Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft
File: exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft (raw, json)
Hash identifier: j8DI3qRLXJpYpoUC45xL9qUFrSwEFnsiaIMgCmjna6s=
Subject key identifier: 49:8F:A4:1B:BE:44:24:54:C9:E1:30:0E:DB:2A:91:3D:33:31:4E:7D
Authority key identifier: 7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B
Certificate issuer: /CN=A91D1C02/serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B
Certificate serial: 036A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft
Manifest number: 0364
Signing time: Fri 31 Jan 2025 01:00:09 +0000
Manifest this update: Fri 31 Jan 2025 01:00:08 +0000
Manifest next update: Fri 07 Feb 2025 01:00:08 +0000
Files and hashes: 1: exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl (hash: qtPd4JWYA5xOdf9feEKRVdd7u3UguPgaZIdc1D9BS1U=)
2: 964EB3D49A5F11EC9124627BC4F9AE02.roa (hash: o79Sd0r7i63ThJBm1It6/m6+eHRjzs84P0YMiSeldfE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 874 (0x36a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1C02/serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B
Validity
Not Before: Jan 31 01:00:08 2025 GMT
Not After : Feb 7 01:00:08 2025 GMT
Subject: CN=679c2098-3620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7e:a4:d5:00:d9:39:1d:4f:45:eb:88:b1:c8:
66:4b:fe:3a:de:6c:c2:cc:81:3c:fe:ce:08:14:e4:
c7:cb:3f:b8:e6:f6:02:6b:7a:e6:78:37:3b:3d:da:
61:55:35:2c:7c:5e:e7:73:a6:b5:c4:00:5a:b5:47:
60:6f:b0:d0:e1:c9:3b:b3:2c:45:5b:a0:90:d4:38:
4b:99:33:87:7d:6a:65:24:32:b6:70:e4:d8:58:8a:
42:bf:7d:29:e0:6a:8a:b0:8f:9e:eb:46:79:07:14:
19:07:9b:42:d3:7b:90:1e:4d:ae:f5:68:a1:1d:21:
35:b1:65:64:de:ff:3f:dd:fc:93:c5:da:84:91:e2:
7a:11:a2:9e:fa:b6:2a:2a:4a:aa:20:d8:a9:0a:ea:
5a:dd:0a:0a:8e:14:38:10:99:73:6e:52:fb:22:3a:
97:68:85:ac:13:f5:74:72:1d:13:38:bc:01:c0:15:
fd:96:27:56:a1:f7:03:89:5d:aa:de:ba:7f:f9:f8:
0a:a1:df:7b:90:b1:57:2f:76:c3:92:b2:45:aa:79:
8e:ba:24:3c:3e:54:3f:2a:99:05:28:97:ca:7c:2d:
ed:14:07:a6:5e:a0:49:eb:41:13:63:b9:97:a9:89:
d3:4e:55:b0:9b:54:34:52:02:05:d2:43:c6:b0:de:
26:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8F:A4:1B:BE:44:24:54:C9:E1:30:0E:DB:2A:91:3D:33:31:4E:7D
X509v3 Authority Key Identifier:
keyid:7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:4a:f4:99:c7:73:71:52:94:f4:14:51:49:fc:0c:66:6a:16:
07:4b:54:d5:81:5d:eb:84:49:a1:fc:7a:ea:b8:1b:29:60:07:
85:bc:cd:b3:b7:fa:dd:b9:88:9a:d0:3f:2b:32:c5:5d:26:44:
10:99:7b:99:59:ca:ae:2c:6b:40:8b:42:67:9f:89:31:5b:f2:
2e:18:1d:87:51:d7:36:ef:54:be:c7:c1:46:fb:1d:b4:54:f9:
0b:54:e2:3d:70:d0:17:55:f6:75:15:7f:e9:df:b2:11:cf:3f:
b0:84:84:ce:68:94:7d:01:b9:a7:14:fd:32:18:b2:52:1e:18:
a8:00:68:6d:8b:50:35:32:ce:ab:58:0c:0d:f9:8f:c9:78:d4:
2e:67:8d:b0:33:8f:e2:3d:d8:f3:a0:42:9a:fa:dd:a6:5a:1d:
c1:e0:3d:a5:3d:f1:5b:01:b0:51:a3:32:6b:a4:69:27:37:c5:
bd:00:77:0f:93:f6:14:43:aa:04:a1:d7:6b:8b:cc:87:81:e5:
45:0e:e1:4f:76:cc:95:9e:18:ff:7e:b8:ac:bf:d9:be:1c:72:
53:09:52:4c:50:5f:c3:39:76:1a:21:45:de:35:d0:b3:54:0d:
22:04:67:10:2a:95:45:0a:f7:17:22:13:2a:4d:2f:0a:2a:6b:
fc:c0:60:17
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA2owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDFDMDIxMTAvBgNVBAUTKDdCMTlDNUFFMzVBRUQ4M0FGQTYwNDYzQjVGM0MwQTYw
MzZFNEZGOUIwHhcNMjUwMTMxMDEwMDA4WhcNMjUwMjA3MDEwMDA4WjAYMRYwFAYD
VQQDEw02NzljMjA5OC0zNjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqn6k1QDZOR1PReuIschmS/463mzCzIE8/s4IFOTHyz+45vYCa3rmeDc7Pdph
VTUsfF7nc6a1xABatUdgb7DQ4ck7syxFW6CQ1DhLmTOHfWplJDK2cOTYWIpCv30p
4GqKsI+e60Z5BxQZB5tC03uQHk2u9WihHSE1sWVk3v8/3fyTxdqEkeJ6EaKe+rYq
KkqqINipCupa3QoKjhQ4EJlzblL7IjqXaIWsE/V0ch0TOLwBwBX9lidWofcDiV2q
3rp/+fgKod97kLFXL3bDkrJFqnmOuiQ8PlQ/KpkFKJfKfC3tFAemXqBJ60ETY7mX
qYnTTlWwm1Q0UgIF0kPGsN4mZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEmPpBu+
RCRUyeEwDtsqkT0zMU59MB8GA1UdIwQYMBaAFHsZxa41rtg6+mBGO188CmA25P+b
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUMwMi9CRDdGMkY1NjlB
MDAxMUVDODM2QkM5NThDNEY5QUUwMi9leG5GcmpXdTJEcjZZRVk3WHp3S1lEYmtf
NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2V4bkZyald1MkRyNllFWTdYendLWURia181cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MUMwMi9CRDdGMkY1NjlBMDAxMUVDODM2QkM5NThDNEY5QUUwMi9leG5GcmpXdTJE
cjZZRVk3WHp3S1lEYmtfNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB2SvSZx3NxUpT0FFFJ/AxmahYHS1TVgV3rhEmh/HrquBspYAeFvM2z
t/rduYia0D8rMsVdJkQQmXuZWcquLGtAi0Jnn4kxW/IuGB2HUdc271S+x8FG+x20
VPkLVOI9cNAXVfZ1FX/p37IRzz+whITOaJR9AbmnFP0yGLJSHhioAGhti1A1Ms6r
WAwN+Y/JeNQuZ42wM4/iPdjzoEKa+t2mWh3B4D2lPfFbAbBRozJrpGknN8W9AHcP
k/YUQ6oEoddri8yHgeVFDuFPdsyVnhj/frisv9m+HHJTCVJMUF/DOXYaIUXeNdCz
VA0iBGcQKpVFCvcXIhMqTS8KKmv8wGAX
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:17:51 2025 by rpki-client