Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
File: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft (raw, json)
Hash identifier: Q0bC6PIZj0e9XKL6D8U7aV0S/Aba+38z66Zf3GURuhc=
Subject key identifier: DE:43:0A:77:D7:2F:C6:E7:49:E6:F1:19:EC:13:19:E0:BF:7B:B0:38
Authority key identifier: 4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92
Certificate issuer: /CN=A91D92FB/serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992
Certificate serial: 348F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
Manifest number: 346A
Signing time: Fri 31 Jan 2025 14:31:07 +0000
Manifest this update: Fri 31 Jan 2025 14:31:07 +0000
Manifest next update: Fri 07 Feb 2025 14:31:07 +0000
Files and hashes: 1: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl (hash: ai1haqzx4SM54D3py8r2GWjpcOakVI/kIPIF/FaliP0=)
2: F86E9DE46B9811ED9330AC4CC4F9AE02.roa (hash: NQ44ywkdXvwjY8pBPw8S7NRNivsvd48rEIIAsaIuTIc=)
3: 3712E24075D911E8A722EC33C4F9AE02.roa (hash: FdTUsXBXGlULvnBF3k+ULhUtZ8ZP1Y0Le1mnqhZZpPY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13455 (0x348f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D92FB/serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992
Validity
Not Before: Jan 31 14:31:07 2025 GMT
Not After : Feb 7 14:31:07 2025 GMT
Subject: CN=679cdeab-7ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:82:b9:cf:5c:f0:34:e3:8e:33:c3:de:00:bb:
78:f1:96:5e:6c:5c:0b:71:48:ba:28:8a:2d:2d:b2:
2c:64:dc:7e:c1:bb:6d:f7:72:12:e0:d7:f6:f4:ba:
62:c0:5b:ec:7e:05:4b:0a:55:a9:78:ae:04:2f:cd:
8c:f5:22:93:7f:94:92:fc:a7:13:4a:be:8d:32:c7:
45:5d:31:45:fa:8a:b1:08:4a:52:a6:68:0a:bf:bf:
8a:92:e6:42:22:d3:d9:5a:28:bd:b5:d2:e2:b5:2a:
f6:b5:f8:d5:48:b5:e7:2d:78:0e:91:82:8f:79:2f:
2b:92:9b:c3:ca:4b:46:c6:86:17:82:c6:33:69:0f:
59:a4:15:10:de:fd:74:00:4a:f5:4c:0b:e8:d6:9c:
c9:92:c5:e1:8f:96:63:6a:b7:50:c8:a1:94:6a:a3:
36:64:9d:ce:0b:79:d4:a4:cb:85:c3:65:63:a2:c0:
64:e6:4a:6b:9f:9e:7c:4c:3e:35:45:ad:a5:31:0b:
69:a3:10:f4:e7:5d:b1:71:ce:ad:dc:11:e5:d5:69:
29:0e:f0:02:fd:9a:67:71:56:c4:89:5e:0c:1b:5e:
6f:1e:f0:d1:2b:ab:0f:bd:af:82:05:d1:65:97:c7:
3d:92:54:c7:6a:84:72:a1:46:0a:1c:98:a2:ee:72:
02:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:43:0A:77:D7:2F:C6:E7:49:E6:F1:19:EC:13:19:E0:BF:7B:B0:38
X509v3 Authority Key Identifier:
keyid:4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:79:c0:e5:84:19:8e:78:e7:f5:21:5f:b8:88:bf:d7:19:e3:
