de:
33:69:44:0d:5e:bb:38:89:06:75:ae:58:bc:72:84:
fa:5f:6c:62:47:b0:b4:08:ea:c3:dc:e8:ab:a4:ad:
dd:7e:9e:72:42:fc:ed:32:32:41:bc:ee:9d:cf:ec:
b0:cd:8d:2c:74:59:02:45:22:26:c3:d2:e0:5f:bd:
7b:b6:d8:ac:c9:30:de:c0:35:db:76:dc:e1:98:28:
4c:3b:d4:92:19:16:cd:7d:42:14:1a:f7:5b:70:c6:
63:eb:f6:1e:5b:26:f2:17:d3:20:85:c6:7f:33:d2:
13:cb:5d:62:1f:95:67:fa:3f:fe:d0:32:c0:95:44:
8c:52:2f:55:86:b6:c7:cc:d2:24:ed:30:24:1f:31:
cf:ac:ab:72:77:e4:f5:e0:ac:df:29:2d:03:70:1a:
98:c1:0e:43:a0:f4:36:04:25:e9:b9:6f:5a:4c:39:
e3:3a:82:75:7e:17:f8:14:a3:3e:10:73:67:ed:90:
29:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CA:07:0B:B8:F4:72:BA:66:D5:7B:52:86:E5:71:97:B9:63:A3:BA
X509v3 Authority Key Identifier:
keyid:27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:7b:7f:30:62:7f:e8:42:52:1a:a4:0f:b7:61:c4:68:c4:20:
c0:8a:56:b9:94:42:e2:45:05:6a:d7:48:ad:48:79:cb:be:00:
94:16:4b:15:1a:ce:a2:4f:86:ba:9d:e3:9e:9e:8c:60:ec:68:
25:cd:36:e6:db:ad:55:74:09:4d:9b:ef:37:59:42:98:af:9a:
84:88:d3:e8:79:e7:be:5a:9c:45:18:f0:e2:1e:7e:7d:c4:4e:
13:9d:22:90:e7:81:46:10:30:be:68:e1:82:2a:77:0c:41:a2:
1f:fb:00:00:16:c2:b6:8e:0a:14:90:46:bf:ed:12:69:9c:bf:
61:31:b0:7e:22:9c:af:9a:f3:67:b5:37:c4:e9:7b:fe:27:37:
f5:8c:31:93:ba:3c:ec:3a:43:44:f0:17:2c:c2:ad:32:61:86:
97:53:0b:3c:36:7b:8c:f9:5d:52:da:b3:8c:c9:48:93:20:96:
44:09:92:70:30:2e:fe:aa:34:db:fd:bb:1a:5b:15:0b:d7:02:
55:b9:f1:97:2c:c8:c5:97:b3:08:ba:23:fa:14:32:e3:fa:70:
d2:74:1c:55:5c:2c:22:18:1f:fa:d9:ca:b9:c8:8c:57:f4:14:
37:42:6f:a6:15:e7:6a:57:39:00:99:8a:49:9c:12:60:cb:ba:
4e:85:86:91
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
ODlBQTExMC8GA1UEBRMoMjc3RjEyMjQ0QTUwQkM2NTRFRTU2M0ZFNzM5RkU0RUI3
MTk5NjZCNjAeFw0yNTAxMzEwNzAyMTNaFw0yNTAyMDcwNzAyMTNaMBgxFjAUBgNV
BAMTDTY3OWM3NTc1LWI0Y2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDZK0zIjHVg0zS5KsnQwelQJ4CWowr4PBP33ErvavpHTaYH1b1OqD77UnVG9LDr
CqW9up7j3CVSOiazsYcIbwMKLyAg4jTAE3ib3jNpRA1euziJBnWuWLxyhPpfbGJH
sLQI6sPc6Kukrd1+nnJC/O0yMkG87p3P7LDNjSx0WQJFIibD0uBfvXu22KzJMN7A
Ndt23OGYKEw71JIZFs19QhQa91twxmPr9h5bJvIX0yCFxn8z0hPLXWIflWf6P/7Q
MsCVRIxSL1WGtsfM0iTtMCQfMc+sq3J35PXgrN8pLQNwGpjBDkOg9DYEJem5b1pM
OeM6gnV+F/gUoz4Qc2ftkCkJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUE8oHC7j0
crpm1XtShuVxl7ljo7owHwYDVR0jBBgwFoAUJ38SJEpQvGVO5WP+c5/k63GZZrYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4OUFBLzg1RDBGMzQ2QkM2
MjExRUY5QTc4Mzc1MUM0RjlBRTAyL0ozOFNKRXBRdkdWTzVXUC1jNV9rNjNHWlpy
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSjM4U0pFcFF2R1ZPNVdQLWM1X2s2M0daWnJZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4
OUFBLzg1RDBGMzQ2QkM2MjExRUY5QTc4Mzc1MUM0RjlBRTAyL0ozOFNKRXBRdkdW
TzVXUC1jNV9rNjNHWlpyWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAFx7fzBif+hCUhqkD7dhxGjEIMCKVrmUQuJFBWrXSK1Iecu+AJQWSxUa
zqJPhrqd456ejGDsaCXNNubbrVV0CU2b7zdZQpivmoSI0+h5575anEUY8OIefn3E
ThOdIpDngUYQML5o4YIqdwxBoh/7AAAWwraOChSQRr/tEmmcv2ExsH4inK+a82e1
N8Tpe/4nN/WMMZO6POw6Q0TwFyzCrTJhhpdTCzw2e4z5XVLas4zJSJMglkQJknAw
Lv6qNNv9uxpbFQvXAlW58ZcsyMWXswi6I/oUMuP6cNJ0HFVcLCIYH/rZyrnIjFf0
FDdCb6YV52pXOQCZikmcEmDLuk6FhpE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:42:50 2025 by rpki-client