Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft
File: nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft (raw, json)
Hash identifier: lLCh0k6QoPh1UVCMHWR7Xn4qiexq7j7yEpvvQkzvRCY=
Subject key identifier: C9:38:78:AB:5F:78:AC:E0:59:B3:C1:3A:99:DE:DE:0B:26:57:52:7C
Authority key identifier: 9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9
Certificate issuer: /CN=A91C6CAF/serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9
Certificate serial: D8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft
Manifest number: CE
Signing time: Fri 31 Jan 2025 04:57:58 +0000
Manifest this update: Fri 31 Jan 2025 04:57:58 +0000
Manifest next update: Fri 07 Feb 2025 04:57:58 +0000
Files and hashes: 1: nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl (hash: 32S+LYnxhciQ8E9UOx/LvtGAO5q8KmhBgMq6bcrjdrI=)
2: 09E42D1E921B11EF829E0041C4F9AE02.roa (hash: B4bx9kA0p4n5ASz52WYMBOS7rU+I5DT2fmWjDq/qssM=)
3: 51E59058921B11EFB656CB41C4F9AE02.roa (hash: ZDrCMxxOwwuqNF0Q4xD3EvKSvIiYcNvuSOn5SbIs2mk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216 (0xd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6CAF/serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9
Validity
Not Before: Jan 31 04:57:58 2025 GMT
Not After : Feb 7 04:57:58 2025 GMT
Subject: CN=679c5856-f692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ca:5e:db:16:37:5c:f5:ee:84:e8:21:4b:cc:
54:99:b2:08:80:d1:ea:d6:02:f3:d2:fa:a3:85:49:
e2:bc:bc:43:99:8f:5a:96:f1:36:ec:73:a0:2c:d8:
30:83:b4:38:bf:0f:43:c4:46:c4:9c:1e:2f:f3:41:
ae:d8:5f:08:2b:f3:44:e0:b7:15:7d:7a:84:89:f0:
c5:81:67:9c:66:cb:a7:22:27:11:38:c6:f7:12:42:
9d:1c:15:1c:13:bd:60:60:de:48:dc:42:cb:0e:d1:
0e:73:3c:ba:3a:69:74:8d:a1:ac:07:79:b0:a3:97:
17:f5:11:53:fc:90:eb:85:29:55:12:af:b0:8b:0c:
9e:0a:84:fb:a0:1b:f3:78:e3:c4:61:ec:50:a1:a6:
b4:cc:c8:4b:ed:b6:4b:da:f5:d9:79:21:ea:e9:6a:
56:e9:7e:45:25:2a:1f:bb:78:bf:db:ba:c2:32:f0:
49:7c:3f:56:90:17:c0:53:b8:f3:41:03:a9:2d:98:
10:7e:85:51:c3:92:94:32:15:42:8e:5d:69:62:02:
86:f6:dc:ce:2d:d0:d4:de:85:fe:a4:e3:4a:bb:3f:
e7:d5:49:b6:b8:f2:bb:44:47:3b:43:5a:6a:58:9d:
94:4b:fb:63:b9:91:13:f4:56:5a:db:9f:86:ea:50:
6d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:38:78:AB:5F:78:AC:E0:59:B3:C1:3A:99:DE:DE:0B:26:57:52:7C
X509v3 Authority Key Identifier:
keyid:9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:de:83:a5:fd:a4:cc:b7:08:ba:6e:1a:be:f6:24:ac:d3:5c:
