Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft
File: ihprqbt2zysN7jXqTP0vX_jAieM.mft (raw, json)
Hash identifier: F1NURCRTcOAwGr/ynoNPFjFfh4iqda0aYga93MSkH7M=
Subject key identifier: 1F:09:3B:54:AD:A2:AF:31:29:AD:EE:38:AF:82:6A:2C:7D:A1:97:76
Authority key identifier: 8A:1A:6B:A9:BB:76:CF:2B:0D:EE:35:EA:4C:FD:2F:5F:F8:C0:89:E3
Certificate issuer: /CN=A91C36EE/serialNumber=8A1A6BA9BB76CF2B0DEE35EA4CFD2F5FF8C089E3
Certificate serial: 0BA7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft
Manifest number: 0BA1
Signing time: Thu 30 Jan 2025 18:55:16 +0000
Manifest this update: Thu 30 Jan 2025 18:55:15 +0000
Manifest next update: Thu 06 Feb 2025 18:55:15 +0000
Files and hashes: 1: ihprqbt2zysN7jXqTP0vX_jAieM.crl (hash: GnwKD85Nukw5yA4WWbe2m5uBekee1J9F5JEBv0mw334=)
2: 6FCF7FF2180411EA9AA70A57C4F9AE02.roa (hash: Kec3OJ0yXeD5eottWlXfmKbDVOHd3PQe3ZSjrmCo8jA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2983 (0xba7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C36EE/serialNumber=8A1A6BA9BB76CF2B0DEE35EA4CFD2F5FF8C089E3
Validity
Not Before: Jan 30 18:55:15 2025 GMT
Not After : Feb 6 18:55:15 2025 GMT
Subject: CN=679bcb13-9ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:79:4b:69:6a:af:ea:c1:64:b3:d3:24:b3:0f:
41:0f:e7:25:be:c7:74:52:6f:eb:a5:26:be:cc:1a:
74:4c:a0:2e:54:a3:31:9d:08:04:0e:76:50:f7:80:
7e:67:54:5a:7c:d5:39:99:8a:a2:42:ed:b9:83:ab:
d4:53:98:78:ca:dd:fc:10:1f:12:e1:6b:af:97:ec:
7c:f2:aa:6c:fb:e4:39:90:69:be:42:61:68:c1:15:
be:d5:95:f1:cf:f4:22:51:04:f9:27:85:40:34:10:
ac:f2:b9:87:1f:1d:64:06:24:84:3a:0e:0e:db:0e:
70:3f:5e:8f:91:eb:8f:be:a2:99:91:ff:cc:62:62:
ae:00:7c:b3:d0:35:86:49:2a:9f:1e:df:8c:fe:cd:
fd:1d:e1:e1:4b:cc:1d:75:ab:ef:10:75:84:85:e0:
a5:83:55:74:4e:82:43:aa:34:a3:ec:64:89:61:4c:
f2:cf:fd:66:66:e7:7c:90:08:85:f4:d1:46:2c:41:
f8:26:bf:d8:78:b1:54:e6:53:16:3e:34:e8:df:b9:
ff:23:5f:26:0f:a6:bd:4f:4f:33:8d:31:50:f1:e3:
d2:e4:3e:e6:0c:55:53:a0:39:f6:ef:3e:c8:22:86:
08:ee:41:3c:e5:44:48:5b:45:f3:e5:42:c4:ee:4a:
e7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:09:3B:54:AD:A2:AF:31:29:AD:EE:38:AF:82:6A:2C:7D:A1:97:76
X509v3 Authority Key Identifier:
keyid:8A:1A:6B:A9:BB:76:CF:2B:0D:EE:35:EA:4C:FD:2F:5F:F8:C0:89:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:4a:31:b0:99:ce:17:d1:e0:7d:b5:e8:d2:fd:38:88:75:2f:
e2:16:b1:d4:cc:e3:06:68:4b:e2:d1:60:d5:cb:0a:eb:bd:e8:
4d:3f:86:9b:60:ee:c5:d0:d4:8b:a4:17:dc:70:54:9c:70:65:
71:e4:33:ec:25:4b:3c:d6:57:54:1f:9b:1c:7b:fd:2e:aa:1b:
bd:cd:c0:fa:24:9a:70:ea:ee:61:6e:b7:91:60:ab:9d:b0:80:
05:91:00:ed:06:ce:aa:25:a5:ef:34:73:ad:d1:27:e2:32:96:
68:2f:68:a4:c5:43:a9:1d:48:88:84:11:b7:a6:19:36:ac:a5:
fd:02:57:b9:fd:e2:61:b6:2c:20:2c:ef:e8:aa:bb:49:bb:85:
bb:b2:55:85:85:f8:d2:3d:a1:ac:56:3c:70:73:e0:9c:25:4f:
c0:ab:08:ae:fe:c1:8c:9f:00:4a:a9:a3:f7:61:96:a0:7a:af:
f2:80:d7:8e:a0:bf:1e:c2:3a:4a:eb:6f:89:2e:3d:e1:e4:79:
4e:a3:9c:c7:0c:24:cc:3d:79:89:0d:da:7b:6c:4e:f8:15:35:
66:63:4c:48:c3:d8:c4:04:73:58:8d:96:d9:23:98:31:84:d9:
19:8c:73:20:7b:7a:97:32:a7:ba:bd:7e:76:84:1e:a7:6a:62:
f9:bb:fb:25
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzM2RUUxMTAvBgNVBAUTKDhBMUE2QkE5QkI3NkNGMkIwREVFMzVFQTRDRkQyRjVG
RjhDMDg5RTMwHhcNMjUwMTMwMTg1NTE1WhcNMjUwMjA2MTg1NTE1WjAYMRYwFAYD
VQQDEw02NzliY2IxMy05ZWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAznlLaWqv6sFks9Mksw9BD+clvsd0Um/rpSa+zBp0TKAuVKMxnQgEDnZQ94B+
Z1RafNU5mYqiQu25g6vUU5h4yt38EB8S4Wuvl+x88qps++Q5kGm+QmFowRW+1ZXx
z/QiUQT5J4VANBCs8rmHHx1kBiSEOg4O2w5wP16PkeuPvqKZkf/MYmKuAHyz0DWG
SSqfHt+M/s39HeHhS8wddavvEHWEheClg1V0ToJDqjSj7GSJYUzyz/1mZud8kAiF
9NFGLEH4Jr/YeLFU5lMWPjTo37n/I18mD6a9T08zjTFQ8ePS5D7mDFVToDn27z7I
IoYI7kE85URIW0Xz5ULE7krnewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8JO1St
oq8xKa3uOK+Caix9oZd2MB8GA1UdIwQYMBaAFIoaa6m7ds8rDe416kz9L1/4wInj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzZFRS9BOEMxQzg3QTE4
MDMxMUVBQkVDODJCNTZDNEY5QUUwMi9paHBycWJ0Mnp5c043alhxVFAwdlhfakFp
ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2locHJxYnQyenlzTjdqWHFUUDB2WF9qQWllTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MzZFRS9BOEMxQzg3QTE4MDMxMUVBQkVDODJCNTZDNEY5QUUwMi9paHBycWJ0Mnp5
c043alhxVFAwdlhfakFpZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCqSjGwmc4X0eB9tejS/TiIdS/iFrHUzOMGaEvi0WDVywrrvehNP4ab
YO7F0NSLpBfccFSccGVx5DPsJUs81ldUH5sce/0uqhu9zcD6JJpw6u5hbreRYKud
sIAFkQDtBs6qJaXvNHOt0SfiMpZoL2ikxUOpHUiIhBG3phk2rKX9Ale5/eJhtiwg
LO/oqrtJu4W7slWFhfjSPaGsVjxwc+CcJU/Aqwiu/sGMnwBKqaP3YZageq/ygNeO
oL8ewjpK62+JLj3h5HlOo5zHDCTMPXmJDdp7bE74FTVmY0xIw9jEBHNYjZbZI5gx
hNkZjHMge3qXMqe6vX52hB6namL5u/sl
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:16:09 2025 by rpki-client