Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft
File: 4G_oQca7SYofv2fuOqjIqcU4fQ8.mft (raw, json)
Hash identifier: AvUbMEFAHxeaB9JlRipJEO1AXI7K8+ygpl8Qwjh6VKk=
Subject key identifier: FD:78:A8:8B:BA:10:95:9C:F2:09:08:16:1B:2F:1F:BF:A6:F0:CC:52
Authority key identifier: E0:6F:E8:41:C6:BB:49:8A:1F:BF:67:EE:3A:A8:C8:A9:C5:38:7D:0F
Certificate issuer: /CN=A91D34D0/serialNumber=E06FE841C6BB498A1FBF67EE3AA8C8A9C5387D0F
Certificate serial: 69
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft
Manifest number: 67
Signing time: Fri 31 Jan 2025 06:03:08 +0000
Manifest this update: Fri 31 Jan 2025 06:03:08 +0000
Manifest next update: Fri 07 Feb 2025 06:03:08 +0000
Files and hashes: 1: 4G_oQca7SYofv2fuOqjIqcU4fQ8.crl (hash: lRIr1yRY0em5nN/HdTlP9QbTKKR9Bmu4eQLMAbMQatc=)
2: 47C532D045B911EF93633071C4F9AE02.roa (hash: wnnmQPYTxqkM9WvnTTi4MEpEuQ7gabJzkmyVQ4uhwWk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D34D0/serialNumber=E06FE841C6BB498A1FBF67EE3AA8C8A9C5387D0F
Validity
Not Before: Jan 31 06:03:08 2025 GMT
Not After : Feb 7 06:03:08 2025 GMT
Subject: CN=679c679c-11f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ef:a8:7b:16:42:30:0d:4e:d8:ef:18:1d:e4:
e2:c9:57:f4:f0:fd:e0:b8:95:86:b5:a7:93:79:9e:
e8:ac:df:85:93:74:fd:a3:95:4c:b8:b5:bc:56:6e:
22:2e:9c:e2:55:74:b7:b2:0d:50:e9:30:f1:21:df:
38:c2:44:ee:4e:44:c5:26:d7:2f:f7:d5:05:99:ca:
9b:88:77:be:37:27:06:47:e4:99:d8:d9:22:c4:7a:
2d:44:b9:7e:2c:67:1a:fb:55:14:04:40:93:21:03:
27:2f:24:c7:38:c9:97:87:1c:27:f1:41:4b:fc:52:
d2:81:fe:0a:c5:8f:a2:b2:17:1a:9f:4b:ab:87:6f:
68:81:40:f6:d6:27:1d:ed:61:da:14:0d:f6:2a:82:
4d:fd:3b:4d:08:25:53:24:30:e0:d8:b9:c0:14:f9:
98:b4:25:06:4c:0a:f5:a7:c9:08:65:c8:5f:cd:0d:
23:63:aa:76:5b:19:94:42:92:8f:9b:9f:f6:ae:b3:
38:a8:3e:b3:d0:de:67:73:40:97:a6:fd:ef:84:58:
01:42:21:34:32:81:41:b8:27:31:f8:8c:ca:9b:d0:
66:e3:64:75:4a:ad:0a:c3:41:ed:8a:48:46:ba:b2:
8a:d1:fe:6d:1e:a2:23:45:90:19:96:8c:c3:0b:6a:
31:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:78:A8:8B:BA:10:95:9C:F2:09:08:16:1B:2F:1F:BF:A6:F0:CC:52
X509v3 Authority Key Identifier:
keyid:E0:6F:E8:41:C6:BB:49:8A:1F:BF:67:EE:3A:A8:C8:A9:C5:38:7D:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:5c:8d:cc:67:a8:e8:63:d3:20:39:ed:d0:da:6b:23:68:87:
3e:34:a5:6b:0a:22:cc:02:37:20:71:2b:fe:2b:1f:5e:96:1e:
9a:f4:ab:d2:13:d8:f6:80:69:6b:80:8c:64:72:24:cd:76:ca:
f5:54:b1:ef:c2:2e:06:ea:a5:df:0a:77:03:a4:ba:73:7a:95:
d0:a7:8c:9e:65:60:bf:81:6c:c8:2d:51:e4:0a:c3:70:00:08:
61:88:92:31:e1:a5:38:9d:cd:21:f0:8a:6b:14:93:7e:70:3f:
41:6b:45:cb:40:f6:18:56:41:0d:f0:69:c4:33:d4:38:07:e8:
cf:49:fd:11:05:ee:2b:6a:2d:23:99:8b:b2:c9:d3:fe:09:92:
49:70:fd:eb:ba:8c:6a:ff:50:8b:00:46:6c:00:68:ec:1a:33:
1c:57:f5:6b:ce:3f:11:78:39:3e:62:59:45:e8:3f:72:dc:f0:
4d:60:a9:f8:10:f4:67:b3:e0:11:96:63:d2:80:ca:7c:55:65:
51:a0:ae:f5:9f:62:2b:f3:48:80:ad:5d:80:06:cc:34:1a:8f:
de:f7:93:bf:69:b4:d1:fb:70:8b:6d:18:96:06:66:54:ed:7c:
fc:4b:5d:9e:e4:45:5c:08:a5:7c:62:43:63:f8:6c:a9:b3:00:
5e:73:d7:ed
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
MzREMDExMC8GA1UEBRMoRTA2RkU4NDFDNkJCNDk4QTFGQkY2N0VFM0FBOEM4QTlD
NTM4N0QwRjAeFw0yNTAxMzEwNjAzMDhaFw0yNTAyMDcwNjAzMDhaMBgxFjAUBgNV
BAMTDTY3OWM2NzljLTExZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDn76h7FkIwDU7Y7xgd5OLJV/Tw/eC4lYa1p5N5nuis34WTdP2jlUy4tbxWbiIu
nOJVdLeyDVDpMPEh3zjCRO5ORMUm1y/31QWZypuId743JwZH5JnY2SLEei1EuX4s
Zxr7VRQEQJMhAycvJMc4yZeHHCfxQUv8UtKB/grFj6KyFxqfS6uHb2iBQPbWJx3t
YdoUDfYqgk39O00IJVMkMODYucAU+Zi0JQZMCvWnyQhlyF/NDSNjqnZbGZRCko+b
n/auszioPrPQ3mdzQJem/e+EWAFCITQygUG4JzH4jMqb0GbjZHVKrQrDQe2KSEa6
sorR/m0eoiNFkBmWjMMLajENAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/Xioi7oQ
lZzyCQgWGy8fv6bwzFIwHwYDVR0jBBgwFoAU4G/oQca7SYofv2fuOqjIqcU4fQ8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQzNEQwL0VDRjgwRjg2NDVC
NzExRUZBM0Q5QTA0OUM0RjlBRTAyLzRHX29RY2E3U1lvZnYyZnVPcWpJcWNVNGZR
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvNEdfb1FjYTdTWW9mdjJmdU9xaklxY1U0ZlE4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQz
NEQwL0VDRjgwRjg2NDVCNzExRUZBM0Q5QTA0OUM0RjlBRTAyLzRHX29RY2E3U1lv
ZnYyZnVPcWpJcWNVNGZROC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAGlcjcxnqOhj0yA57dDaayNohz40pWsKIswCNyBxK/4rH16WHpr0q9IT
2PaAaWuAjGRyJM12yvVUse/CLgbqpd8KdwOkunN6ldCnjJ5lYL+BbMgtUeQKw3AA
CGGIkjHhpTidzSHwimsUk35wP0FrRctA9hhWQQ3wacQz1DgH6M9J/REF7itqLSOZ
i7LJ0/4Jkklw/eu6jGr/UIsARmwAaOwaMxxX9WvOPxF4OT5iWUXoP3Lc8E1gqfgQ
9Gez4BGWY9KAynxVZVGgrvWfYivzSICtXYAGzDQaj973k79ptNH7cIttGJYGZlTt
fPxLXZ7kRVwIpXxiQ2P4bKmzAF5z1+0=
-----END CERTIFICATE-----
Generated at Tue Apr 29 23:37:38 2025 by rpki-client