Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft
File: ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft (raw, json)
Hash identifier: iR9vpzomnjU58KdFpsFnGs+D4AX7JONqR4UQWvStT54=
Subject key identifier: 71:8D:F8:32:FC:EF:1A:73:EF:0B:D4:47:87:96:87:4D:CD:FA:11:64
Authority key identifier: 6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE
Certificate issuer: /CN=A91CE978/serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE
Certificate serial: 3503
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft
Manifest number: 34A4
Signing time: Fri 31 Jan 2025 14:54:25 +0000
Manifest this update: Fri 31 Jan 2025 14:54:25 +0000
Manifest next update: Fri 07 Feb 2025 14:54:25 +0000
Files and hashes: 1: ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl (hash: Te2uPm+X2zF206oOpFrBGmyQ4Q7RKbmr0gjh2FgPzx8=)
2: 64E2B628BE4911EE897F291BC4F9AE02.roa (hash: GdpPqk3j46qrhM/D3Q+zjZqlqm9OzVhbyylENAX11Ng=)
3: E6F73E22B99E11EEBF189021C4F9AE02.roa (hash: 5arC7pafcKh/AcWsnn6ZMn4yInbZRBna+RKiehfd8iA=)
4: DDF4B0D2F08C11EEB70A1F76C4F9AE02.roa (hash: xpjctOic9ALUbvMpVasWFZFNE3OfU+88qrN9oKY4+Dw=)
5: D79607EEDCDD11EE85DBEB12C4F9AE02.roa (hash: 5S03I75+hNJBuUJ5fNzxs9YO5CLy34Di8bLlb2dNGpY=)
6: 29F7413CBB6011EEB59E5D81C4F9AE02.roa (hash: LZzUQOcRmtmL+1vVju87h7++WY3DSavtT2Wpvh36ohE=)
7: D1EE6884F06C11EEA5BAA656C4F9AE02.roa (hash: syWvSLG7GaKla/rfCIba4Fb9KHufM9emZCvug3k1Tm4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13571 (0x3503)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE978/serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE
Validity
Not Before: Jan 31 14:54:25 2025 GMT
Not After : Feb 7 14:54:25 2025 GMT
Subject: CN=679ce421-0d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e5:fc:e7:4c:e9:c8:e6:87:ef:d1:f0:8d:32:
e2:ff:33:0e:09:45:6f:f6:fa:9c:72:ee:ed:01:5e:
53:6f:4c:a4:8f:cf:82:5d:73:78:98:c3:ca:80:e0:
f6:c6:6e:3b:aa:93:95:2c:e8:82:9f:be:8a:7b:f2:
ae:a0:a5:3a:a4:61:8a:93:27:0b:2d:5c:de:89:86:
e9:0e:99:2e:af:1f:c1:14:ec:84:a0:fe:03:ad:d7:
47:1e:78:b1:87:e0:17:be:ed:a8:44:09:fd:e6:00:
c8:7f:e9:02:5e:74:00:ec:c6:db:22:f4:3c:d2:a6:
ea:04:16:80:64:4b:c8:d0:0e:14:12:d5:39:20:42:
73:f9:84:9d:b6:8d:67:6f:4e:7e:6d:05:65:fe:45:
d2:16:6f:8d:0e:80:c9:a8:dc:45:28:54:09:1c:87:
a9:42:55:55:4d:a9:5f:48:a3:a4:75:08:73:67:fd:
1e:95:e3:ec:bd:54:41:e0:f5:c0:85:0d:6b:9d:4b:
2d:a4:23:eb:3f:06:2a:58:ba:a9:d8:c8:02:e4:ae:
e3:5b:89:3a:54:50:43:36:49:3f:87:a0:96:90:ac:
98:b9:42:3c:bb:1f:2a:e2:a7:32:a4:00:fa:92:61:
77:96:39:d7:19:88:4b:4e:66:6c:30:cc:e1:30:a3:
ec:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8D:F8:32:FC:EF:1A:73:EF:0B:D4:47:87:96:87:4D:CD:FA:11:64
X509v3 Authority Key Identifier:
keyid:6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:5f:02:bf:65:93:08:47:52:6f:3f:a7:11:31:ab:e2:ce:b5:
df:5b:5f:d8:89:7f:df:1f:d5:5d:1e:d7:84:65:7e:33:f1:f4:
43:a5:10:78:68:3f:6a:04:f8:92:60:02:65:08:f8:35:18:3c:
9d:1f:32:01:3f:bd:47:8f:6c:dc:18:e2:11:d7:71:63:53:a1:
e8:dd:ae:bd:1c:f5:d1:82:2a:5d:ac:70:ad:32:d1:08:65:98:
fd:c2:23:c0:bd:49:e4:d5:c4:9b:98:76:d0:87:a2:08:66:43:
77:c5:24:6d:ff:0c:c6:75:65:ad:6d:d7:8b:1e:fb:e1:6f:cb:
b9:02:41:07:06:a8:b9:b2:dc:8a:20:11:ac:5a:e3:ae:ff:c8:
87:dc:53:23:4d:b9:46:64:5e:16:7f:03:75:d1:ba:30:05:eb:
01:57:78:5d:17:da:5a:4e:d9:00:1a:a1:6d:db:7f:67:e5:24:
0b:ab:07:61:7b:8d:6e:ca:22:db:8b:da:44:6d:78:ac:96:d9:
bd:11:c3:0c:fe:c9:9a:c9:97:d6:97:e9:ea:82:1c:b3:c9:8b:
80:4c:06:84:59:85:ab:0d:84:f6:ea:71:2c:9d:b9:3e:ca:84:
c2:79:94:93:95:c7:fa:e2:ce:66:55:ee:76:8a:2d:3a:1a:39:
1e:0f:88:bb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U5NzgxMTAvBgNVBAUTKDZBMUU0RjcyODQ3RUIzNjk5NTIyQzkzRDI2NzczRjBE
RjgzOTZFQkUwHhcNMjUwMTMxMTQ1NDI1WhcNMjUwMjA3MTQ1NDI1WjAYMRYwFAYD
VQQDEw02NzljZTQyMS0wZDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw+X850zpyOaH79HwjTLi/zMOCUVv9vqccu7tAV5Tb0ykj8+CXXN4mMPKgOD2
xm47qpOVLOiCn76Ke/KuoKU6pGGKkycLLVzeiYbpDpkurx/BFOyEoP4DrddHHnix
h+AXvu2oRAn95gDIf+kCXnQA7MbbIvQ80qbqBBaAZEvI0A4UEtU5IEJz+YSdto1n
b05+bQVl/kXSFm+NDoDJqNxFKFQJHIepQlVVTalfSKOkdQhzZ/0elePsvVRB4PXA
hQ1rnUstpCPrPwYqWLqp2MgC5K7jW4k6VFBDNkk/h6CWkKyYuUI8ux8q4qcypAD6
kmF3ljnXGYhLTmZsMMzhMKPsXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHGN+DL8
7xpz7wvUR4eWh03N+hFkMB8GA1UdIwQYMBaAFGoeT3KEfrNplSLJPSZ3Pw34OW6+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTk3OC8zMjIzRjM1RTFE
OTgxMUUyOEE4QzJFODIwOEIwMkNEMi9haDVQY29SLXMybVZJc2s5Sm5jX0RmZzVi
cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FoNVBjb1ItczJtVklzazlKbmNfRGZnNWJyNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTk3OC8zMjIzRjM1RTFEOTgxMUUyOEE4QzJFODIwOEIwMkNEMi9haDVQY29SLXMy
bVZJc2s5Sm5jX0RmZzVicjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCpXwK/ZZMIR1JvP6cRMavizrXfW1/YiX/fH9VdHteEZX4z8fRDpRB4
aD9qBPiSYAJlCPg1GDydHzIBP71Hj2zcGOIR13FjU6Ho3a69HPXRgipdrHCtMtEI
ZZj9wiPAvUnk1cSbmHbQh6IIZkN3xSRt/wzGdWWtbdeLHvvhb8u5AkEHBqi5styK
IBGsWuOu/8iH3FMjTblGZF4WfwN10bowBesBV3hdF9paTtkAGqFt239n5SQLqwdh
e41uyiLbi9pEbXisltm9EcMM/smayZfWl+nqghyzyYuATAaEWYWrDYT26nEsnbk+
yoTCeZSTlcf64s5mVe52ii06GjkeD4i7
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:17 2025 by rpki-client