Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft
File: ABc0faPzW3U5Ub30sbB_dh49nr8.mft (raw, json)
Hash identifier: JhqJlRm2xt90EUqPEYbKI352O7HcMEM4cwkd3cp43iE=
Subject key identifier: 97:FC:2C:C5:9E:82:61:1C:C2:8E:41:40:5A:16:6E:24:2D:0A:23:99
Authority key identifier: 00:17:34:7D:A3:F3:5B:75:39:51:BD:F4:B1:B0:7F:76:1E:3D:9E:BF
Certificate issuer: /CN=A91E0AAD/serialNumber=0017347DA3F35B753951BDF4B1B07F761E3D9EBF
Certificate serial: 03C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft
Manifest number: 03BF
Signing time: Fri 31 Jan 2025 00:44:24 +0000
Manifest this update: Fri 31 Jan 2025 00:44:23 +0000
Manifest next update: Fri 07 Feb 2025 00:44:23 +0000
Files and hashes: 1: ABc0faPzW3U5Ub30sbB_dh49nr8.crl (hash: L6I/oEPvUF5qkj2qfS/y75TkvXl14UnzJImPN7Q8N3k=)
2: 0BE6F39E79E611EC99DA1B51C4F9AE02.roa (hash: TzEFfXnFIJI/HiCD7F67qAjR58Zm862BeDJrXas4ZdM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 968 (0x3c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0AAD/serialNumber=0017347DA3F35B753951BDF4B1B07F761E3D9EBF
Validity
Not Before: Jan 31 00:44:23 2025 GMT
Not After : Feb 7 00:44:23 2025 GMT
Subject: CN=679c1ce8-f6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d8:2f:0d:eb:2c:a2:4a:5e:3a:77:1c:a1:cd:
0f:52:13:b3:12:71:de:1e:cd:50:f5:fd:1d:5f:d3:
83:57:91:b2:ef:a6:96:9b:94:6c:5e:9b:db:df:18:
90:2f:df:91:82:8c:86:d2:81:fb:cf:27:3d:09:8d:
cf:64:fd:64:64:8e:e2:08:cd:b3:1a:ef:fb:73:ab:
5f:8f:fd:30:08:67:7f:29:3a:34:b6:1e:df:55:fc:
12:3d:d4:59:9b:0f:24:46:3e:3b:69:81:18:b5:2b:
5b:68:3d:65:1e:98:e6:dc:48:ec:19:2a:c4:ac:32:
9e:de:5f:b0:97:13:91:7d:4f:c1:72:b2:00:71:3f:
94:2b:10:0d:a0:05:66:d9:cd:b1:b2:bc:a1:18:8a:
45:91:4d:1d:35:bb:f0:e4:f4:bc:3d:e7:10:18:7d:
12:6a:ef:cf:f1:a8:d8:3f:9b:1b:4f:6d:03:a7:8f:
ba:f4:c3:2e:6a:4b:e2:7f:e9:37:7a:ac:0b:1f:48:
3d:28:c5:1c:66:41:f3:11:ac:46:6f:af:c0:14:2c:
9f:47:17:47:8e:d6:5e:bd:25:4a:71:81:60:02:9e:
b1:45:5a:4b:0f:d3:05:90:7f:5b:0d:b9:f5:57:c3:
1f:b1:c3:46:73:7f:cb:63:fc:d4:2b:9e:3c:f0:f4:
11:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FC:2C:C5:9E:82:61:1C:C2:8E:41:40:5A:16:6E:24:2D:0A:23:99
X509v3 Authority Key Identifier:
keyid:00:17:34:7D:A3:F3:5B:75:39:51:BD:F4:B1:B0:7F:76:1E:3D:9E:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:14:de:44:ee:70:0b:58:68:68:3f:86:f8:8b:2c:03:0b:b1:
f3:2e:a9:82:e3:e3:a0:72:5e:29:41:66:dd:37:c9:81:a4:72:
7c:4e:ac:6f:a5:a2:f8:f2:e0:1f:5d:1b:1d:b8:b0:28:07:1b:
15:8c:69:b8:30:b6:3b:9b:9a:46:94:b6:7e:fe:1d:05:c4:5a:
b6:dc:8e:2c:8e:22:23:58:c8:07:7b:d2:9d:e0:22:9d:d4:86:
fe:10:93:3a:c0:f0:40:6a:c7:10:b1:bc:6f:63:5a:d2:7a:2e:
6b:9b:d4:dc:71:04:ea:b2:2b:45:90:d9:75:ae:90:9e:22:dc:
03:88:33:fd:eb:55:ab:97:c2:ee:08:55:60:42:3c:f8:a3:bf:
00:82:d8:d8:a8:65:78:68:c7:f0:a2:ff:12:db:94:66:4a:2a:
f9:c4:f1:23:92:af:ce:ec:b6:da:f6:33:76:dd:81:a1:01:b8:
00:0b:a0:c3:e8:3c:09:9d:e6:20:56:ba:16:0c:25:68:3f:3e:
65:2e:9c:cb:49:99:e2:29:7f:99:cb:a1:84:92:82:ce:3e:1c:
61:18:12:fd:19:8c:e0:c6:0e:b4:e6:c4:32:ef:32:c6:5f:ff:
4e:40:d5:d3:0c:dc:3b:a8:e4:45:e4:c4:9c:b4:f7:93:00:05:
6c:94:4c:d2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTBBQUQxMTAvBgNVBAUTKDAwMTczNDdEQTNGMzVCNzUzOTUxQkRGNEIxQjA3Rjc2
MUUzRDlFQkYwHhcNMjUwMTMxMDA0NDIzWhcNMjUwMjA3MDA0NDIzWjAYMRYwFAYD
VQQDEw02NzljMWNlOC1mNmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwNgvDessokpeOnccoc0PUhOzEnHeHs1Q9f0dX9ODV5Gy76aWm5RsXpvb3xiQ
L9+RgoyG0oH7zyc9CY3PZP1kZI7iCM2zGu/7c6tfj/0wCGd/KTo0th7fVfwSPdRZ
mw8kRj47aYEYtStbaD1lHpjm3EjsGSrErDKe3l+wlxORfU/BcrIAcT+UKxANoAVm
2c2xsryhGIpFkU0dNbvw5PS8PecQGH0Sau/P8ajYP5sbT20Dp4+69MMuakvif+k3
eqwLH0g9KMUcZkHzEaxGb6/AFCyfRxdHjtZevSVKcYFgAp6xRVpLD9MFkH9bDbn1
V8MfscNGc3/LY/zUK5488PQRTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJf8LMWe
gmEcwo5BQFoWbiQtCiOZMB8GA1UdIwQYMBaAFAAXNH2j81t1OVG99LGwf3YePZ6/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEFBRC8wREU1QjQwRTc5
RTIxMUVDQjUwMTMxNDhDNEY5QUUwMi9BQmMwZmFQelczVTVVYjMwc2JCX2RoNDlu
cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FCYzBmYVB6VzNVNVViMzBzYkJfZGg0OW5yOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MEFBRC8wREU1QjQwRTc5RTIxMUVDQjUwMTMxNDhDNEY5QUUwMi9BQmMwZmFQelcz
VTVVYjMwc2JCX2RoNDlucjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB9FN5E7nALWGhoP4b4iywDC7HzLqmC4+Ogcl4pQWbdN8mBpHJ8Tqxv
paL48uAfXRsduLAoBxsVjGm4MLY7m5pGlLZ+/h0FxFq23I4sjiIjWMgHe9Kd4CKd
1Ib+EJM6wPBAascQsbxvY1rSei5rm9TccQTqsitFkNl1rpCeItwDiDP961Wrl8Lu
CFVgQjz4o78AgtjYqGV4aMfwov8S25RmSir5xPEjkq/O7Lba9jN23YGhAbgAC6DD
6DwJneYgVroWDCVoPz5lLpzLSZniKX+Zy6GEkoLOPhxhGBL9GYzgxg605sQy7zLG
X/9OQNXTDNw7qORF5MSctPeTAAVslEzS
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:15 2025 by rpki-client