Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft
File: ldziG17K3rBp3IG5JAXUdN5BwgY.mft (raw, json)
Hash identifier: wX6YOhJnqP47GESRcaEYtILs8UzAXpcjgag7M0FNnkk=
Subject key identifier: C3:EE:2F:4B:1B:7A:A4:AA:F3:DE:1F:08:3F:A3:1F:2F:A2:60:A3:9B
Authority key identifier: 95:DC:E2:1B:5E:CA:DE:B0:69:DC:81:B9:24:05:D4:74:DE:41:C2:06
Certificate issuer: /CN=A91CD174/serialNumber=95DCE21B5ECADEB069DC81B92405D474DE41C206
Certificate serial: 0BF1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft
Manifest number: 0BE7
Signing time: Fri 31 Jan 2025 18:36:14 +0000
Manifest this update: Fri 31 Jan 2025 18:36:13 +0000
Manifest next update: Fri 07 Feb 2025 18:36:13 +0000
Files and hashes: 1: ldziG17K3rBp3IG5JAXUdN5BwgY.crl (hash: sGWpjARuw7u+srKK33RphHcsv+CI/NZFuUsyh+bfC3Y=)
2: 54AD60AE0C2E11EABBBFA158C4F9AE02.roa (hash: xVTFBNmOi1HL5rDX7+M+vUXncg1h8s61EzgOhvnvgE8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3057 (0xbf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD174/serialNumber=95DCE21B5ECADEB069DC81B92405D474DE41C206
Validity
Not Before: Jan 31 18:36:13 2025 GMT
Not After : Feb 7 18:36:13 2025 GMT
Subject: CN=679d181d-6070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:70:5c:8c:cb:10:c7:46:62:16:60:4f:1b:06:
62:12:28:71:5c:e7:54:fb:0b:27:f1:4a:1d:bd:1a:
73:d0:c8:f3:f0:03:6b:47:20:a4:a2:96:4f:48:92:
37:f1:54:19:5e:38:6f:7a:a4:b4:03:59:d0:b9:bd:
e8:91:68:be:78:d2:45:91:3e:75:33:09:d3:98:bb:
07:31:2e:d4:6c:21:13:75:0f:02:7d:c6:bd:95:19:
fe:f2:7c:d7:af:ed:a0:28:91:ba:46:45:3c:ea:72:
69:87:3c:00:90:35:4c:44:54:57:86:11:f6:df:24:
c3:97:b2:2d:43:85:51:cd:da:87:19:28:f0:48:cc:
20:a0:a8:67:05:0b:52:f4:7d:29:e9:67:c6:90:a0:
10:c3:ce:56:db:fd:99:88:62:f3:6f:3b:bb:63:32:
fa:ab:97:98:1b:a0:ce:47:4a:05:42:c7:2d:5a:00:
f3:ec:c4:29:9f:99:35:72:f6:69:13:ee:00:b5:52:
92:18:b6:43:07:6b:30:02:4a:dc:3a:fb:a5:bf:99:
68:f8:ec:b6:91:86:81:f5:0b:9a:22:bb:db:97:08:
03:37:50:36:51:af:69:40:83:87:4b:3a:99:de:30:
f5:8a:ba:ec:c4:b9:e3:5a:c8:18:a3:bf:52:6e:ee:
4f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:EE:2F:4B:1B:7A:A4:AA:F3:DE:1F:08:3F:A3:1F:2F:A2:60:A3:9B
X509v3 Authority Key Identifier:
keyid:95:DC:E2:1B:5E:CA:DE:B0:69:DC:81:B9:24:05:D4:74:DE:41:C2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:6f:b6:d5:0f:bf:63:f4:40:3f:3f:fe:6d:7a:fd:c5:a0:9a:
25:29:30:d1:01:c5:73:b4:13:4e:8e:3e:60:e8:12:ed:3f:4e:
c8:5a:98:95:31:ca:86:bd:51:29:de:f5:74:6b:38:ac:f2:a5:
84:ac:f3:e3:0b:33:37:0f:86:1b:ef:2f:6f:17:02:24:82:3d:
ee:d0:18:a4:cd:71:47:ff:30:df:c6:7f:92:1f:99:e8:d3:8e:
d0:90:8e:6f:fd:44:a3:53:a6:ba:b5:dd:07:ce:13:0c:21:da:
b1:44:79:6c:4d:3b:d1:b6:04:fb:36:dc:11:8f:18:94:64:67:
89:98:2c:47:8b:8e:01:5a:df:08:14:d9:a3:b3:09:94:ea:1b:
f5:7f:fb:2b:9e:b3:4a:c0:1e:f5:36:e6:a6:79:69:1d:2d:ec:
c8:9b:b7:d5:76:67:d0:f8:4b:9f:dc:c9:c8:15:3e:7a:e7:47:
36:5e:ab:8c:ca:a4:93:1c:8f:5c:d6:7b:e4:03:c9:53:c8:ec:
ee:74:c9:ee:05:05:c0:6c:a0:90:bf:aa:16:91:b2:93:37:fa:
81:5a:2c:18:8d:38:d2:d0:f1:1d:1e:3b:5d:94:2f:0e:47:f1:
7c:42:30:31:32:33:e5:c7:19:07:5f:6d:54:dc:7f:56:18:ab:
e6:11:aa:58
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0QxNzQxMTAvBgNVBAUTKDk1RENFMjFCNUVDQURFQjA2OURDODFCOTI0MDVENDc0
REU0MUMyMDYwHhcNMjUwMTMxMTgzNjEzWhcNMjUwMjA3MTgzNjEzWjAYMRYwFAYD
VQQDEw02NzlkMTgxZC02MDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA23BcjMsQx0ZiFmBPGwZiEihxXOdU+wsn8UodvRpz0Mjz8ANrRyCkopZPSJI3
8VQZXjhveqS0A1nQub3okWi+eNJFkT51MwnTmLsHMS7UbCETdQ8Cfca9lRn+8nzX
r+2gKJG6RkU86nJphzwAkDVMRFRXhhH23yTDl7ItQ4VRzdqHGSjwSMwgoKhnBQtS
9H0p6WfGkKAQw85W2/2ZiGLzbzu7YzL6q5eYG6DOR0oFQsctWgDz7MQpn5k1cvZp
E+4AtVKSGLZDB2swAkrcOvulv5lo+Oy2kYaB9QuaIrvblwgDN1A2Ua9pQIOHSzqZ
3jD1irrsxLnjWsgYo79Sbu5PzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPuL0sb
eqSq894fCD+jHy+iYKObMB8GA1UdIwQYMBaAFJXc4hteyt6wadyBuSQF1HTeQcIG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDE3NC81MUMzRTU0ODBC
NEQxMUVBOTJDMjhGMjBDNEY5QUUwMi9sZHppRzE3SzNyQnAzSUc1SkFYVWRONUJ3
Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xkemlHMTdLM3JCcDNJRzVKQVhVZE41QndnWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RDE3NC81MUMzRTU0ODBCNEQxMUVBOTJDMjhGMjBDNEY5QUUwMi9sZHppRzE3SzNy
QnAzSUc1SkFYVWRONUJ3Z1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAvb7bVD79j9EA/P/5tev3FoJolKTDRAcVztBNOjj5g6BLtP07IWpiV
McqGvVEp3vV0azis8qWErPPjCzM3D4Yb7y9vFwIkgj3u0BikzXFH/zDfxn+SH5no
047QkI5v/USjU6a6td0HzhMMIdqxRHlsTTvRtgT7NtwRjxiUZGeJmCxHi44BWt8I
FNmjswmU6hv1f/srnrNKwB71NuameWkdLezIm7fVdmfQ+Euf3MnIFT5650c2XquM
yqSTHI9c1nvkA8lTyOzudMnuBQXAbKCQv6oWkbKTN/qBWiwYjTjS0PEdHjtdlC8O
R/F8QjAxMjPlxxkHX21U3H9WGKvmEapY
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:28:08 2025 by rpki-client