Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft
File: yJEt9MR_ima8SJ7IQnJICiEbBoI.mft (raw, json)
Hash identifier: tGhSB/+V9zGLFqAYw0tgsPyjgAKLFiBpU2Oa0mjCVeY=
Subject key identifier: 45:8B:B0:A9:A8:7D:F5:23:81:E0:1D:10:9B:54:68:B6:33:45:E8:E6
Authority key identifier: C8:91:2D:F4:C4:7F:8A:66:BC:48:9E:C8:42:72:48:0A:21:1B:06:82
Certificate issuer: /CN=A91C9286/serialNumber=C8912DF4C47F8A66BC489EC84272480A211B0682
Certificate serial: 0BA8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft
Manifest number: 0B90
Signing time: Thu 30 Jan 2025 19:05:17 +0000
Manifest this update: Thu 30 Jan 2025 19:05:16 +0000
Manifest next update: Thu 06 Feb 2025 19:05:16 +0000
Files and hashes: 1: yJEt9MR_ima8SJ7IQnJICiEbBoI.crl (hash: wnz/YUXv2/+IIgMO6+xD73LSGI/mZEaV8pOOS6C5QkY=)
2: 4F0E3CBCD22411ED99FF3546C4F9AE02.roa (hash: RoK/Liyg5Z/zOr0f0lIzQ8yWfepOU0FGv2MoxE2M0l4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2984 (0xba8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9286/serialNumber=C8912DF4C47F8A66BC489EC84272480A211B0682
Validity
Not Before: Jan 30 19:05:16 2025 GMT
Not After : Feb 6 19:05:16 2025 GMT
Subject: CN=679bcd6d-ea82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:92:d6:0e:1a:8c:ce:35:30:3c:56:34:5c:af:
70:48:46:28:c2:29:1b:ad:a6:a0:6c:08:43:49:1f:
64:f0:3a:36:fc:d1:85:e2:c1:63:60:b0:a1:39:ce:
11:e2:01:c0:a0:b9:77:37:c0:86:89:cf:93:62:d5:
33:81:25:b1:ad:38:aa:fd:aa:b7:32:19:9b:a5:0c:
52:df:a0:a9:ea:d2:ce:ab:a2:1e:f3:38:a7:09:fa:
6c:29:7e:39:4a:93:bf:3f:cd:99:94:61:c7:eb:e6:
50:7c:bd:c6:ee:d7:a5:79:b6:33:ba:0e:78:f3:a9:
78:e1:44:fe:2c:45:be:ad:07:9c:d0:85:4a:cc:91:
d6:06:d8:1f:64:b1:be:3b:d6:ec:ca:34:63:f7:1a:
29:fd:7f:5b:8b:cc:56:4e:e1:84:bc:f6:95:2c:0d:
60:8d:34:60:d3:8b:0b:bc:9d:ff:59:b8:78:5c:3b:
61:c0:b5:d2:b9:62:86:b0:2e:3a:ae:9f:82:dd:0c:
85:8b:e6:8c:17:85:b2:c1:ca:4c:a1:51:ab:1e:25:
53:cc:fe:f5:29:e1:7a:f9:9f:ca:1e:50:e1:11:81:
ee:32:eb:a4:01:7e:ff:5f:fc:08:5f:f7:61:f9:f7:
b5:11:a0:9f:7c:35:c8:d6:87:5f:ed:e7:ce:d0:92:
76:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8B:B0:A9:A8:7D:F5:23:81:E0:1D:10:9B:54:68:B6:33:45:E8:E6
X509v3 Authority Key Identifier:
keyid:C8:91:2D:F4:C4:7F:8A:66:BC:48:9E:C8:42:72:48:0A:21:1B:06:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:47:27:03:4f:b8:e8:60:44:f3:ff:25:73:8e:aa:9f:af:88:
