Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft
File: lGqi80z6-eS9bjRboJqd6bnC0U0.mft (raw, json)
Hash identifier: RbO36GD2yNjZfemqfEbsNpq1Lzl4hLSu/MEkzMc3z2w=
Subject key identifier: 18:10:AA:C4:89:61:D3:7C:C2:B9:B4:22:9D:22:51:15:BF:F6:F6:39
Authority key identifier: 94:6A:A2:F3:4C:FA:F9:E4:BD:6E:34:5B:A0:9A:9D:E9:B9:C2:D1:4D
Certificate issuer: /CN=A91CAA69/serialNumber=946AA2F34CFAF9E4BD6E345BA09A9DE9B9C2D14D
Certificate serial: 0E1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft
Manifest number: 0E0F
Signing time: Fri 31 Jan 2025 17:47:55 +0000
Manifest this update: Fri 31 Jan 2025 17:47:54 +0000
Manifest next update: Fri 07 Feb 2025 17:47:54 +0000
Files and hashes: 1: lGqi80z6-eS9bjRboJqd6bnC0U0.crl (hash: jOr3tgTONnzFgmJVJXwAGUQGnwZogo3lUFsACANBTZg=)
2: 1FAB60EE9EB111E99ED10D84C4F9AE02.roa (hash: Ro2TBCoOvqNYKcY9yM3cP6moWqnC6oV3HDt4ZFiaByw=)
3: DECBB040985611ECBE7ED328C4F9AE02.roa (hash: 9idr4hMEjqRY5wM+deucWAwZdEbuhbDvaDiXQBgXJls=)
4: DF5D49F6985611ECBE7ED328C4F9AE02.roa (hash: Jye8x95uFjD/OaUFMn6lb2ErVEwMFKU3iECzbKAX1vQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3613 (0xe1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CAA69/serialNumber=946AA2F34CFAF9E4BD6E345BA09A9DE9B9C2D14D
Validity
Not Before: Jan 31 17:47:54 2025 GMT
Not After : Feb 7 17:47:54 2025 GMT
Subject: CN=679d0ccb-7966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f5:e8:2c:71:8c:f8:7b:d6:15:ff:78:e6:52:
9d:29:87:91:8e:c5:8b:a8:3e:fe:7a:a6:c8:94:91:
68:16:f2:f2:b0:06:24:61:b2:15:cc:92:c2:a1:38:
82:ec:00:fc:70:09:22:75:0d:5a:f6:e0:4a:09:83:
06:e9:e5:e9:51:d2:b5:ee:0f:8a:af:f5:6c:0c:4d:
19:33:b4:e1:18:28:3c:21:84:57:36:68:8f:30:a8:
bf:2d:27:8a:7e:28:ad:a0:ae:6b:1b:24:d6:a2:e8:
ef:fa:12:8e:68:6b:af:3c:81:4b:f0:c2:d4:98:3e:
a4:93:65:b4:6a:08:51:0a:b6:e0:fa:46:2a:26:17:
f2:1c:b0:07:44:73:7e:8a:04:95:d1:41:14:7e:c1:
71:93:bb:3d:3e:7b:07:ff:07:70:7e:f4:02:85:45:
90:3c:95:e6:43:a5:6c:ad:b6:7e:c3:16:5d:7f:35:
b1:f9:b5:32:33:ff:c0:3e:06:23:44:fa:14:51:32:
f7:d1:ea:16:2e:e6:b7:25:33:55:27:ef:62:c0:fe:
f4:68:85:ac:9e:66:16:4e:7b:78:68:d6:93:f2:07:
12:1e:ee:8a:ed:2b:1a:65:00:df:98:a9:de:d5:40:
cd:a4:50:7f:8d:34:db:8c:12:74:13:fb:92:5a:e9:
9c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:10:AA:C4:89:61:D3:7C:C2:B9:B4:22:9D:22:51:15:BF:F6:F6:39
X509v3 Authority Key Identifier:
keyid:94:6A:A2:F3:4C:FA:F9:E4:BD:6E:34:5B:A0:9A:9D:E9:B9:C2:D1:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c5:8e:63:97:38:ca:8f:89:c4:0c:e5:8c:d4:b1:60:4f:da:
3b:ce:dd:86:f5:8d:92:65:c9:6e:5d:db:73:34:d3:0b:94:d3:
0c:2e:c5:a3:88:6c:c5:b7:8e:21:38:63:8a:76:f8:e1:92:3b:
d2:fd:62:27:ae:24:59:91:39:9d:33:24:89:22:dc:3d:41:8f:
b1:05:dc:b3:4f:0e:16:3e:46:6d:2a:84:e1:05:72:99:92:49:
8f:81:fb:cb:98:e8:64:11:cc:aa:d7:4f:13:65:36:73:77:e9:
4b:de:a8:c0:2e:5d:5e:e1:b6:30:f5:58:f7:4d:ea:53:53:d1:
d0:57:7d:28:bc:4a:45:3d:f4:cd:3f:22:4a:db:94:3d:55:33:
f4:a9:71:0a:d4:97:b5:e8:26:71:14:e6:14:aa:b4:af:90:11:
e6:14:2f:40:68:b5:4b:52:1a:62:41:ee:18:6a:33:88:60:eb:
30:06:6a:ae:d2:97:b1:42:40:82:42:d0:15:c5:97:54:3e:c9:
a6:b5:34:37:1b:43:90:da:6e:a8:c0:00:d7:8f:5c:d0:bf:61:
e8:a2:dc:86:96:8d:4a:37:d7:e2:ef:7c:78:f3:d1:96:0f:1c:
de:01:fc:bd:96:4c:17:35:09:56:d8:bd:69:8d:07:fa:75:c7:
84:c5:fa:d2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0FBNjkxMTAvBgNVBAUTKDk0NkFBMkYzNENGQUY5RTRCRDZFMzQ1QkEwOUE5REU5
QjlDMkQxNEQwHhcNMjUwMTMxMTc0NzU0WhcNMjUwMjA3MTc0NzU0WjAYMRYwFAYD
VQQDEw02NzlkMGNjYi03OTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyvXoLHGM+HvWFf945lKdKYeRjsWLqD7+eqbIlJFoFvLysAYkYbIVzJLCoTiC
7AD8cAkidQ1a9uBKCYMG6eXpUdK17g+Kr/VsDE0ZM7ThGCg8IYRXNmiPMKi/LSeK
fiitoK5rGyTWoujv+hKOaGuvPIFL8MLUmD6kk2W0aghRCrbg+kYqJhfyHLAHRHN+
igSV0UEUfsFxk7s9PnsH/wdwfvQChUWQPJXmQ6VsrbZ+wxZdfzWx+bUyM//APgYj
RPoUUTL30eoWLua3JTNVJ+9iwP70aIWsnmYWTnt4aNaT8gcSHu6K7SsaZQDfmKne
1UDNpFB/jTTbjBJ0E/uSWumcEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBgQqsSJ
YdN8wrm0Ip0iURW/9vY5MB8GA1UdIwQYMBaAFJRqovNM+vnkvW40W6Canem5wtFN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUE2OS80MEUxRkM5QzlF
QjAxMUU5QjA3RTdBODJDNEY5QUUwMi9sR3FpODB6Ni1lUzlialJib0pxZDZibkMw
VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xHcWk4MHo2LWVTOWJqUmJvSnFkNmJuQzBVMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QUE2OS80MEUxRkM5QzlFQjAxMUU5QjA3RTdBODJDNEY5QUUwMi9sR3FpODB6Ni1l
UzlialJib0pxZDZibkMwVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB+xY5jlzjKj4nEDOWM1LFgT9o7zt2G9Y2SZcluXdtzNNMLlNMMLsWj
iGzFt44hOGOKdvjhkjvS/WInriRZkTmdMySJItw9QY+xBdyzTw4WPkZtKoThBXKZ
kkmPgfvLmOhkEcyq108TZTZzd+lL3qjALl1e4bYw9Vj3TepTU9HQV30ovEpFPfTN
PyJK25Q9VTP0qXEK1Je16CZxFOYUqrSvkBHmFC9AaLVLUhpiQe4YajOIYOswBmqu
0pexQkCCQtAVxZdUPsmmtTQ3G0OQ2m6owADXj1zQv2HootyGlo1KN9fi73x489GW
DxzeAfy9lkwXNQlW2L1pjQf6dceExfrS
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:51:21 2025 by rpki-client