Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft
File: _K1GEVffaBwFC9O-7qLqzfttUks.mft (raw, json)
Hash identifier: U64S17s9zRfYqEIxDDmZGmlJSKvSSOqV0KOiXJdV8/o=
Subject key identifier: 0B:AD:D1:1D:3C:0D:D1:48:80:A3:A7:C9:D9:1B:7B:5D:C2:EB:66:94
Authority key identifier: FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B
Certificate issuer: /CN=A91CE3C4/serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B
Certificate serial: 0660
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft
Manifest number: 0643
Signing time: Thu 30 Jan 2025 22:36:18 +0000
Manifest this update: Thu 30 Jan 2025 22:36:17 +0000
Manifest next update: Thu 06 Feb 2025 22:36:17 +0000
Files and hashes: 1: _K1GEVffaBwFC9O-7qLqzfttUks.crl (hash: zTSMbAHpdq+kNihu6WB/dA2a/fLVAgK7wInmwL/L30o=)
2: D55D5DE2F07011EDAD0F5D62C4F9AE02.roa (hash: RSMVC0D0tBk2Fp59m5jA59HhRZpxrqk4YRYpw+Pzr0g=)
3: BC582AA44FEA11EFBFC72970C4F9AE02.roa (hash: aE8ILqsqa75udSkv7yAA18S8PO5yG42/7QwpuX3oUy8=)
4: 26F87D4A272711EC88E40644C4F9AE02.roa (hash: /9xJi3PLMQkKlzkomr7AvtnsuMXJh+Vt8LpT6XO4pUs=)
5: 50D705A87FA911EBA8C11D63C4F9AE02.roa (hash: ooqccoiogCkkJFxNvgTBDRvRTl072blE1cY1UXNoB0Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1632 (0x660)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE3C4/serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B
Validity
Not Before: Jan 30 22:36:17 2025 GMT
Not After : Feb 6 22:36:17 2025 GMT
Subject: CN=679bfee1-ab20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8e:af:70:48:bf:cf:0c:83:b4:ae:17:09:8d:
31:e4:ba:f5:b0:1e:8f:9c:72:54:ff:eb:ab:d7:2b:
9d:70:35:99:4f:cb:46:cf:ad:d3:86:d2:68:d0:2a:
9e:fd:92:2e:96:e7:d1:ad:5a:df:8e:e6:ab:c6:49:
dd:ba:54:ef:a1:98:b8:7b:bf:51:ef:eb:33:6f:47:
68:27:5d:d2:5a:e9:78:d8:39:73:09:8d:71:6b:c9:
d7:17:c3:15:5a:12:19:5d:6e:10:2c:ab:84:69:eb:
44:99:b2:ae:c8:d0:74:f0:55:52:11:6c:fd:ce:4c:
c5:36:7b:b8:bb:42:b9:b8:59:81:a7:aa:bf:0c:a4:
09:06:0b:7c:27:2b:ec:f9:d9:cb:4f:77:ab:a4:57:
dd:45:4a:03:17:bc:a1:27:9f:78:f5:26:65:13:6a:
44:e3:ff:45:bb:76:fc:1f:81:a6:46:f6:cb:47:1c:
03:af:d7:27:e6:e6:cd:4a:43:04:cd:d4:ed:7a:a6:
f7:84:92:17:b3:1b:a9:e1:51:9d:a3:2f:4a:ee:8d:
24:64:07:7f:19:79:51:ce:90:29:87:5e:e2:86:e2:
df:67:de:f4:ef:fb:df:74:b1:da:f7:a2:73:8f:22:
db:eb:eb:39:20:68:fb:5d:0d:50:dc:6f:69:a1:b2:
d7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AD:D1:1D:3C:0D:D1:48:80:A3:A7:C9:D9:1B:7B:5D:C2:EB:66:94
X509v3 Authority Key Identifier:
keyid:FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c6:47:9a:ed:b4:17:f2:a7:88:4d:2b:5e:44:28:b2:1e:b8:
87:b6:b1:bb:88:1e:a4:fe:63:2b:3e:5a:44:ef:c6:0b:6f:3f:
78:67:83:23:ae:82:88:71:a9:3f:22:0f:d4:6d:58:bb:66:2f:
73:7e:cb:4a:e9:9c:d6:f3:08:9c:ff:12:f9:1c:f6:c0:c2:58:
d6:02:c1:86:18:a5:df:c3:37:3e:65:00:9c:e2:b6:5b:de:ad:
de:26:31:00:66:5b:0c:a4:53:53:56:a0:a2:d7:7c:e1:f5:d7:
6b:d6:ca:ec:44:dd:dc:11:c6:ab:d3:b8:58:d7:19:75:d9:65:
fa:7d:e4:87:ff:bf:ff:03:5e:40:36:04:5d:32:18:92:f0:be:
1b:6d:96:a8:85:0c:6e:c5:44:b5:d3:74:de:f2:0c:43:d0:9a:
23:9d:d9:c5:1a:32:e1:a7:22:78:30:12:1b:71:9b:38:cf:95:
bf:90:0a:f0:c7:44:4f:a9:db:23:68:74:cf:0b:34:c6:63:02:
ab:3c:c7:e2:2b:c4:df:22:f4:25:be:6b:78:2d:a6:3f:84:4e:
15:ee:ac:3e:a9:4d:46:f4:bd:2a:9d:ea:a8:fb:8e:e3:cf:ec:
1f:c7:51:98:26:79:b4:51:34:03:18:2c:2a:2c:a8:79:8c:9e:
9e:d5:77:83
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0UzQzQxMTAvBgNVBAUTKEZDQUQ0NjExNTdERjY4MUMwNTBCRDNCRUVFQTJFQUNE
RkI2RDUyNEIwHhcNMjUwMTMwMjIzNjE3WhcNMjUwMjA2MjIzNjE3WjAYMRYwFAYD
VQQDEw02NzliZmVlMS1hYjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxI6vcEi/zwyDtK4XCY0x5Lr1sB6PnHJU/+ur1yudcDWZT8tGz63ThtJo0Cqe
/ZIulufRrVrfjuarxkndulTvoZi4e79R7+szb0doJ13SWul42DlzCY1xa8nXF8MV
WhIZXW4QLKuEaetEmbKuyNB08FVSEWz9zkzFNnu4u0K5uFmBp6q/DKQJBgt8Jyvs
+dnLT3erpFfdRUoDF7yhJ5949SZlE2pE4/9Fu3b8H4GmRvbLRxwDr9cn5ubNSkME
zdTteqb3hJIXsxup4VGdoy9K7o0kZAd/GXlRzpAph17ihuLfZ9707/vfdLHa96Jz
jyLb6+s5IGj7XQ1Q3G9pobLXZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAut0R08
DdFIgKOnydkbe13C62aUMB8GA1UdIwQYMBaAFPytRhFX32gcBQvTvu6i6s37bVJL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNDNC83NjkyMjc4QTdG
OTcxMUVCQUREQzVGMTVDNEY5QUUwMi9fSzFHRVZmZmFCd0ZDOU8tN3FMcXpmdHRV
a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19LMUdFVmZmYUJ3RkM5Ty03cUxxemZ0dFVrcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTNDNC83NjkyMjc4QTdGOTcxMUVCQUREQzVGMTVDNEY5QUUwMi9fSzFHRVZmZmFC
d0ZDOU8tN3FMcXpmdHRVa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBfxkea7bQX8qeITSteRCiyHriHtrG7iB6k/mMrPlpE78YLbz94Z4Mj
roKIcak/Ig/UbVi7Zi9zfstK6ZzW8wic/xL5HPbAwljWAsGGGKXfwzc+ZQCc4rZb
3q3eJjEAZlsMpFNTVqCi13zh9ddr1srsRN3cEcar07hY1xl12WX6feSH/7//A15A
NgRdMhiS8L4bbZaohQxuxUS103Te8gxD0JojndnFGjLhpyJ4MBIbcZs4z5W/kArw
x0RPqdsjaHTPCzTGYwKrPMfiK8TfIvQlvmt4LaY/hE4V7qw+qU1G9L0qneqo+47j
z+wfx1GYJnm0UTQDGCwqLKh5jJ6e1XeD
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:19:00 2025 by rpki-client