Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.mft
File: y0yV-DniHR3g9FhVPZpM4o5BTYg.mft (raw, json)
Hash identifier: xiIGbqGy/GhqpfZBxY9dm7c/5Q8XW0qGyy+6ex+CXho=
Subject key identifier: B9:29:6C:7B:97:5E:82:4E:33:9E:EC:05:9A:41:0E:3E:CB:FC:EC:88
Authority key identifier: CB:4C:95:F8:39:E2:1D:1D:E0:F4:58:55:3D:9A:4C:E2:8E:41:4D:88
Certificate issuer: /CN=A91C4502/serialNumber=CB4C95F839E21D1DE0F458553D9A4CE28E414D88
Certificate serial: 08B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y0yV-DniHR3g9FhVPZpM4o5BTYg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.mft
Manifest number: 0891
Signing time: Thu 30 Jan 2025 20:39:53 +0000
Manifest this update: Thu 30 Jan 2025 20:39:53 +0000
Manifest next update: Thu 06 Feb 2025 20:39:53 +0000
Files and hashes: 1: y0yV-DniHR3g9FhVPZpM4o5BTYg.crl (hash: ZE86cYNt5sCxD2jMYCgPoGnoAkCNKE9RYZnLsK//5o4=)
2: 9768CAB2550211EDA744F948C4F9AE02.roa (hash: +c7JrobNieG+ZMgvcidemgeezLPPKCFpg7+084o7JoA=)
3: 8CE5EE808E1A11EC96B4970AC4F9AE02.roa (hash: EZBagVr/hD3KJ6ELkAAEEOXAeLi6XW6fcfcVyYg3wjQ=)
4: 8C3B232E8E1A11EC96B4970AC4F9AE02.roa (hash: 8QLJCSW7Dx5LXrLw450pRNDRNzSQEQRY9thpGou2vRw=)
5: F407F0D49B8C11EC98C88432C4F9AE02.roa (hash: S/k+u3wzST4BAkpqg+O7+3Um9PXES4RfHWYozst9ucQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2227 (0x8b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4502/serialNumber=CB4C95F839E21D1DE0F458553D9A4CE28E414D88
Validity
Not Before: Jan 30 20:39:53 2025 GMT
Not After : Feb 6 20:39:53 2025 GMT
Subject: CN=679be399-16f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e1:46:fb:44:ea:4a:3f:4b:87:1f:d0:e3:6c:
b6:2c:27:35:78:31:4a:ab:8a:28:da:c8:2e:a9:da:
d4:22:99:85:93:cd:c7:f1:62:31:ba:be:4e:98:cc:
90:fc:ac:a2:77:e5:d0:07:15:00:22:26:d3:30:ca:
80:4f:9b:dc:5d:08:de:8e:b1:d3:63:96:b4:20:b0:
0f:73:0a:87:8f:f4:c4:76:7d:aa:0d:fd:c7:a6:17:
0b:b4:ac:82:82:f1:1d:c9:94:c3:e2:cf:ca:5d:49:
71:58:b2:22:62:54:7c:50:e8:92:9d:ad:12:99:b2:
bd:68:b1:06:03:42:58:85:ef:19:38:67:be:77:a1:
0a:f4:c1:37:13:07:56:a1:3d:17:75:48:be:b8:e3:
4b:80:f8:f3:79:49:f2:a5:78:04:6c:10:94:0f:ca:
a1:cc:e6:38:7e:76:65:a7:6c:35:83:54:78:e2:89:
4a:84:a3:38:06:88:13:1d:3a:64:e0:f8:f4:42:99:
da:d8:53:87:f3:4d:63:82:3d:51:8b:ea:5f:5c:9b:
f0:98:9b:3d:b6:0d:9a:07:23:a5:ea:de:20:d2:53:
a8:95:13:82:e2:8f:fc:59:8d:f2:ec:7d:ed:60:d8:
65:16:67:d7:69:b6:af:77:d0:43:00:32:74:89:07:
69:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:29:6C:7B:97:5E:82:4E:33:9E:EC:05:9A:41:0E:3E:CB:FC:EC:88
X509v3 Authority Key Identifier:
