Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft
File: 6qltynQw36Rxyim4Q4NsHIDlQ54.mft (raw, json)
Hash identifier: vV2afWDUDnvGMevXeIn5QQpd2JDv7ZKb6egXxpRv74k=
Subject key identifier: F7:7F:4B:AB:F8:9B:88:E7:3E:B9:D3:E8:1A:F6:3B:B3:BB:39:DA:F9
Authority key identifier: EA:A9:6D:CA:74:30:DF:A4:71:CA:29:B8:43:83:6C:1C:80:E5:43:9E
Certificate issuer: /CN=A91BB87C/serialNumber=EAA96DCA7430DFA471CA29B843836C1C80E5439E
Certificate serial: 0C5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft
Manifest number: 0C47
Signing time: Fri 31 Jan 2025 18:15:47 +0000
Manifest this update: Fri 31 Jan 2025 18:15:46 +0000
Manifest next update: Fri 07 Feb 2025 18:15:46 +0000
Files and hashes: 1: 6qltynQw36Rxyim4Q4NsHIDlQ54.crl (hash: VazHG3+rR3g2izQhwuBCI3tjSaSHb+Ea7ZkS0pWyKmU=)
2: 5B01916AD15911EE8B8BB151C4F9AE02.roa (hash: exEpVAv7OmSBv6nfn1Ng6Vrt5eD/dXr6N+PdK8CnaV0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3162 (0xc5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB87C/serialNumber=EAA96DCA7430DFA471CA29B843836C1C80E5439E
Validity
Not Before: Jan 31 18:15:46 2025 GMT
Not After : Feb 7 18:15:46 2025 GMT
Subject: CN=679d1353-c874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cc:20:1b:3b:15:a9:c8:07:8f:5b:0d:79:83:
c2:2e:43:5c:e6:23:b2:30:6a:d0:67:bc:f6:83:4d:
a6:99:6c:d0:86:af:da:e2:e6:dc:c1:6e:2d:37:92:
43:a7:5f:e1:ff:e8:33:d7:0b:32:94:23:a5:bc:72:
20:ea:49:e0:d1:3a:a8:bf:d3:e3:37:f9:74:c8:58:
4a:9a:01:35:9f:62:b5:1f:a4:88:d1:b7:81:85:8c:
83:6d:78:ac:30:11:d0:d2:0e:50:8e:a9:71:d7:e5:
aa:77:38:5e:7f:6c:3a:2e:c3:2d:da:f1:0c:a1:f3:
10:ec:23:84:06:4a:2c:0f:a4:4b:63:1c:60:2e:ef:
15:16:61:6f:75:4e:e9:5e:9f:95:db:77:83:3d:ac:
51:e4:71:d8:ae:1b:2a:1e:59:02:ee:44:c3:9a:66:
ad:91:1c:ba:ca:e9:78:99:2b:91:9b:b0:6e:af:11:
6c:9c:0d:98:27:ad:b6:a4:3d:d9:95:3d:b6:67:ed:
ad:5d:ba:c0:5a:0f:ee:29:84:03:58:e8:94:8b:5d:
c0:ba:b2:e3:1d:43:85:87:03:b3:bc:f2:0a:94:51:
a3:11:bc:4e:08:74:b7:0c:b8:ca:9b:50:ab:d4:67:
6d:80:61:e0:a2:00:80:64:98:e6:a6:c7:a6:f4:33:
72:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7F:4B:AB:F8:9B:88:E7:3E:B9:D3:E8:1A:F6:3B:B3:BB:39:DA:F9
X509v3 Authority Key Identifier:
keyid:EA:A9:6D:CA:74:30:DF:A4:71:CA:29:B8:43:83:6C:1C:80:E5:43:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:32:07:08:6d:b5:ea:6d:71:da:b1:14:cd:ea:09:c6:dd:64:
57:52:74:9f:32:16:38:ab:12:6b:48:e1:d6:a8:e9:2e:25:8b:
91:88:26:5f:2d:00:77:18:d8:ff:5b:9a:3a:a3:69:1c:1b:55:
c8:14:cb:31:a9:29:cc:34:70:03:4d:4b:2c:d5:27:2d:eb:53:
e9:c6:a1:04:0f:c7:3b:24:f0:eb:ab:cd:1e:a9:cb:8c:79:e8:
1b:c6:12:a1:cc:bc:a1:f5:1b:79:ab:8e:bd:2f:5f:07:1a:24:
f1:3c:69:a3:6b:a4:c1:4b:51:b2:d4:65:0c:ca:3a:d9:f6:ba:
f7:20:38:71:bf:7c:1b:f5:a7:47:ac:53:4d:73:5d:87:a1:4f:
80:0b:cc:a5:86:ab:6b:6f:ad:5e:77:02:b4:6b:70:f5:8b:d5:
93:63:82:ce:74:51:63:3d:b8:3b:50:f8:85:3b:a0:11:e9:68:
7a:df:1e:5c:f8:c0:5d:a0:04:3b:3c:ff:bc:68:8c:96:08:c7:
83:e5:cb:b5:24:dc:07:da:3c:df:c2:bf:00:18:0a:3a:b6:f9:
c1:85:1a:17:71:39:3f:de:74:a6:b7:b4:83:db:f8:cc:b0:c6:
f1:a2:79:2b:7c:07:64:b2:3d:0e:47:af:e3:0c:90:76:f5:2c:
d3:ee:49:c6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkI4N0MxMTAvBgNVBAUTKEVBQTk2RENBNzQzMERGQTQ3MUNBMjlCODQzODM2QzFD
ODBFNTQzOUUwHhcNMjUwMTMxMTgxNTQ2WhcNMjUwMjA3MTgxNTQ2WjAYMRYwFAYD
VQQDEw02NzlkMTM1My1jODc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2swgGzsVqcgHj1sNeYPCLkNc5iOyMGrQZ7z2g02mmWzQhq/a4ubcwW4tN5JD
p1/h/+gz1wsylCOlvHIg6kng0Tqov9PjN/l0yFhKmgE1n2K1H6SI0beBhYyDbXis
MBHQ0g5Qjqlx1+Wqdzhef2w6LsMt2vEMofMQ7COEBkosD6RLYxxgLu8VFmFvdU7p
Xp+V23eDPaxR5HHYrhsqHlkC7kTDmmatkRy6yul4mSuRm7BurxFsnA2YJ622pD3Z
lT22Z+2tXbrAWg/uKYQDWOiUi13AurLjHUOFhwOzvPIKlFGjEbxOCHS3DLjKm1Cr
1GdtgGHgogCAZJjmpsem9DNy3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPd/S6v4
m4jnPrnT6Br2O7O7Odr5MB8GA1UdIwQYMBaAFOqpbcp0MN+kccopuEODbByA5UOe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjg3Qy82M0Q5MDMxMkZD
MDIxMUU5QTQxOUYzNDBDNEY5QUUwMi82cWx0eW5RdzM2Unh5aW00UTROc0hJRGxR
NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZxbHR5blF3MzZSeHlpbTRRNE5zSElEbFE1NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
Qjg3Qy82M0Q5MDMxMkZDMDIxMUU5QTQxOUYzNDBDNEY5QUUwMi82cWx0eW5RdzM2
Unh5aW00UTROc0hJRGxRNTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBCMgcIbbXqbXHasRTN6gnG3WRXUnSfMhY4qxJrSOHWqOkuJYuRiCZf
LQB3GNj/W5o6o2kcG1XIFMsxqSnMNHADTUss1Sct61PpxqEED8c7JPDrq80eqcuM
eegbxhKhzLyh9Rt5q469L18HGiTxPGmja6TBS1Gy1GUMyjrZ9rr3IDhxv3wb9adH
rFNNc12HoU+AC8ylhqtrb61edwK0a3D1i9WTY4LOdFFjPbg7UPiFO6AR6Wh63x5c
+MBdoAQ7PP+8aIyWCMeD5cu1JNwH2jzfwr8AGAo6tvnBhRoXcTk/3nSmt7SD2/jM
sMbxonkrfAdksj0OR6/jDJB29SzT7knG
-----END CERTIFICATE-----
Generated at Sat Apr 26 22:11:35 2025 by rpki-client