Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4D97/1F6146E0567811EC922A3567C4F9AE02/cn1G1OfHecpnYSxgtGVS68IZkPs.mft
File: cn1G1OfHecpnYSxgtGVS68IZkPs.mft (raw, json)
Hash identifier: INyWOw8wbhckiS0kk123AJQFxgpMrlixH+PxG7UR69Y=
Subject key identifier: BF:C4:28:FD:43:E7:C5:11:59:B9:F4:5A:E6:59:51:32:33:40:99:0F
Authority key identifier: 72:7D:46:D4:E7:C7:79:CA:67:61:2C:60:B4:65:52:EB:C2:19:90:FB
Certificate issuer: /CN=A91D4D97/serialNumber=727D46D4E7C779CA67612C60B46552EBC21990FB
Certificate serial: 0412
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cn1G1OfHecpnYSxgtGVS68IZkPs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4D97/1F6146E0567811EC922A3567C4F9AE02/cn1G1OfHecpnYSxgtGVS68IZkPs.mft
Manifest number: 040E
Signing time: Fri 31 Jan 2025 00:28:35 +0000
Manifest this update: Fri 31 Jan 2025 00:28:35 +0000
Manifest next update: Fri 07 Feb 2025 00:28:35 +0000
Files and hashes: 1: cn1G1OfHecpnYSxgtGVS68IZkPs.crl (hash: MvioZEy853cGLoWqhz04Pt4Yz7awoIDVIOHUayAKfok=)
2: A9E2BE54567B11ECB346816BC4F9AE02.roa (hash: TPVU1s6exIqwh/rpq/ezgL4ll5z3zJFyVmt+0YWYn8g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1042 (0x412)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4D97/serialNumber=727D46D4E7C779CA67612C60B46552EBC21990FB
Validity
Not Before: Jan 31 00:28:35 2025 GMT
Not After : Feb 7 00:28:35 2025 GMT
Subject: CN=679c1933-9138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cc:b9:a3:4d:24:43:1c:31:5f:37:97:7a:8c:
3c:15:e2:ee:02:33:ec:cd:3c:c8:0c:c3:d0:ba:bb:
f1:b3:23:85:5b:8f:76:bb:14:44:d3:39:1d:27:75:
17:1a:1c:5d:da:6c:de:0b:c6:cd:cd:52:7c:36:e0:
01:9a:42:71:ff:4f:37:d0:4d:d0:9a:35:eb:91:e5:
be:51:76:01:4d:5d:0e:26:b3:74:17:2f:ff:d0:82:
ce:3a:a1:ed:21:70:a6:6b:ec:a0:4d:4d:4e:dd:d1:
e7:46:57:ac:33:54:77:68:16:6e:e2:4c:f6:84:47:
f0:df:b6:d9:8b:bf:5b:13:f0:3d:29:b3:13:c2:b2:
48:7f:14:f0:42:11:8a:70:80:31:9b:04:79:6a:4c:
71:1c:22:61:11:47:f7:fb:68:a0:77:39:2c:6a:58:
4e:c6:0c:6a:1c:30:42:f7:97:4a:bc:ca:fe:77:eb:
46:17:15:06:6c:f7:f0:26:a7:0e:eb:4f:89:7c:11:
86:55:e4:9b:48:2c:e6:72:9a:e9:98:1b:81:0c:f7:
92:db:02:a5:dd:3b:23:f2:92:ed:d3:0a:30:ba:08:
28:55:c9:35:c0:18:2e:b0:a9:43:d5:a1:03:be:0d:
47:fc:0b:29:bc:e0:43:f0:59:4a:07:11:fe:7b:a6:
1e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C4:28:FD:43:E7:C5:11:59:B9:F4:5A:E6:59:51:32:33:40:99:0F
X509v3 Authority Key Identifier:
keyid:72:7D:46:D4:E7:C7:79:CA:67:61:2C:60:B4:65:52:EB:C2:19:90:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4D97/1F6146E0567811EC922A3567C4F9AE02/cn1G1OfHecpnYSxgtGVS68IZkPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cn1G1OfHecpnYSxgtGVS68IZkPs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4D97/1F6146E0567811EC922A3567C4F9AE02/cn1G1OfHecpnYSxgtGVS68IZkPs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:ad:73:34:b9:08:f6:b3:6e:cb:bb:15:59:c0:b6:86:11:aa:
36:e1:28:70:32:25:ee:64:e5:fc:b2:42:6b:5a:9c:4a:14:6a:
bd:a9:c7:46:a5:5f:62:f0:59:b5:03:ae:59:d8:12:dc:83:0c:
80:ea:7b:34:08:54:cb:e2:d8:59:b8:13:ef:70:90:a5:48:65:
2e:3c:de:f1:8d:7a:51:9c:c0:97:48:7d:de:70:1d:76:a7:01:
9d:d9:aa:0a:82:61:97:5b:4e:cf:56:be:b4:04:3b:81:eb:b3:
fd:b5:e1:0c:5a:c9:e7:3f:04:97:65:18:1e:86:cb:f2:9d:77:
6b:fc:6e:c9:03:3d:41:52:22:ae:93:44:7a:f0:41:1e:89:69:
f2:f9:da:a8:e5:6c:05:a9:20:34:fb:84:1a:8a:e8:ef:e8:33:
f1:6a:a9:16:88:c8:28:57:90:2b:47:53:5f:f0:48:42:e1:0a:
86:86:2c:04:29:9d:c8:c8:63:a2:ed:d7:16:4e:21:55:d1:1a:
d9:41:5e:77:98:fe:63:e5:78:0a:80:3f:2a:00:c8:9c:32:71:
30:78:eb:83:c6:cb:3d:d8:14:8a:d9:91:40:7f:71:51:22:27:
5f:57:a4:35:d9:f6:de:22:ea:e3:67:9a:da:2d:d7:82:40:de:
23:5c:6c:b9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDREOTcxMTAvBgNVBAUTKDcyN0Q0NkQ0RTdDNzc5Q0E2NzYxMkM2MEI0NjU1MkVC
QzIxOTkwRkIwHhcNMjUwMTMxMDAyODM1WhcNMjUwMjA3MDAyODM1WjAYMRYwFAYD
VQQDEw02NzljMTkzMy05MTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA38y5o00kQxwxXzeXeow8FeLuAjPszTzIDMPQurvxsyOFW492uxRE0zkdJ3UX
Ghxd2mzeC8bNzVJ8NuABmkJx/0830E3QmjXrkeW+UXYBTV0OJrN0Fy//0ILOOqHt
IXCma+ygTU1O3dHnRlesM1R3aBZu4kz2hEfw37bZi79bE/A9KbMTwrJIfxTwQhGK
cIAxmwR5akxxHCJhEUf3+2igdzksalhOxgxqHDBC95dKvMr+d+tGFxUGbPfwJqcO
60+JfBGGVeSbSCzmcprpmBuBDPeS2wKl3Tsj8pLt0wowuggoVck1wBgusKlD1aED
vg1H/AspvOBD8FlKBxH+e6Ye0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL/EKP1D
58URWbn0WuZZUTIzQJkPMB8GA1UdIwQYMBaAFHJ9RtTnx3nKZ2EsYLRlUuvCGZD7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEQ5Ny8xRjYxNDZFMDU2
NzgxMUVDOTIyQTM1NjdDNEY5QUUwMi9jbjFHMU9mSGVjcG5ZU3hndEdWUzY4SVpr
UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NuMUcxT2ZIZWNwbllTeGd0R1ZTNjhJWmtQcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NEQ5Ny8xRjYxNDZFMDU2NzgxMUVDOTIyQTM1NjdDNEY5QUUwMi9jbjFHMU9mSGVj
cG5ZU3hndEdWUzY4SVprUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCFrXM0uQj2s27LuxVZwLaGEao24ShwMiXuZOX8skJrWpxKFGq9qcdG
pV9i8Fm1A65Z2BLcgwyA6ns0CFTL4thZuBPvcJClSGUuPN7xjXpRnMCXSH3ecB12
pwGd2aoKgmGXW07PVr60BDuB67P9teEMWsnnPwSXZRgehsvynXdr/G7JAz1BUiKu
k0R68EEeiWny+dqo5WwFqSA0+4Qaiujv6DPxaqkWiMgoV5ArR1Nf8EhC4QqGhiwE
KZ3IyGOi7dcWTiFV0RrZQV53mP5j5XgKgD8qAMicMnEweOuDxss92BSK2ZFAf3FR
IidfV6Q12fbeIurjZ5raLdeCQN4jXGy5
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:35:10 2025 by rpki-client