Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft
File: IadvO7gWz_58RmVVwrC-vJx7xW4.mft (raw, json)
Hash identifier: YNsahF+G0MA50DCdpP2RmKz4GQHzOCxw58buG7eN3mc=
Subject key identifier: 63:72:24:40:B0:3D:FB:3C:5F:24:0F:1C:B3:82:96:73:0A:14:E6:E0
Authority key identifier: 21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E
Certificate issuer: /CN=A91CA559/serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E
Certificate serial: 0479
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft
Manifest number: 046F
Signing time: Fri 31 Jan 2025 00:10:11 +0000
Manifest this update: Fri 31 Jan 2025 00:10:11 +0000
Manifest next update: Fri 07 Feb 2025 00:10:11 +0000
Files and hashes: 1: IadvO7gWz_58RmVVwrC-vJx7xW4.crl (hash: 3BnwTIHrr3viUV3HnJQWX5V3uKIQVkUTbDwcSUaFKNM=)
2: 44D508E43C8311ECA86D031EC4F9AE02.roa (hash: 3QOta11vc35y6JXZcjdZKP7LNJvcCzJqMrFu6rOzsU0=)
3: 45CC5B763C8311ECA86D031EC4F9AE02.roa (hash: T0x2Plu9ngMiF22DMmohr6DFduIGNsE4bILifRH3Lz8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1145 (0x479)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA559/serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E
Validity
Not Before: Jan 31 00:10:11 2025 GMT
Not After : Feb 7 00:10:11 2025 GMT
Subject: CN=679c14e3-7ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:40:49:c2:34:03:7f:f5:3c:e7:31:aa:65:9f:
c3:2d:29:8b:70:39:17:51:a4:d1:bc:77:22:ef:d7:
f5:1e:79:fc:15:7f:ea:79:99:0f:25:96:63:e8:f4:
71:a2:ba:ce:f2:b6:ec:eb:21:ac:a4:be:22:3d:65:
d5:eb:09:61:4e:15:8a:b3:c4:9b:8e:1e:79:ae:40:
e2:93:4f:b4:91:b6:90:f9:28:0e:b6:a2:d9:c3:76:
e3:77:20:fd:29:62:82:34:e7:01:1a:89:da:be:85:
9f:98:af:39:0d:af:fc:2f:d4:64:a2:a8:84:da:a6:
18:65:66:dc:cf:49:cf:50:fa:2a:e8:24:82:32:89:
0b:14:68:b7:24:5c:26:81:e5:d2:5a:45:76:93:a3:
0d:e6:82:4e:02:8f:8d:28:b2:61:c6:81:c4:ac:7b:
e6:70:b2:4d:85:4f:5e:ad:9b:db:f9:f6:1a:72:89:
70:39:3d:42:14:02:70:59:22:c7:6a:ce:6e:6a:26:
1d:5b:a2:c3:c2:bd:ea:14:3f:68:f2:24:82:7e:29:
6e:78:8d:58:5b:6a:4e:18:ec:c5:52:ed:31:c5:8c:
43:4a:25:a3:f5:af:d1:e1:ca:a4:7a:8d:2c:4c:34:
95:15:e7:32:8d:c2:10:aa:1a:5d:23:6f:b1:e8:29:
80:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:72:24:40:B0:3D:FB:3C:5F:24:0F:1C:B3:82:96:73:0A:14:E6:E0
X509v3 Authority Key Identifier:
keyid:21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:5b:21:b5:4b:39:94:72:ce:a1:26:16:b9:35:e4:66:36:5b:
27:54:11:bf:2d:9d:4b:8b:48:4b:fd:a5:5d:ac:67:12:9c:ae:
0c:cc:ef:e4:dc:73:bc:e1:8f:73:c7:60:59:8f:80:5d:d0:c3:
b2:cd:3f:1b:9a:7c:6f:22:6e:17:99:b1:1a:87:a3:33:12:e5:
af:98:cd:a1:e1:d9:b3:87:b5:4d:47:2b:54:b2:3d:ec:76:44:
6e:a1:b1:14:c8:d1:ef:cb:f9:63:fe:ee:25:af:56:50:41:24:
d8:05:f4:52:1a:c0:ae:cf:9e:b9:56:df:e4:d5:64:82:6f:c6:
81:fb:54:44:71:e1:5d:92:af:80:f4:16:1e:82:b8:ad:83:f9:
a2:82:42:65:3e:fa:63:7b:cf:69:2f:61:43:12:70:42:96:ac:
ed:98:a8:c3:ca:06:aa:6c:9e:9b:b4:ed:e9:ed:0c:c7:8f:b1:
64:bd:48:41:71:b2:6e:b4:6a:5f:05:a4:19:3b:19:b9:73:20:
5f:39:2d:c1:a3:c2:37:9a:af:52:90:de:56:55:db:53:a7:7f:
13:31:1e:4b:54:91:bc:9a:68:ef:e7:11:93:67:22:87:93:85:
28:37:a4:33:83:f8:d1:11:8b:bf:55:43:fd:cd:36:c2:0d:61:
31:05:66:a2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0E1NTkxMTAvBgNVBAUTKDIxQTc2RjNCQjgxNkNGRkU3QzQ2NjU1NUMyQjBCRUJD
OUM3QkM1NkUwHhcNMjUwMTMxMDAxMDExWhcNMjUwMjA3MDAxMDExWjAYMRYwFAYD
VQQDEw02NzljMTRlMy03ZWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxEBJwjQDf/U85zGqZZ/DLSmLcDkXUaTRvHci79f1Hnn8FX/qeZkPJZZj6PRx
orrO8rbs6yGspL4iPWXV6wlhThWKs8Sbjh55rkDik0+0kbaQ+SgOtqLZw3bjdyD9
KWKCNOcBGonavoWfmK85Da/8L9RkoqiE2qYYZWbcz0nPUPoq6CSCMokLFGi3JFwm
geXSWkV2k6MN5oJOAo+NKLJhxoHErHvmcLJNhU9erZvb+fYacolwOT1CFAJwWSLH
as5uaiYdW6LDwr3qFD9o8iSCfilueI1YW2pOGOzFUu0xxYxDSiWj9a/R4cqkeo0s
TDSVFecyjcIQqhpdI2+x6CmATwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGNyJECw
Pfs8XyQPHLOClnMKFObgMB8GA1UdIwQYMBaAFCGnbzu4Fs/+fEZlVcKwvryce8Vu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTU1OS9BQUMzNEY0NjMw
QzQxMUVDOTlGMkY2NkNDNEY5QUUwMi9JYWR2TzdnV3pfNThSbVZWd3JDLXZKeDd4
VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lhZHZPN2dXel81OFJtVlZ3ckMtdkp4N3hXNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QTU1OS9BQUMzNEY0NjMwQzQxMUVDOTlGMkY2NkNDNEY5QUUwMi9JYWR2TzdnV3pf
NThSbVZWd3JDLXZKeDd4VzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAkWyG1SzmUcs6hJha5NeRmNlsnVBG/LZ1Li0hL/aVdrGcSnK4MzO/k
3HO84Y9zx2BZj4Bd0MOyzT8bmnxvIm4XmbEah6MzEuWvmM2h4dmzh7VNRytUsj3s
dkRuobEUyNHvy/lj/u4lr1ZQQSTYBfRSGsCuz565Vt/k1WSCb8aB+1REceFdkq+A
9BYegritg/migkJlPvpje89pL2FDEnBClqztmKjDygaqbJ6btO3p7QzHj7FkvUhB
cbJutGpfBaQZOxm5cyBfOS3Bo8I3mq9SkN5WVdtTp38TMR5LVJG8mmjv5xGTZyKH
k4UoN6Qzg/jREYu/VUP9zTbCDWExBWai
-----END CERTIFICATE-----
Generated at Wed Apr 30 15:37:27 2025 by rpki-client