Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft
File: gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft (raw, json)
Hash identifier: p7PoGgmaNpwCWsfew33+/n/B3tMWguvpu4IOPVIKAso=
Subject key identifier: 9B:B3:E3:CC:9D:E7:D9:01:AC:BA:F9:C1:7A:E4:2A:C2:38:58:19:26
Authority key identifier: 80:84:01:72:3C:2E:41:84:56:AF:9A:0F:B2:5F:8C:32:1C:49:70:CB
Certificate issuer: /CN=A91D959F/serialNumber=808401723C2E418456AF9A0FB25F8C321C4970CB
Certificate serial: 0741
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft
Manifest number: 073C
Signing time: Thu 30 Jan 2025 21:36:05 +0000
Manifest this update: Thu 30 Jan 2025 21:36:05 +0000
Manifest next update: Thu 06 Feb 2025 21:36:05 +0000
Files and hashes: 1: gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl (hash: Kbqq3t2M4WvMnGWdUycWyHcMTdYJ2USnkVq1XOIjvO0=)
2: F75AEA8A13F111EB950DBC4EC4F9AE02.roa (hash: E7aUJSWkWctXuYXSTwS30+xAR7ERalIEla2LT/i5k8k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1857 (0x741)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D959F/serialNumber=808401723C2E418456AF9A0FB25F8C321C4970CB
Validity
Not Before: Jan 30 21:36:05 2025 GMT
Not After : Feb 6 21:36:05 2025 GMT
Subject: CN=679bf0c5-a17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bd:54:45:05:5a:47:97:47:96:30:06:ac:68:
ea:34:53:62:99:15:5f:3a:05:50:51:db:9b:2c:a5:
7d:2c:f3:38:26:06:27:bc:b8:ac:d9:d3:28:95:55:
13:2e:f6:7e:db:75:33:d5:5e:8d:c1:eb:7e:29:ed:
1e:61:60:8c:b4:6b:7e:3b:c7:eb:7e:f8:96:e2:55:
a5:6e:17:b5:db:e3:db:17:70:c8:39:85:ef:d1:03:
35:53:ce:f3:54:ff:13:ef:22:f5:3e:63:ab:c8:e0:
5a:62:94:a7:58:58:3c:7e:61:7f:bd:68:b9:78:e4:
fb:b4:0d:86:6f:d8:24:e2:82:fe:12:49:d5:dd:5b:
b1:5b:d0:1a:88:55:79:51:ff:bc:5e:10:f2:6e:5f:
e1:9c:fa:f0:fb:d1:6a:0e:11:59:28:45:e6:69:a5:
ef:26:7f:c0:ff:1b:1a:12:f8:f3:1d:6b:55:52:57:
f8:8a:b2:46:f8:86:f3:9b:49:78:6f:c3:64:17:b2:
27:44:5c:14:0b:a0:f3:a5:58:6a:d3:c2:57:16:0c:
74:01:18:97:ce:55:41:66:b0:2c:8b:ff:95:42:4a:
a2:b7:c7:73:c4:f7:e9:d2:6a:9b:f6:b5:b8:9e:92:
35:54:72:cc:29:db:9d:06:50:29:3d:84:8a:be:44:
2f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B3:E3:CC:9D:E7:D9:01:AC:BA:F9:C1:7A:E4:2A:C2:38:58:19:26
X509v3 Authority Key Identifier:
keyid:80:84:01:72:3C:2E:41:84:56:AF:9A:0F:B2:5F:8C:32:1C:49:70:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:fb:88:6a:f2:9d:00:dd:22:11:d6:43:d2:4f:74:1c:ea:90:
