Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft
File: nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft (raw, json)
Hash identifier: TbJ6al1xn5hc+tthNAb7Se3Uscgywps9IUUZY6Orong=
Subject key identifier: 26:7A:D5:F5:F9:84:55:57:D2:5B:57:3A:1A:9B:68:E4:82:3E:FB:7D
Authority key identifier: 9E:AC:83:56:8E:CE:87:7C:54:B9:23:0D:63:9D:A4:4F:38:0D:21:E5
Certificate issuer: /CN=A91DE8B4/serialNumber=9EAC83568ECE877C54B9230D639DA44F380D21E5
Certificate serial: 07A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqyDVo7Oh3xUuSMNY52kTzgNIeU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft
Manifest number: 079C
Signing time: Thu 30 Jan 2025 21:10:29 +0000
Manifest this update: Thu 30 Jan 2025 21:10:29 +0000
Manifest next update: Thu 06 Feb 2025 21:10:29 +0000
Files and hashes: 1: nqyDVo7Oh3xUuSMNY52kTzgNIeU.crl (hash: xVZBVSJ724O5+7NKaqlxJyIo910Vs529wOOwum6Vs7o=)
2: 149009E6EE8111EAABC5C05CC4F9AE02.roa (hash: AGcGZOH2g6bV+K3FrKli6KkriXvPqSvE3RitkoEmp4w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1953 (0x7a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE8B4/serialNumber=9EAC83568ECE877C54B9230D639DA44F380D21E5
Validity
Not Before: Jan 30 21:10:29 2025 GMT
Not After : Feb 6 21:10:29 2025 GMT
Subject: CN=679beac5-8d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f3:fb:5c:e5:e2:70:66:b1:b5:52:ef:9d:97:
62:3b:8c:e6:55:e3:3d:dc:85:2d:c1:4d:fd:9b:a0:
87:0f:4f:a1:09:27:1e:a1:a3:d1:1c:18:44:ea:1b:
b7:2c:fd:fa:a3:b4:5c:e7:6a:3b:1c:5e:87:36:b1:
e7:0f:6f:1b:8b:f5:ff:68:b1:a7:2d:1f:b0:3d:b6:
d6:05:09:50:e2:45:d8:58:e5:40:76:58:73:d3:a0:
b1:20:f3:53:c7:81:9b:68:39:62:a0:3f:5f:f5:05:
2b:f7:2e:bd:30:6e:f1:0f:a0:00:cc:e5:a7:42:e4:
23:ac:24:2c:07:a0:50:4e:be:1b:1c:57:a8:de:09:
1e:06:cf:08:c5:4e:b6:1c:e9:32:71:73:a2:2e:1b:
2c:77:a7:34:e0:57:1d:97:d7:88:e1:ad:53:63:66:
86:96:6b:a6:e8:1e:5a:c8:d4:82:9a:4a:b2:d4:8d:
dc:3c:ac:c9:46:40:c9:4c:c5:76:27:d4:c9:52:82:
8c:04:8a:47:ad:36:15:32:ed:78:a5:34:d2:14:58:
b1:39:01:75:0a:52:f9:69:33:9e:a6:32:fa:32:5f:
47:b4:c1:17:84:16:cb:92:12:79:4e:e3:e7:3d:93:
63:70:7d:b6:17:7f:d4:04:a2:c9:c3:8f:90:0f:3c:
e4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7A:D5:F5:F9:84:55:57:D2:5B:57:3A:1A:9B:68:E4:82:3E:FB:7D
X509v3 Authority Key Identifier:
keyid:9E:AC:83:56:8E:CE:87:7C:54:B9:23:0D:63:9D:A4:4F:38:0D:21:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqyDVo7Oh3xUuSMNY52kTzgNIeU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:d1:9c:95:2e:17:e1:62:33:8f:3f:4e:80:d5:60:21:36:a1:
62:9d:57:e3:ca:82:13:85:38:ab:25:b8:ec:f3:a2:51:7b:1e:
7e:d5:82:a0:74:2f:f3:e8:03:92:cf:29:10:00:7f:d9:3b:0f:
3e:52:6b:89:c8:af:03:26:79:69:ed:d0:93:f4:20:93:c9:b0:
5a:47:e0:c6:91:b0:a8:5c:1b:0e:96:db:c2:c2:87:99:24:8d:
a9:de:83:90:9c:2f:37:50:d2:4d:17:78:6d:67:f6:90:6f:66:
bb:29:69:af:ab:68:bc:ea:fe:05:7f:66:3e:3b:39:69:bd:8b:
85:23:6c:d5:30:f1:70:27:3d:74:1a:e1:99:d3:db:68:c3:de:
e4:6c:5e:e4:1f:39:f2:8b:50:d1:38:19:af:ca:d2:4b:a5:73:
6f:24:bf:bb:6f:76:fa:c6:65:5a:82:03:1d:ad:be:1e:59:98:
2e:33:e2:52:65:31:b1:d3:de:9e:00:db:eb:bf:67:2b:48:4a:
4b:6c:a8:c8:c2:66:74:be:02:21:09:48:3d:3d:af:21:b5:8f:
61:d0:7a:3f:43:f0:ae:30:49:fd:8a:41:38:60:f5:d2:bd:09:
86:70:9c:10:a1:60:31:bc:0b:e4:f7:a1:b4:b9:89:9e:f1:44:
28:3e:b4:ac
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REU4QjQxMTAvBgNVBAUTKDlFQUM4MzU2OEVDRTg3N0M1NEI5MjMwRDYzOURBNDRG
MzgwRDIxRTUwHhcNMjUwMTMwMjExMDI5WhcNMjUwMjA2MjExMDI5WjAYMRYwFAYD
VQQDEw02NzliZWFjNS04ZDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5vP7XOXicGaxtVLvnZdiO4zmVeM93IUtwU39m6CHD0+hCSceoaPRHBhE6hu3
LP36o7Rc52o7HF6HNrHnD28bi/X/aLGnLR+wPbbWBQlQ4kXYWOVAdlhz06CxIPNT
x4GbaDlioD9f9QUr9y69MG7xD6AAzOWnQuQjrCQsB6BQTr4bHFeo3gkeBs8IxU62
HOkycXOiLhssd6c04Fcdl9eI4a1TY2aGlmum6B5ayNSCmkqy1I3cPKzJRkDJTMV2
J9TJUoKMBIpHrTYVMu14pTTSFFixOQF1ClL5aTOepjL6Ml9HtMEXhBbLkhJ5TuPn
PZNjcH22F3/UBKLJw4+QDzzkAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZ61fX5
hFVX0ltXOhqbaOSCPvt9MB8GA1UdIwQYMBaAFJ6sg1aOzod8VLkjDWOdpE84DSHl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERThCNC80QTY1RUFDOEVF
ODAxMUVBQTBGODJDNUNDNEY5QUUwMi9ucXlEVm83T2gzeFV1U01OWTUya1R6Z05J
ZVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25xeURWbzdPaDN4VXVTTU5ZNTJrVHpnTkllVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RThCNC80QTY1RUFDOEVFODAxMUVBQTBGODJDNUNDNEY5QUUwMi9ucXlEVm83T2gz
eFV1U01OWTUya1R6Z05JZVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBy0ZyVLhfhYjOPP06A1WAhNqFinVfjyoIThTirJbjs86JRex5+1YKg
dC/z6AOSzykQAH/ZOw8+UmuJyK8DJnlp7dCT9CCTybBaR+DGkbCoXBsOltvCwoeZ
JI2p3oOQnC83UNJNF3htZ/aQb2a7KWmvq2i86v4Ff2Y+OzlpvYuFI2zVMPFwJz10
GuGZ09tow97kbF7kHznyi1DROBmvytJLpXNvJL+7b3b6xmVaggMdrb4eWZguM+JS
ZTGx096eANvrv2crSEpLbKjIwmZ0vgIhCUg9Pa8htY9h0Ho/Q/CuMEn9ikE4YPXS
vQmGcJwQoWAxvAvk96G0uYme8UQoPrSs
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:19:04 2025 by rpki-client