a1:ba:e8:2c:9f:e3:b1:28:87:6a:95:29:ab:d4:ec:ce:67:70:
a4:79:78:b4:81:a3:14:86:2f:38:c7:39:2e:2c:75:39:c5:01:
35:ab:7c:bd:5d:ca:97:e7:5a:1f:53:fb:57:99:cb:60:13:c2:
e1:b5:40:cc:9e:19:5c:40:d1:ca:b3:2b:a0:01:a7:ce:97:84:
98:93:8c:b2:95:4a:cd:1e:5d:dd:91:f7:c6:1b:01:f1:1a:fd:
87:4b:56:7b:d3:2c:9d:16:90:78:80:23:25:39:22:65:e9:33:
e3:9a:9e:4a:e6:77:c9:e3:1e:e2:39:f2:e4:52:0d:26:c9:b5:
89:e6:3e:ab:df:e7:26:e8:97:86:de:be:75:50:79:5d:fa:df:
3a:4d:b6:c7:e6:23:47:e1:5e:d9:21:64:2c:1b:11:94:4b:10:
09:63:b9:b6:20:fc:e2:ed:0b:8f:94:37:65:55:59:cb:70:f0:
64:07:bb:ef:81:cc:f1:83:b0:50:08:cd:18:b1:dc:3a:8e:bb:
76:55:a1:bc:d4:1d:f6:1d:1d:2b:2b:f6:28:d1:5d:04:9e:82:
b8:2e:22:3c:2f:0d:9a:20:59:67:96:b6:d5:87:f0:9c:e2:ec:
2f:bf:dc:35
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzZDQUYxMTAvBgNVBAUTKDlGMDJEQTNBQjVGQjQ1MzE3NTA3QzQ4MDIxQ0UwQThC
OTM3MjU1QzkwHhcNMjUwMTMxMDQ1NzU4WhcNMjUwMjA3MDQ1NzU4WjAYMRYwFAYD
VQQDEw02NzljNTg1Ni1mNjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwcpe2xY3XPXuhOghS8xUmbIIgNHq1gLz0vqjhUnivLxDmY9alvE27HOgLNgw
g7Q4vw9DxEbEnB4v80Gu2F8IK/NE4LcVfXqEifDFgWecZsunIicROMb3EkKdHBUc
E71gYN5I3ELLDtEOczy6Oml0jaGsB3mwo5cX9RFT/JDrhSlVEq+wiwyeCoT7oBvz
eOPEYexQoaa0zMhL7bZL2vXZeSHq6WpW6X5FJSofu3i/27rCMvBJfD9WkBfAU7jz
QQOpLZgQfoVRw5KUMhVCjl1pYgKG9tzOLdDU3oX+pONKuz/n1Um2uPK7REc7Q1pq
WJ2US/tjuZET9FZa25+G6lBtwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMk4eKtf
eKzgWbPBOpne3gsmV1J8MB8GA1UdIwQYMBaAFJ8C2jq1+0UxdQfEgCHOCouTclXJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNBRi9GM0UwRkFFNEI2
RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi9ud0xhT3JYN1JURjFCOFNBSWM0S2k1TnlW
Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL253TGFPclg3UlRGMUI4U0FJYzRLaTVOeVZjay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NkNBRi9GM0UwRkFFNEI2RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi9ud0xhT3JYN1JU
RjFCOFNBSWM0S2k1TnlWY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAi3oOl/aTMtwi6bhq+9iSs01yhuugsn+OxKIdqlSmr1OzOZ3CkeXi0
gaMUhi84xzkuLHU5xQE1q3y9XcqX51ofU/tXmctgE8LhtUDMnhlcQNHKsyugAafO
l4SYk4yylUrNHl3dkffGGwHxGv2HS1Z70yydFpB4gCMlOSJl6TPjmp5K5nfJ4x7i
OfLkUg0mybWJ5j6r3+cm6JeG3r51UHld+t86TbbH5iNH4V7ZIWQsGxGUSxAJY7m2
IPzi7QuPlDdlVVnLcPBkB7vvgczxg7BQCM0Ysdw6jrt2VaG81B32HR0rK/Yo0V0E
noK4LiI8Lw2aIFlnlrbVh/Cc4uwvv9w1
-----END CERTIFICATE-----
Generated at Sun Apr 27 15:38:52 2025 by rpki-client