Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft
File: -kF5Yn9bJllOVjA1Ogt3heDWksU.mft (raw, json)
Hash identifier: TpZtBWrvkv5xrQqY2XARELpE/NPdN5Z0teS5k9MBLFM=
Subject key identifier: 48:87:44:42:F6:B3:E2:88:79:CB:0B:35:CD:0E:1D:B4:0C:47:0E:30
Authority key identifier: FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5
Certificate issuer: /CN=A91C1621/serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5
Certificate serial: 347E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft
Manifest number: 3467
Signing time: Fri 31 Jan 2025 14:16:11 +0000
Manifest this update: Fri 31 Jan 2025 14:16:10 +0000
Manifest next update: Fri 07 Feb 2025 14:16:10 +0000
Files and hashes: 1: -kF5Yn9bJllOVjA1Ogt3heDWksU.crl (hash: iqQJAxcdwlZLXcjdbU/NVeTWdTP6TZdauDxEyNMwYqo=)
2: CDE36D52DB9511E99F3F673EC4F9AE02.roa (hash: zbmIG6CT7ypIn3HcTtsDFC7ihfXsVyZlUb242ctePDw=)
3: BB8F87B4D4B011ECAA427351C4F9AE02.roa (hash: V6xVQh9iUu5NDnwtI8z/zA2tAozAKTEZViih6UdSdQ0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13438 (0x347e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1621/serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5
Validity
Not Before: Jan 31 14:16:10 2025 GMT
Not After : Feb 7 14:16:10 2025 GMT
Subject: CN=679cdb2b-6cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:04:cd:16:8f:84:8f:cf:26:3a:10:34:69:78:
0d:5d:df:03:32:89:ef:2d:13:47:00:7f:f8:5a:18:
8b:0a:1b:e2:13:94:53:99:97:f0:1d:6e:b1:60:9a:
2c:82:90:54:8b:0d:2d:99:80:93:2d:47:0d:81:1c:
61:11:1c:3b:33:ed:5b:f5:05:0e:5c:3f:fc:28:98:
b3:6b:8e:45:2d:19:4a:bc:4c:d6:1e:1a:8c:e3:2f:
c4:c8:97:5c:b0:63:43:96:74:20:ad:94:34:e4:09:
ce:a7:65:36:cc:83:46:ec:48:ca:d8:de:db:7b:9a:
b6:05:a6:29:90:1c:24:e1:85:5c:1d:da:42:97:1e:
dc:4d:3d:75:41:ab:e1:ee:5d:03:77:0f:4a:7d:2c:
16:43:d2:4f:1e:64:5f:f6:71:86:dd:8c:ef:30:e1:
06:ae:e4:6b:93:32:ac:f6:ff:09:2e:a2:cb:fd:f1:
af:7c:72:88:1b:d6:16:d8:52:18:b1:f1:9b:a6:2c:
ef:fa:01:d2:ed:d3:9b:02:aa:c0:a2:81:67:79:27:
60:e1:db:7a:88:72:b3:b4:df:59:b0:5c:62:a2:f2:
5d:f0:2f:27:50:c4:7b:b3:df:e5:72:88:25:34:55:
c0:d7:53:de:5b:ef:b1:51:8c:5f:97:58:5e:21:3a:
d3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:87:44:42:F6:B3:E2:88:79:CB:0B:35:CD:0E:1D:B4:0C:47:0E:30
X509v3 Authority Key Identifier:
keyid:FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:72:79:23:a7:b3:70:8b:0c:a8:78:ac:cd:97:e4:5e:e3:88:
77:61:19:22:8a:c4:d8:b8:57:d0:e9:6d:c7:6e:a0:b8:f4:82:
96:c9:b5:8f:83:d7:79:98:1b:1c:12:c2:34:b0:11:bc:ba:db:
0e:2e:9f:09:9b:f9:8c:c9:d0:4b:3d:50:ca:ae:76:e0:32:6f:
fe:18:30:58:d0:45:56:14:da:13:3b:bd:e6:03:dc:c4:a2:56:
e8:19:fd:9a:b6:2b:91:86:bc:f9:d9:ac:04:ce:36:1e:26:39:
2c:ac:7a:88:e2:7d:c7:c4:7f:c7:6a:1b:36:ca:66:60:26:77:
5e:0e:65:92:56:23:c5:b2:ac:b8:22:38:01:fb:3d:64:47:fc:
8e:33:98:83:3f:ab:4c:11:24:39:21:b3:b5:b6:dc:87:26:72:
3d:e2:e3:af:35:2d:7c:8f:7c:e8:af:77:69:17:61:98:42:36:
b8:c2:72:9a:d2:2c:da:86:25:bb:2f:43:fa:c2:e1:48:8f:97:
5b:64:96:62:5f:ae:68:1b:23:8c:5a:3c:e2:cd:04:86:f0:95:
91:de:20:96:77:56:8d:01:04:8f:dc:ed:f4:cf:cd:6c:2e:41:
64:ff:22:7e:2a:ef:cc:67:b7:a5:ca:09:02:da:7e:5b:9f:82:
b1:16:f6:4a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzE2MjExMTAvBgNVBAUTKEZBNDE3OTYyN0Y1QjI2NTk0RTU2MzAzNTNBMEI3Nzg1
RTBENjkyQzUwHhcNMjUwMTMxMTQxNjEwWhcNMjUwMjA3MTQxNjEwWjAYMRYwFAYD
VQQDEw02NzljZGIyYi02Y2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAswTNFo+Ej88mOhA0aXgNXd8DMonvLRNHAH/4WhiLChviE5RTmZfwHW6xYJos
gpBUiw0tmYCTLUcNgRxhERw7M+1b9QUOXD/8KJiza45FLRlKvEzWHhqM4y/EyJdc
sGNDlnQgrZQ05AnOp2U2zING7EjK2N7be5q2BaYpkBwk4YVcHdpClx7cTT11Qavh
7l0Ddw9KfSwWQ9JPHmRf9nGG3YzvMOEGruRrkzKs9v8JLqLL/fGvfHKIG9YW2FIY
sfGbpizv+gHS7dObAqrAooFneSdg4dt6iHKztN9ZsFxiovJd8C8nUMR7s9/lcogl
NFXA11PeW++xUYxfl1heITrTkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEiHREL2
s+KIecsLNc0OHbQMRw4wMB8GA1UdIwQYMBaAFPpBeWJ/WyZZTlYwNToLd4Xg1pLF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTYyMS85OUQ2OERDRTFE
NjkxMUUyQTQ2NDBEQTcwOEIwMkNEMi8ta0Y1WW45YkpsbE9WakExT2d0M2hlRFdr
c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1rRjVZbjliSmxsT1ZqQTFPZ3QzaGVEV2tzVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MTYyMS85OUQ2OERDRTFENjkxMUUyQTQ2NDBEQTcwOEIwMkNEMi8ta0Y1WW45Ykps
bE9WakExT2d0M2hlRFdrc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCFcnkjp7NwiwyoeKzNl+Re44h3YRkiisTYuFfQ6W3HbqC49IKWybWP
g9d5mBscEsI0sBG8utsOLp8Jm/mMydBLPVDKrnbgMm/+GDBY0EVWFNoTO73mA9zE
olboGf2atiuRhrz52awEzjYeJjksrHqI4n3HxH/Hahs2ymZgJndeDmWSViPFsqy4
IjgB+z1kR/yOM5iDP6tMESQ5IbO1ttyHJnI94uOvNS18j3zor3dpF2GYQja4wnKa
0izahiW7L0P6wuFIj5dbZJZiX65oGyOMWjzizQSG8JWR3iCWd1aNAQSP3O30z81s
LkFk/yJ+Ku/MZ7elygkC2n5bn4KxFvZK
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:31:11 2025 by rpki-client