Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft
File: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft (raw, json)
Hash identifier: ProTu8qMQK/HJ9GnOjkSoISpoM1E6O76Z3NFnnMRylk=
Subject key identifier: B0:3C:29:B8:34:46:7E:9B:A0:E3:19:BF:18:D2:F2:59:B1:B7:54:41
Authority key identifier: 77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92
Certificate issuer: /CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892
Certificate serial: 040C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft
Manifest number: 03E5
Signing time: Fri 31 Jan 2025 00:41:09 +0000
Manifest this update: Fri 31 Jan 2025 00:41:08 +0000
Manifest next update: Fri 07 Feb 2025 00:41:08 +0000
Files and hashes: 1: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl (hash: 7A0rlHRJoy02pm+rAzqNnjL/rbilfH39maj9BkfSf9M=)
2: EEECC55A8C3611EFA07E612DC4F9AE02.roa (hash: S448nKM+pkzyKAVAq+QLZ6c2Rwj7lMGOSqjzi17yKYo=)
3: 216DB034DE9711EC9289256FC4F9AE02.roa (hash: +Y2vKS8CZ7xVCXV7DmrOc6o0OVVkIHves16LK2wsX2I=)
4: 204E25DADE9711EC9289256FC4F9AE02.roa (hash: V3IIVgu8sM8pxbgFzrATS42bCzZwX2u+wtWMVmriAKA=)
5: E184C6F48F2C11EEA361B22FC4F9AE02.roa (hash: m7hFb23btwRa7iUoc5sSfQwuK6EzzQbsJrT19RdsUzA=)
6: 1FBEA1EEDE9711EC9289256FC4F9AE02.roa (hash: wFyDTsNGRzgAv8mhqHHalbGpjw+H79Gqqrm8IklHVfE=)
7: E0C5B7148F2C11EEA361B22FC4F9AE02.roa (hash: Aqyl2hhEx5BpBctkE5rWM8Kv0ZDOqQAIfUrt5yWaYks=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1036 (0x40c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892
Validity
Not Before: Jan 31 00:41:08 2025 GMT
Not After : Feb 7 00:41:08 2025 GMT
Subject: CN=679c1c24-85d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e4:d0:81:9f:81:ef:cb:17:6c:0a:c6:ec:86:
05:49:be:91:d2:17:34:a0:d4:d6:f5:51:6b:94:0f:
64:76:e1:f0:71:b0:ff:b2:77:bf:be:6e:62:1b:5b:
df:ff:72:b9:41:2d:64:a3:cf:0d:93:2e:53:bd:87:
87:0e:bf:cf:c0:f7:6d:be:a1:91:4b:35:92:cf:1a:
86:24:a8:cf:97:79:68:1e:43:88:65:68:56:b9:c6:
f6:bf:9d:3f:b4:b1:7a:7c:81:6b:f5:2a:8c:cc:2c:
90:fd:26:29:6d:80:5a:ba:53:28:c5:d2:78:bc:a2:
9d:9b:9c:54:f8:5b:47:42:56:64:20:8b:09:ad:97:
d3:47:34:91:06:a3:40:8b:97:5c:f5:75:25:28:15:
5c:24:40:fc:9e:24:7c:97:7c:4c:48:4b:dd:a4:e5:
a5:d8:ae:73:d3:ad:4e:7f:99:3b:a0:8e:d7:1d:1b:
b8:dc:8f:fb:81:c9:23:a9:82:34:6a:1f:7a:95:57:
3e:94:2d:38:b9:29:67:93:de:53:1e:40:25:f9:88:
c5:6b:a7:a2:b8:40:fc:22:8f:b3:92:de:d0:1b:64:
67:6f:17:a2:f9:1a:c7:bb:f0:c5:79:b5:01:8d:f6:
39:27:95:55:f6:51:44:e2:00:41:6d:f1:65:0a:4d:
39:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3C:29:B8:34:46:7E:9B:A0:E3:19:BF:18:D2:F2:59:B1:B7:54:41
