Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft
File: vBtEbpc35JZMB6uMttwYBtbr_5s.mft (raw, json)
Hash identifier: XS7QCDmAFGFjgK1xJrO4N7Jx/oyZUN3QeEMxdiEWnlE=
Subject key identifier: DD:31:1A:0F:9A:B6:11:6E:B5:4B:45:FC:91:F9:E3:DE:71:8C:B0:C1
Authority key identifier: BC:1B:44:6E:97:37:E4:96:4C:07:AB:8C:B6:DC:18:06:D6:EB:FF:9B
Certificate issuer: /CN=A91C73A7/serialNumber=BC1B446E9737E4964C07AB8CB6DC1806D6EBFF9B
Certificate serial: 0655
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft
Manifest number: 0651
Signing time: Thu 30 Jan 2025 22:26:31 +0000
Manifest this update: Thu 30 Jan 2025 22:26:30 +0000
Manifest next update: Thu 06 Feb 2025 22:26:30 +0000
Files and hashes: 1: vBtEbpc35JZMB6uMttwYBtbr_5s.crl (hash: xTDDdmvebxSCNYFzltjdHLyc+1sTeiZ8skJ26Tsj3qU=)
2: 6BD6CD146F7F11EBB1A2C853C4F9AE02.roa (hash: fklFDPJioLWiBQO5Ca7OiFTXJaQA8xm4ZECWPmSGBc4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1621 (0x655)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C73A7/serialNumber=BC1B446E9737E4964C07AB8CB6DC1806D6EBFF9B
Validity
Not Before: Jan 30 22:26:30 2025 GMT
Not After : Feb 6 22:26:30 2025 GMT
Subject: CN=679bfc96-6f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:dc:c3:b6:5a:b9:43:8b:88:33:26:cd:2a:f7:
28:b8:7f:9d:11:37:d8:ac:9d:4a:ff:f0:dc:38:4d:
e3:ff:1f:54:ef:d2:8a:1b:60:e3:15:b9:d6:47:6f:
ba:b7:f6:c7:ad:97:db:51:3b:c3:c8:64:b3:ee:3d:
44:21:89:4d:58:4e:d2:a9:35:ee:5b:19:70:e4:5b:
54:31:d5:f4:cc:ff:b1:39:fd:f4:a8:7c:0b:af:9a:
64:9d:b7:ae:bc:c8:01:d6:8d:e9:4d:2e:79:d5:aa:
a1:54:29:26:5d:f8:32:d8:f9:65:d8:b4:ee:3a:c5:
7c:a4:de:ba:4c:ee:f5:92:f1:79:5b:48:66:a5:1a:
73:da:cf:a8:10:8b:08:9b:21:de:90:c9:43:7f:f6:
3f:fd:0f:c4:ae:be:71:af:3e:5a:a3:6a:49:93:0e:
92:1f:6d:04:17:1e:0d:54:7b:32:bf:c5:4a:4e:de:
91:38:41:ba:e6:64:17:69:f4:65:56:83:68:f8:98:
51:5b:b6:06:ea:18:5a:64:72:58:1e:f3:7e:19:40:
66:7c:32:56:24:06:5e:e5:d3:47:83:ce:fe:2d:5b:
3a:dc:b8:f7:31:0c:65:9f:91:fe:8a:90:d4:c1:d4:
c3:3a:10:7c:b9:30:bd:b5:ad:7c:2c:d5:31:c9:7c:
41:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:31:1A:0F:9A:B6:11:6E:B5:4B:45:FC:91:F9:E3:DE:71:8C:B0:C1
X509v3 Authority Key Identifier:
keyid:BC:1B:44:6E:97:37:E4:96:4C:07:AB:8C:B6:DC:18:06:D6:EB:FF:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:1b:ee:43:92:e0:fb:bc:f8:d0:f5:a1:6f:30:b9:06:45:0d:
06:6b:e8:9d:c6:9a:c5:e0:3e:a0:f9:c0:f0:e2:09:84:18:f6:
f1:1d:1a:f4:db:b4:cd:99:16:3c:c9:f8:e2:a1:0b:c9:92:a2:
ef:a8:44:52:93:77:fb:12:8b:74:95:da:5f:6a:81:b5:e9:62:
0e:81:9c:d2:63:40:e0:f2:0d:db:c0:f4:4e:7c:11:8b:c1:4a:
5d:5b:70:2e:cd:31:f6:74:fd:49:e0:5c:73:80:5d:4f:fa:59:
26:b7:cf:21:b9:f3:7f:44:45:2d:d2:2c:c0:21:6f:9b:29:73:
ff:58:1f:26:45:f4:c1:51:6c:bf:53:7d:3b:8e:d0:ca:16:bd:
95:af:52:8b:1a:19:c7:d5:9e:dc:e7:eb:2f:f7:4e:4b:4a:e1:
d5:1e:9d:68:af:ac:18:a3:f8:b6:a2:4b:27:81:e7:3d:b9:e0:
b2:6f:bf:66:c0:18:32:2e:55:57:e6:7b:d5:37:8a:7a:2f:d0:
1e:26:cb:37:64:37:ae:41:1c:aa:55:db:bb:28:6b:10:f7:62:
6a:bb:40:8f:01:f3:be:c7:7a:90:1f:8b:e5:10:1f:dc:4b:fc:
d5:fd:2d:02:2a:45:87:60:bb:1b:ed:6f:cd:45:aa:0c:62:a8:
ee:8d:db:a5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzczQTcxMTAvBgNVBAUTKEJDMUI0NDZFOTczN0U0OTY0QzA3QUI4Q0I2REMxODA2
RDZFQkZGOUIwHhcNMjUwMTMwMjIyNjMwWhcNMjUwMjA2MjIyNjMwWjAYMRYwFAYD
VQQDEw02NzliZmM5Ni02ZjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1NzDtlq5Q4uIMybNKvcouH+dETfYrJ1K//DcOE3j/x9U79KKG2DjFbnWR2+6
t/bHrZfbUTvDyGSz7j1EIYlNWE7SqTXuWxlw5FtUMdX0zP+xOf30qHwLr5pknbeu
vMgB1o3pTS551aqhVCkmXfgy2Pll2LTuOsV8pN66TO71kvF5W0hmpRpz2s+oEIsI
myHekMlDf/Y//Q/Err5xrz5ao2pJkw6SH20EFx4NVHsyv8VKTt6ROEG65mQXafRl
VoNo+JhRW7YG6hhaZHJYHvN+GUBmfDJWJAZe5dNHg87+LVs63Lj3MQxln5H+ipDU
wdTDOhB8uTC9ta18LNUxyXxBcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN0xGg+a
thFutUtF/JH5495xjLDBMB8GA1UdIwQYMBaAFLwbRG6XN+SWTAerjLbcGAbW6/+b
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzNBNy8yRDJDQjM0MDZG
N0UxMUVCOUUxMzUyNTNDNEY5QUUwMi92QnRFYnBjMzVKWk1CNnVNdHR3WUJ0YnJf
NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZCdEVicGMzNUpaTUI2dU10dHdZQnRicl81cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NzNBNy8yRDJDQjM0MDZGN0UxMUVCOUUxMzUyNTNDNEY5QUUwMi92QnRFYnBjMzVK
Wk1CNnVNdHR3WUJ0YnJfNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCnG+5DkuD7vPjQ9aFvMLkGRQ0Ga+idxprF4D6g+cDw4gmEGPbxHRr0
27TNmRY8yfjioQvJkqLvqERSk3f7Eot0ldpfaoG16WIOgZzSY0Dg8g3bwPROfBGL
wUpdW3AuzTH2dP1J4FxzgF1P+lkmt88hufN/REUt0izAIW+bKXP/WB8mRfTBUWy/
U307jtDKFr2Vr1KLGhnH1Z7c5+sv905LSuHVHp1or6wYo/i2oksngec9ueCyb79m
wBgyLlVX5nvVN4p6L9AeJss3ZDeuQRyqVdu7KGsQ92Jqu0CPAfO+x3qQH4vlEB/c
S/zV/S0CKkWHYLsb7W/NRaoMYqjujdul
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:23:42 2025 by rpki-client