Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
File: 3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft (raw, json)
Hash identifier: lorfwYxJnW5SOPOcZ4gpJkP3CqQyV09PCaOWm36WOos=
Subject key identifier: 79:64:3B:1A:1E:58:65:27:35:6B:C5:FC:51:88:2B:68:EF:44:E2:BD
Authority key identifier: DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51
Certificate issuer: /CN=A91D1691/serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51
Certificate serial: 1856
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
Manifest number: 1850
Signing time: Fri 31 Jan 2025 15:50:10 +0000
Manifest this update: Fri 31 Jan 2025 15:50:09 +0000
Manifest next update: Fri 07 Feb 2025 15:50:09 +0000
Files and hashes: 1: 3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl (hash: lpeKBAcFb5piTuxc8IBcmZ9gnT7kW1dBEGDcxKTkHPE=)
2: AEA7C9C0818911EA81577016C4F9AE02.roa (hash: WuIJH5EmbtRmJmFCN//mGN8XhCDwfYBWN+2IltuHvZ4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6230 (0x1856)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1691/serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51
Validity
Not Before: Jan 31 15:50:09 2025 GMT
Not After : Feb 7 15:50:09 2025 GMT
Subject: CN=679cf132-d034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ff:61:0a:d1:54:6f:38:69:08:d8:7a:87:70:
5e:29:59:bf:6b:d9:1c:29:30:18:95:54:03:2d:5d:
7c:fb:f8:b1:d5:bf:05:3e:a7:c0:64:21:21:60:8b:
83:03:d3:98:de:f3:c8:27:7e:db:76:d1:f2:36:88:
3f:1f:1f:cf:88:bd:84:c4:00:8f:98:98:cb:cc:1c:
08:9c:af:28:60:0e:c2:ba:a4:cc:7d:85:54:96:e9:
3b:65:95:e3:3b:46:14:cc:27:01:47:3f:78:b2:52:
95:67:7c:d5:cc:a0:ef:7c:7a:c8:0e:28:58:01:fb:
d3:bb:34:67:2b:24:ef:fd:3c:89:dc:75:48:27:90:
35:91:d1:ca:d4:2a:8b:6a:b8:e4:00:c5:3a:25:b6:
de:fb:56:3c:a7:72:d5:45:fc:1a:c6:00:51:9a:75:
f6:87:2d:20:7d:ce:ac:97:9a:50:b1:63:10:fc:3b:
56:db:90:b2:95:79:8f:e0:27:1a:51:7b:ae:be:da:
85:b7:84:bc:e4:7f:ad:f0:71:f3:d1:d0:d2:34:c7:
3d:75:f2:88:c2:fa:32:a5:65:d3:29:e8:16:fc:53:
93:51:5d:cf:11:c2:6a:7a:9a:91:81:3b:75:01:6a:
df:dd:83:2e:c1:41:c4:c8:05:62:77:27:bf:1d:4a:
00:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:64:3B:1A:1E:58:65:27:35:6B:C5:FC:51:88:2B:68:EF:44:E2:BD
X509v3 Authority Key Identifier:
keyid:DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d0:68:1a:21:cb:d1:06:6a:4a:72:87:63:73:a8:10:8d:dd:
ff:e6:10:f7:1e:86:f0:24:1b:b6:c3:dd:6e:4a:99:48:87:7b:
5e:3d:c0:fd:5f:14:4e:0b:ce:af:05:9a:5e:3a:a3:70:b4:fe:
65:27:d4:61:1e:3a:40:d2:75:4c:f2:88:cc:cd:e7:d9:c9:c6:
c9:3a:55:66:68:e5:1a:1b:10:bb:2c:f5:bf:ea:22:bc:f5:da:
b2:02:56:c9:6b:ce:3c:3f:ed:9f:42:cf:c5:fc:81:d6:df:a5:
cd:6b:4b:19:d2:90:a1:4d:fa:28:00:71:a6:c2:d5:38:f4:69:
c6:91:2f:d4:3b:ca:da:1b:3b:87:7a:80:ae:6c:85:0b:1c:1f:
9f:1e:b9:df:19:6a:1b:b1:aa:1a:d5:33:4b:58:07:79:ec:94:
19:19:b7:8d:1d:6d:51:4a:36:11:cc:a5:7c:06:c8:0d:86:7c:
cc:2e:97:a1:ec:78:29:d8:5f:87:17:09:96:6f:d0:e8:a2:bd:
3d:10:a8:b1:68:7d:9b:b6:88:9e:19:2b:eb:a9:a4:b9:54:0b:
1b:a2:a6:1e:3d:6e:95:43:ad:20:1a:ef:fc:b6:fa:02:61:a5:
2d:0b:7b:83:b3:fd:15:af:2f:e0:79:eb:a2:2e:80:33:22:90:
03:82:9a:46
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDE2OTExMTAvBgNVBAUTKERDMDRBRjE5OEM5N0YyNTgyRjE1QURERUVFN0M2ODI2
MTFDQURBNTEwHhcNMjUwMTMxMTU1MDA5WhcNMjUwMjA3MTU1MDA5WjAYMRYwFAYD
VQQDEw02NzljZjEzMi1kMDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArv9hCtFUbzhpCNh6h3BeKVm/a9kcKTAYlVQDLV18+/ix1b8FPqfAZCEhYIuD
A9OY3vPIJ37bdtHyNog/Hx/PiL2ExACPmJjLzBwInK8oYA7CuqTMfYVUluk7ZZXj
O0YUzCcBRz94slKVZ3zVzKDvfHrIDihYAfvTuzRnKyTv/TyJ3HVIJ5A1kdHK1CqL
arjkAMU6Jbbe+1Y8p3LVRfwaxgBRmnX2hy0gfc6sl5pQsWMQ/DtW25CylXmP4Cca
UXuuvtqFt4S85H+t8HHz0dDSNMc9dfKIwvoypWXTKegW/FOTUV3PEcJqepqRgTt1
AWrf3YMuwUHEyAVidye/HUoA2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlkOxoe
WGUnNWvF/FGIK2jvROK9MB8GA1UdIwQYMBaAFNwErxmMl/JYLxWt3u58aCYRytpR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTY5MS81MEM2OTI5MjlE
MjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8zQVN2R1l5WDhsZ3ZGYTNlN254b0poSEsy
bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzNBU3ZHWXlYOGxndkZhM2U3bnhvSmhISzJsRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MTY5MS81MEM2OTI5MjlEMjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8zQVN2R1l5WDhs
Z3ZGYTNlN254b0poSEsybEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBP0GgaIcvRBmpKcodjc6gQjd3/5hD3HobwJBu2w91uSplIh3tePcD9
XxROC86vBZpeOqNwtP5lJ9RhHjpA0nVM8ojMzefZycbJOlVmaOUaGxC7LPW/6iK8
9dqyAlbJa848P+2fQs/F/IHW36XNa0sZ0pChTfooAHGmwtU49GnGkS/UO8raGzuH
eoCubIULHB+fHrnfGWobsaoa1TNLWAd57JQZGbeNHW1RSjYRzKV8BsgNhnzMLpeh
7Hgp2F+HFwmWb9Door09EKixaH2btoieGSvrqaS5VAsboqYePW6VQ60gGu/8tvoC
YaUtC3uDs/0Vry/geeuiLoAzIpADgppG
-----END CERTIFICATE-----
Generated at Sun Apr 27 15:43:34 2025 by rpki-client