Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft
File: AShwXWnFHg4rB4rtuZiR5_GbTR8.mft (raw, json)
Hash identifier: XQj8Gv9cWA07pJUBR+rB1Q4cO7z4R/Vbb7Tks+rwq8o=
Subject key identifier: 75:B5:0E:3D:8A:54:4A:58:D9:A0:32:53:8A:9A:CC:EC:26:59:73:6F
Authority key identifier: 01:28:70:5D:69:C5:1E:0E:2B:07:8A:ED:B9:98:91:E7:F1:9B:4D:1F
Certificate issuer: /CN=A91C0C0B/serialNumber=0128705D69C51E0E2B078AEDB99891E7F19B4D1F
Certificate serial: 0B4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft
Manifest number: 0B40
Signing time: Thu 30 Jan 2025 19:13:20 +0000
Manifest this update: Thu 30 Jan 2025 19:13:20 +0000
Manifest next update: Thu 06 Feb 2025 19:13:20 +0000
Files and hashes: 1: AShwXWnFHg4rB4rtuZiR5_GbTR8.crl (hash: T6uJCMuXWw9jR3hFx/F5fVjJ1KnrxuLQuPYobxbqGfQ=)
2: E85B23282DF211EAA63F5D60C4F9AE02.roa (hash: mo/NLmT3qTw906fWZIYD+HCMnaLWUZhtdPeHn3oqJ6A=)
3: 71E30CDCC4ED11EAA1C5766AC4F9AE02.roa (hash: vucacXYSTLw3pjicQM0MXD2U1//BsbEO3gpX4wVcXB8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2894 (0xb4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0C0B/serialNumber=0128705D69C51E0E2B078AEDB99891E7F19B4D1F
Validity
Not Before: Jan 30 19:13:20 2025 GMT
Not After : Feb 6 19:13:20 2025 GMT
Subject: CN=679bcf50-5d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:13:3f:e7:23:d7:93:ab:4e:2b:6e:46:a4:0f:
cf:72:29:7e:44:44:0b:9e:57:04:ad:89:a4:9b:4d:
c7:2d:5c:16:61:a1:6c:42:0f:b9:1d:b8:86:ac:74:
c7:97:14:57:f6:9f:c8:81:23:e5:f2:37:fd:af:0a:
87:f0:ee:36:47:c1:80:13:f1:2d:5f:e2:15:5a:7e:
b5:01:66:19:e1:61:37:85:fc:54:d3:a8:29:4f:86:
57:bd:41:26:a6:3d:55:15:db:49:38:48:15:18:cb:
41:89:94:78:63:26:74:74:dc:23:ae:a5:30:9a:ee:
b8:a8:8b:d8:8f:76:2d:bb:f4:82:f3:50:a8:56:9e:
9f:90:8c:a2:e9:32:cb:94:40:69:10:53:97:56:44:
9a:a0:d6:f8:ae:f9:20:c8:ab:ef:65:3c:d8:71:98:
37:49:92:38:cc:9f:4c:3c:30:39:ef:15:c2:78:62:
6a:54:8d:60:53:89:84:2c:5d:9c:f2:7d:9b:dd:27:
c6:a5:db:10:ce:da:e0:0d:83:ac:f6:31:7c:56:2c:
ff:1c:9d:5f:6f:10:29:ac:25:c5:6d:7a:d0:6e:b0:
93:80:9e:7c:94:40:a2:f7:2a:85:f2:23:03:fc:6a:
27:42:b8:f8:22:f5:81:6b:72:39:14:5f:85:9f:7e:
1e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B5:0E:3D:8A:54:4A:58:D9:A0:32:53:8A:9A:CC:EC:26:59:73:6F
X509v3 Authority Key Identifier:
keyid:01:28:70:5D:69:C5:1E:0E:2B:07:8A:ED:B9:98:91:E7:F1:9B:4D:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:20:dc:eb:a9:2a:6b:37:1e:34:ba:95:1f:f4:b0:3d:43:36:
