Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft
File: rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft (raw, json)
Hash identifier: +o2kjEXmvFhYEP7MJNYZzMo/R1egDkt4rDzX2qyYDq4=
Subject key identifier: E3:FE:F8:C0:1A:AD:5A:AB:91:90:68:C6:AB:9A:AF:34:9B:FF:C1:17
Authority key identifier: AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2
Certificate issuer: /CN=A91CB765/serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2
Certificate serial: 04AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft
Manifest number: 049E
Signing time: Fri 31 Jan 2025 00:00:42 +0000
Manifest this update: Fri 31 Jan 2025 00:00:41 +0000
Manifest next update: Fri 07 Feb 2025 00:00:41 +0000
Files and hashes: 1: rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl (hash: SJjJHjWH02FT42J9SAt50dG5g4BLCozJLrqqyHZN+LI=)
2: D3001978D03B11ECA7C18D2DC4F9AE02.roa (hash: VhdbU5oeoE1P0kbQ3Dehjq8QrO/fgJ2Mi3no4eVdznQ=)
3: F9A8F3561F3D11ECB2E88C32C4F9AE02.roa (hash: V0Ju3pd3n+IcbQEzHygiG/kTkhX/jsHG9G0e1qBxAxo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1194 (0x4aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB765/serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2
Validity
Not Before: Jan 31 00:00:41 2025 GMT
Not After : Feb 7 00:00:41 2025 GMT
Subject: CN=679c12aa-4cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:20:6e:ba:f0:36:30:b8:0d:03:fe:4e:c2:9d:
83:4a:ad:45:79:96:10:ed:8f:c1:40:9e:9c:d6:0a:
0c:f8:8e:16:45:66:a2:37:db:cb:36:a2:67:f5:48:
f5:d2:f1:54:5d:f0:86:be:71:d5:43:bd:24:38:fa:
d0:b4:66:8f:a8:9e:89:fb:ab:1d:7e:d0:79:22:46:
c7:f0:18:8d:9a:ab:0d:5e:9b:90:5d:21:eb:14:3a:
6a:5b:4a:b2:e0:0d:2c:3a:11:ca:de:8d:b8:3d:cc:
f2:49:95:3c:d7:46:a5:69:04:f4:16:20:37:91:28:
57:75:f4:64:7e:73:47:38:92:61:0e:3e:ce:18:94:
29:99:f3:ef:a6:5f:80:26:1a:87:36:2b:9f:4e:e8:
1f:99:2c:89:8d:27:52:cf:08:57:f9:88:2e:12:88:
03:64:23:07:75:a2:77:74:9f:07:12:d0:24:6a:8d:
98:4a:d3:a0:bf:8f:ac:d5:2e:14:13:19:db:06:d7:
34:1b:fc:9c:fd:29:fb:99:de:cd:db:23:6f:38:69:
7f:ec:b7:ed:28:dd:54:5c:c0:9b:e5:65:b6:b5:61:
8f:de:b5:80:40:ec:b9:9e:5c:68:4e:9e:36:92:c8:
87:96:e9:76:1a:f7:73:d0:e9:cf:af:08:f7:70:b1:
3d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FE:F8:C0:1A:AD:5A:AB:91:90:68:C6:AB:9A:AF:34:9B:FF:C1:17
X509v3 Authority Key Identifier:
keyid:AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:79:f0:10:24:66:b0:bd:89:7d:19:a1:c5:71:0a:60:eb:b1:
d7:64:89:78:d9:67:5d:24:0b:39:da:9c:01:c1:23:5b:e7:73:
b6:a9:b0:26:de:7e:3a:e8:b7:ec:68:ab:91:b6:1a:29:e3:9f:
14:be:2f:5e:57:36:c0:43:a3:c3:5e:0a:bc:aa:c6:25:ff:ab:
0f:ba:c8:e9:a8:ff:ee:fd:11:8d:73:00:8d:61:f0:35:97:5b:
e5:c8:da:cc:b6:15:cf:02:e6:35:3b:70:09:18:df:69:5c:ea:
3c:e4:38:97:7d:db:ce:4d:c7:14:18:c6:81:f2:5c:e3:a5:90:
a7:c8:bd:cc:e9:b2:70:58:e9:6b:08:fe:15:de:8f:eb:ec:d7:
8f:89:24:bb:9c:be:e0:d4:c5:50:dc:cc:61:44:01:6b:b4:4c:
c2:79:2e:5c:bc:44:4f:e4:76:51:6d:13:88:3c:90:ac:69:c3:
51:dd:64:82:05:dd:82:84:76:81:ae:f2:24:03:e7:52:96:5b:
47:84:0d:b1:04:31:02:93:83:94:b9:bf:8a:52:51:f0:f4:9e:
c5:c9:57:0c:0f:14:8e:b6:10:e1:b7:9e:ee:05:13:18:70:07:
0a:72:6c:d0:f0:cb:27:e8:c8:ed:59:61:54:c0:d9:51:8c:2c:
0f:fc:2b:df
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0I3NjUxMTAvBgNVBAUTKEFERjMxMkVBNjhCN0YwNURBNjEwMTA4MEY5ODMyMkZC
RDY1OTE4QjIwHhcNMjUwMTMxMDAwMDQxWhcNMjUwMjA3MDAwMDQxWjAYMRYwFAYD
VQQDEw02NzljMTJhYS00Y2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0CBuuvA2MLgNA/5Owp2DSq1FeZYQ7Y/BQJ6c1goM+I4WRWaiN9vLNqJn9Uj1
0vFUXfCGvnHVQ70kOPrQtGaPqJ6J+6sdftB5IkbH8BiNmqsNXpuQXSHrFDpqW0qy
4A0sOhHK3o24PczySZU810alaQT0FiA3kShXdfRkfnNHOJJhDj7OGJQpmfPvpl+A
JhqHNiufTugfmSyJjSdSzwhX+YguEogDZCMHdaJ3dJ8HEtAkao2YStOgv4+s1S4U
ExnbBtc0G/yc/Sn7md7N2yNvOGl/7LftKN1UXMCb5WW2tWGP3rWAQOy5nlxoTp42
ksiHlul2Gvdz0OnPrwj3cLE9FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOP++MAa
rVqrkZBoxquarzSb/8EXMB8GA1UdIwQYMBaAFK3zEupot/BdphAQgPmDIvvWWRiy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjc2NS9BNERERkE5NDFG
M0IxMUVDQjdEQzQ1MkZDNEY5QUUwMi9yZk1TNm1pMzhGMm1FQkNBLVlNaS05WlpH
TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JmTVM2bWkzOEYybUVCQ0EtWU1pLTlaWkdMSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
Qjc2NS9BNERERkE5NDFGM0IxMUVDQjdEQzQ1MkZDNEY5QUUwMi9yZk1TNm1pMzhG
Mm1FQkNBLVlNaS05WlpHTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQApefAQJGawvYl9GaHFcQpg67HXZIl42WddJAs52pwBwSNb53O2qbAm
3n466LfsaKuRthop458Uvi9eVzbAQ6PDXgq8qsYl/6sPusjpqP/u/RGNcwCNYfA1
l1vlyNrMthXPAuY1O3AJGN9pXOo85DiXfdvOTccUGMaB8lzjpZCnyL3M6bJwWOlr
CP4V3o/r7NePiSS7nL7g1MVQ3MxhRAFrtEzCeS5cvERP5HZRbROIPJCsacNR3WSC
Bd2ChHaBrvIkA+dSlltHhA2xBDECk4OUub+KUlHw9J7FyVcMDxSOthDht57uBRMY
cAcKcmzQ8Msn6MjtWWFUwNlRjCwP/Cvf
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:28:52 2025 by rpki-client