Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.mft
File: X45P1KbdY15DeC5aBVYiyrJlSjc.mft (raw, json)
Hash identifier: oYxgSQErTgNfV7z9O36c9jdCIgeTfVV1qCDujSReSO8=
Subject key identifier: 9B:2C:DA:3E:31:7B:16:6B:3E:7D:EB:3C:97:E0:E3:9C:16:21:17:17
Authority key identifier: 5F:8E:4F:D4:A6:DD:63:5E:43:78:2E:5A:05:56:22:CA:B2:65:4A:37
Certificate issuer: /CN=A91BCF31/serialNumber=5F8E4FD4A6DD635E43782E5A055622CAB2654A37
Certificate serial: 08C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X45P1KbdY15DeC5aBVYiyrJlSjc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.mft
Manifest number: 08BA
Signing time: Thu 30 Jan 2025 20:33:08 +0000
Manifest this update: Thu 30 Jan 2025 20:33:08 +0000
Manifest next update: Thu 06 Feb 2025 20:33:08 +0000
Files and hashes: 1: X45P1KbdY15DeC5aBVYiyrJlSjc.crl (hash: ZhiaOQ8piHLQvgc/50B6yTinbe/MMsUyK4ABD4zdTLI=)
2: B757FF4EAB8311EA9983D717C4F9AE02.roa (hash: q5IkP0u3/4X3zrB3YXKIdUEoegOtePooQhqPih9d+0I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2241 (0x8c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BCF31/serialNumber=5F8E4FD4A6DD635E43782E5A055622CAB2654A37
Validity
Not Before: Jan 30 20:33:08 2025 GMT
Not After : Feb 6 20:33:08 2025 GMT
Subject: CN=679be204-43e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7e:d1:c9:a9:b8:7b:51:39:b2:74:06:b1:09:
dd:35:bf:08:89:69:67:fe:47:78:79:e3:d2:57:9b:
dc:62:2b:47:3c:54:eb:85:dc:af:db:81:11:b2:a3:
0d:14:ee:09:60:3e:e3:bc:f0:8c:e1:b8:d4:f5:82:
65:e9:b6:8a:83:9f:6b:97:33:e4:4b:84:df:04:55:
66:54:9b:06:c8:8a:76:97:0e:64:67:1a:8c:e0:1b:
f7:07:22:ce:7b:87:19:95:18:b9:34:28:63:1f:44:
45:9f:cd:ca:9a:42:23:df:8f:d1:de:f5:b4:45:71:
26:ec:be:5a:19:2e:98:28:94:d7:dc:8d:63:9d:21:
97:9d:b4:6b:a7:07:b1:e2:82:15:69:13:aa:d2:09:
85:75:03:0e:d6:17:36:7c:bd:86:4a:2f:da:c5:9b:
5c:d5:2c:52:31:5d:2f:ed:56:b3:eb:08:01:c7:cb:
b9:d4:59:89:f9:09:e4:82:01:50:f2:3c:21:0a:61:
28:3b:12:3c:29:f7:6c:bc:1c:da:5d:ef:f0:f4:86:
46:e9:39:7d:cd:e5:9e:bd:24:3b:ed:64:1c:26:60:
4f:30:70:41:dc:1e:75:91:78:9b:ba:4b:83:92:3e:
a4:c9:1b:91:6b:c4:95:61:8a:28:c6:78:fb:b7:e9:
e7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2C:DA:3E:31:7B:16:6B:3E:7D:EB:3C:97:E0:E3:9C:16:21:17:17
X509v3 Authority Key Identifier:
keyid:5F:8E:4F:D4:A6:DD:63:5E:43:78:2E:5A:05:56:22:CA:B2:65:4A:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X45P1KbdY15DeC5aBVYiyrJlSjc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f3:56:19:1f:11:06:93:7b:59:79:d4:f6:ee:14:1f:78:b0:
1a:2d:fe:6c:b0:8e:ea:6a:c4:55:a8:7a:85:f7:81:47:9b:0a:
56:61:96:76:45:ae:29:ea:c1:a6:ce:ae:c0:f4:be:b6:22:96:
b5:bb:10:ab:ce:36:c1:b5:8a:1c:c0:5c:52:01:de:3e:8e:1d:
45:43:a3:94:45:09:02:7b:92:23:c8:ec:5a:59:fe:d8:3c:21:
cd:d8:a7:db:11:84:2a:cd:0e:cb:9a:8a:49:e2:18:58:50:87:
4d:1e:58:0c:b8:d6:21:3e:eb:ac:bf:96:6e:2c:bc:f3:b8:51:
3d:ed:1b:77:fc:d2:88:3f:25:95:b5:45:1d:d3:e3:05:17:ed:
40:72:a9:75:19:f2:95:f6:5f:ef:c5:a5:fe:7f:e0:fc:70:6b:
c3:7f:8c:50:aa:1f:3b:4f:69:2f:ce:6a:69:60:2e:ef:30:f2:
d3:ce:a2:49:51:ce:b6:4b:cb:3c:ae:cb:e8:d3:58:e0:09:53:
1e:ca:2d:22:0d:60:67:72:3a:33:c4:67:d7:bd:fe:a7:65:bd:
2a:2c:5d:f7:30:29:33:98:a8:18:7a:21:82:62:41:7c:bd:aa:
0c:4b:6d:f5:e0:3f:23:b9:8a:f4:0e:a2:01:46:41:f6:e5:13:
66:cd:f8:e5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkNGMzExMTAvBgNVBAUTKDVGOEU0RkQ0QTZERDYzNUU0Mzc4MkU1QTA1NTYyMkNB
QjI2NTRBMzcwHhcNMjUwMTMwMjAzMzA4WhcNMjUwMjA2MjAzMzA4WjAYMRYwFAYD
VQQDEw02NzliZTIwNC00M2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz37Ryam4e1E5snQGsQndNb8IiWln/kd4eePSV5vcYitHPFTrhdyv24ERsqMN
FO4JYD7jvPCM4bjU9YJl6baKg59rlzPkS4TfBFVmVJsGyIp2lw5kZxqM4Bv3ByLO
e4cZlRi5NChjH0RFn83KmkIj34/R3vW0RXEm7L5aGS6YKJTX3I1jnSGXnbRrpwex
4oIVaROq0gmFdQMO1hc2fL2GSi/axZtc1SxSMV0v7Vaz6wgBx8u51FmJ+QnkggFQ
8jwhCmEoOxI8KfdsvBzaXe/w9IZG6Tl9zeWevSQ77WQcJmBPMHBB3B51kXibukuD
kj6kyRuRa8SVYYooxnj7t+nnBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJss2j4x
exZrPn3rPJfg45wWIRcXMB8GA1UdIwQYMBaAFF+OT9Sm3WNeQ3guWgVWIsqyZUo3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0YzMS9BRjdGRUQ2MkFB
NEUxMUVBOUQ4RUM3ODJDNEY5QUUwMi9YNDVQMUtiZFkxNURlQzVhQlZZaXlySmxT
amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1g0NVAxS2JkWTE1RGVDNWFCVllpeXJKbFNqYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
Q0YzMS9BRjdGRUQ2MkFBNEUxMUVBOUQ4RUM3ODJDNEY5QUUwMi9YNDVQMUtiZFkx
NURlQzVhQlZZaXlySmxTamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCP81YZHxEGk3tZedT27hQfeLAaLf5ssI7qasRVqHqF94FHmwpWYZZ2
Ra4p6sGmzq7A9L62Ipa1uxCrzjbBtYocwFxSAd4+jh1FQ6OURQkCe5IjyOxaWf7Y
PCHN2KfbEYQqzQ7LmopJ4hhYUIdNHlgMuNYhPuusv5ZuLLzzuFE97Rt3/NKIPyWV
tUUd0+MFF+1Acql1GfKV9l/vxaX+f+D8cGvDf4xQqh87T2kvzmppYC7vMPLTzqJJ
Uc62S8s8rsvo01jgCVMeyi0iDWBncjozxGfXvf6nZb0qLF33MCkzmKgYeiGCYkF8
vaoMS2314D8juYr0DqIBRkH25RNmzfjl
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:40:50 2025 by rpki-client