Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
File: c1jmvCkIxoFAvzuKgV9pXcsqiks.mft (raw, json)
Hash identifier: DsoTQABKoD1rpCbiKy57JmSmbsBvFySKM47XWir4mVw=
Subject key identifier: 45:BA:2B:EA:5F:7D:24:EC:C4:F0:86:CF:0B:A7:45:CE:9A:A2:2C:9C
Authority key identifier: 73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B
Certificate issuer: /CN=A91BB227/serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B
Certificate serial: 0104
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
Manifest number: FF
Signing time: Fri 31 Jan 2025 04:16:43 +0000
Manifest this update: Fri 31 Jan 2025 04:16:43 +0000
Manifest next update: Fri 07 Feb 2025 04:16:43 +0000
Files and hashes: 1: c1jmvCkIxoFAvzuKgV9pXcsqiks.crl (hash: DbeIQtXW0fnRp8u2a1b9twn4l3w4baQax3ReDo9vZkw=)
2: 71014290D87411EE97234F5CC4F9AE02.roa (hash: UriYheink9mBFpQsL32JX0ce8LUKE4XsmIwp1611QqI=)
3: C01378B2D87411EE85EACB5CC4F9AE02.roa (hash: jh0oO56JyhcPYhu6/Q/RMYfmAkOnoy1yyTgFcYp5ApY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB227/serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B
Validity
Not Before: Jan 31 04:16:43 2025 GMT
Not After : Feb 7 04:16:43 2025 GMT
Subject: CN=679c4eab-df1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d3:c4:ce:d0:d3:4a:e3:65:36:34:5a:d1:26:
2c:92:57:e9:75:17:43:96:4f:45:ca:38:4b:77:9c:
99:ee:05:c4:8c:e9:65:d5:c0:de:35:61:40:db:4a:
ca:dd:d6:1a:93:68:12:64:7f:bd:02:37:d1:96:f7:
68:6e:1b:78:bb:23:4b:3c:40:c3:18:0e:5a:3f:f9:
a2:7c:a5:5a:d8:52:26:57:76:c9:c9:1a:97:1b:86:
c4:e3:38:88:2a:38:f8:db:cf:6b:00:a4:f3:d0:96:
2b:39:0a:59:45:c3:60:a9:cf:de:4d:bf:e6:33:f5:
06:bc:a5:f0:2c:63:68:6e:cf:d5:4c:d2:7a:da:8f:
03:05:5f:86:88:af:cb:59:e8:38:d1:54:6e:87:cc:
c3:ed:99:89:4c:52:fe:44:9d:8a:6d:73:f1:1f:52:
74:8e:c9:94:01:9b:04:a7:3a:bd:b1:ee:42:35:18:
ea:77:10:55:5a:16:9b:d3:66:92:72:be:89:7c:ef:
6e:f2:37:c0:bf:86:84:7f:06:2a:4b:25:c2:86:25:
63:dc:35:cd:3b:2f:4c:b0:2a:45:7d:b6:56:dc:ad:
96:d1:09:f8:de:73:33:4b:e6:46:98:1f:02:2d:cb:
ea:e5:52:0d:e6:44:b6:3c:ab:25:32:8d:b3:3e:64:
45:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BA:2B:EA:5F:7D:24:EC:C4:F0:86:CF:0B:A7:45:CE:9A:A2:2C:9C
X509v3 Authority Key Identifier:
keyid:73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:e1:d2:4b:38:6a:35:d6:ee:10:97:9a:c1:de:08:2e:05:86:
e3:66:98:62:56:62:f4:7b:94:c7:61:49:4f:1b:02:97:97:ff:
0b:9e:f1:cd:a6:a9:e4:48:46:8d:d7:56:99:fe:bc:b8:97:d8:
48:02:9b:6f:e5:28:b2:e1:9c:31:b8:04:43:55:39:8e:77:39:
09:9d:48:09:cb:23:49:df:78:4c:c3:d1:0a:64:d5:87:ee:f0:
dc:86:e3:8f:87:ca:91:fc:dc:d0:2f:de:aa:84:52:63:c7:90:
92:06:af:1c:c4:b7:95:e2:e3:7c:f2:f7:83:07:17:2d:a4:21:
eb:49:d9:b5:1b:05:df:5a:6f:1c:c8:50:98:a4:3e:b9:8e:11:
1b:8c:70:2d:c5:eb:4e:27:98:2f:cf:01:0d:dc:ae:9f:4e:ee:
09:b7:95:e8:1c:f6:76:74:8a:18:c8:2f:e3:95:53:0d:95:ce:
74:01:17:cb:e4:91:9e:62:9c:46:fb:0b:e1:cf:b6:3f:1e:38:
3e:47:e6:da:b6:e7:26:8b:4b:33:5e:23:93:06:0e:a9:02:9f:
6c:1b:68:97:b1:c2:12:d0:28:6b:3d:a9:23:bc:15:3e:4a:6f:
9f:49:44:eb:f3:9b:86:fd:d5:10:77:5f:71:48:a2:e4:fa:ef:
3b:04:ec:67
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkIyMjcxMTAvBgNVBAUTKDczNThFNkJDMjkwOEM2ODE0MEJGM0I4QTgxNUY2OTVE
Q0IyQThBNEIwHhcNMjUwMTMxMDQxNjQzWhcNMjUwMjA3MDQxNjQzWjAYMRYwFAYD
VQQDEw02NzljNGVhYi1kZjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlNPEztDTSuNlNjRa0SYsklfpdRdDlk9FyjhLd5yZ7gXEjOll1cDeNWFA20rK
3dYak2gSZH+9AjfRlvdobht4uyNLPEDDGA5aP/mifKVa2FImV3bJyRqXG4bE4ziI
Kjj4289rAKTz0JYrOQpZRcNgqc/eTb/mM/UGvKXwLGNobs/VTNJ62o8DBV+GiK/L
Weg40VRuh8zD7ZmJTFL+RJ2KbXPxH1J0jsmUAZsEpzq9se5CNRjqdxBVWhab02aS
cr6JfO9u8jfAv4aEfwYqSyXChiVj3DXNOy9MsCpFfbZW3K2W0Qn43nMzS+ZGmB8C
Lcvq5VIN5kS2PKslMo2zPmRFqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEW6K+pf
fSTsxPCGzwunRc6aoiycMB8GA1UdIwQYMBaAFHNY5rwpCMaBQL87ioFfaV3LKopL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjIyNy9ENUE1NTM5ODVE
MkQxMUVFQTNFMzlGNTdDNEY5QUUwMi9jMWptdkNrSXhvRkF2enVLZ1Y5cFhjc3Fp
a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Mxam12Q2tJeG9GQXZ6dUtnVjlwWGNzcWlrcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QjIyNy9ENUE1NTM5ODVEMkQxMUVFQTNFMzlGNTdDNEY5QUUwMi9jMWptdkNrSXhv
RkF2enVLZ1Y5cFhjc3Fpa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDG4dJLOGo11u4Ql5rB3gguBYbjZphiVmL0e5THYUlPGwKXl/8LnvHN
pqnkSEaN11aZ/ry4l9hIAptv5Siy4ZwxuARDVTmOdzkJnUgJyyNJ33hMw9EKZNWH
7vDchuOPh8qR/NzQL96qhFJjx5CSBq8cxLeV4uN88veDBxctpCHrSdm1GwXfWm8c
yFCYpD65jhEbjHAtxetOJ5gvzwEN3K6fTu4Jt5XoHPZ2dIoYyC/jlVMNlc50ARfL
5JGeYpxG+wvhz7Y/Hjg+R+batucmi0szXiOTBg6pAp9sG2iXscIS0ChrPakjvBU+
Sm+fSUTr85uG/dUQd19xSKLk+u87BOxn
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:01:19 2025 by rpki-client