Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.mft
File: owQJVBg5BUscPhXRmD19vYp9ZII.mft (raw, json)
Hash identifier: 79tWKhBZ1BrT6cnfqfCDuLigj6pddIQYAHqRWXjarQk=
Subject key identifier: 2A:98:DD:6A:17:C6:6C:81:0D:C3:F7:4C:41:A5:26:13:42:0B:1C:53
Authority key identifier: A3:04:09:54:18:39:05:4B:1C:3E:15:D1:98:3D:7D:BD:8A:7D:64:82
Certificate issuer: /CN=A91D9E03/serialNumber=A30409541839054B1C3E15D1983D7DBD8A7D6482
Certificate serial: 035F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owQJVBg5BUscPhXRmD19vYp9ZII.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.mft
Manifest number: 035B
Signing time: Fri 31 Jan 2025 01:01:32 +0000
Manifest this update: Fri 31 Jan 2025 01:01:32 +0000
Manifest next update: Fri 07 Feb 2025 01:01:32 +0000
Files and hashes: 1: owQJVBg5BUscPhXRmD19vYp9ZII.crl (hash: /QU2Ghk67/SnHYD9BLfzmy2RN1l6PSxiMzhKLgIG6nw=)
2: 521DCED89C5911EC97E58855C4F9AE02.roa (hash: K/6Sxmjn7Y9RMsh3D/CkcDPEvNJggoP2DR+Gq8xtxL8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 863 (0x35f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9E03/serialNumber=A30409541839054B1C3E15D1983D7DBD8A7D6482
Validity
Not Before: Jan 31 01:01:32 2025 GMT
Not After : Feb 7 01:01:32 2025 GMT
Subject: CN=679c20ec-b797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e4:2d:c0:56:ae:d7:75:18:91:94:b2:f3:14:
8f:e0:07:0d:c3:3b:9b:fd:06:7a:c0:4d:94:8d:8d:
dc:d2:26:44:fd:ba:c2:ca:d9:6f:2f:ed:29:49:d2:
11:17:4e:5d:f6:6f:38:2e:43:f0:b5:82:fc:00:44:
b2:33:aa:80:02:61:16:05:2d:a1:61:df:8a:40:ae:
81:16:9a:54:72:6b:d5:eb:b3:62:13:eb:2d:72:97:
e5:97:e2:4e:b3:62:91:27:b9:06:c8:7b:ee:6d:1f:
a0:ea:84:09:bb:52:78:26:c5:7d:e7:a3:76:70:63:
f3:a3:b0:83:9e:8e:a1:80:8b:ae:2e:3c:b5:f3:29:
1e:3a:2c:02:36:29:19:c9:11:a0:ea:bb:9a:53:ac:
d6:80:c3:06:5f:6c:ef:e1:50:64:5c:5e:be:eb:73:
e8:33:89:6f:3a:98:97:b2:8b:e6:0c:69:30:78:05:
44:5c:30:37:53:21:ed:1d:ab:50:1e:8f:36:d6:03:
9f:e3:7d:0c:46:99:f7:18:b3:85:68:e8:7e:fb:3b:
48:c6:e2:f8:a7:24:78:e6:17:0d:a6:13:91:46:8f:
d6:d0:60:11:7b:e4:bb:f2:25:0e:16:ac:ba:2a:e4:
e0:83:23:19:2b:f9:14:ce:99:23:f0:f8:60:6d:80:
87:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:98:DD:6A:17:C6:6C:81:0D:C3:F7:4C:41:A5:26:13:42:0B:1C:53
X509v3 Authority Key Identifier:
keyid:A3:04:09:54:18:39:05:4B:1C:3E:15:D1:98:3D:7D:BD:8A:7D:64:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owQJVBg5BUscPhXRmD19vYp9ZII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:89:f7:da:89:2b:45:f1:0f:a8:5f:77:49:f3:e7:38:b2:ad:
10:76:5e:10:13:c9:da:39:11:e5:73:0f:02:4e:a1:4f:69:ad:
2d:9a:71:d7:9c:32:4f:27:d2:c3:fb:d3:58:a3:40:d9:55:62:
4a:23:a4:3e:d6:b3:32:d4:00:89:67:53:c4:3a:93:10:84:f8:
b0:09:0e:d3:c4:c7:0d:20:0d:00:fe:d2:18:fd:f9:4d:7e:3b:
cb:94:86:89:49:bd:ba:aa:70:63:47:57:6a:36:2d:f4:65:f9:
e9:62:0b:bc:4e:51:e0:8d:d7:ff:fb:97:08:87:24:59:48:05:
5b:36:5f:06:08:bc:ec:88:23:2e:74:8b:ed:e2:0d:a2:e5:cc:
28:7a:c6:79:b7:2b:2d:be:2a:21:e3:d7:d6:28:3f:91:6a:a3:
3f:e1:54:a1:a1:df:d5:1e:7a:a8:b4:b8:5a:8c:48:72:54:13:
29:cb:25:9f:2e:d9:38:eb:01:32:cd:e2:ab:af:55:f0:0b:09:
a7:c4:01:67:8e:9f:18:ec:67:00:a3:18:dd:11:43:69:93:c2:
4b:e3:50:45:fe:dc:8b:6f:97:da:93:6e:b1:86:9e:16:a3:11:
cc:94:06:af:c0:13:60:c4:a2:44:82:0f:16:bb:f3:ba:4e:3c:
6b:f7:49:f4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDlFMDMxMTAvBgNVBAUTKEEzMDQwOTU0MTgzOTA1NEIxQzNFMTVEMTk4M0Q3REJE
OEE3RDY0ODIwHhcNMjUwMTMxMDEwMTMyWhcNMjUwMjA3MDEwMTMyWjAYMRYwFAYD
VQQDEw02NzljMjBlYy1iNzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt+QtwFau13UYkZSy8xSP4AcNwzub/QZ6wE2UjY3c0iZE/brCytlvL+0pSdIR
F05d9m84LkPwtYL8AESyM6qAAmEWBS2hYd+KQK6BFppUcmvV67NiE+stcpfll+JO
s2KRJ7kGyHvubR+g6oQJu1J4JsV956N2cGPzo7CDno6hgIuuLjy18ykeOiwCNikZ
yRGg6ruaU6zWgMMGX2zv4VBkXF6+63PoM4lvOpiXsovmDGkweAVEXDA3UyHtHatQ
Ho821gOf430MRpn3GLOFaOh++ztIxuL4pyR45hcNphORRo/W0GARe+S78iUOFqy6
KuTggyMZK/kUzpkj8PhgbYCH0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqY3WoX
xmyBDcP3TEGlJhNCCxxTMB8GA1UdIwQYMBaAFKMECVQYOQVLHD4V0Zg9fb2KfWSC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUUwMy85OTZBN0U4ODlD
NTYxMUVDQkRFRTA1NTNDNEY5QUUwMi9vd1FKVkJnNUJVc2NQaFhSbUQxOXZZcDla
SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL293UUpWQmc1QlVzY1BoWFJtRDE5dllwOVpJSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OUUwMy85OTZBN0U4ODlDNTYxMUVDQkRFRTA1NTNDNEY5QUUwMi9vd1FKVkJnNUJV
c2NQaFhSbUQxOXZZcDlaSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCBiffaiStF8Q+oX3dJ8+c4sq0Qdl4QE8naORHlcw8CTqFPaa0tmnHX
nDJPJ9LD+9NYo0DZVWJKI6Q+1rMy1ACJZ1PEOpMQhPiwCQ7TxMcNIA0A/tIY/flN
fjvLlIaJSb26qnBjR1dqNi30ZfnpYgu8TlHgjdf/+5cIhyRZSAVbNl8GCLzsiCMu
dIvt4g2i5cwoesZ5tystvioh49fWKD+RaqM/4VShod/VHnqotLhajEhyVBMpyyWf
Ltk46wEyzeKrr1XwCwmnxAFnjp8Y7GcAoxjdEUNpk8JL41BF/tyLb5fak26xhp4W
oxHMlAavwBNgxKJEgg8Wu/O6Tjxr90n0
-----END CERTIFICATE-----
Generated at Fri Apr 25 16:42:02 2025 by rpki-client