08:98:9d:bb:78:61:6b:a3:cf:9e:3f:2f:04:34:a9:68:57:39:
64:a7:0e:3b:e6:6f:54:e0:af:92:7f:3b:ce:50:6a:de:43:76:
36:9c:a7:b2:cd:18:5a:b9:84:08:8a:81:2c:8f:f1:5f:8d:09:
9f:8c:f3:54:08:17:9e:8e:bb:fe:84:dc:27:d2:8b:f1:c6:48:
c5:5b:50:03:61:a3:a4:af:12:ef:f1:f7:01:52:11:6d:64:2d:
75:ee:36:fe:80:95:ae:0e:3f:a6:20:0a:6c:52:36:0d:9a:e5:
7b:79:71:5d:61:db:81:15:6c:18:a7:14:14:cb:3a:9b:5f:29:
f6:fd:f1:13:f7:4b:cb:a0:89:f7:5c:92:5b:9f:1c:31:7c:16:
f8:65:84:77:9e:76:88:71:2d:75:18:c7:72:1b:c1:af:c4:f1:
86:82:99:ad:45:a2:b0:01:63:ed:2d:99:02:b5:20:27:3d:52:
8b:fc:a4:6a:0d:77:c3:99:40:92:dd:de:7d:e9:2f:53:54:7d:
17:b2:fe:a4:52:43:c6:f6:9e:ac:00:27:1e:15:b2:10:68:24:
67:b5:57:78:d6:23:b5:04:85:91:4a:1e:3a:6e:11:3d:f4:d0:
0b:67:fa:b5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDk1OUYxMTAvBgNVBAUTKDgwODQwMTcyM0MyRTQxODQ1NkFGOUEwRkIyNUY4QzMy
MUM0OTcwQ0IwHhcNMjUwMTMwMjEzNjA1WhcNMjUwMjA2MjEzNjA1WjAYMRYwFAYD
VQQDEw02NzliZjBjNS1hMTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA071URQVaR5dHljAGrGjqNFNimRVfOgVQUdubLKV9LPM4JgYnvLis2dMolVUT
LvZ+23Uz1V6Nwet+Ke0eYWCMtGt+O8frfviW4lWlbhe12+PbF3DIOYXv0QM1U87z
VP8T7yL1PmOryOBaYpSnWFg8fmF/vWi5eOT7tA2Gb9gk4oL+EknV3VuxW9AaiFV5
Uf+8XhDybl/hnPrw+9FqDhFZKEXmaaXvJn/A/xsaEvjzHWtVUlf4irJG+Ibzm0l4
b8NkF7InRFwUC6DzpVhq08JXFgx0ARiXzlVBZrAsi/+VQkqit8dzxPfp0mqb9rW4
npI1VHLMKdudBlApPYSKvkQvswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJuz48yd
59kBrLr5wXrkKsI4WBkmMB8GA1UdIwQYMBaAFICEAXI8LkGEVq+aD7JfjDIcSXDL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTU5Ri8wNjgxMDBFQTEz
RjExMUVCOTc0RDk3NEVDNEY5QUUwMi9nSVFCY2p3dVFZUldyNW9Qc2wtTU1oeEpj
TXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dJUUJjand1UVlSV3I1b1BzbC1NTWh4SmNNcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OTU5Ri8wNjgxMDBFQTEzRjExMUVCOTc0RDk3NEVDNEY5QUUwMi9nSVFCY2p3dVFZ
UldyNW9Qc2wtTU1oeEpjTXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB4+4hq8p0A3SIR1kPST3Qc6pAImJ27eGFro8+ePy8ENKloVzlkpw47
5m9U4K+SfzvOUGreQ3Y2nKeyzRhauYQIioEsj/FfjQmfjPNUCBeejrv+hNwn0ovx
xkjFW1ADYaOkrxLv8fcBUhFtZC117jb+gJWuDj+mIApsUjYNmuV7eXFdYduBFWwY
pxQUyzqbXyn2/fET90vLoIn3XJJbnxwxfBb4ZYR3nnaIcS11GMdyG8GvxPGGgpmt
RaKwAWPtLZkCtSAnPVKL/KRqDXfDmUCS3d596S9TVH0Xsv6kUkPG9p6sACceFbIQ
aCRntVd41iO1BIWRSh46bhE99NALZ/q1
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:35:54 2025 by rpki-client