Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft
File: 1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft (raw, json)
Hash identifier: GHxB1eiONE3QUkMcJMaq9ANoWRfCDRilXD37i23s2ZI=
Subject key identifier: 7F:D2:C7:28:64:46:43:C6:33:FE:D9:AE:7E:74:D5:58:64:76:3B:BF
Authority key identifier: D7:0E:59:4B:81:A1:65:8C:2A:DD:F4:A3:26:8E:F9:CF:08:F9:65:0F
Certificate issuer: /CN=A91CFFBE/serialNumber=D70E594B81A1658C2ADDF4A3268EF9CF08F9650F
Certificate serial: 0543
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft
Manifest number: 0540
Signing time: Thu 30 Jan 2025 23:30:14 +0000
Manifest this update: Thu 30 Jan 2025 23:30:13 +0000
Manifest next update: Thu 06 Feb 2025 23:30:12 +0000
Files and hashes: 1: 1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.crl (hash: 3cblIKeStb7BDr1JHi5HAWvMqnI83K6jX4V0Nq3y+jQ=)
2: 05A2A4008FE811EEACB1296AC4F9AE02.roa (hash: RMAjjR/Z0XXDeykH/h9ZSJTCAkTWDVoYIsC8StPVzYI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1347 (0x543)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFFBE/serialNumber=D70E594B81A1658C2ADDF4A3268EF9CF08F9650F
Validity
Not Before: Jan 30 23:30:13 2025 GMT
Not After : Feb 6 23:30:12 2025 GMT
Subject: CN=679c0b85-ea6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b8:67:81:68:5f:20:99:d4:1c:3d:28:4f:83:
6a:52:1c:33:6a:be:9d:10:56:03:43:45:f4:f5:76:
cd:39:f0:2a:99:0d:56:a4:ed:6a:0c:eb:a8:80:ad:
fc:b8:bf:86:dd:0d:ef:08:1e:9a:09:62:63:40:26:
c2:41:95:bf:ca:11:ca:9e:7f:1b:56:c5:73:31:c2:
ed:7d:78:68:ab:f5:3b:93:1a:54:e2:dd:f5:80:62:
99:71:16:24:8d:97:e8:8d:42:1b:6b:82:4e:ea:3c:
fd:e6:71:4f:3a:6f:b4:a5:65:9e:88:7a:35:61:e4:
bd:2e:4a:79:e8:6e:c0:d3:29:c6:4b:b7:72:23:0a:
73:a8:58:54:a8:ba:b5:d5:ee:c4:49:f9:a5:e1:bb:
92:c9:2d:9d:0f:42:53:14:d7:d1:06:10:61:b1:84:
79:42:e1:80:a3:09:1f:04:4b:e5:fe:df:84:4b:78:
ee:22:5e:ae:0f:61:f6:4a:38:d8:b5:97:4e:9d:06:
77:c2:79:7d:ad:63:f3:9e:ff:d8:26:00:3c:dc:35:
a7:c3:7f:45:39:e5:ba:54:23:16:be:1d:a3:af:cd:
74:9a:ea:d2:eb:00:e9:95:5a:b7:4d:70:92:fd:23:
63:95:56:b0:15:8d:93:e4:81:34:3e:3a:1b:21:77:
f6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D2:C7:28:64:46:43:C6:33:FE:D9:AE:7E:74:D5:58:64:76:3B:BF
X509v3 Authority Key Identifier:
keyid:D7:0E:59:4B:81:A1:65:8C:2A:DD:F4:A3:26:8E:F9:CF:08:F9:65:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:ab:b2:d9:62:8f:a4:1e:4f:75:ca:f4:8a:e1:eb:71:62:30:
