Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft
File: IX2ikIx1R129zapw42ubQNSRLt0.mft (raw, json)
Hash identifier: iT/G5erxRSpAYeu5W+h+Aka1vUKwrXCK0v6r9UZb/p4=
Subject key identifier: 39:BA:52:8C:3F:75:76:F4:46:5D:73:D6:75:B1:98:17:9C:F8:92:50
Authority key identifier: 21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD
Certificate issuer: /CN=A91BABFD/serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD
Certificate serial: FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft
Manifest number: F5
Signing time: Fri 31 Jan 2025 04:23:15 +0000
Manifest this update: Fri 31 Jan 2025 04:23:14 +0000
Manifest next update: Fri 07 Feb 2025 04:23:14 +0000
Files and hashes: 1: IX2ikIx1R129zapw42ubQNSRLt0.crl (hash: qjEtQJdRR+erq4YLip+rnh6Mt3owvMjStHn0Gosjr/Q=)
2: E0E9B1966D8A11EEB33A1E83C4F9AE02.roa (hash: YEagGQfd4UV4nz53l/WybeYAt4w6+zm6QyFgV48pGBc=)
3: 164B8B986D8B11EEAE28C283C4F9AE02.roa (hash: zzpFcIYATvvz+ehYyoXcGsAYVOBFYBXyZDv/oX18Mx0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251 (0xfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BABFD/serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD
Validity
Not Before: Jan 31 04:23:14 2025 GMT
Not After : Feb 7 04:23:14 2025 GMT
Subject: CN=679c5033-6a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8e:01:89:30:29:a2:c0:e5:a3:bd:12:40:cb:
bd:b3:e4:90:c9:2d:ed:22:19:62:9a:f7:da:08:25:
80:cb:41:00:a3:6d:16:87:fb:f3:9a:91:10:2b:a6:
51:c0:b9:9c:49:2c:13:09:1c:2e:e2:f2:a3:88:91:
dc:b0:81:5f:91:9d:b8:d7:6a:93:7b:ee:b9:33:5d:
24:41:d3:9c:0a:30:a9:72:93:49:a6:29:64:60:d7:
65:cb:1c:b8:3a:db:e9:4a:a8:15:62:68:2f:6f:44:
f4:07:e1:99:c9:69:5e:bf:ca:72:82:f0:eb:70:79:
f0:fd:33:05:e4:16:a5:64:f4:18:eb:cb:1f:a9:16:
0c:8d:26:0d:d7:1b:fd:ef:e9:2f:33:77:d7:58:65:
0b:e1:57:04:81:c3:ea:dc:fa:4f:fd:3c:e5:23:d4:
96:82:59:6d:36:65:84:34:a3:1a:fd:d4:81:40:b1:
80:f6:3e:98:05:39:eb:be:1f:8d:a2:7b:4c:d7:33:
db:ee:a1:48:40:af:54:03:dd:d8:b9:04:a5:7a:5f:
79:14:dc:d6:28:cd:5c:12:a4:01:be:ce:2d:d7:3d:
9e:b1:d1:a1:44:82:56:93:93:e8:6f:ab:f0:e9:a7:
4d:67:a2:06:08:be:0b:97:08:19:d7:a3:b2:03:2b:
5b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BA:52:8C:3F:75:76:F4:46:5D:73:D6:75:B1:98:17:9C:F8:92:50
X509v3 Authority Key Identifier:
keyid:21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e0:32:44:1f:2b:32:62:0e:a3:90:7e:c3:de:7f:44:d5:4b:
fc:3c:a0:81:64:51:7c:d2:db:7d:8e:96:37:66:40:8f:92:40:
ce:9d:5e:43:b1:c5:fa:a8:47:77:7a:9f:5d:59:60:3f:77:05:
b4:e2:78:e2:da:bd:b6:ba:4d:66:30:76:b1:3e:d6:75:6f:b2:
3e:60:62:ce:df:50:d0:ff:ae:6b:43:02:28:67:da:42:27:33:
32:af:24:ea:6f:42:9a:ff:91:5a:e3:70:88:78:36:4f:2e:9a:
4f:c5:1e:b9:ef:6c:82:0d:14:79:8e:f7:09:26:47:25:4c:bf:
a4:da:b1:0f:c9:06:4a:ac:60:00:cd:31:ee:e2:c3:d1:70:11:
c5:64:19:ec:8a:ca:2c:33:c5:59:32:8d:1a:d6:87:18:92:4a:
20:f3:42:87:03:82:8b:a1:bc:b0:46:a7:85:40:c1:f5:3a:c9:
92:05:a1:87:db:b6:70:b7:f2:0f:08:ba:90:b7:de:c9:fe:fb:
be:e7:a1:ed:66:0b:24:8b:31:cd:63:2b:f6:eb:04:fc:f4:da:
d5:e4:be:af:83:87:ac:92:79:65:63:59:d7:c9:57:e6:3a:83:
9c:f0:cc:a3:6a:ea:22:1e:85:27:52:03:32:fa:b5:25:a5:1a:
a0:ff:1c:6a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkFCRkQxMTAvBgNVBAUTKDIxN0RBMjkwOEM3NTQ3NURCRENEQUE3MEUzNkI5QjQw
RDQ5MTJFREQwHhcNMjUwMTMxMDQyMzE0WhcNMjUwMjA3MDQyMzE0WjAYMRYwFAYD
VQQDEw02NzljNTAzMy02YTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwI4BiTAposDlo70SQMu9s+SQyS3tIhlimvfaCCWAy0EAo20Wh/vzmpEQK6ZR
wLmcSSwTCRwu4vKjiJHcsIFfkZ2412qTe+65M10kQdOcCjCpcpNJpilkYNdlyxy4
OtvpSqgVYmgvb0T0B+GZyWlev8pygvDrcHnw/TMF5BalZPQY68sfqRYMjSYN1xv9
7+kvM3fXWGUL4VcEgcPq3PpP/TzlI9SWglltNmWENKMa/dSBQLGA9j6YBTnrvh+N
ontM1zPb7qFIQK9UA93YuQSlel95FNzWKM1cEqQBvs4t1z2esdGhRIJWk5Pob6vw
6adNZ6IGCL4LlwgZ16OyAytbGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDm6Uow/
dXb0Rl1z1nWxmBec+JJQMB8GA1UdIwQYMBaAFCF9opCMdUddvc2qcONrm0DUkS7d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUJGRC84OTVBNDk1MDZE
ODkxMUVFODJBMUY2ODBDNEY5QUUwMi9JWDJpa0l4MVIxMjl6YXB3NDJ1YlFOU1JM
dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lYMmlrSXgxUjEyOXphcHc0MnViUU5TUkx0MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QUJGRC84OTVBNDk1MDZEODkxMUVFODJBMUY2ODBDNEY5QUUwMi9JWDJpa0l4MVIx
Mjl6YXB3NDJ1YlFOU1JMdDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBt4DJEHysyYg6jkH7D3n9E1Uv8PKCBZFF80tt9jpY3ZkCPkkDOnV5D
scX6qEd3ep9dWWA/dwW04nji2r22uk1mMHaxPtZ1b7I+YGLO31DQ/65rQwIoZ9pC
JzMyryTqb0Ka/5Fa43CIeDZPLppPxR6572yCDRR5jvcJJkclTL+k2rEPyQZKrGAA
zTHu4sPRcBHFZBnsisosM8VZMo0a1ocYkkog80KHA4KLobywRqeFQMH1OsmSBaGH
27Zwt/IPCLqQt97J/vu+56HtZgskizHNYyv26wT89NrV5L6vg4esknllY1nXyVfm
OoOc8MyjauoiHoUnUgMy+rUlpRqg/xxq
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:19:14 2025 by rpki-client