Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft
File: SUICsDHp9CdkMVegbvqkwHDH8-0.mft (raw, json)
Hash identifier: EmqhiSc/g/ggepxdJ0VXCjgohs49TQ1X6o5zs+aW4ps=
Subject key identifier: 41:FE:78:61:1A:47:50:D5:73:29:2E:5C:44:D2:3C:89:B0:2B:77:14
Authority key identifier: 49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED
Certificate issuer: /CN=A91C0C9B/serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED
Certificate serial: 0496
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft
Manifest number: 047D
Signing time: Fri 31 Jan 2025 00:11:11 +0000
Manifest this update: Fri 31 Jan 2025 00:11:11 +0000
Manifest next update: Fri 07 Feb 2025 00:11:11 +0000
Files and hashes: 1: SUICsDHp9CdkMVegbvqkwHDH8-0.crl (hash: PjKRSXgIgzr59Y5G7JVWKOcR3/MEsCY1L7EqbG+UOEM=)
2: A042865C3DB211EE9EB40D3DC4F9AE02.roa (hash: 00gQlkZJ/La3W11cygPUEyOgfEz6qTJK4E6QUbIb+4w=)
3: B1FD800CF32111EEB820DB5BC4F9AE02.roa (hash: h8Cn0q3McR7P4xiiOqk2s7pmYyQ4a4pHCFcF2i6fJFs=)
4: E1B834D0F5D911EE878F7B7CC4F9AE02.roa (hash: AY+8DTHkr2vJtlLXSQfHDYYi6BNU94WVzll8RISRiyA=)
5: 242EC19CCA6C11EEA57DF83EC4F9AE02.roa (hash: 2qXlPaFenQASAW3HlIN5Ug8FhCiSb/b8zKcXYOGxOb8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1174 (0x496)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0C9B/serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED
Validity
Not Before: Jan 31 00:11:11 2025 GMT
Not After : Feb 7 00:11:11 2025 GMT
Subject: CN=679c151f-007d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:34:ff:94:1e:72:55:de:da:ad:e7:ed:29:6e:
24:90:1f:05:61:e1:2d:83:37:c4:fc:50:8f:65:41:
79:59:bf:d4:17:d1:50:50:b8:a4:08:13:95:e3:e3:
a4:08:f0:ae:a2:d2:72:9b:7b:09:f1:04:d1:21:81:
ca:ff:60:99:a1:5b:6c:91:a1:04:bf:b4:74:9f:9e:
69:cd:16:5d:6d:52:b4:11:36:99:88:ca:3d:a3:be:
5a:8e:3a:8b:de:d7:35:48:18:d7:44:e9:e9:c5:7a:
d3:50:85:52:67:9c:d6:b2:53:f5:ba:c4:1b:27:90:
63:6a:0f:d6:e8:0f:e0:90:c4:d2:aa:a5:f3:54:dc:
07:b8:2f:9d:c7:33:be:b6:cc:4f:6f:fc:b3:e2:28:
2d:44:b5:e7:d9:75:e9:f0:68:0f:28:fa:9e:6f:18:
65:37:ec:eb:4d:72:49:95:65:22:78:35:0c:41:dc:
72:b6:ba:91:71:17:40:b4:cf:80:be:b0:60:d3:37:
b7:a8:10:02:47:b2:ef:1f:e5:ba:63:69:04:fe:8c:
c5:b0:39:e2:93:fe:12:01:c8:05:15:7e:a1:8b:ca:
dd:3e:98:c2:d0:b8:cb:8f:11:65:64:60:00:b1:5c:
45:03:ab:24:cd:56:4a:31:5e:23:9c:be:0e:0c:49:
dd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FE:78:61:1A:47:50:D5:73:29:2E:5C:44:D2:3C:89:B0:2B:77:14
X509v3 Authority Key Identifier:
keyid:49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:06:04:98:a7:1f:a2:70:ee:76:e0:56:ec:48:7f:98:37:01:
1e:e1:25:f5:99:33:46:5a:4a:d9:9b:72:4f:3b:79:bd:e5:eb:
b7:d5:cd:42:fe:a2:5f:27:1e:68:fc:aa:ea:73:ab:3e:df:9a:
7d:bc:35:d8:d6:f3:4f:41:9d:ea:44:93:7f:80:11:8f:3c:91:
e9:65:ba:0d:1b:45:2f:cb:7e:ff:05:3b:e9:77:6b:90:71:4f:
20:bc:4e:7d:c9:03:86:f8:c0:a4:6b:ac:be:4d:b4:2b:7e:2e:
dd:92:bf:90:56:16:14:0c:0a:32:a7:01:d4:18:ff:9d:57:6f:
8d:e3:76:1f:c6:25:4e:e1:64:e8:15:b5:c7:fb:b1:75:e0:f4:
71:60:48:fe:1f:75:1a:57:42:63:05:c3:82:4c:1c:9f:85:ac:
34:fc:e4:1c:81:b6:18:10:25:ad:65:34:b9:ee:41:c3:8e:fe:
97:c9:42:1e:5e:d0:39:df:a8:a2:4c:fa:e7:9a:3e:bf:6d:08:
6c:79:3e:09:18:0c:0d:e1:7a:23:9a:f4:81:fb:4e:79:77:35:
f2:16:51:fb:25:6a:5b:57:5d:0b:70:64:b1:b1:ff:f9:30:ac:
d3:42:f3:65:0d:3c:76:bc:dd:d3:c1:76:b1:94:3c:28:95:89:
6c:61:d2:6d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzBDOUIxMTAvBgNVBAUTKDQ5NDIwMkIwMzFFOUY0Mjc2NDMxNTdBMDZFRkFBNEMw
NzBDN0YzRUQwHhcNMjUwMTMxMDAxMTExWhcNMjUwMjA3MDAxMTExWjAYMRYwFAYD
VQQDEw02NzljMTUxZi0wMDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmjT/lB5yVd7areftKW4kkB8FYeEtgzfE/FCPZUF5Wb/UF9FQULikCBOV4+Ok
CPCuotJym3sJ8QTRIYHK/2CZoVtskaEEv7R0n55pzRZdbVK0ETaZiMo9o75ajjqL
3tc1SBjXROnpxXrTUIVSZ5zWslP1usQbJ5Bjag/W6A/gkMTSqqXzVNwHuC+dxzO+
tsxPb/yz4igtRLXn2XXp8GgPKPqebxhlN+zrTXJJlWUieDUMQdxytrqRcRdAtM+A
vrBg0ze3qBACR7LvH+W6Y2kE/ozFsDnik/4SAcgFFX6hi8rdPpjC0LjLjxFlZGAA
sVxFA6skzVZKMV4jnL4ODEnd5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEH+eGEa
R1DVcykuXETSPImwK3cUMB8GA1UdIwQYMBaAFElCArAx6fQnZDFXoG76pMBwx/Pt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEM5Qi9BNDZFOTg5QTMy
MkIxMUVDOTdGOENGN0NDNEY5QUUwMi9TVUlDc0RIcDlDZGtNVmVnYnZxa3dIREg4
LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NVSUNzREhwOUNka01WZWdidnFrd0hESDgtMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MEM5Qi9BNDZFOTg5QTMyMkIxMUVDOTdGOENGN0NDNEY5QUUwMi9TVUlDc0RIcDlD
ZGtNVmVnYnZxa3dIREg4LTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAWBgSYpx+icO524FbsSH+YNwEe4SX1mTNGWkrZm3JPO3m95eu31c1C
/qJfJx5o/Krqc6s+35p9vDXY1vNPQZ3qRJN/gBGPPJHpZboNG0Uvy37/BTvpd2uQ
cU8gvE59yQOG+MCka6y+TbQrfi7dkr+QVhYUDAoypwHUGP+dV2+N43YfxiVO4WTo
FbXH+7F14PRxYEj+H3UaV0JjBcOCTByfhaw0/OQcgbYYECWtZTS57kHDjv6XyUIe
XtA536iiTPrnmj6/bQhseT4JGAwN4XojmvSB+055dzXyFlH7JWpbV10LcGSxsf/5
MKzTQvNlDTx2vN3TwXaxlDwolYlsYdJt
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:42 2025 by rpki-client