Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft
File: RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft (raw, json)
Hash identifier: KTrLcBy1FbE6PBNd5wmRA4YeNrhu+UFV0NfDtrcNFGs=
Subject key identifier: CD:A8:BE:78:29:A2:ED:D1:74:8F:B3:EF:67:1D:74:BA:EA:96:8E:7B
Authority key identifier: 45:C8:08:A8:AC:DE:24:AC:96:13:E0:1A:49:59:61:00:ED:5E:8C:F1
Certificate issuer: /CN=A91C6833/serialNumber=45C808A8ACDE24AC9613E01A49596100ED5E8CF1
Certificate serial: 1E15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft
Manifest number: 1E00
Signing time: Fri 31 Jan 2025 16:05:42 +0000
Manifest this update: Fri 31 Jan 2025 16:05:42 +0000
Manifest next update: Fri 07 Feb 2025 16:05:42 +0000
Files and hashes: 1: RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl (hash: puD+3NfgmTXBr8MVsG4PVdSa+a8stxVDbDjH9EHpkXk=)
2: 3F1BB7A09BC011EF995CBB11C4F9AE02.roa (hash: ppVaHDx1dLxEzXzKs4B/Bei6naIiQDjP+g7Sivk4L7g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7701 (0x1e15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6833/serialNumber=45C808A8ACDE24AC9613E01A49596100ED5E8CF1
Validity
Not Before: Jan 31 16:05:42 2025 GMT
Not After : Feb 7 16:05:42 2025 GMT
Subject: CN=679cf4d6-0beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1c:fb:d6:fc:85:86:62:7b:30:43:db:36:80:
7e:e8:36:6f:6e:01:e8:a7:39:c5:84:30:9e:6f:51:
07:27:b7:46:2c:06:fa:cd:d7:77:a5:34:8c:0d:6d:
e5:d7:96:07:b7:13:a2:85:9a:5c:c0:1d:56:be:e5:
f0:64:46:9f:26:c7:1b:76:79:c3:60:e4:3a:30:55:
e3:f2:2b:87:dd:54:e1:f1:f6:08:10:98:8a:b5:ac:
58:4f:53:9c:2f:4c:71:e7:c6:b1:73:60:9a:97:55:
86:d0:cc:a4:78:99:1a:d6:a5:3c:c1:71:22:00:d9:
79:14:f5:c9:c4:50:f9:5a:8e:84:33:85:52:4a:40:
21:42:cf:75:46:07:03:8d:0c:e3:06:d3:9c:0a:4d:
0e:5c:36:92:f9:f2:8a:27:68:41:41:d5:b6:94:5d:
28:76:6a:eb:76:10:5f:a1:a7:91:9d:13:b3:c3:a4:
b9:33:5f:cf:9c:1b:1d:32:b4:5c:1d:2d:5e:83:49:
78:1b:de:5f:57:ac:97:f4:69:b7:70:0d:ae:6f:08:
a0:c1:94:5e:11:cb:5e:be:0b:72:64:a7:15:08:7b:
63:73:66:40:db:bb:e2:62:26:c8:85:15:5e:0b:70:
d3:20:64:d9:c5:a3:ce:bc:2c:e9:21:5a:cd:89:8a:
30:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A8:BE:78:29:A2:ED:D1:74:8F:B3:EF:67:1D:74:BA:EA:96:8E:7B
X509v3 Authority Key Identifier:
keyid:45:C8:08:A8:AC:DE:24:AC:96:13:E0:1A:49:59:61:00:ED:5E:8C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:eb:4b:b5:8f:3b:ca:d2:70:88:04:22:f8:e8:f5:08:92:0f:
