Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.mft
File: S0w6zHYgyo0mn3fC-L5soNohdic.mft (raw, json)
Hash identifier: /ZmO8acZS18diCAOcVW7GNhKoCOE45J5cJFrm5+oIX0=
Subject key identifier: 26:D5:F4:1F:0F:A9:AC:AE:D3:99:6A:00:93:90:5F:20:A9:7C:79:3B
Authority key identifier: 4B:4C:3A:CC:76:20:CA:8D:26:9F:77:C2:F8:BE:6C:A0:DA:21:76:27
Certificate issuer: /CN=A91C6CD5/serialNumber=4B4C3ACC7620CA8D269F77C2F8BE6CA0DA217627
Certificate serial: 03DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0w6zHYgyo0mn3fC-L5soNohdic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.mft
Manifest number: 03DA
Signing time: Fri 31 Jan 2025 00:39:34 +0000
Manifest this update: Fri 31 Jan 2025 00:39:34 +0000
Manifest next update: Fri 07 Feb 2025 00:39:34 +0000
Files and hashes: 1: S0w6zHYgyo0mn3fC-L5soNohdic.crl (hash: EmS1FcVj6puAWx7TO0mIOJGR4nF3S7skA5tpPsyzt+0=)
2: AE0AFE846ADE11ECADF2FE5DC4F9AE02.roa (hash: KghdCfc9o42iOfQL3hI0MGr1qL+JhgQLoQInt8LXNLk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 990 (0x3de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6CD5/serialNumber=4B4C3ACC7620CA8D269F77C2F8BE6CA0DA217627
Validity
Not Before: Jan 31 00:39:34 2025 GMT
Not After : Feb 7 00:39:34 2025 GMT
Subject: CN=679c1bc6-8969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b6:fa:b8:38:5a:be:5c:b2:4a:88:c4:e7:3a:
83:e7:8f:82:be:c4:63:02:a1:4d:3b:77:e2:95:f9:
96:00:da:71:80:80:79:72:5c:ac:d7:5c:77:ea:0f:
05:66:bb:5b:30:79:0f:0f:d5:3c:29:28:8c:74:23:
61:1c:b8:2e:ea:35:37:53:1a:50:24:ce:37:f9:4f:
b6:ff:5b:55:fc:7b:8e:71:26:28:7e:97:68:7d:b0:
07:18:1f:90:30:8f:e2:50:98:69:9f:27:f9:64:4c:
e3:e6:e8:7d:a5:ca:c4:03:06:f7:43:75:cf:9b:a1:
99:1f:4c:02:f6:10:e9:54:52:fc:3b:48:79:95:ae:
e1:34:50:9f:13:01:4e:14:01:fe:aa:b3:8a:06:3b:
7e:b6:14:7f:ea:74:48:e9:86:e7:62:97:7c:b2:4e:
1c:93:89:73:f3:c9:13:93:9b:c5:7a:44:53:8f:f4:
fd:8e:0b:b6:e0:e4:0f:14:0a:6e:94:4e:10:7e:9d:
6f:31:99:0c:3f:e2:df:73:7d:e1:39:cc:99:72:14:
8e:72:21:92:7b:98:73:b4:3a:97:d7:4b:91:86:72:
ce:62:ed:fd:98:28:60:d7:7e:47:39:0f:83:74:59:
dc:22:12:0a:e0:b0:9a:e8:d1:04:4c:1d:5a:72:2a:
be:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D5:F4:1F:0F:A9:AC:AE:D3:99:6A:00:93:90:5F:20:A9:7C:79:3B
X509v3 Authority Key Identifier:
keyid:4B:4C:3A:CC:76:20:CA:8D:26:9F:77:C2:F8:BE:6C:A0:DA:21:76:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0w6zHYgyo0mn3fC-L5soNohdic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:7e:40:bd:46:e5:1b:93:9b:96:79:68:53:b0:a9:0d:2f:64:
88:e5:d7:99:b6:03:22:fe:fc:e3:80:68:13:88:77:13:f3:0e:
56:4b:ee:14:61:43:cb:30:b8:5f:7e:0c:7a:59:59:bb:8c:97:
59:3f:f6:a3:50:23:c4:9c:d7:76:fb:63:91:ad:2c:aa:7d:74:
e7:c3:bb:2b:53:93:78:1b:a6:e0:a7:4c:4e:63:40:0f:f3:0d:
67:c8:de:12:95:1b:a6:bf:b0:72:24:8e:53:1d:df:4f:ad:5f:
2f:2f:1b:ad:d6:41:74:58:4c:bd:02:a0:90:4f:41:9c:3f:e7:
04:38:98:a6:c6:d5:cd:47:f6:4f:fc:6a:8d:96:96:7f:54:ac:
a0:0f:f3:c8:41:7a:94:80:70:d2:6a:67:44:b6:9f:c7:88:b1:
3a:d9:c2:35:08:56:e9:cb:50:76:3e:99:31:db:f4:36:a3:dc:
80:43:52:f3:22:43:3e:1b:a8:5f:a3:3e:00:ba:b9:44:e9:12:
19:50:25:d3:02:d5:5e:19:df:dd:1a:ce:85:65:ca:da:f8:69:
89:35:4e:47:0e:c2:a4:d4:28:86:44:d4:9b:de:51:80:fe:27:
7b:bc:36:47:9c:fb:d8:c0:6b:2a:5b:25:bb:54:10:21:5b:3d:
d2:60:a7:90
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzZDRDUxMTAvBgNVBAUTKDRCNEMzQUNDNzYyMENBOEQyNjlGNzdDMkY4QkU2Q0Ew
REEyMTc2MjcwHhcNMjUwMTMxMDAzOTM0WhcNMjUwMjA3MDAzOTM0WjAYMRYwFAYD
VQQDEw02NzljMWJjNi04OTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxLb6uDhavlyySojE5zqD54+CvsRjAqFNO3filfmWANpxgIB5clys11x36g8F
ZrtbMHkPD9U8KSiMdCNhHLgu6jU3UxpQJM43+U+2/1tV/HuOcSYofpdofbAHGB+Q
MI/iUJhpnyf5ZEzj5uh9pcrEAwb3Q3XPm6GZH0wC9hDpVFL8O0h5la7hNFCfEwFO
FAH+qrOKBjt+thR/6nRI6YbnYpd8sk4ck4lz88kTk5vFekRTj/T9jgu24OQPFApu
lE4Qfp1vMZkMP+Lfc33hOcyZchSOciGSe5hztDqX10uRhnLOYu39mChg135HOQ+D
dFncIhIK4LCa6NEETB1aciq+wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCbV9B8P
qayu05lqAJOQXyCpfHk7MB8GA1UdIwQYMBaAFEtMOsx2IMqNJp93wvi+bKDaIXYn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNENS84MDRCMUU5MjZB
REExMUVDQUNBN0E1MzBDNEY5QUUwMi9TMHc2ekhZZ3lvMG1uM2ZDLUw1c29Ob2hk
aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1MwdzZ6SFlneW8wbW4zZkMtTDVzb05vaGRpYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NkNENS84MDRCMUU5MjZBREExMUVDQUNBN0E1MzBDNEY5QUUwMi9TMHc2ekhZZ3lv
MG1uM2ZDLUw1c29Ob2hkaWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAtfkC9RuUbk5uWeWhTsKkNL2SI5deZtgMi/vzjgGgTiHcT8w5WS+4U
YUPLMLhffgx6WVm7jJdZP/ajUCPEnNd2+2ORrSyqfXTnw7srU5N4G6bgp0xOY0AP
8w1nyN4SlRumv7ByJI5THd9PrV8vLxut1kF0WEy9AqCQT0GcP+cEOJimxtXNR/ZP
/GqNlpZ/VKygD/PIQXqUgHDSamdEtp/HiLE62cI1CFbpy1B2Ppkx2/Q2o9yAQ1Lz
IkM+G6hfoz4AurlE6RIZUCXTAtVeGd/dGs6FZcra+GmJNU5HDsKk1CiGRNSb3lGA
/id7vDZHnPvYwGsqWyW7VBAhWz3SYKeQ
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:19:42 2025 by rpki-client