2b:dd:26:3b:21:90:1a:b3:35:9c:55:16:bf:f6:02:f9:11:b6:
6f:28:88:64:e6:31:3c:ab:b0:f2:29:60:39:0c:89:09:cf:ff:
5c:88:4c:81:39:4d:86:77:21:e9:bd:ce:b1:57:15:3a:1f:74:
6b:5d:e3:7f:47:71:06:f2:d0:82:f2:cd:9c:ec:cb:e9:bb:f9:
bc:5f:da:8f:b4:55:30:5e:bf:9a:01:b5:b0:08:0f:37:4a:27:
11:fa:dc:32:9d:44:05:7f:46:6a:de:57:94:e7:8f:21:b1:f9:
77:68:36:cc:b4:4f:d4:87:22:a9:7c:69:1f:c2:6d:59:66:32:
28:99:76:53:e3:76:1d:ac:6a:a4:f1:f4:ad:1d:8a:15:25:fb:
3d:97:a1:e5:49:92:ee:58:e4:48:c9:07:a6:34:11:0b:74:5c:
40:13:2e:a0:bd:8d:ac:d5:eb:d7:ed:e1:07:1c:37:ec:bb:18:
0f:8f:90:75:09:c2:9c:84:90:78:ef:73:eb:4f:53:4d:fa:b3:
8d:28:4f:fa:1c:e3:5d:31:9f:2b:da:f1:89:87:6c:f6:b3:39:
9a:3a:b2:03:68:f1:63:5e:0e:dd:a0:17:7c:ee:44:a1:94:3d:
a1:e9:e7:55
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDkyRkIxMTAvBgNVBAUTKDRDMzZGODEyRTc2RDgyN0VDRTZFNTlCRDE1NjA1ODVD
NTFFQ0Q5OTIwHhcNMjUwMTMxMTQzMTA3WhcNMjUwMjA3MTQzMTA3WjAYMRYwFAYD
VQQDEw02NzljZGVhYi03Y2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3IK5z1zwNOOOM8PeALt48ZZebFwLcUi6KIotLbIsZNx+wbtt93IS4Nf29Lpi
wFvsfgVLClWpeK4EL82M9SKTf5SS/KcTSr6NMsdFXTFF+oqxCEpSpmgKv7+KkuZC
ItPZWii9tdLitSr2tfjVSLXnLXgOkYKPeS8rkpvDyktGxoYXgsYzaQ9ZpBUQ3v10
AEr1TAvo1pzJksXhj5ZjardQyKGUaqM2ZJ3OC3nUpMuFw2VjosBk5kprn558TD41
Ra2lMQtpoxD0512xcc6t3BHl1WkpDvAC/ZpncVbEiV4MG15vHvDRK6sPva+CBdFl
l8c9klTHaoRyoUYKHJii7nICBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN5DCnfX
L8bnSebxGewTGeC/e7A4MB8GA1UdIwQYMBaAFEw2+BLnbYJ+zm5ZvRVgWFxR7NmS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTJGQi8zMjdGQzZCMjFE
ODgxMUUyOThGM0EzRTAwOEIwMkNEMi9URGI0RXVkdGduN09ibG05RldCWVhGSHMy
WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1REYjRFdWR0Z243T2JsbTlGV0JZWEZIczJaSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OTJGQi8zMjdGQzZCMjFEODgxMUUyOThGM0EzRTAwOEIwMkNEMi9URGI0RXVkdGdu
N09ibG05RldCWVhGSHMyWkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCgecDlhBmOeOf1IV+4iL/XGeMr3SY7IZAaszWcVRa/9gL5EbZvKIhk
5jE8q7DyKWA5DIkJz/9ciEyBOU2GdyHpvc6xVxU6H3RrXeN/R3EG8tCC8s2c7Mvp
u/m8X9qPtFUwXr+aAbWwCA83SicR+twynUQFf0Zq3leU548hsfl3aDbMtE/UhyKp
fGkfwm1ZZjIomXZT43YdrGqk8fStHYoVJfs9l6HlSZLuWORIyQemNBELdFxAEy6g
vY2s1evX7eEHHDfsuxgPj5B1CcKchJB473PrT1NN+rONKE/6HONdMZ8r2vGJh2z2
szmaOrIDaPFjXg7doBd87kShlD2h6edV
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:43:26 2025 by rpki-client