de:4b:d3:fb:3e:cd:37:1a:33:18:c4:33:3a:53:f8:52:2d:42:
6b:0f:29:a3:60:05:ee:60:92:d2:b9:64:61:d7:85:ef:b3:1b:
96:ff:7c:d8:ff:cc:6d:90:0a:9b:96:32:27:80:9b:bd:23:1a:
11:3e:2c:c1:bf:a6:67:67:42:8c:4f:7b:19:01:e8:2c:00:49:
4e:f7:7e:e3:72:dd:b9:6a:2c:de:9e:7b:76:46:b7:07:9d:0c:
fc:24:95:0e:c7:5f:d0:15:8d:c4:ab:1e:c2:3a:8c:8a:ba:4c:
4b:93:63:e8:b9:14:7d:a0:1d:9a:a1:61:cb:d4:00:ae:16:62:
32:57:4d:ef:99:e5:5a:19:a0:6e:c1:34:16:b5:88:cb:3c:55:
43:af:62:ea:82:0a:d9:65:9c:a8:09:0d:f8:42:32:bb:24:44:
f8:6d:47:63:29:51:dc:83:04:51:69:88:08:70:0c:5b:d3:75:
82:07:b6:5e:80:d1:62:a6:1c:da:9d:9d:f9:6c:ba:7f:de:a9:
4d:ff:86:2b:a8:f4:f1:84:36:ac:a3:19:36:07:81:3a:c5:12:
86:03:70:42:21:25:c8:da:2e:d5:cf:b2:d7:90:d1:fc:af:a6:
6e:35:64:ac
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzBDMEIxMTAvBgNVBAUTKDAxMjg3MDVENjlDNTFFMEUyQjA3OEFFREI5OTg5MUU3
RjE5QjREMUYwHhcNMjUwMTMwMTkxMzIwWhcNMjUwMjA2MTkxMzIwWjAYMRYwFAYD
VQQDEw02NzliY2Y1MC01ZDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnxM/5yPXk6tOK25GpA/Pcil+REQLnlcErYmkm03HLVwWYaFsQg+5HbiGrHTH
lxRX9p/IgSPl8jf9rwqH8O42R8GAE/EtX+IVWn61AWYZ4WE3hfxU06gpT4ZXvUEm
pj1VFdtJOEgVGMtBiZR4YyZ0dNwjrqUwmu64qIvYj3Ytu/SC81CoVp6fkIyi6TLL
lEBpEFOXVkSaoNb4rvkgyKvvZTzYcZg3SZI4zJ9MPDA57xXCeGJqVI1gU4mELF2c
8n2b3SfGpdsQztrgDYOs9jF8Viz/HJ1fbxAprCXFbXrQbrCTgJ58lECi9yqF8iMD
/GonQrj4IvWBa3I5FF+Fn34eKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHW1Dj2K
VEpY2aAyU4qazOwmWXNvMB8GA1UdIwQYMBaAFAEocF1pxR4OKweK7bmYkefxm00f
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEMwQi80NDU5NDQ4QzJD
NkExMUVBOUNFQ0JGNEFDNEY5QUUwMi9BU2h3WFduRkhnNHJCNHJ0dVppUjVfR2JU
UjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FTaHdYV25GSGc0ckI0cnR1WmlSNV9HYlRSOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MEMwQi80NDU5NDQ4QzJDNkExMUVBOUNFQ0JGNEFDNEY5QUUwMi9BU2h3WFduRkhn
NHJCNHJ0dVppUjVfR2JUUjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCJINzrqSprNx40upUf9LA9QzbeS9P7Ps03GjMYxDM6U/hSLUJrDymj
YAXuYJLSuWRh14XvsxuW/3zY/8xtkAqbljIngJu9IxoRPizBv6ZnZ0KMT3sZAegs
AElO937jct25aizennt2RrcHnQz8JJUOx1/QFY3Eqx7COoyKukxLk2PouRR9oB2a
oWHL1ACuFmIyV03vmeVaGaBuwTQWtYjLPFVDr2LqggrZZZyoCQ34QjK7JET4bUdj
KVHcgwRRaYgIcAxb03WCB7ZegNFiphzanZ35bLp/3qlN/4YrqPTxhDasoxk2B4E6
xRKGA3BCISXI2i7Vz7LXkNH8r6ZuNWSs
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:18:53 2025 by rpki-client