Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft
File: 33nDugFSYeOshDI5zkcDWQHWapQ.mft (raw, json)
Hash identifier: tqy2HtuuEuB/LTr8URk4aR1bzaQw/WzE4SxSevdAnZw=
Subject key identifier: EB:F8:54:78:7C:EB:0B:85:56:3E:1C:B1:37:A8:FE:B5:E9:8D:97:39
Authority key identifier: DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94
Certificate issuer: /CN=A91C572B/serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94
Certificate serial: 013D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft
Manifest number: 0135
Signing time: Fri 31 Jan 2025 03:41:51 +0000
Manifest this update: Fri 31 Jan 2025 03:41:50 +0000
Manifest next update: Fri 07 Feb 2025 03:41:50 +0000
Files and hashes: 1: 33nDugFSYeOshDI5zkcDWQHWapQ.crl (hash: DYS1W47KzBxkwfM6yFljIwwrLBr9wa8cc1v+gWh7rZo=)
2: 18DC0A381C0311EE9B0F2938C4F9AE02.roa (hash: +NXIJ3XAp8BvWngt2c/RnkPBxhwMNcZtq308qJwKx8k=)
3: 17C68D301C0311EE9B0F2938C4F9AE02.roa (hash: Wkz//5KDfJfxYrwNIm5g/VaiBGq0PmVllCjJzHHJxNQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 317 (0x13d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C572B/serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94
Validity
Not Before: Jan 31 03:41:50 2025 GMT
Not After : Feb 7 03:41:50 2025 GMT
Subject: CN=679c467f-ef38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b0:7c:ab:1f:b9:e4:80:d6:a8:45:84:34:f7:
91:6d:72:b4:27:80:d7:8d:66:da:e8:d0:77:75:ac:
59:34:da:b0:aa:fa:9a:46:ec:57:38:9e:a4:db:68:
cd:a2:ff:45:b8:95:74:f7:07:eb:bd:53:05:a0:20:
6e:96:48:54:b3:de:75:a8:bc:1d:92:0d:49:a6:96:
e8:e3:c4:74:c6:9c:15:4b:4e:b6:86:c6:aa:41:63:
a6:20:d4:83:f0:75:8a:26:12:8d:38:54:3b:91:0f:
85:8f:ea:fb:b9:ed:e1:36:f8:88:7e:5d:96:28:40:
f6:53:36:aa:1c:53:b9:a8:3f:44:62:c0:15:f5:46:
59:89:00:7a:9d:94:02:65:18:f3:5b:2d:96:12:84:
7f:33:d2:b2:55:a8:e2:ce:ff:57:26:59:5e:4f:94:
f9:af:e6:b0:fc:a6:b6:d6:07:c5:54:5b:10:a9:11:
62:6e:cf:2a:22:c2:99:89:4b:55:e6:86:64:60:b0:
f1:df:80:45:0b:a2:e1:6b:2b:4d:24:70:27:a1:48:
c4:b4:64:59:ec:99:a3:0a:50:1c:3f:d4:9b:fc:26:
2f:7c:38:20:e0:cd:ac:4a:87:16:73:49:99:12:fc:
00:e4:f9:5d:ab:0b:4d:92:20:2e:6e:7b:c2:0b:04:
b9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F8:54:78:7C:EB:0B:85:56:3E:1C:B1:37:A8:FE:B5:E9:8D:97:39
X509v3 Authority Key Identifier:
keyid:DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:06:25:16:27:e9:96:0e:b3:de:db:88:f2:84:f5:73:89:36:
f9:54:fa:3e:f6:a3:65:0c:c6:9a:a1:9e:c6:63:7e:59:22:5f:
2c:10:3b:10:50:1e:03:1b:88:66:c9:b2:1c:92:77:9e:38:e0:
81:7b:ef:11:1c:18:8d:27:bb:c4:2c:a6:66:77:8e:b5:8f:67:
bc:e5:7b:c3:fc:68:d9:cf:24:5c:cd:1e:46:6a:90:ed:78:69:
34:69:bc:fa:41:5f:f7:3e:4e:f3:33:68:5b:86:0b:4f:21:ae:
76:00:ca:21:2a:94:93:c7:8a:3d:33:2f:77:b7:fb:36:bd:80:
03:12:88:ff:8e:05:5b:8e:79:93:bf:74:28:91:03:3c:da:bd:
05:85:af:66:a9:b0:ea:24:e8:28:b5:87:01:38:85:49:94:6b:
98:34:f3:aa:df:5e:70:29:e6:13:66:9d:ca:c3:d2:1c:c8:c5:
45:0b:f5:14:39:42:32:78:da:68:a8:bd:ba:b5:c0:ff:b3:b8:
5f:b3:8d:23:80:e7:76:de:d5:89:47:a9:59:2b:4a:55:c2:38:
c1:96:da:8d:8b:b7:6f:91:b0:20:58:c5:5a:ee:29:5d:99:90:
40:3a:f5:7e:43:80:ed:37:ab:38:fc:5d:cc:b3:bb:88:ea:64:
4e:72:a5:73
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzU3MkIxMTAvBgNVBAUTKERGNzlDM0JBMDE1MjYxRTNBQzg0MzIzOUNFNDcwMzU5
MDFENjZBOTQwHhcNMjUwMTMxMDM0MTUwWhcNMjUwMjA3MDM0MTUwWjAYMRYwFAYD
VQQDEw02NzljNDY3Zi1lZjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzbB8qx+55IDWqEWENPeRbXK0J4DXjWba6NB3daxZNNqwqvqaRuxXOJ6k22jN
ov9FuJV09wfrvVMFoCBulkhUs951qLwdkg1Jppbo48R0xpwVS062hsaqQWOmINSD
8HWKJhKNOFQ7kQ+Fj+r7ue3hNviIfl2WKED2UzaqHFO5qD9EYsAV9UZZiQB6nZQC
ZRjzWy2WEoR/M9KyVajizv9XJlleT5T5r+aw/Ka21gfFVFsQqRFibs8qIsKZiUtV
5oZkYLDx34BFC6LhaytNJHAnoUjEtGRZ7JmjClAcP9Sb/CYvfDgg4M2sSocWc0mZ
EvwA5PldqwtNkiAubnvCCwS5QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOv4VHh8
6wuFVj4csTeo/rXpjZc5MB8GA1UdIwQYMBaAFN95w7oBUmHjrIQyOc5HA1kB1mqU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTcyQi9GN0U1QzE2ODBF
OUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1llT3NoREk1emtjRFdRSFdh
cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzMzbkR1Z0ZTWWVPc2hESTV6a2NEV1FIV2FwUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NTcyQi9GN0U1QzE2ODBFOUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1ll
T3NoREk1emtjRFdRSFdhcFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAfBiUWJ+mWDrPe24jyhPVziTb5VPo+9qNlDMaaoZ7GY35ZIl8sEDsQ
UB4DG4hmybIckneeOOCBe+8RHBiNJ7vELKZmd461j2e85XvD/GjZzyRczR5GapDt
eGk0abz6QV/3Pk7zM2hbhgtPIa52AMohKpSTx4o9My93t/s2vYADEoj/jgVbjnmT
v3QokQM82r0Fha9mqbDqJOgotYcBOIVJlGuYNPOq315wKeYTZp3Kw9IcyMVFC/UU
OUIyeNpoqL26tcD/s7hfs40jgOd23tWJR6lZK0pVwjjBltqNi7dvkbAgWMVa7ild
mZBAOvV+Q4DtN6s4/F3Ms7uI6mROcqVz
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:36 2025 by rpki-client