Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
File: raez5kKEQOUk2gaDhqHt8yH4gR4.mft (raw, json)
Hash identifier: 7bokbbPj0D12YSKGkwL3/qQ70lU6wvfdUwd6UK5HlMY=
Subject key identifier: FD:08:0F:A8:F5:BA:75:F9:E0:07:BB:F6:09:B4:5F:2B:19:A2:CC:6A
Authority key identifier: AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E
Certificate issuer: /CN=A91D7103/serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E
Certificate serial: 0113
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
Manifest number: 010F
Signing time: Fri 31 Jan 2025 04:02:38 +0000
Manifest this update: Fri 31 Jan 2025 04:02:37 +0000
Manifest next update: Fri 07 Feb 2025 04:02:37 +0000
Files and hashes: 1: raez5kKEQOUk2gaDhqHt8yH4gR4.crl (hash: LQTULKTfFOhTDXHHU4a716sUoGtI9gUfT9xbKymFqbM=)
2: EFB54FEC42D211EE9D8A0832C4F9AE02.roa (hash: tNlqnTYXK/FVcXJJVdKao/xTVsvmNPHSSjgb9yu5e3k=)
3: 1E35039C42D511EEAE5F803AC4F9AE02.roa (hash: hdZa/uU6R1KyL95TVJPIwe+LkDp1/9Z9cxgyNi7o3uo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 275 (0x113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7103/serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E
Validity
Not Before: Jan 31 04:02:37 2025 GMT
Not After : Feb 7 04:02:37 2025 GMT
Subject: CN=679c4b5e-3446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c7:2d:c9:42:5e:68:40:08:72:b1:8f:97:9d:
db:9e:80:c6:2b:f7:41:6c:b7:0a:d2:a7:2c:c7:db:
04:c8:b0:11:f2:57:c6:29:fa:18:89:43:5c:6a:45:
21:b8:c1:65:30:b1:1f:fd:77:a8:a0:01:3c:1d:e1:
53:69:d1:67:f4:50:21:eb:92:3b:b2:5d:0f:c6:f2:
83:b6:cb:e5:8b:69:af:ab:91:e9:a8:a5:f5:7b:8f:
57:c0:f4:42:ae:72:8b:ec:53:c1:6e:9c:2e:c5:15:
a0:55:9e:42:7d:a6:63:0f:4e:de:93:ff:66:6c:b1:
bf:af:d8:b3:13:9a:55:ef:4b:6f:11:56:0b:2a:99:
22:05:c8:b6:1c:e2:20:5c:92:98:39:32:fc:e4:81:
27:db:4f:5f:23:2c:ec:a6:0e:9b:0e:cb:df:f3:86:
b9:fd:36:04:be:04:e2:ae:17:ff:27:fb:51:ba:1c:
3e:f3:f3:8a:c4:41:d1:46:a1:29:f3:7f:b3:8c:67:
b7:42:b7:ea:17:d6:0c:13:dd:43:6b:4c:f7:3f:30:
0e:19:75:d1:53:74:01:6f:34:83:bc:7c:38:23:61:
a3:e5:f3:19:58:29:28:cc:aa:5b:16:4d:dd:fb:70:
69:61:b9:80:2f:69:36:2b:65:ff:84:c0:52:35:de:
b5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:08:0F:A8:F5:BA:75:F9:E0:07:BB:F6:09:B4:5F:2B:19:A2:CC:6A
X509v3 Authority Key Identifier:
keyid:AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ef:21:24:83:3b:6b:52:ff:39:39:87:5a:5b:64:53:34:cb:26:
0f:6e:3f:b3:e7:ab:9f:e3:86:36:1f:d3:89:00:7d:d6:ea:98:
b4:5d:cb:4b:6c:43:a0:93:34:6c:43:1d:13:70:3b:36:37:80:
a7:ca:53:c1:11:ec:0c:66:8c:ac:dd:8a:5f:20:92:1f:f2:7b:
24:98:f1:0b:c3:83:59:e8:a3:6a:61:2b:06:84:7d:cc:1f:7f:
9e:d7:2b:52:3f:f6:1c:8f:b6:cc:35:ce:47:55:be:eb:23:44:
fa:cf:d7:a0:d1:75:63:85:29:48:40:7b:f7:61:c5:ac:4d:56:
04:29:52:a8:29:bd:be:fb:d4:d7:0b:18:de:e7:71:79:23:79:
79:53:3a:b3:d8:87:de:a8:e7:aa:f6:b2:88:b6:0e:e9:81:9f:
0a:f5:08:85:f8:b4:98:18:69:71:13:9f:65:91:10:46:44:63:
d0:6e:58:cb:cf:28:0a:14:cc:ad:68:15:26:79:e9:99:b4:11:
d8:5c:01:64:39:58:e9:b0:8d:0a:a6:12:30:c1:77:1e:92:da:
4b:8a:59:a3:bb:9f:ce:cd:d7:2e:61:df:14:a0:c9:c4:61:d7:
e0:e5:96:4c:b4:a5:49:e4:7d:f1:7e:99:56:b4:b9:96:81:2c:
89:40:cc:fe
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDcxMDMxMTAvBgNVBAUTKEFEQTdCM0U2NDI4NDQwRTUyNERBMDY4Mzg2QTFFREYz
MjFGODgxMUUwHhcNMjUwMTMxMDQwMjM3WhcNMjUwMjA3MDQwMjM3WjAYMRYwFAYD
VQQDEw02NzljNGI1ZS0zNDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2cctyUJeaEAIcrGPl53bnoDGK/dBbLcK0qcsx9sEyLAR8lfGKfoYiUNcakUh
uMFlMLEf/XeooAE8HeFTadFn9FAh65I7sl0PxvKDtsvli2mvq5HpqKX1e49XwPRC
rnKL7FPBbpwuxRWgVZ5CfaZjD07ek/9mbLG/r9izE5pV70tvEVYLKpkiBci2HOIg
XJKYOTL85IEn209fIyzspg6bDsvf84a5/TYEvgTirhf/J/tRuhw+8/OKxEHRRqEp
83+zjGe3QrfqF9YME91Da0z3PzAOGXXRU3QBbzSDvHw4I2Gj5fMZWCkozKpbFk3d
+3BpYbmAL2k2K2X/hMBSNd61RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0ID6j1
unX54Ae79gm0XysZosxqMB8GA1UdIwQYMBaAFK2ns+ZChEDlJNoGg4ah7fMh+IEe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzEwMy83QUI4MTEyQTQy
RDIxMUVFQjdDNEQwMUVDNEY5QUUwMi9yYWV6NWtLRVFPVWsyZ2FEaHFIdDh5SDRn
UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JhZXo1a0tFUU9VazJnYURocUh0OHlINGdSNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NzEwMy83QUI4MTEyQTQyRDIxMUVFQjdDNEQwMUVDNEY5QUUwMi9yYWV6NWtLRVFP
VWsyZ2FEaHFIdDh5SDRnUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDvISSDO2tS/zk5h1pbZFM0yyYPbj+z56uf44Y2H9OJAH3W6pi0XctL
bEOgkzRsQx0TcDs2N4CnylPBEewMZoys3YpfIJIf8nskmPELw4NZ6KNqYSsGhH3M
H3+e1ytSP/Ycj7bMNc5HVb7rI0T6z9eg0XVjhSlIQHv3YcWsTVYEKVKoKb2++9TX
Cxje53F5I3l5Uzqz2IfeqOeq9rKItg7pgZ8K9QiF+LSYGGlxE59lkRBGRGPQbljL
zygKFMytaBUmeemZtBHYXAFkOVjpsI0KphIwwXcektpLilmju5/OzdcuYd8UoMnE
Ydfg5ZZMtKVJ5H3xfplWtLmWgSyJQMz+
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:01:08 2025 by rpki-client