Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft
File: 01nlbdoAA8SD861qQMCA6Qy41HI.mft (raw, json)
Hash identifier: 03V57FOWE+Uc4QGpyRXzxzoXjufSqDvOnsPGatbl8Zs=
Subject key identifier: F6:0A:63:C5:73:B3:4A:D0:2F:74:4A:68:DE:06:6C:77:2C:F3:8B:97
Authority key identifier: D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72
Certificate issuer: /CN=A91D9B1B/serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472
Certificate serial: 71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft
Manifest number: 6E
Signing time: Fri 31 Jan 2025 05:57:02 +0000
Manifest this update: Fri 31 Jan 2025 05:57:02 +0000
Manifest next update: Fri 07 Feb 2025 05:57:02 +0000
Files and hashes: 1: 01nlbdoAA8SD861qQMCA6Qy41HI.crl (hash: 1Ghbo4Wcjpes7YmZt8WBmxFSVYVvQrbQbSS2lys7u0k=)
2: 97530E023D0911EFA33E4A38C4F9AE02.roa (hash: bWCEf7xphHzCuEdSJWfNIfntO4HJguemBgMtzB7ylYA=)
3: 573BE4DE3D0811EF84157B26C4F9AE02.roa (hash: nywG68ULgKtBcMdjYbgBHpATJxb1PptzCmatC6Dkc8Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113 (0x71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9B1B/serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472
Validity
Not Before: Jan 31 05:57:02 2025 GMT
Not After : Feb 7 05:57:02 2025 GMT
Subject: CN=679c662e-b361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ad:5c:35:93:64:47:92:64:e1:3f:4b:84:18:
d4:f1:b9:69:e0:85:69:e8:b2:fc:11:5f:dd:bd:3a:
d9:ed:26:34:67:4e:41:cc:25:84:d2:80:79:9c:7b:
e5:ce:3d:ec:94:1f:a0:d6:59:87:c0:30:6e:8b:94:
5a:be:d5:56:a8:b6:de:71:87:16:9d:c1:d4:e9:69:
76:2f:ef:b4:30:39:fa:73:a3:2d:58:65:2f:d0:de:
21:5e:b7:33:8e:c2:2c:ab:bc:2b:78:37:8c:7f:b5:
03:8b:f5:ea:00:12:96:bc:81:94:f8:73:43:a6:cc:
e9:a1:74:b4:1d:ac:ed:85:ec:24:8e:00:5f:03:c0:
e4:4c:60:d9:7d:49:68:4d:f1:81:af:ec:1c:7c:6c:
77:8e:f9:f9:89:06:a5:dd:8d:41:29:46:35:77:d1:
7f:f0:9e:81:70:5d:16:64:b0:f9:4e:7e:b4:00:0f:
34:4d:56:29:b7:65:fc:04:47:92:43:bf:ec:ca:7c:
ef:fb:29:df:d1:28:26:ce:9a:8f:14:ed:c5:70:4e:
07:20:53:f9:1c:29:f5:c4:ae:67:dd:d4:9e:8f:62:
3b:f0:a8:1a:48:7c:5b:cb:22:0c:8e:71:82:7b:cf:
7d:fc:af:40:ec:04:a3:d1:fc:d7:42:d2:41:7f:81:
62:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0A:63:C5:73:B3:4A:D0:2F:74:4A:68:DE:06:6C:77:2C:F3:8B:97
X509v3 Authority Key Identifier:
keyid:D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:30:a1:61:d4:02:80:53:75:98:5c:b3:02:42:e8:72:e1:5c:
e8:f4:33:7a:be:db:48:ed:45:7f:99:b2:14:25:79:25:fc:2d:
1b:31:1c:e0:db:2d:d5:62:11:a6:1d:52:c1:4c:7c:7f:71:d8:
e0:c0:2d:c7:cf:71:b6:3d:51:95:0d:f4:aa:b0:ac:09:44:f9:
95:29:20:2f:1e:28:93:90:75:df:09:1a:66:27:a9:89:f5:2e:
16:35:c6:b0:a0:f0:51:31:44:5e:03:92:59:7e:8b:ce:23:9c:
ad:7d:d4:93:5c:90:d8:ca:88:5f:a7:ee:99:aa:e5:d0:20:ee:
df:91:25:60:33:02:6e:48:60:d8:ff:81:bb:fd:3d:23:13:da:
2d:d1:9f:54:98:f9:98:a1:8d:c2:cc:65:05:2f:99:ff:42:f9:
7a:7f:09:bc:7b:47:72:47:a8:b6:39:2f:c2:7a:30:f2:03:31:
13:ac:fb:ec:c3:07:39:ea:49:07:84:1f:8d:3b:5b:8c:40:95:
2a:dc:71:58:39:61:49:c6:35:44:5d:e9:7b:10:d5:7d:cb:4f:
64:6f:f8:12:20:14:c4:8f:74:31:a0:f4:f2:1e:61:30:92:27:
74:9a:fc:c8:00:e4:c6:e2:bf:38:0d:82:5a:34:12:7c:c8:29:
37:41:35:ec
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
OUIxQjExMC8GA1UEBRMoRDM1OUU1NkREQTAwMDNDNDgzRjNBRDZBNDBDMDgwRTkw
Q0I4RDQ3MjAeFw0yNTAxMzEwNTU3MDJaFw0yNTAyMDcwNTU3MDJaMBgxFjAUBgNV
BAMTDTY3OWM2NjJlLWIzNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8rVw1k2RHkmThP0uEGNTxuWnghWnosvwRX929OtntJjRnTkHMJYTSgHmce+XO
PeyUH6DWWYfAMG6LlFq+1Vaott5xhxadwdTpaXYv77QwOfpzoy1YZS/Q3iFetzOO
wiyrvCt4N4x/tQOL9eoAEpa8gZT4c0OmzOmhdLQdrO2F7CSOAF8DwORMYNl9SWhN
8YGv7Bx8bHeO+fmJBqXdjUEpRjV30X/wnoFwXRZksPlOfrQADzRNVim3ZfwER5JD
v+zKfO/7Kd/RKCbOmo8U7cVwTgcgU/kcKfXErmfd1J6PYjvwqBpIfFvLIgyOcYJ7
z338r0DsBKPR/NdC0kF/gWJRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9gpjxXOz
StAvdEpo3gZsdyzzi5cwHwYDVR0jBBgwFoAU01nlbdoAA8SD861qQMCA6Qy41HIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5QjFCL0Y5RkVFMDQ2M0NG
ODExRUZBMzY3QzM4NUM0RjlBRTAyLzAxbmxiZG9BQThTRDg2MXFRTUNBNlF5NDFI
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMDFubGJkb0FBOFNEODYxcVFNQ0E2UXk0MUhJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5
QjFCL0Y5RkVFMDQ2M0NGODExRUZBMzY3QzM4NUM0RjlBRTAyLzAxbmxiZG9BQThT
RDg2MXFRTUNBNlF5NDFISS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAGEwoWHUAoBTdZhcswJC6HLhXOj0M3q+20jtRX+ZshQleSX8LRsxHODb
LdViEaYdUsFMfH9x2ODALcfPcbY9UZUN9KqwrAlE+ZUpIC8eKJOQdd8JGmYnqYn1
LhY1xrCg8FExRF4Dkll+i84jnK191JNckNjKiF+n7pmq5dAg7t+RJWAzAm5IYNj/
gbv9PSMT2i3Rn1SY+ZihjcLMZQUvmf9C+Xp/Cbx7R3JHqLY5L8J6MPIDMROs++zD
BznqSQeEH407W4xAlSrccVg5YUnGNURd6XsQ1X3LT2Rv+BIgFMSPdDGg9PIeYTCS
J3Sa/MgA5MbivzgNglo0EnzIKTdBNew=
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:54:48 2025 by rpki-client