39:2e:17:33:25:32:90:73:7c:7a:6c:15:50:76:8e:be:43:6a:
87:55:0f:67:87:5b:05:c0:4f:d9:43:fb:69:29:51:4d:2d:ac:
02:fa:65:f7:84:e1:ec:30:a1:13:0c:04:c7:ca:c3:bb:34:17:
e9:5c:c7:21:d3:72:f1:a1:18:48:43:c7:35:24:d7:a0:70:ba:
9d:b4:1c:14:09:6e:d5:62:c0:fa:93:ef:41:3b:df:b4:0c:1d:
3e:24:f7:29:84:67:10:e2:54:88:ab:92:ba:06:67:42:52:bd:
a8:4a:b2:23:b1:49:4a:62:1a:09:e4:38:21:52:58:3d:d8:d2:
76:4c:33:23:3d:98:12:7e:7e:7d:18:2c:66:57:8d:66:2d:75:
96:e8:9e:2e:09:c9:af:a3:86:0b:6f:26:38:21:ca:aa:1b:8b:
c7:6f:af:ec:93:ae:21:31:b7:c0:55:95:73:bd:0f:96:97:1a:
a7:da:4d:f6:d3:63:ee:a0:82:4c:f2:f7:27:eb:f6:32:08:d9:
d3:91:81:b2:c7:66:fa:69:5f:eb:95:e5:83:4d:ec:f2:4c:18:
e8:83:fa:8f:00:c4:dc:15:f0:a8:c1:25:9a:2a:c7:38:80:a0:
1a:30:31:dd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzkyODYxMTAvBgNVBAUTKEM4OTEyREY0QzQ3RjhBNjZCQzQ4OUVDODQyNzI0ODBB
MjExQjA2ODIwHhcNMjUwMTMwMTkwNTE2WhcNMjUwMjA2MTkwNTE2WjAYMRYwFAYD
VQQDEw02NzliY2Q2ZC1lYTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApZLWDhqMzjUwPFY0XK9wSEYowikbraagbAhDSR9k8Do2/NGF4sFjYLChOc4R
4gHAoLl3N8CGic+TYtUzgSWxrTiq/aq3MhmbpQxS36Cp6tLOq6Ie8zinCfpsKX45
SpO/P82ZlGHH6+ZQfL3G7telebYzug5486l44UT+LEW+rQec0IVKzJHWBtgfZLG+
O9bsyjRj9xop/X9bi8xWTuGEvPaVLA1gjTRg04sLvJ3/Wbh4XDthwLXSuWKGsC46
rp+C3QyFi+aMF4WywcpMoVGrHiVTzP71KeF6+Z/KHlDhEYHuMuukAX7/X/wIX/dh
+fe1EaCffDXI1odf7efO0JJ2mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWLsKmo
ffUjgeAdEJtUaLYzRejmMB8GA1UdIwQYMBaAFMiRLfTEf4pmvEieyEJySAohGwaC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTI4Ni9DQTk2MUMwMjIw
OEQxMUVBOUZCN0NBM0ZDNEY5QUUwMi95SkV0OU1SX2ltYThTSjdJUW5KSUNpRWJC
b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lKRXQ5TVJfaW1hOFNKN0lRbkpJQ2lFYkJvSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTI4Ni9DQTk2MUMwMjIwOEQxMUVBOUZCN0NBM0ZDNEY5QUUwMi95SkV0OU1SX2lt
YThTSjdJUW5KSUNpRWJCb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBKRycDT7joYETz/yVzjqqfr4g5LhczJTKQc3x6bBVQdo6+Q2qHVQ9n
h1sFwE/ZQ/tpKVFNLawC+mX3hOHsMKETDATHysO7NBfpXMch03LxoRhIQ8c1JNeg
cLqdtBwUCW7VYsD6k+9BO9+0DB0+JPcphGcQ4lSIq5K6BmdCUr2oSrIjsUlKYhoJ
5DghUlg92NJ2TDMjPZgSfn59GCxmV41mLXWW6J4uCcmvo4YLbyY4IcqqG4vHb6/s
k64hMbfAVZVzvQ+Wlxqn2k3202PuoIJM8vcn6/YyCNnTkYGyx2b6aV/rleWDTezy
TBjog/qPAMTcFfCowSWaKsc4gKAaMDHd
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:36:50 2025 by rpki-client