ed:fd:ab:d4:09:8c:b6:4d:f6:fb:48:3f:05:ef:26:ce:f4:7a:
35:f3:7f:0b:08:2b:1c:85:4d:59:7a:fc:90:de:c8:6e:73:c7:
ef:63:8a:31:4b:17:07:60:05:9c:f1:db:98:21:70:71:df:14:
6d:21:eb:af:ab:18:ce:16:d8:93:bd:6b:73:04:93:8e:1c:ee:
2c:5a:32:3b:17:60:38:e6:4d:05:3e:cb:ed:5a:a3:d6:46:a6:
a8:41:a9:52:50:a4:82:61:22:b8:e1:d2:e4:ff:13:45:12:a4:
d9:12:e9:e0:45:a6:d9:8a:48:ff:50:9d:bc:9c:69:aa:c9:91:
72:b4:b3:71:9f:e6:f3:07:94:f0:77:dc:4a:56:22:f0:c9:2c:
3b:5d:92:10:e7:86:68:96:9d:fa:e9:0d:38:a9:40:49:a1:fe:
83:59:a3:79:5e:37:30:ef:6f:b8:d9:b0:ba:9a:9c:37:59:91:
0b:19:b4:3f:17:12:78:bc:72:ba:01:2f:ce:8e:11:42:e8:cf:
d0:24:d2:36:a8:f4:09:46:f7:2b:2e:10:62:46:45:54:7f:22:
b7:a6:d2:b6:a4:34:8d:b9:a3:aa:fc:e7:77:30:17:d0:eb:64:
c7:d9:92:7d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzY4MzMxMTAvBgNVBAUTKDQ1QzgwOEE4QUNERTI0QUM5NjEzRTAxQTQ5NTk2MTAw
RUQ1RThDRjEwHhcNMjUwMTMxMTYwNTQyWhcNMjUwMjA3MTYwNTQyWjAYMRYwFAYD
VQQDEw02NzljZjRkNi0wYmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwBz71vyFhmJ7MEPbNoB+6DZvbgHopznFhDCeb1EHJ7dGLAb6zdd3pTSMDW3l
15YHtxOihZpcwB1WvuXwZEafJscbdnnDYOQ6MFXj8iuH3VTh8fYIEJiKtaxYT1Oc
L0xx58axc2Cal1WG0MykeJka1qU8wXEiANl5FPXJxFD5Wo6EM4VSSkAhQs91RgcD
jQzjBtOcCk0OXDaS+fKKJ2hBQdW2lF0odmrrdhBfoaeRnROzw6S5M1/PnBsdMrRc
HS1eg0l4G95fV6yX9Gm3cA2ubwigwZReEctevgtyZKcVCHtjc2ZA27viYibIhRVe
C3DTIGTZxaPOvCzpIVrNiYowYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2ovngp
ou3RdI+z72cddLrqlo57MB8GA1UdIwQYMBaAFEXICKis3iSslhPgGklZYQDtXozx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjgzMy9GM0Q0ODBFQzgz
QjMxMUU2OUREODY3MzBDNEY5QUUwMi9SY2dJcUt6ZUpLeVdFLUFhU1ZsaEFPMWVq
UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JjZ0lxS3plSkt5V0UtQWFTVmxoQU8xZWpQRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NjgzMy9GM0Q0ODBFQzgzQjMxMUU2OUREODY3MzBDNEY5QUUwMi9SY2dJcUt6ZUpL
eVdFLUFhU1ZsaEFPMWVqUEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCg60u1jzvK0nCIBCL46PUIkg/t/avUCYy2Tfb7SD8F7ybO9Ho1838L
CCschU1ZevyQ3shuc8fvY4oxSxcHYAWc8duYIXBx3xRtIeuvqxjOFtiTvWtzBJOO
HO4sWjI7F2A45k0FPsvtWqPWRqaoQalSUKSCYSK44dLk/xNFEqTZEungRabZikj/
UJ28nGmqyZFytLNxn+bzB5Twd9xKViLwySw7XZIQ54Zolp366Q04qUBJof6DWaN5
Xjcw72+42bC6mpw3WZELGbQ/FxJ4vHK6AS/OjhFC6M/QJNI2qPQJRvcrLhBiRkVU
fyK3ptK2pDSNuaOq/Od3MBfQ62TH2ZJ9
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:45:20 2025 by rpki-client