6a:9a:76:b1:f7:78:7c:b5:81:e4:0d:e8:cb:e8:bd:10:60:e0:
bf:11:4d:ad:12:ff:98:98:2c:f5:36:45:ea:7c:7a:ed:e6:d1:
73:39:05:41:f7:24:9e:af:19:b0:26:80:08:7a:c3:94:44:a2:
87:f5:d7:48:97:b5:f1:97:c1:d3:d1:d7:75:37:86:7f:2a:77:
62:17:95:74:58:8d:ad:2e:21:4f:c1:f0:8c:da:05:bd:58:ae:
cf:15:31:11:72:7c:58:64:a5:4f:31:7e:52:45:ff:95:25:08:
43:09:fa:ee:86:bb:cd:40:dd:c6:74:f9:25:49:1a:c0:1a:0b:
34:c0:37:ec:d0:11:78:d8:88:51:a5:a8:75:18:ae:00:5b:bc:
41:45:c5:71:e1:1b:3b:6c:74:8b:52:14:6d:4f:a9:85:d5:71:
ea:cc:19:53:36:6e:c5:d6:8f:6f:13:72:ec:81:2d:23:ab:70:
d3:7f:5d:9e:9a:f5:a2:c2:8a:5b:35:0b:09:e3:4b:a2:29:de:
0d:c7:28:ea:0a:37:ee:3d:92:70:12:7b:f5:ee:b5:32:0f:e4:
1f:ce:ee:11:b0:68:46:a3:f0:91:46:4d:28:60:37:11:a8:a8:
1e:fa:c3:5a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0ZGQkUxMTAvBgNVBAUTKEQ3MEU1OTRCODFBMTY1OEMyQURERjRBMzI2OEVGOUNG
MDhGOTY1MEYwHhcNMjUwMTMwMjMzMDEzWhcNMjUwMjA2MjMzMDEyWjAYMRYwFAYD
VQQDEw02NzljMGI4NS1lYTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9rhngWhfIJnUHD0oT4NqUhwzar6dEFYDQ0X09XbNOfAqmQ1WpO1qDOuogK38
uL+G3Q3vCB6aCWJjQCbCQZW/yhHKnn8bVsVzMcLtfXhoq/U7kxpU4t31gGKZcRYk
jZfojUIba4JO6jz95nFPOm+0pWWeiHo1YeS9Lkp56G7A0ynGS7dyIwpzqFhUqLq1
1e7ESfml4buSyS2dD0JTFNfRBhBhsYR5QuGAowkfBEvl/t+ES3juIl6uD2H2SjjY
tZdOnQZ3wnl9rWPznv/YJgA83DWnw39FOeW6VCMWvh2jr810murS6wDplVq3TXCS
/SNjlVawFY2T5IE0PjobIXf2SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH/Sxyhk
RkPGM/7Zrn501Vhkdju/MB8GA1UdIwQYMBaAFNcOWUuBoWWMKt30oyaO+c8I+WUP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZCRS83NDIyMzcwNkRB
RkExMUVCODJGRTMxNjJDNEY5QUUwMi8xdzVaUzRHaFpZd3EzZlNqSm83NXp3ajVa
UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzF3NVpTNEdoWll3cTNmU2pKbzc1endqNVpROC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RkZCRS83NDIyMzcwNkRBRkExMUVCODJGRTMxNjJDNEY5QUUwMi8xdzVaUzRHaFpZ
d3EzZlNqSm83NXp3ajVaUTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDKq7LZYo+kHk91yvSK4etxYjBqmnax93h8tYHkDejL6L0QYOC/EU2t
Ev+YmCz1NkXqfHrt5tFzOQVB9ySerxmwJoAIesOURKKH9ddIl7Xxl8HT0dd1N4Z/
KndiF5V0WI2tLiFPwfCM2gW9WK7PFTERcnxYZKVPMX5SRf+VJQhDCfruhrvNQN3G
dPklSRrAGgs0wDfs0BF42IhRpah1GK4AW7xBRcVx4Rs7bHSLUhRtT6mF1XHqzBlT
Nm7F1o9vE3LsgS0jq3DTf12emvWiwopbNQsJ40uiKd4NxyjqCjfuPZJwEnv17rUy
D+Qfzu4RsGhGo/CRRk0oYDcRqKge+sNa
-----END CERTIFICATE-----
Generated at Sat Apr 26 23:34:12 2025 by rpki-client