keyid:CB:4C:95:F8:39:E2:1D:1D:E0:F4:58:55:3D:9A:4C:E2:8E:41:4D:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y0yV-DniHR3g9FhVPZpM4o5BTYg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c7:d0:d4:72:5a:c8:26:0a:bd:61:58:5f:7f:8f:13:93:2d:
9e:f4:53:45:6e:10:f1:46:5c:a2:9c:f2:cd:92:f6:4b:92:35:
f8:6e:97:0f:01:9c:e7:34:ec:9b:70:75:e7:64:ad:f3:1a:44:
71:9c:ec:ff:b1:a7:46:3b:e5:49:6a:19:39:a7:5e:fa:c5:dd:
ea:16:f5:9b:51:96:0d:ee:07:64:a5:4b:a5:df:51:00:67:f3:
3b:01:f8:4e:3d:6f:44:96:d8:03:14:55:a5:ba:af:30:23:14:
38:0b:2f:74:90:3b:e2:23:23:d6:6d:3b:f9:4f:b4:93:df:3a:
7a:e6:35:0e:ff:3c:f1:73:45:8a:b9:c6:e4:ba:e0:06:36:58:
1b:05:12:40:13:4c:3a:1e:74:18:7f:d8:a7:05:09:8f:90:10:
53:e0:cb:f1:11:4c:11:b0:e9:e5:e1:36:98:cd:f0:e2:eb:3a:
c6:b0:f8:3f:74:a8:05:22:ca:7f:0b:e8:66:e0:69:be:64:64:
8f:e8:20:57:f4:37:86:ed:83:03:db:be:20:df:3e:80:e3:e3:
9c:cf:81:49:3b:11:44:89:26:4b:bb:9e:e0:d4:19:3c:8e:28:
20:5b:80:71:61:5c:3a:25:35:29:72:88:8f:ae:31:9d:7a:20:
7e:ab:12:bc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzQ1MDIxMTAvBgNVBAUTKENCNEM5NUY4MzlFMjFEMURFMEY0NTg1NTNEOUE0Q0Uy
OEU0MTREODgwHhcNMjUwMTMwMjAzOTUzWhcNMjUwMjA2MjAzOTUzWjAYMRYwFAYD
VQQDEw02NzliZTM5OS0xNmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAquFG+0TqSj9Lhx/Q42y2LCc1eDFKq4oo2sguqdrUIpmFk83H8WIxur5OmMyQ
/Kyid+XQBxUAIibTMMqAT5vcXQjejrHTY5a0ILAPcwqHj/TEdn2qDf3HphcLtKyC
gvEdyZTD4s/KXUlxWLIiYlR8UOiSna0SmbK9aLEGA0JYhe8ZOGe+d6EK9ME3EwdW
oT0XdUi+uONLgPjzeUnypXgEbBCUD8qhzOY4fnZlp2w1g1R44olKhKM4BogTHTpk
4Pj0Qpna2FOH801jgj1Ri+pfXJvwmJs9tg2aByOl6t4g0lOolROC4o/8WY3y7H3t
YNhlFmfXabavd9BDADJ0iQdptwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLkpbHuX
XoJOM57sBZpBDj7L/OyIMB8GA1UdIwQYMBaAFMtMlfg54h0d4PRYVT2aTOKOQU2I
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDUwMi80MEUyREZDQ0I1
MDIxMUVBQTI5RjI3N0FDNEY5QUUwMi95MHlWLURuaUhSM2c5RmhWUFpwTTRvNUJU
WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3kweVYtRG5pSFIzZzlGaFZQWnBNNG81QlRZZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NDUwMi80MEUyREZDQ0I1MDIxMUVBQTI5RjI3N0FDNEY5QUUwMi95MHlWLURuaUhS
M2c5RmhWUFpwTTRvNUJUWWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA8x9DUclrIJgq9YVhff48Tky2e9FNFbhDxRlyinPLNkvZLkjX4bpcP
AZznNOybcHXnZK3zGkRxnOz/sadGO+VJahk5p176xd3qFvWbUZYN7gdkpUul31EA
Z/M7AfhOPW9EltgDFFWluq8wIxQ4Cy90kDviIyPWbTv5T7ST3zp65jUO/zzxc0WK
ucbkuuAGNlgbBRJAE0w6HnQYf9inBQmPkBBT4MvxEUwRsOnl4TaYzfDi6zrGsPg/
dKgFIsp/C+hm4Gm+ZGSP6CBX9DeG7YMD274g3z6A4+Ocz4FJOxFEiSZLu57g1Bk8
jiggW4BxYVw6JTUpcoiPrjGdeiB+qxK8
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:52:12 2025 by rpki-client