
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft
File: ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft (raw, json)
Hash identifier: g/4GiD3b288I0I0xHSviPJd/xnli5igNo3SJ2LQlZyQ=
Subject key identifier: 66:B3:8C:CE:77:38:44:F3:05:32:94:79:B9:42:FA:C3:14:6D:12:38
Authority key identifier: 6A:BF:EF:C8:34:19:11:6E:F3:4A:F3:A5:A7:FF:48:DE:03:BE:83:32
Certificate issuer: /CN=A91D4E45/serialNumber=6ABFEFC83419116EF34AF3A5A7FF48DE03BE8332
Certificate serial: 0638
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft
Manifest number: 0630
Signing time: Thu 30 Jan 2025 22:36:57 +0000
Manifest this update: Thu 30 Jan 2025 22:36:56 +0000
Manifest next update: Thu 06 Feb 2025 22:36:56 +0000
Files and hashes: 1: ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl (hash: ESE/VyeAEIC6UclTxldpjqzmzIdCel7C9AUxh1RZdIo=)
2: 1B25BF167FE111EBB6C0941AC4F9AE02.roa (hash: UCps9/WJGo9HkezcUcRKvCp07t2PRwHy6+kCIMyeCTk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1592 (0x638)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4E45/serialNumber=6ABFEFC83419116EF34AF3A5A7FF48DE03BE8332
Validity
Not Before: Jan 30 22:36:56 2025 GMT
Not After : Feb 6 22:36:56 2025 GMT
Subject: CN=679bff08-5063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bd:73:54:bb:08:76:cd:16:7d:9e:d9:22:29:
0d:5b:4e:c0:36:ab:17:53:e8:12:44:d9:51:9d:76:
c6:0e:7e:8a:c4:0a:44:c9:3e:18:6d:d3:8f:11:31:
4f:86:47:ed:6b:1d:9e:30:34:fd:74:28:cc:3a:b0:
fa:0c:7d:3e:da:f8:e4:82:71:1e:78:c9:bf:d1:88:
0c:71:20:a0:a6:b4:82:16:8a:93:3b:02:34:f2:5b:
05:07:ba:9e:82:21:fd:5f:02:bf:4b:a5:09:06:9c:
6d:82:ab:e0:51:1c:4e:3b:2f:9e:9b:a3:bd:bf:08:
99:d5:b2:65:6f:e4:38:62:99:dc:2c:7a:ca:dd:5c:
f3:46:49:e0:5d:7f:c6:d5:25:fd:1b:b4:42:dc:8e:
9d:22:46:61:b8:05:98:ff:97:9b:5a:e9:b2:5d:b6:
84:18:09:e0:9e:d2:19:3d:14:c4:cd:78:70:b3:29:
4f:ec:1a:22:64:cb:6d:8c:82:b5:b3:4b:3b:f1:21:
c8:89:c5:7b:3a:b7:fa:ac:4f:8a:25:54:7a:d7:f4:
c3:1b:bb:ec:ea:41:6d:d3:74:b5:53:c9:87:58:dd:
74:12:9b:e6:da:19:26:ab:82:e3:7e:4f:fb:b8:6e:
9c:16:5f:db:d3:8f:57:66:e5:c6:0d:9a:c4:4e:a0:
ae:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B3:8C:CE:77:38:44:F3:05:32:94:79:B9:42:FA:C3:14:6D:12:38
X509v3 Authority Key Identifier:
keyid:6A:BF:EF:C8:34:19:11:6E:F3:4A:F3:A5:A7:FF:48:DE:03:BE:83:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:40:37:e6:24:2f:f0:5f:70:1f:e7:28:1e:12:28:0a:fe:12:
