Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft
File: T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft (raw, json)
Hash identifier: 0Ew9qrRPV2Ukrw+kR9c+/mE+Xl6QqhgddrS6n+FYr5A=
Subject key identifier: 18:AC:CB:01:A5:2E:ED:8A:62:9A:BC:8E:82:68:EA:09:42:D1:AE:55
Authority key identifier: 4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29
Certificate issuer: /CN=A91BB883/serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29
Certificate serial: 0BD5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft
Manifest number: 0BCD
Signing time: Fri 31 Jan 2025 18:41:41 +0000
Manifest this update: Fri 31 Jan 2025 18:41:41 +0000
Manifest next update: Fri 07 Feb 2025 18:41:41 +0000
Files and hashes: 1: T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl (hash: TXYwWEvIBsHBhcfbdegyvhSAhiYSJ1S86S81YijiJBM=)
2: 8160C03610E911EA86FA6774C4F9AE02.roa (hash: 8XfCRrs6KyewkevpBqIWOSXTDqr80tEQ4o/AVxw5pnc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3029 (0xbd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB883/serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29
Validity
Not Before: Jan 31 18:41:41 2025 GMT
Not After : Feb 7 18:41:41 2025 GMT
Subject: CN=679d1965-57a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7c:95:a7:0f:dc:1e:0d:6a:ae:42:25:0d:1b:
72:01:dd:f6:1a:93:3a:8d:e3:ec:c8:ce:d8:66:bd:
f2:2b:ea:a1:85:c7:8e:22:e7:65:61:d3:c1:52:e4:
de:6e:29:48:f0:a3:8c:b7:bb:69:29:78:51:6e:11:
7a:20:29:e5:e0:fe:98:7a:f5:12:13:a2:f0:fd:06:
c8:16:0e:68:3c:22:30:bc:19:d2:21:d2:9f:9b:14:
f3:bc:96:61:31:e4:ee:4b:29:5e:e7:12:7d:b4:bd:
91:21:d8:4f:57:f2:68:7a:96:7b:df:fb:2a:aa:e9:
51:6c:ed:63:cd:74:20:e6:ed:3a:36:61:c8:81:2a:
ff:74:95:88:7d:98:50:68:fc:59:67:e9:11:1f:ef:
6b:ea:68:8e:e3:d7:42:9b:e5:99:25:45:7b:07:70:
7b:a0:14:ac:41:31:06:87:90:69:df:60:d5:3f:71:
6f:ad:4d:30:76:f8:80:73:c7:26:bf:02:37:8e:57:
cf:1e:6d:6c:46:3e:86:31:a9:ab:c4:83:22:09:fc:
cf:29:6c:dc:3f:72:d0:24:cc:2d:57:9a:9c:ab:d9:
4e:bc:c0:cd:09:4f:d2:bd:74:ec:c7:f1:a0:72:88:
1a:9e:f7:c9:5c:21:b4:56:1c:fc:b2:b9:24:3d:fc:
a9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AC:CB:01:A5:2E:ED:8A:62:9A:BC:8E:82:68:EA:09:42:D1:AE:55
X509v3 Authority Key Identifier:
keyid:4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:87:91:21:79:d1:81:45:a8:bc:08:37:59:a7:07:7d:da:90:
1d:51:0b:26:de:6f:9a:cf:6a:b6:1f:be:25:aa:2d:2b:61:c3:
b5:c3:a8:b0:65:2d:29:26:53:41:ec:9b:e5:a0:c4:fc:6e:e0:
fc:f5:99:d0:8b:3f:e2:46:fa:ef:a4:34:bb:d2:32:1d:1b:9e:
25:84:8c:89:bf:47:12:a3:9d:9f:a8:39:fb:3a:47:b6:24:71:
08:b4:a8:41:80:3c:e4:db:c3:58:9f:69:75:4f:77:6b:27:09:
0e:44:8a:5e:c2:fa:06:63:e2:b8:66:14:30:c9:e2:c8:ed:9f:
1a:75:a4:a5:cb:a0:7c:fa:9f:cb:7b:78:8c:62:1e:ff:a2:15:
58:00:a4:04:1e:c5:6a:d4:71:8a:f4:85:5d:8e:06:b1:70:2e:
01:90:09:3d:2e:8f:2a:c8:76:d6:be:d1:83:c5:fd:af:19:9e:
d8:23:5f:52:76:d3:c7:f0:b4:83:e7:5f:ce:6a:70:47:36:ed:
fe:a6:83:a9:92:20:54:a3:13:cd:82:33:7e:7d:9e:85:4e:25:
c7:86:83:e4:6e:54:fc:1a:3c:e6:5f:b8:27:50:75:49:aa:0f:
40:02:c6:d2:85:03:2b:ec:b9:c5:27:6c:dc:fc:a6:b2:cc:6b:
5e:79:10:e7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkI4ODMxMTAvBgNVBAUTKDRGNUFGNTY1RDMwREQ1NEYyNDE0N0VGNUUxNzhBQTBC
QUEzM0ZDMjkwHhcNMjUwMTMxMTg0MTQxWhcNMjUwMjA3MTg0MTQxWjAYMRYwFAYD
VQQDEw02NzlkMTk2NS01N2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtHyVpw/cHg1qrkIlDRtyAd32GpM6jePsyM7YZr3yK+qhhceOIudlYdPBUuTe
bilI8KOMt7tpKXhRbhF6ICnl4P6YevUSE6Lw/QbIFg5oPCIwvBnSIdKfmxTzvJZh
MeTuSyle5xJ9tL2RIdhPV/JoepZ73/sqqulRbO1jzXQg5u06NmHIgSr/dJWIfZhQ
aPxZZ+kRH+9r6miO49dCm+WZJUV7B3B7oBSsQTEGh5Bp32DVP3FvrU0wdviAc8cm
vwI3jlfPHm1sRj6GMamrxIMiCfzPKWzcP3LQJMwtV5qcq9lOvMDNCU/SvXTsx/Gg
coganvfJXCG0Vhz8srkkPfypsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBisywGl
Lu2KYpq8joJo6glC0a5VMB8GA1UdIwQYMBaAFE9a9WXTDdVPJBR+9eF4qguqM/wp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjg4My9FOTgyQkEzNjEw
RTcxMUVBOUQyMUMyNkZDNEY5QUUwMi9UMXIxWmRNTjFVOGtGSDcxNFhpcUM2b3pf
Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1QxcjFaZE1OMVU4a0ZINzE0WGlxQzZvel9Day5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
Qjg4My9FOTgyQkEzNjEwRTcxMUVBOUQyMUMyNkZDNEY5QUUwMi9UMXIxWmRNTjFV
OGtGSDcxNFhpcUM2b3pfQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB6h5EhedGBRai8CDdZpwd92pAdUQsm3m+az2q2H74lqi0rYcO1w6iw
ZS0pJlNB7JvloMT8buD89ZnQiz/iRvrvpDS70jIdG54lhIyJv0cSo52fqDn7Oke2
JHEItKhBgDzk28NYn2l1T3drJwkORIpewvoGY+K4ZhQwyeLI7Z8adaSly6B8+p/L
e3iMYh7/ohVYAKQEHsVq1HGK9IVdjgaxcC4BkAk9Lo8qyHbWvtGDxf2vGZ7YI19S
dtPH8LSD51/OanBHNu3+poOpkiBUoxPNgjN+fZ6FTiXHhoPkblT8GjzmX7gnUHVJ
qg9AAsbShQMr7LnFJ2zc/KayzGteeRDn
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:19:22 2025 by rpki-client