Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft
File: 3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft (raw, json)
Hash identifier: vVRiUQuB/fMMC1pxnGg8LzRkvX0ze+nk4LCsfrf/Cc8=
Subject key identifier: DC:2A:12:84:BC:4C:0F:02:D8:6C:32:4C:AF:80:1A:D4:80:F6:1B:D3
Authority key identifier: DE:B5:63:9F:58:47:C7:0D:E0:FC:44:BE:78:42:41:18:F8:A2:06:C6
Certificate issuer: /CN=A91CDFFB/serialNumber=DEB5639F5847C70DE0FC44BE78424118F8A206C6
Certificate serial: 07E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft
Manifest number: 07E0
Signing time: Thu 30 Jan 2025 20:57:59 +0000
Manifest this update: Thu 30 Jan 2025 20:57:59 +0000
Manifest next update: Thu 06 Feb 2025 20:57:59 +0000
Files and hashes: 1: 3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl (hash: +dynFNIKz6nw/zfLkljRqlJkFjV8yauzMn+WlWhV/y8=)
2: CA42E5689FA411EBBC1FFB40C4F9AE02.roa (hash: gZyKCd69uOR05q6m/VeY/HmMPOj6FtQSF2UlUbB28zY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2024 (0x7e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDFFB/serialNumber=DEB5639F5847C70DE0FC44BE78424118F8A206C6
Validity
Not Before: Jan 30 20:57:59 2025 GMT
Not After : Feb 6 20:57:59 2025 GMT
Subject: CN=679be7d7-e60f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:bc:82:d7:a5:e0:ed:b8:e3:42:f2:c5:07:75:
a2:7a:f4:e1:e8:3b:0f:7f:fa:d1:f6:8c:1d:c2:ab:
90:4b:53:3c:ef:fe:1d:7e:8c:3a:84:a5:f4:0c:7e:
59:36:c5:86:38:03:08:05:f2:51:3b:16:3b:8f:38:
42:3c:57:ea:d3:4b:5f:b5:44:05:c5:49:d1:41:5d:
1a:a5:93:94:db:b8:fe:a6:42:06:40:9f:ee:7e:87:
43:14:6b:87:6b:0c:aa:5d:6c:9d:1b:42:2f:e5:40:
8a:e0:f8:92:fa:48:e4:4f:e8:40:51:8a:a5:b8:79:
76:16:9a:83:cc:38:36:35:c4:99:9f:56:56:d7:c2:
af:e6:c5:97:7e:e1:f8:d7:4e:48:64:18:57:8f:77:
b0:77:69:64:60:c1:5e:64:79:c7:47:7f:88:5c:3f:
c1:72:1f:4e:a8:fb:11:85:2b:8f:24:c4:1c:f5:3d:
65:45:20:89:5a:3a:e0:8c:a7:82:07:65:1b:36:17:
95:40:6f:1b:59:c3:2e:2f:00:05:a6:9c:ff:cd:bf:
05:6f:b7:dc:b3:63:5d:ae:e1:69:67:0d:e9:f5:5e:
20:76:50:40:56:b3:12:8f:bf:a5:59:f9:ed:4d:53:
78:1f:d4:98:cb:e0:59:e3:44:7e:b2:7a:07:62:f9:
46:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:2A:12:84:BC:4C:0F:02:D8:6C:32:4C:AF:80:1A:D4:80:F6:1B:D3
X509v3 Authority Key Identifier:
keyid:DE:B5:63:9F:58:47:C7:0D:E0:FC:44:BE:78:42:41:18:F8:A2:06:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:e2:80:55:22:6d:31:79:ec:8b:2e:94:5d:61:83:72:c1:ec:
60:8d:52:96:c4:6c:db:21:18:6b:28:86:cf:59:e5:01:6c:b8:
cf:d5:20:cd:b3:83:c0:25:3a:9f:37:a2:6c:29:3d:a5:15:4c:
7a:18:bf:80:ac:15:16:3d:0a:bd:af:24:64:4a:c3:c3:19:e5:
a7:52:86:79:e7:d2:04:1d:f3:4b:18:20:ed:3a:d9:7a:0a:1e:
68:8e:1d:78:e6:aa:b9:01:af:97:52:83:1d:88:98:0d:8c:6d:
ab:43:79:09:f4:52:b2:f0:b2:af:d1:e3:16:e8:2b:0a:aa:92:
49:c9:04:4a:6d:ab:a2:62:5b:df:e0:6d:91:6d:04:5b:76:3a:
fa:16:99:d8:b7:6e:31:91:56:03:90:ca:b2:87:9d:13:d7:39:
18:4e:f2:57:56:98:b0:3c:49:e3:04:46:60:d1:1e:20:d8:72:
14:64:1b:86:5e:2e:0e:ad:5d:93:bc:e0:74:98:71:e3:64:0c:
46:49:98:a7:4b:98:d9:79:a4:b8:d7:5a:06:01:b1:eb:e7:45:
fd:6b:ae:8f:3b:46:8d:ef:90:b2:ba:ec:63:2f:4b:19:cb:d8:
87:5b:68:92:b5:e5:ed:0c:df:8b:e8:cf:ec:aa:66:dd:92:e8:
5c:a7:00:26
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0RGRkIxMTAvBgNVBAUTKERFQjU2MzlGNTg0N0M3MERFMEZDNDRCRTc4NDI0MTE4
RjhBMjA2QzYwHhcNMjUwMTMwMjA1NzU5WhcNMjUwMjA2MjA1NzU5WjAYMRYwFAYD
VQQDEw02NzliZTdkNy1lNjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5byC16Xg7bjjQvLFB3WievTh6DsPf/rR9owdwquQS1M87/4dfow6hKX0DH5Z
NsWGOAMIBfJROxY7jzhCPFfq00tftUQFxUnRQV0apZOU27j+pkIGQJ/ufodDFGuH
awyqXWydG0Iv5UCK4PiS+kjkT+hAUYqluHl2FpqDzDg2NcSZn1ZW18Kv5sWXfuH4
105IZBhXj3ewd2lkYMFeZHnHR3+IXD/Bch9OqPsRhSuPJMQc9T1lRSCJWjrgjKeC
B2UbNheVQG8bWcMuLwAFppz/zb8Fb7fcs2NdruFpZw3p9V4gdlBAVrMSj7+lWfnt
TVN4H9SYy+BZ40R+snoHYvlGJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNwqEoS8
TA8C2GwyTK+AGtSA9hvTMB8GA1UdIwQYMBaAFN61Y59YR8cN4PxEvnhCQRj4ogbG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREZGQi8yN0U1MDZFNkQ0
RUYxMUVBOUE2MTcyNEFDNEY5QUUwMi8zclZqbjFoSHh3M2dfRVMtZUVKQkdQaWlC
c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNyVmpuMWhIeHczZ19FUy1lRUpCR1BpaUJzWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
REZGQi8yN0U1MDZFNkQ0RUYxMUVBOUE2MTcyNEFDNEY5QUUwMi8zclZqbjFoSHh3
M2dfRVMtZUVKQkdQaWlCc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCw4oBVIm0xeeyLLpRdYYNywexgjVKWxGzbIRhrKIbPWeUBbLjP1SDN
s4PAJTqfN6JsKT2lFUx6GL+ArBUWPQq9ryRkSsPDGeWnUoZ559IEHfNLGCDtOtl6
Ch5ojh145qq5Aa+XUoMdiJgNjG2rQ3kJ9FKy8LKv0eMW6CsKqpJJyQRKbauiYlvf
4G2RbQRbdjr6FpnYt24xkVYDkMqyh50T1zkYTvJXVpiwPEnjBEZg0R4g2HIUZBuG
Xi4OrV2TvOB0mHHjZAxGSZinS5jZeaS411oGAbHr50X9a66PO0aN75CyuuxjL0sZ
y9iHW2iSteXtDN+L6M/sqmbdkuhcpwAm
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:36:17 2025 by rpki-client