Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft
File: t0bN0xcqIBHwIYn_La14fSnAEek.mft (raw, json)
Hash identifier: a2JxVB4vhiv2UvrFcKTEiBV+CIS306uJ9EGcPVcIwbI=
Subject key identifier: 3D:83:3E:18:54:95:04:EC:7D:E2:05:4B:BC:25:53:F3:BE:5F:26:85
Authority key identifier: B7:46:CD:D3:17:2A:20:11:F0:21:89:FF:2D:AD:78:7D:29:C0:11:E9
Certificate issuer: /CN=A91C1B92/serialNumber=B746CDD3172A2011F02189FF2DAD787D29C011E9
Certificate serial: 0D7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft
Manifest number: 0D74
Signing time: Fri 31 Jan 2025 17:56:40 +0000
Manifest this update: Fri 31 Jan 2025 17:56:40 +0000
Manifest next update: Fri 07 Feb 2025 17:56:40 +0000
Files and hashes: 1: t0bN0xcqIBHwIYn_La14fSnAEek.crl (hash: Y2RIprrwDpq3YYjDfhcYM0bf65aNalAMaGx9kZhxW98=)
2: F8AC3DD8DB9111E9B70EDD2EC4F9AE02.roa (hash: Ik/3X8YIb0qhd0Fqkle1gmGuYbSdF2VymS/D7TZSlFk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3452 (0xd7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1B92/serialNumber=B746CDD3172A2011F02189FF2DAD787D29C011E9
Validity
Not Before: Jan 31 17:56:40 2025 GMT
Not After : Feb 7 17:56:40 2025 GMT
Subject: CN=679d0ed8-a60f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1a:1a:7c:89:fd:0a:a4:56:a8:d9:84:4f:68:
a5:db:be:15:ce:52:25:bf:0a:aa:72:b3:81:db:2f:
2d:5c:e6:49:2d:78:b1:50:65:d2:cb:ee:1d:c3:a2:
49:e6:27:35:88:37:55:34:95:7d:65:bf:e3:77:ce:
11:94:bb:2e:83:13:3d:15:f1:ad:14:36:cc:31:ab:
ee:11:1d:47:04:86:db:ef:72:c6:3f:50:8b:0c:d5:
21:72:d4:b3:1b:a1:d9:e0:e3:6b:e2:d9:0d:90:a1:
a0:46:9c:a3:73:a3:ef:4d:99:d8:e7:90:ca:73:ba:
f7:d4:6f:33:ca:97:46:b6:af:91:8e:0f:2c:2b:68:
ba:8d:63:f6:72:68:38:5c:ee:13:f7:ca:9f:64:53:
49:8d:5e:2e:93:c5:df:97:42:9a:f0:46:ab:43:cd:
e9:40:ab:0c:3c:7b:b8:30:e8:d1:cb:33:db:be:17:
d5:c4:12:03:15:a5:d2:f9:ca:af:95:68:cf:62:4d:
8c:06:92:ca:dc:9b:d2:4f:e3:c2:aa:e7:1e:56:46:
aa:b3:f8:5b:50:d6:e7:4b:be:96:50:ff:58:5a:2c:
fb:fb:bc:71:f8:c0:f1:2b:5a:81:94:f5:83:a6:fd:
da:06:83:18:9f:06:a3:29:0d:15:58:66:a9:d2:ef:
da:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:83:3E:18:54:95:04:EC:7D:E2:05:4B:BC:25:53:F3:BE:5F:26:85
X509v3 Authority Key Identifier:
keyid:B7:46:CD:D3:17:2A:20:11:F0:21:89:FF:2D:AD:78:7D:29:C0:11:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:6d:ce:4e:47:08:d2:3b:ca:6a:a4:0b:9a:d9:54:a0:6b:fa:
73:62:6a:4d:0b:22:32:c2:2b:10:65:db:ce:64:96:d0:18:64:
ac:46:a0:66:5f:76:c0:57:2d:d4:92:66:70:f5:9a:fc:76:11:
65:22:67:43:61:d6:8f:e2:5f:70:be:b7:d8:9c:76:fc:b0:6b:
9f:d0:bf:f9:59:bb:f5:99:c2:2f:dd:94:3b:32:f2:32:44:3a:
28:9a:dd:5c:45:36:09:01:e9:15:95:07:2d:4d:ff:7a:7a:08:
ac:15:e5:00:23:fc:fb:e3:32:cd:d1:4b:75:fb:0f:71:1b:01:
2c:4d:f4:96:2f:21:34:d0:d3:26:08:44:fc:9f:2a:c2:c7:2b:
68:34:8b:9b:3a:d8:60:45:dc:5b:1e:7b:1c:32:f9:a8:d4:c4:
f3:18:6f:da:42:4e:f2:b6:6b:f5:bb:de:39:29:bc:11:e4:77:
c7:1b:16:15:38:1e:ee:a1:bd:e6:c3:59:76:fa:08:41:3b:06:
51:cd:2a:a9:e5:cd:0a:71:87:ca:e7:97:47:b5:61:a1:ef:70:
66:0c:cf:d8:b9:c3:72:ed:63:8a:76:aa:43:1f:9c:82:7a:24:
6e:72:0d:cf:b9:2b:65:4d:ee:d1:63:b3:5b:39:e5:af:e1:39:
46:2b:31:02
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzFCOTIxMTAvBgNVBAUTKEI3NDZDREQzMTcyQTIwMTFGMDIxODlGRjJEQUQ3ODdE
MjlDMDExRTkwHhcNMjUwMTMxMTc1NjQwWhcNMjUwMjA3MTc1NjQwWjAYMRYwFAYD
VQQDEw02NzlkMGVkOC1hNjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsxoafIn9CqRWqNmET2il274VzlIlvwqqcrOB2y8tXOZJLXixUGXSy+4dw6JJ
5ic1iDdVNJV9Zb/jd84RlLsugxM9FfGtFDbMMavuER1HBIbb73LGP1CLDNUhctSz
G6HZ4ONr4tkNkKGgRpyjc6PvTZnY55DKc7r31G8zypdGtq+Rjg8sK2i6jWP2cmg4
XO4T98qfZFNJjV4uk8Xfl0Ka8EarQ83pQKsMPHu4MOjRyzPbvhfVxBIDFaXS+cqv
lWjPYk2MBpLK3JvST+PCquceVkaqs/hbUNbnS76WUP9YWiz7+7xx+MDxK1qBlPWD
pv3aBoMYnwajKQ0VWGap0u/a/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2DPhhU
lQTsfeIFS7wlU/O+XyaFMB8GA1UdIwQYMBaAFLdGzdMXKiAR8CGJ/y2teH0pwBHp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUI5Mi9BQUJGQzQ5QUJE
NjAxMUU5OTU2QTBGMTlDNEY5QUUwMi90MGJOMHhjcUlCSHdJWW5fTGExNGZTbkFF
ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3QwYk4weGNxSUJId0lZbl9MYTE0ZlNuQUVlay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MUI5Mi9BQUJGQzQ5QUJENjAxMUU5OTU2QTBGMTlDNEY5QUUwMi90MGJOMHhjcUlC
SHdJWW5fTGExNGZTbkFFZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC3bc5ORwjSO8pqpAua2VSga/pzYmpNCyIywisQZdvOZJbQGGSsRqBm
X3bAVy3UkmZw9Zr8dhFlImdDYdaP4l9wvrfYnHb8sGuf0L/5Wbv1mcIv3ZQ7MvIy
RDoomt1cRTYJAekVlQctTf96egisFeUAI/z74zLN0Ut1+w9xGwEsTfSWLyE00NMm
CET8nyrCxytoNIubOthgRdxbHnscMvmo1MTzGG/aQk7ytmv1u945KbwR5HfHGxYV
OB7uob3mw1l2+ghBOwZRzSqp5c0KcYfK55dHtWGh73BmDM/YucNy7WOKdqpDH5yC
eiRucg3PuStlTe7RY7NbOeWv4TlGKzEC
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:36 2025 by rpki-client