bf:23:16:56:39:b1:9e:8b:8f:00:4e:04:c5:7e:5a:0e:41:2e:
cb:0e:36:c3:d4:a0:2e:3b:c6:4d:78:2d:6e:e4:2c:c8:1f:ea:
7e:b3:c3:41:c4:4f:66:80:be:03:04:16:a4:11:79:ff:6b:b1:
d3:14:cd:95:92:4c:b1:24:77:92:37:0d:8e:70:a5:88:73:ec:
52:40:a3:f8:37:12:03:fc:d6:13:57:ae:07:ae:f1:38:df:71:
57:10:6f:a0:b4:cf:f4:be:0b:bd:44:d6:51:63:cc:c6:27:f5:
0e:c3:26:2c:bc:6b:64:46:64:2a:10:db:47:6d:ce:ac:c6:80:
af:16:c9:a6:70:99:10:7f:f5:ab:14:6f:93:01:9a:5d:0b:39:
28:f6:5a:c2:d0:cf:d4:82:db:3c:dc:01:ae:f9:fa:6d:5d:6f:
b5:c9:f8:ec:55:72:15:86:22:85:4a:0f:cf:5b:8a:61:8e:aa:
16:30:94:39:db:c7:b3:57:49:e6:90:3f:87:9a:1f:3c:5c:60:
9a:55:0b:92:95:e0:9b:a6:71:98:ab:5f:ba:ae:b9:8a:56:7d:
f6:c7:af:71:71:c4:ba:38:d8:a3:2d:cb:00:f4:ce:04:a5:82:
d2:9c:cf:36
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDRFNDUxMTAvBgNVBAUTKDZBQkZFRkM4MzQxOTExNkVGMzRBRjNBNUE3RkY0OERF
MDNCRTgzMzIwHhcNMjUwMTMwMjIzNjU2WhcNMjUwMjA2MjIzNjU2WjAYMRYwFAYD
VQQDEw02NzliZmYwOC01MDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwL1zVLsIds0WfZ7ZIikNW07ANqsXU+gSRNlRnXbGDn6KxApEyT4YbdOPETFP
hkftax2eMDT9dCjMOrD6DH0+2vjkgnEeeMm/0YgMcSCgprSCFoqTOwI08lsFB7qe
giH9XwK/S6UJBpxtgqvgURxOOy+em6O9vwiZ1bJlb+Q4YpncLHrK3VzzRkngXX/G
1SX9G7RC3I6dIkZhuAWY/5ebWumyXbaEGAngntIZPRTEzXhwsylP7BoiZMttjIK1
s0s78SHIicV7Orf6rE+KJVR61/TDG7vs6kFt03S1U8mHWN10Epvm2hkmq4Ljfk/7
uG6cFl/b049XZuXGDZrETqCueQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGazjM53
OETzBTKUeblC+sMUbRI4MB8GA1UdIwQYMBaAFGq/78g0GRFu80rzpaf/SN4DvoMy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEU0NS9GOEYxQzE5NDdG
REUxMUVCQTE4OENGMTRDNEY5QUUwMi9hcl92eURRWkVXN3pTdk9scF85STNnTy1n
ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FyX3Z5RFFaRVc3elN2T2xwXzlJM2dPLWd6SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NEU0NS9GOEYxQzE5NDdGREUxMUVCQTE4OENGMTRDNEY5QUUwMi9hcl92eURRWkVX
N3pTdk9scF85STNnTy1nekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAAQDfmJC/wX3Af5ygeEigK/hK/IxZWObGei48ATgTFfloOQS7LDjbD
1KAuO8ZNeC1u5CzIH+p+s8NBxE9mgL4DBBakEXn/a7HTFM2VkkyxJHeSNw2OcKWI
c+xSQKP4NxID/NYTV64HrvE433FXEG+gtM/0vgu9RNZRY8zGJ/UOwyYsvGtkRmQq
ENtHbc6sxoCvFsmmcJkQf/WrFG+TAZpdCzko9lrC0M/Ugts83AGu+fptXW+1yfjs
VXIVhiKFSg/PW4phjqoWMJQ528ezV0nmkD+Hmh88XGCaVQuSleCbpnGYq1+6rrmK
Vn32x69xccS6ONijLcsA9M4EpYLSnM82
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:14:54 2025 by rpki-client