Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
File: Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft (raw, json)
Hash identifier: YyMskppo4DpYKYGOivlh1lpuh6yHM3nTYgc4MkrdLDQ=
Subject key identifier: F5:05:1B:19:33:B2:32:21:8D:BC:7B:57:54:19:60:42:C2:E4:65:CC
Authority key identifier: 15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C
Certificate issuer: /CN=A91D61DF/serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C
Certificate serial: 012F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
Manifest number: 012A
Signing time: Fri 31 Jan 2025 03:46:59 +0000
Manifest this update: Fri 31 Jan 2025 03:46:58 +0000
Manifest next update: Fri 07 Feb 2025 03:46:58 +0000
Files and hashes: 1: Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl (hash: o204XHUavzdpd74Mxcvh8KvBxecb6YQVuLwT3LWj6X4=)
2: 1D52E8E860D711EEA524AE64C4F9AE02.roa (hash: dz8+3qu5h5r0R4jtpUTCSApBTzOeCaTV8lpsEpR+XFI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303 (0x12f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D61DF/serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C
Validity
Not Before: Jan 31 03:46:58 2025 GMT
Not After : Feb 7 03:46:58 2025 GMT
Subject: CN=679c47b2-5bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cd:ac:78:04:1c:04:60:bf:63:7e:45:97:2c:
a3:cf:09:96:06:aa:b6:b4:6a:85:99:ce:0a:80:c0:
75:ab:52:bd:a2:7b:e7:9c:9c:12:0d:fd:21:42:5b:
59:a9:bc:11:6a:53:5f:78:62:b2:bc:87:2b:c8:11:
67:79:15:d5:dc:c2:45:d1:9a:36:3f:50:e3:7a:c2:
0a:0b:33:03:8b:ef:2f:23:60:ac:e9:31:9b:63:29:
69:7b:72:23:c0:7c:6c:8e:45:09:13:f9:c3:14:17:
5a:f1:ec:9d:f8:00:f3:6c:d1:ad:ed:27:c8:b0:7f:
76:72:f8:47:97:1f:8c:84:5b:18:3e:96:1d:6d:e0:
fd:76:39:88:18:a4:57:5b:b0:8d:87:40:82:da:a1:
a5:d3:27:0d:ed:77:25:f1:c5:88:45:21:a2:d7:ef:
01:d8:9d:ba:e4:0f:d7:4c:d2:07:28:09:e7:db:0a:
3e:79:49:5b:87:be:5b:71:c3:09:69:ea:40:c8:ea:
64:6f:76:12:cd:c4:78:da:54:c6:82:8c:6a:68:48:
f6:e2:73:5e:88:e1:91:29:60:d9:da:8c:cd:1f:0b:
26:07:16:ec:9f:ac:ed:0c:f4:f1:df:90:0b:13:bf:
c3:d5:95:96:bc:8f:b7:c4:3c:38:4b:f0:2e:40:28:
ec:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:05:1B:19:33:B2:32:21:8D:BC:7B:57:54:19:60:42:C2:E4:65:CC
X509v3 Authority Key Identifier:
keyid:15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:fd:34:9d:6e:5f:29:3f:87:ed:e6:63:76:65:b4:b9:9d:2a:
75:3d:0b:5c:99:e0:cb:e2:3a:b4:c2:3a:ff:51:57:46:e6:c5:
86:1e:48:f4:2f:95:29:64:7c:92:24:a0:7d:25:66:b1:56:83:
46:5a:db:2d:3b:9f:b5:79:94:18:ac:41:4a:01:30:20:b3:8e:
2e:76:ca:53:86:55:fc:66:b0:0e:23:70:9d:71:50:6c:56:91:
6c:60:2d:52:9c:7f:23:1a:b8:da:5a:9f:9d:23:9a:fc:64:13:
39:99:d1:d6:d9:6d:b4:a0:d3:6e:93:da:0c:11:2c:d4:a0:b8:
05:b7:45:bf:c0:ac:8e:01:94:3c:1c:5b:34:c4:5e:b0:35:ff:
af:96:45:d4:49:e9:d7:9c:a1:06:8b:ed:5e:8d:3b:02:6b:77:
be:8d:62:90:60:86:6d:a0:90:98:ae:07:ab:10:47:f9:a5:81:
fb:47:ab:da:4b:9b:b7:b0:11:72:9b:d6:49:8f:4d:86:a9:d2:
19:fd:85:5f:5a:a7:a6:41:d9:56:18:fd:71:5b:23:a3:34:11:
0e:4c:10:78:9c:66:f1:fa:2f:fe:39:49:2e:78:0c:c5:2c:07:
9d:c2:c8:bb:15:e2:39:e5:38:2b:7c:77:df:88:4e:a8:86:da:
95:af:62:f0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDYxREYxMTAvBgNVBAUTKDE1QkYyMTBCNzM3ODFENUNDMEJFOTlCRDM5RDcwQjJG
RUI0RUI4NkMwHhcNMjUwMTMxMDM0NjU4WhcNMjUwMjA3MDM0NjU4WjAYMRYwFAYD
VQQDEw02NzljNDdiMi01YmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv82seAQcBGC/Y35FlyyjzwmWBqq2tGqFmc4KgMB1q1K9onvnnJwSDf0hQltZ
qbwRalNfeGKyvIcryBFneRXV3MJF0Zo2P1DjesIKCzMDi+8vI2Cs6TGbYylpe3Ij
wHxsjkUJE/nDFBda8eyd+ADzbNGt7SfIsH92cvhHlx+MhFsYPpYdbeD9djmIGKRX
W7CNh0CC2qGl0ycN7Xcl8cWIRSGi1+8B2J265A/XTNIHKAnn2wo+eUlbh75bccMJ
aepAyOpkb3YSzcR42lTGgoxqaEj24nNeiOGRKWDZ2ozNHwsmBxbsn6ztDPTx35AL
E7/D1ZWWvI+3xDw4S/AuQCjsUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPUFGxkz
sjIhjbx7V1QZYELC5GXMMB8GA1UdIwQYMBaAFBW/IQtzeB1cwL6ZvTnXCy/rTrhs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjFERi8wRDBDNUY3NDFD
NjYxMUVFOUExMzJCODRDNEY5QUUwMi9GYjhoQzNONEhWekF2cG05T2RjTEwtdE91
R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZiOGhDM040SFZ6QXZwbTlPZGNMTC10T3VHdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NjFERi8wRDBDNUY3NDFDNjYxMUVFOUExMzJCODRDNEY5QUUwMi9GYjhoQzNONEhW
ekF2cG05T2RjTEwtdE91R3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAM/TSdbl8pP4ft5mN2ZbS5nSp1PQtcmeDL4jq0wjr/UVdG5sWGHkj0
L5UpZHySJKB9JWaxVoNGWtstO5+1eZQYrEFKATAgs44udspThlX8ZrAOI3CdcVBs
VpFsYC1SnH8jGrjaWp+dI5r8ZBM5mdHW2W20oNNuk9oMESzUoLgFt0W/wKyOAZQ8
HFs0xF6wNf+vlkXUSenXnKEGi+1ejTsCa3e+jWKQYIZtoJCYrgerEEf5pYH7R6va
S5u3sBFym9ZJj02GqdIZ/YVfWqemQdlWGP1xWyOjNBEOTBB4nGbx+i/+OUkueAzF
LAedwsi7FeI55TgrfHffiE6ohtqVr2Lw
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:29:05 2025 by rpki-client