Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft
File: ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft (raw, json)
Hash identifier: 5H/pvirmFvVGGFPOHx24D81c1ycdfrq74qXvYC4dyaI=
Subject key identifier: CF:B0:F6:A2:10:45:2B:7D:33:98:9C:48:8D:A6:93:CF:4E:51:31:49
Authority key identifier: C9:ED:4B:76:76:E3:F5:A5:B1:F8:A6:A0:DD:7E:22:1B:63:E5:34:AB
Certificate issuer: /CN=A91D2ACF/serialNumber=C9ED4B7676E3F5A5B1F8A6A0DD7E221B63E534AB
Certificate serial: 09DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft
Manifest number: 09CF
Signing time: Thu 30 Jan 2025 20:02:21 +0000
Manifest this update: Thu 30 Jan 2025 20:02:20 +0000
Manifest next update: Thu 06 Feb 2025 20:02:20 +0000
Files and hashes: 1: ye1Ldnbj9aWx-Kag3X4iG2PlNKs.crl (hash: OwVEyLYuSgD9Xnf5lJIho5KzFxalBaxfzUrjExTu2KU=)
2: F22D283A9B3B11EBA5C76B80C4F9AE02.roa (hash: egvdAkYLzu5gxxKonGYdt5g+UPStKzivhdsfzC6knl8=)
3: 3A851EE273E411EA9572F76EC4F9AE02.roa (hash: vR/hsH9Zhb8FIZHjA0oIM8YiJ7UXh8ADZ/D+wU+8mAM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2523 (0x9db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2ACF/serialNumber=C9ED4B7676E3F5A5B1F8A6A0DD7E221B63E534AB
Validity
Not Before: Jan 30 20:02:20 2025 GMT
Not After : Feb 6 20:02:20 2025 GMT
Subject: CN=679bdacd-79ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3b:ab:e9:1c:ba:dc:a7:0f:58:7d:a9:69:94:
45:ba:11:1f:4d:49:c6:e7:bd:d9:3a:6b:ef:85:1e:
35:c9:ec:b2:77:8c:b4:59:29:2b:bb:81:51:26:dd:
bc:01:c5:99:65:d4:f0:e6:f4:79:73:98:6b:7f:37:
11:b2:b3:6a:d8:33:63:f0:e9:7e:29:47:75:20:c1:
9c:d2:3e:f0:7a:94:57:23:fc:8c:ca:e6:ca:d8:af:
0c:96:e0:91:22:5d:c4:f9:38:03:e1:ca:63:27:04:
ee:67:dc:b6:05:06:b2:77:74:d1:53:ce:5f:a9:b6:
fc:16:f8:9b:1a:88:f4:ea:b5:b4:0a:40:8b:be:aa:
f4:ad:e0:bd:3f:1b:60:3c:ea:fd:be:ea:0e:9f:a2:
78:99:de:7b:0e:b9:98:e8:f8:05:53:06:da:be:b7:
ef:0e:40:8f:d8:c6:2d:8e:70:00:33:b0:f6:f1:a6:
cc:64:61:6a:7f:ae:ff:88:43:2c:b2:c7:15:8c:38:
b8:d3:31:78:2e:00:c5:61:4a:08:bf:b1:7c:72:21:
73:5f:04:69:9e:1a:f6:4a:97:48:6c:15:a6:16:28:
c3:43:fa:dd:69:97:09:56:49:d2:4c:ed:e2:4f:65:
7c:ec:4a:d2:72:4f:06:54:9c:68:bf:4b:86:bd:35:
4d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B0:F6:A2:10:45:2B:7D:33:98:9C:48:8D:A6:93:CF:4E:51:31:49
X509v3 Authority Key Identifier:
keyid:C9:ED:4B:76:76:E3:F5:A5:B1:F8:A6:A0:DD:7E:22:1B:63:E5:34:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:9b:c2:fc:ba:82:de:de:40:35:c0:0a:b4:2b:28:15:71:48:
d5:ad:31:1a:fe:62:a3:45:60:fb:33:71:44:c7:1b:46:04:84:
d3:04:e8:e2:f3:9a:6d:f4:37:38:84:49:c5:63:3e:78:87:46:
d3:fb:80:ec:fe:45:01:23:27:d9:59:2b:e0:28:91:93:c7:05:
47:16:1a:7a:17:3a:b3:b3:fa:8e:30:8c:36:d6:ea:cb:4e:a0:
99:dd:58:d8:85:8a:13:c9:fe:83:4e:12:f8:9a:64:76:7b:e1:
62:83:46:a6:dc:be:c0:a0:5f:1a:2f:4b:94:3b:84:9f:0e:f5:
eb:d7:9b:a7:ba:92:18:ef:83:ed:a0:4a:2c:8e:0f:fd:45:a4:
47:bd:8c:05:56:20:47:75:99:ba:e7:25:30:5c:d5:f1:4e:41:
83:64:19:45:5b:a3:9b:02:c2:8c:18:cc:6c:f5:c7:d1:24:5a:
85:27:30:76:4a:40:75:3e:2b:24:f9:01:c9:e3:30:47:77:d0:
59:68:a3:06:9e:1b:88:e9:6e:d8:52:5b:21:be:e3:5b:d9:4d:
5c:3b:cf:83:05:6d:bd:d6:4c:a9:e1:91:b3:f8:73:17:38:60:
9e:13:78:86:e3:4b:74:3a:17:da:fa:bc:41:33:ba:9e:d6:fe:
09:ae:e8:f9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDJBQ0YxMTAvBgNVBAUTKEM5RUQ0Qjc2NzZFM0Y1QTVCMUY4QTZBMEREN0UyMjFC
NjNFNTM0QUIwHhcNMjUwMTMwMjAwMjIwWhcNMjUwMjA2MjAwMjIwWjAYMRYwFAYD
VQQDEw02NzliZGFjZC03OWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5zur6Ry63KcPWH2paZRFuhEfTUnG573ZOmvvhR41yeyyd4y0WSkru4FRJt28
AcWZZdTw5vR5c5hrfzcRsrNq2DNj8Ol+KUd1IMGc0j7wepRXI/yMyubK2K8MluCR
Il3E+TgD4cpjJwTuZ9y2BQayd3TRU85fqbb8FvibGoj06rW0CkCLvqr0reC9Pxtg
POr9vuoOn6J4md57DrmY6PgFUwbavrfvDkCP2MYtjnAAM7D28abMZGFqf67/iEMs
sscVjDi40zF4LgDFYUoIv7F8ciFzXwRpnhr2SpdIbBWmFijDQ/rdaZcJVknSTO3i
T2V87ErSck8GVJxov0uGvTVNZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+w9qIQ
RSt9M5icSI2mk89OUTFJMB8GA1UdIwQYMBaAFMntS3Z24/WlsfimoN1+Ihtj5TSr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkFDRi81QUM2MkIyQTcz
RTMxMUVBOUI1OTQzNkVDNEY5QUUwMi95ZTFMZG5iajlhV3gtS2FnM1g0aUcyUGxO
S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3llMUxkbmJqOWFXeC1LYWczWDRpRzJQbE5Lcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MkFDRi81QUM2MkIyQTczRTMxMUVBOUI1OTQzNkVDNEY5QUUwMi95ZTFMZG5iajlh
V3gtS2FnM1g0aUcyUGxOS3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBCm8L8uoLe3kA1wAq0KygVcUjVrTEa/mKjRWD7M3FExxtGBITTBOji
85pt9Dc4hEnFYz54h0bT+4Ds/kUBIyfZWSvgKJGTxwVHFhp6Fzqzs/qOMIw21urL
TqCZ3VjYhYoTyf6DThL4mmR2e+Fig0am3L7AoF8aL0uUO4SfDvXr15unupIY74Pt
oEosjg/9RaRHvYwFViBHdZm65yUwXNXxTkGDZBlFW6ObAsKMGMxs9cfRJFqFJzB2
SkB1Pisk+QHJ4zBHd9BZaKMGnhuI6W7YUlshvuNb2U1cO8+DBW291kyp4ZGz+HMX
OGCeE3iG40t0Ohfa+rxBM7qe1v4Jruj5
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:13:58 2025 by rpki-client