Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft
File: FmUgpBWnVONYZSxXkM6GtLJjLdE.mft (raw, json)
Hash identifier: t/zrdSuqY2b5FrOdoj5H30NdM6jeH8kt1Y1FxGSe4tA=
Subject key identifier: F5:A6:22:3E:D4:A1:B4:92:95:01:F8:DE:3F:8C:77:8E:D1:35:B9:42
Authority key identifier: 16:65:20:A4:15:A7:54:E3:58:65:2C:57:90:CE:86:B4:B2:63:2D:D1
Certificate issuer: /CN=A91D12C2/serialNumber=166520A415A754E358652C5790CE86B4B2632DD1
Certificate serial: 0B07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FmUgpBWnVONYZSxXkM6GtLJjLdE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft
Manifest number: 0B01
Signing time: Thu 30 Jan 2025 19:19:07 +0000
Manifest this update: Thu 30 Jan 2025 19:19:07 +0000
Manifest next update: Thu 06 Feb 2025 19:19:07 +0000
Files and hashes: 1: FmUgpBWnVONYZSxXkM6GtLJjLdE.crl (hash: gOEkJzX/bysL+4RiyD+gnffFif9KSVl3bbRJNbEW4uU=)
2: 6C8823E2378211EA8FE81077C4F9AE02.roa (hash: 3OliuZVliVTkOKrmZ0yV8rIfa0MivGBxDdTvZBywfOE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2823 (0xb07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D12C2/serialNumber=166520A415A754E358652C5790CE86B4B2632DD1
Validity
Not Before: Jan 30 19:19:07 2025 GMT
Not After : Feb 6 19:19:07 2025 GMT
Subject: CN=679bd0ab-b177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fe:2a:de:e0:8f:26:e1:8e:e8:7c:66:0f:00:
d3:80:0e:df:67:99:e9:43:a0:82:77:84:6d:44:65:
d8:01:c1:e8:f0:20:73:2a:30:1d:d1:f1:5b:5c:22:
0d:c9:93:df:8a:01:bb:50:a9:3e:29:05:49:a3:90:
6f:59:c0:66:b3:15:5a:44:0c:11:28:eb:a2:a0:e8:
3c:46:ba:63:99:b3:45:09:0b:5f:62:3f:25:be:8e:
e3:eb:a4:cd:2d:1c:15:68:7b:5c:2a:c0:1e:f2:98:
d4:8d:36:b7:23:83:e2:7a:e9:3d:89:15:d2:52:10:
f2:c2:8a:be:89:67:c3:6e:e8:5a:ea:f6:dd:fc:c8:
00:c0:8e:50:c5:19:23:9d:38:0f:a1:53:8b:5e:29:
52:d5:4f:54:e9:41:1c:0a:3b:17:0a:36:66:ae:89:
ac:1e:f4:65:2c:87:01:e0:27:18:67:6b:36:8d:5c:
15:14:2f:1b:bd:0d:5f:46:96:58:1f:60:0b:27:53:
ba:eb:b7:28:e8:83:7a:d2:59:81:4d:59:3f:5d:2a:
aa:2d:8c:5d:54:ae:1b:66:22:7e:fb:b4:a4:b5:fd:
20:14:c0:c4:ef:40:5f:6d:d2:37:c7:e5:da:a3:b3:
93:f3:ff:83:5b:59:70:3c:4c:0c:cf:bc:cc:b5:12:
60:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A6:22:3E:D4:A1:B4:92:95:01:F8:DE:3F:8C:77:8E:D1:35:B9:42
X509v3 Authority Key Identifier:
keyid:16:65:20:A4:15:A7:54:E3:58:65:2C:57:90:CE:86:B4:B2:63:2D:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FmUgpBWnVONYZSxXkM6GtLJjLdE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:78:2b:ee:a5:86:c6:54:66:af:be:00:6c:d9:e7:64:c7:86:
bc:a0:9b:d2:46:f3:38:78:d3:8d:a9:90:54:05:c8:94:37:0f:
21:f0:9d:e0:ec:7b:e9:f0:4e:32:a5:87:8a:77:d2:6f:dd:3b:
ce:26:91:66:d1:f9:dc:b5:cf:6a:9a:f2:25:c7:e9:d2:ea:07:
af:4b:01:a2:6f:2c:8c:08:24:bb:b9:b7:c3:01:15:f4:e5:bf:
d5:de:53:7a:40:20:83:92:3f:98:65:74:55:08:ed:ab:d9:5d:
a3:d3:be:e1:12:26:94:c8:84:8b:c0:6b:5a:ee:c2:aa:45:81:
23:af:b4:45:77:f7:0d:eb:4a:c2:57:5d:42:2e:f8:ae:05:5d:
da:c0:83:a7:5f:6d:98:7d:7a:c2:2e:fc:84:3e:3a:e3:cc:ff:
38:d8:f4:21:65:18:bb:44:dc:55:22:d4:89:e5:9b:d6:85:e7:
67:ad:c2:e7:a3:f2:9d:11:a5:86:4e:8d:03:c7:9c:54:9e:75:
85:62:f2:52:79:55:64:5b:eb:e2:cb:3c:6c:73:d5:41:49:09:
ef:6f:9f:b7:8e:2f:56:a6:56:6f:71:56:68:16:35:51:23:38:
60:37:d6:4b:57:f0:53:8d:13:62:4e:43:b6:b4:13:dd:65:b4:
77:36:2d:25
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCwcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDEyQzIxMTAvBgNVBAUTKDE2NjUyMEE0MTVBNzU0RTM1ODY1MkM1NzkwQ0U4NkI0
QjI2MzJERDEwHhcNMjUwMTMwMTkxOTA3WhcNMjUwMjA2MTkxOTA3WjAYMRYwFAYD
VQQDEw02NzliZDBhYi1iMTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtv4q3uCPJuGO6HxmDwDTgA7fZ5npQ6CCd4RtRGXYAcHo8CBzKjAd0fFbXCIN
yZPfigG7UKk+KQVJo5BvWcBmsxVaRAwRKOuioOg8RrpjmbNFCQtfYj8lvo7j66TN
LRwVaHtcKsAe8pjUjTa3I4Pieuk9iRXSUhDywoq+iWfDbuha6vbd/MgAwI5QxRkj
nTgPoVOLXilS1U9U6UEcCjsXCjZmromsHvRlLIcB4CcYZ2s2jVwVFC8bvQ1fRpZY
H2ALJ1O667co6IN60lmBTVk/XSqqLYxdVK4bZiJ++7Sktf0gFMDE70BfbdI3x+Xa
o7OT8/+DW1lwPEwMz7zMtRJg+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPWmIj7U
obSSlQH43j+Md47RNblCMB8GA1UdIwQYMBaAFBZlIKQVp1TjWGUsV5DOhrSyYy3R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTJDMi9CMkZFMzVERTM3
ODAxMUVBQjIxNDEzNzRDNEY5QUUwMi9GbVVncEJXblZPTllaU3hYa002R3RMSmpM
ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZtVWdwQlduVk9OWVpTeFhrTTZHdExKakxkRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MTJDMi9CMkZFMzVERTM3ODAxMUVBQjIxNDEzNzRDNEY5QUUwMi9GbVVncEJXblZP
TllaU3hYa002R3RMSmpMZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA3eCvupYbGVGavvgBs2edkx4a8oJvSRvM4eNONqZBUBciUNw8h8J3g
7Hvp8E4ypYeKd9Jv3TvOJpFm0fnctc9qmvIlx+nS6gevSwGibyyMCCS7ubfDARX0
5b/V3lN6QCCDkj+YZXRVCO2r2V2j077hEiaUyISLwGta7sKqRYEjr7RFd/cN60rC
V11CLviuBV3awIOnX22YfXrCLvyEPjrjzP842PQhZRi7RNxVItSJ5ZvWhednrcLn
o/KdEaWGTo0Dx5xUnnWFYvJSeVVkW+viyzxsc9VBSQnvb5+3ji9WplZvcVZoFjVR
IzhgN9ZLV/BTjRNiTkO2tBPdZbR3Ni0l
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:23:04 2025 by rpki-client