Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft
File: RziIJrgc68tdWOukEDkWDSR7wX8.mft (raw, json)
Hash identifier: 23KKYPnSmzUiFkA/kYmWKeTdFkz30hwRipuXFAjTCl4=
Subject key identifier: D8:C6:F5:96:FB:62:66:64:0C:A7:2B:43:E6:F6:3E:23:6E:25:7F:21
Authority key identifier: 47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F
Certificate issuer: /CN=A91B9B37/serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F
Certificate serial: 0435
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft
Manifest number: 0431
Signing time: Fri 31 Jan 2025 00:22:32 +0000
Manifest this update: Fri 31 Jan 2025 00:22:32 +0000
Manifest next update: Fri 07 Feb 2025 00:22:32 +0000
Files and hashes: 1: RziIJrgc68tdWOukEDkWDSR7wX8.crl (hash: jfdhyr22l+eRRDAA9LIKYd7glW0YnLcxXtO8nZRmmMc=)
2: 9F0BF8AE48C711ECAA1A222EC4F9AE02.roa (hash: fKt/7MCkOPI2Jnu4+1LUGUA8pX+r5jKnzR9IUADBIGw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1077 (0x435)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9B37/serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F
Validity
Not Before: Jan 31 00:22:32 2025 GMT
Not After : Feb 7 00:22:32 2025 GMT
Subject: CN=679c17c8-016d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4b:1e:02:ab:76:df:d2:00:eb:a2:f1:50:a2:
95:63:23:2d:c1:d2:08:90:93:c7:80:7d:1d:97:cb:
15:5d:6d:9c:61:c5:88:56:5c:b2:ed:2a:32:ef:4f:
ab:5c:7e:a3:93:7d:14:05:65:44:60:b7:c1:75:3f:
34:cb:35:d4:d0:83:66:5d:84:57:c8:c3:7c:92:33:
78:98:fe:de:3b:60:f4:25:dc:3d:1b:95:90:b5:38:
f0:74:c3:b6:2d:ab:8e:93:cc:c2:d2:19:28:34:d6:
a9:f9:06:d9:0c:3b:01:bb:1f:c6:9d:e0:28:01:cc:
61:31:b9:38:e0:ae:58:34:aa:40:a6:df:5c:58:71:
6a:61:b7:8e:af:b8:3e:44:e3:5e:bc:0a:94:4a:7a:
ba:ba:ec:52:33:13:1d:85:38:e1:c4:6e:b9:74:fa:
ec:73:ce:0d:dc:80:b1:cb:01:b6:ae:dd:7c:66:04:
83:c3:24:02:91:c2:ea:28:02:cb:58:92:1b:0b:76:
29:13:e4:9a:a0:4e:40:a9:ed:1c:48:cc:9e:d6:3f:
ad:70:1a:84:c6:a2:2c:a2:29:96:ba:df:b9:21:89:
74:9f:d4:0a:ba:05:e7:98:09:d2:b3:f6:dc:b1:dd:
bd:dd:c6:e0:4d:db:b2:f2:5c:d1:bd:a6:ab:f9:a6:
a3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C6:F5:96:FB:62:66:64:0C:A7:2B:43:E6:F6:3E:23:6E:25:7F:21
X509v3 Authority Key Identifier:
keyid:47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:f7:f1:ca:2d:06:2e:61:fe:e2:1b:19:d6:d3:a5:66:e9:eb:
bf:44:db:fc:0a:fd:b2:61:65:09:79:f4:75:83:99:bb:d6:9d:
17:56:cb:d2:a5:84:e3:30:25:1f:ef:bd:53:15:7b:8e:ab:49:
9e:37:c7:0a:36:08:6a:09:86:69:86:d1:23:4a:19:1e:48:73:
4d:50:cb:f5:b4:60:da:27:2a:f3:c7:cd:66:ea:07:99:3a:71:
27:0b:9c:63:36:12:8c:78:48:fd:c1:0f:a9:b0:28:67:33:2b:
53:6a:89:b7:ae:2d:7a:a1:71:94:52:88:d2:1f:8f:b5:57:39:
f2:3d:d5:52:81:5b:b1:e2:d6:ce:c7:34:4e:6b:64:ac:3b:33:
64:ca:f2:f1:3f:a4:b2:17:ec:7c:df:e9:c5:02:c8:c2:f6:37:
a6:c2:0c:73:98:e6:99:24:49:35:0c:71:ef:ee:cf:81:fc:0b:
d8:31:0c:04:3d:40:77:6b:ee:91:40:47:2e:fe:95:06:49:c6:
e4:53:d9:b4:e1:a4:45:25:08:aa:13:e6:b4:35:6b:fb:86:e5:
dd:da:1b:6a:e2:80:ee:5b:2a:5b:aa:b9:49:ae:b7:a4:5b:91:
4e:19:72:89:4a:27:14:ba:50:1d:58:fb:56:3f:c4:72:d7:e1:
d8:bb:df:44
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjlCMzcxMTAvBgNVBAUTKDQ3Mzg4ODI2QjgxQ0VCQ0I1RDU4RUJBNDEwMzkxNjBE
MjQ3QkMxN0YwHhcNMjUwMTMxMDAyMjMyWhcNMjUwMjA3MDAyMjMyWjAYMRYwFAYD
VQQDEw02NzljMTdjOC0wMTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6EseAqt239IA66LxUKKVYyMtwdIIkJPHgH0dl8sVXW2cYcWIVlyy7Soy70+r
XH6jk30UBWVEYLfBdT80yzXU0INmXYRXyMN8kjN4mP7eO2D0Jdw9G5WQtTjwdMO2
LauOk8zC0hkoNNap+QbZDDsBux/GneAoAcxhMbk44K5YNKpApt9cWHFqYbeOr7g+
RONevAqUSnq6uuxSMxMdhTjhxG65dPrsc84N3ICxywG2rt18ZgSDwyQCkcLqKALL
WJIbC3YpE+SaoE5Aqe0cSMye1j+tcBqExqIsoimWut+5IYl0n9QKugXnmAnSs/bc
sd293cbgTduy8lzRvaar+aajGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjG9Zb7
YmZkDKcrQ+b2PiNuJX8hMB8GA1UdIwQYMBaAFEc4iCa4HOvLXVjrpBA5Fg0ke8F/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUIzNy85QzM5QkUxNjQ4
QzQxMUVDOTRFMTJEODVDNEY5QUUwMi9SemlJSnJnYzY4dGRXT3VrRURrV0RTUjd3
WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1J6aUlKcmdjNjh0ZFdPdWtFRGtXRFNSN3dYOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OUIzNy85QzM5QkUxNjQ4QzQxMUVDOTRFMTJEODVDNEY5QUUwMi9SemlJSnJnYzY4
dGRXT3VrRURrV0RTUjd3WDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCU9/HKLQYuYf7iGxnW06Vm6eu/RNv8Cv2yYWUJefR1g5m71p0XVsvS
pYTjMCUf771TFXuOq0meN8cKNghqCYZphtEjShkeSHNNUMv1tGDaJyrzx81m6geZ
OnEnC5xjNhKMeEj9wQ+psChnMytTaom3ri16oXGUUojSH4+1VznyPdVSgVux4tbO
xzROa2SsOzNkyvLxP6SyF+x83+nFAsjC9jemwgxzmOaZJEk1DHHv7s+B/AvYMQwE
PUB3a+6RQEcu/pUGScbkU9m04aRFJQiqE+a0NWv7huXd2htq4oDuWypbqrlJrrek
W5FOGXKJSicUulAdWPtWP8Ry1+HYu99E
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:48:30 2025 by rpki-client