Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft
File: 2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft (raw, json)
Hash identifier: mhzsPkE96+kBBQSQMI/LwDtpMIGYt7SVyY2A/e+fsE0=
Subject key identifier: 7D:A9:24:11:0D:EF:04:B6:27:9B:F2:80:47:1E:89:29:A1:CF:17:FA
Authority key identifier: DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21
Certificate issuer: /CN=A91CF848/serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321
Certificate serial: 01EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft
Manifest number: 01E7
Signing time: Fri 31 Jan 2025 02:14:50 +0000
Manifest this update: Fri 31 Jan 2025 02:14:49 +0000
Manifest next update: Fri 07 Feb 2025 02:14:49 +0000
Files and hashes: 1: 2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl (hash: ckTg+l2SgxsX1MwNPeem8fDpNaVFTHybYmBZj1qOneI=)
2: E9399E722E7211EDAE100C3DC4F9AE02.roa (hash: D0U/04LVw+4iZc1LWZSDtE7FA2UlXVxHf7VWpO51OsQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 490 (0x1ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF848/serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321
Validity
Not Before: Jan 31 02:14:49 2025 GMT
Not After : Feb 7 02:14:49 2025 GMT
Subject: CN=679c321a-0057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:34:eb:85:a7:03:f4:6a:3a:61:b9:3c:8c:59:
e3:79:b3:09:d6:ac:96:de:07:c1:bb:83:d1:7a:06:
03:2b:41:08:7e:ad:46:43:09:86:8c:b6:22:74:fb:
1b:d1:20:9f:01:8c:5d:c9:2a:15:42:ae:cf:5b:56:
3c:5a:6b:24:b9:c4:86:e6:22:dc:ad:80:7f:5d:0e:
c9:f3:d3:23:6b:aa:ef:40:52:52:b9:ba:ac:49:8b:
2b:c3:d6:46:b7:f6:7f:fc:75:d8:00:c9:8b:15:45:
d5:e7:47:d0:d3:ad:c7:a1:6a:1a:6e:1a:7d:6a:9b:
94:20:ad:ae:42:e0:8a:3d:be:7f:e5:5a:72:8f:5a:
58:8c:6c:99:cf:9a:53:bd:4e:af:89:bc:75:6e:06:
35:d0:90:d4:3c:0d:c1:8a:2d:70:76:95:dd:2f:dd:
2f:bb:64:36:c3:4f:a7:0b:58:57:1c:94:61:43:4d:
95:01:ae:40:b2:96:b1:5a:0f:0c:82:d6:fb:2a:26:
02:2c:95:37:7f:35:7e:54:f1:86:76:8f:0c:55:a5:
ce:a9:4f:5d:ce:8a:59:08:a0:56:5d:07:6f:40:80:
cf:19:04:f8:93:ba:54:33:2b:d0:7c:0f:31:8e:52:
45:7c:54:b8:c9:64:9d:b6:30:fc:80:4a:4c:d6:5f:
fa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A9:24:11:0D:EF:04:B6:27:9B:F2:80:47:1E:89:29:A1:CF:17:FA
X509v3 Authority Key Identifier:
keyid:DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:0b:dd:09:4b:1f:d2:09:75:36:36:90:42:44:af:29:1b:a4:
7d:c5:86:27:7d:82:35:4d:05:2f:21:d9:6f:22:3d:35:81:5a:
a7:2f:30:20:e0:d9:4d:8d:9c:f9:a6:77:b6:24:b1:0c:ee:55:
6f:f8:7e:5e:fd:e4:a4:46:3e:69:91:1d:69:cb:61:16:de:37:
d6:93:ac:74:32:fe:09:aa:c2:19:37:62:57:69:ed:9b:ae:b4:
bc:cb:55:a2:bd:ef:d5:95:c5:9f:b8:d8:ba:cb:fb:db:f8:6f:
1a:93:e2:9b:00:46:eb:25:78:d7:24:ae:be:cb:36:9e:88:86:
b1:9e:cf:7c:78:95:4c:ef:2f:a5:e2:78:b4:ae:de:5f:31:86:
12:68:00:b1:0b:d1:66:9c:5e:26:6f:e3:41:44:7b:a2:0c:f2:
e4:9c:a0:5b:0e:8e:42:b3:9f:6d:1f:a0:d4:81:90:4e:34:96:
bf:c3:65:a8:dc:e4:4c:d5:47:4c:ea:03:84:ac:3c:f5:9d:d4:
86:30:a1:95:6d:43:1b:c8:0e:1c:6a:9c:96:ec:e3:c4:8b:7f:
e4:1b:74:90:1c:8c:00:7c:e6:ea:7b:37:74:64:f5:82:05:48:
23:bc:62:98:08:26:fa:44:e5:a9:0a:60:84:a9:c6:17:26:1a:
1b:10:8c:52
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0Y4NDgxMTAvBgNVBAUTKERCMzUzRjk2QzBEMDJDREQ0QzFGMDhEQTFCQzE2OUZF
RTU4RDczMjEwHhcNMjUwMTMxMDIxNDQ5WhcNMjUwMjA3MDIxNDQ5WjAYMRYwFAYD
VQQDEw02NzljMzIxYS0wMDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwzTrhacD9Go6Ybk8jFnjebMJ1qyW3gfBu4PRegYDK0EIfq1GQwmGjLYidPsb
0SCfAYxdySoVQq7PW1Y8WmskucSG5iLcrYB/XQ7J89Mja6rvQFJSubqsSYsrw9ZG
t/Z//HXYAMmLFUXV50fQ063HoWoabhp9apuUIK2uQuCKPb5/5Vpyj1pYjGyZz5pT
vU6vibx1bgY10JDUPA3Bii1wdpXdL90vu2Q2w0+nC1hXHJRhQ02VAa5AspaxWg8M
gtb7KiYCLJU3fzV+VPGGdo8MVaXOqU9dzopZCKBWXQdvQIDPGQT4k7pUMyvQfA8x
jlJFfFS4yWSdtjD8gEpM1l/6WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2pJBEN
7wS2J5vygEceiSmhzxf6MB8GA1UdIwQYMBaAFNs1P5bA0CzdTB8I2hvBaf7ljXMh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjg0OC9DQURBQjdCMjJF
NkUxMUVEQUVBQjNFMzZDNEY5QUUwMi8yelVfbHNEUUxOMU1Id2phRzhGcF91V05j
eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJ6VV9sc0RRTE4xTUh3amFHOEZwX3VXTmN5RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
Rjg0OC9DQURBQjdCMjJFNkUxMUVEQUVBQjNFMzZDNEY5QUUwMi8yelVfbHNEUUxO
MU1Id2phRzhGcF91V05jeUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBVC90JSx/SCXU2NpBCRK8pG6R9xYYnfYI1TQUvIdlvIj01gVqnLzAg
4NlNjZz5pne2JLEM7lVv+H5e/eSkRj5pkR1py2EW3jfWk6x0Mv4JqsIZN2JXae2b
rrS8y1Wive/VlcWfuNi6y/vb+G8ak+KbAEbrJXjXJK6+yzaeiIaxns98eJVM7y+l
4ni0rt5fMYYSaACxC9FmnF4mb+NBRHuiDPLknKBbDo5Cs59tH6DUgZBONJa/w2Wo
3ORM1UdM6gOErDz1ndSGMKGVbUMbyA4capyW7OPEi3/kG3SQHIwAfObqezd0ZPWC
BUgjvGKYCCb6ROWpCmCEqcYXJhobEIxS
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:22 2025 by rpki-client