X509v3 Authority Key Identifier:
keyid:77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:6a:ef:e4:77:be:7b:c0:e9:2c:3f:e8:6c:0d:20:e2:97:84:
8e:0e:78:53:7f:86:23:2f:40:92:cd:cc:46:c5:05:16:8c:8d:
bd:8a:44:32:57:a4:ae:2d:06:4f:78:ac:04:e0:f5:de:e0:72:
7a:27:a6:b5:07:ce:8b:72:03:16:ff:29:c9:c5:b9:e2:c1:02:
03:06:49:76:46:5a:60:00:8b:e9:74:a8:5d:95:f5:8c:a4:c5:
93:5c:c0:f6:9c:00:32:ee:22:83:ea:cc:e9:e3:4d:c1:0c:dc:
b3:de:a6:d2:af:e6:15:00:f9:4e:ef:40:b5:e7:d1:46:32:84:
b2:9b:c5:52:0e:79:76:c9:67:f1:8d:7f:de:d3:f7:e3:94:3d:
38:c9:66:c3:23:91:47:f8:a9:67:53:55:8d:51:9c:16:35:fe:
4b:b1:99:42:a8:4c:c7:80:a3:6d:6f:44:19:1d:4b:03:c9:48:
2a:a2:18:76:cd:0b:41:5a:13:4e:c4:50:11:26:d4:6d:fa:54:
07:85:32:e0:d8:c9:d5:b2:7b:63:78:74:cd:7b:c5:0a:a4:5c:
5a:e1:5a:0a:9e:ba:b9:d1:29:e3:6d:1d:95:cd:c7:62:29:22:
19:10:af:e2:57:21:25:ec:94:86:52:85:3c:e6:3b:55:44:98:
b2:20:8b:7f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REVCODExMTAvBgNVBAUTKDc3NzY2MTJBNDNDMjJEMEE2NkI4RjEzNjgwQjMwNThC
RUQ1RDk4OTIwHhcNMjUwMTMxMDA0MTA4WhcNMjUwMjA3MDA0MTA4WjAYMRYwFAYD
VQQDEw02NzljMWMyNC04NWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyeTQgZ+B78sXbArG7IYFSb6R0hc0oNTW9VFrlA9kduHwcbD/sne/vm5iG1vf
/3K5QS1ko88Nky5TvYeHDr/PwPdtvqGRSzWSzxqGJKjPl3loHkOIZWhWucb2v50/
tLF6fIFr9SqMzCyQ/SYpbYBaulMoxdJ4vKKdm5xU+FtHQlZkIIsJrZfTRzSRBqNA
i5dc9XUlKBVcJED8niR8l3xMSEvdpOWl2K5z061Of5k7oI7XHRu43I/7gckjqYI0
ah96lVc+lC04uSlnk95THkAl+YjFa6eiuED8Io+zkt7QG2Rnbxei+RrHu/DFebUB
jfY5J5VV9lFE4gBBbfFlCk05mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLA8Kbg0
Rn6boOMZvxjS8lmxt1RBMB8GA1UdIwQYMBaAFHd2YSpDwi0KZrjxNoCzBYvtXZiS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUI4MS9DRjk2NjNDNjcw
RjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xRcG11UEUyZ0xNRmktMWRt
SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2QzWmhLa1BDTFFwbXVQRTJnTE1GaS0xZG1KSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RUI4MS9DRjk2NjNDNjcwRjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xR
cG11UEUyZ0xNRmktMWRtSkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBSau/kd757wOksP+hsDSDil4SODnhTf4YjL0CSzcxGxQUWjI29ikQy
V6SuLQZPeKwE4PXe4HJ6J6a1B86LcgMW/ynJxbniwQIDBkl2RlpgAIvpdKhdlfWM
pMWTXMD2nAAy7iKD6szp403BDNyz3qbSr+YVAPlO70C159FGMoSym8VSDnl2yWfx
jX/e0/fjlD04yWbDI5FH+KlnU1WNUZwWNf5LsZlCqEzHgKNtb0QZHUsDyUgqohh2
zQtBWhNOxFARJtRt+lQHhTLg2MnVsntjeHTNe8UKpFxa4VoKnrq50SnjbR2Vzcdi
KSIZEK/iVyEl7JSGUoU85jtVRJiyIIt/
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:32:05 2025 by rpki-client