Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft
File: s40rj01btqU-m0GSYQSBpdiBZUY.mft (raw, json)
Hash identifier: S7lJmAi+oUBNynTkZRsMcSttR71vA6uGUcPClJNXAsw=
Subject key identifier: DE:87:BA:72:C3:3E:23:73:7D:68:45:B5:C1:D0:44:53:44:97:58:95
Authority key identifier: B3:8D:2B:8F:4D:5B:B6:A5:3E:9B:41:92:61:04:81:A5:D8:81:65:46
Certificate issuer: /CN=A91E12AD/serialNumber=B38D2B8F4D5BB6A53E9B4192610481A5D8816546
Certificate serial: 0AA4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft
Manifest number: 0A9D
Signing time: Thu 30 Jan 2025 19:38:45 +0000
Manifest this update: Thu 30 Jan 2025 19:38:44 +0000
Manifest next update: Thu 06 Feb 2025 19:38:44 +0000
Files and hashes: 1: s40rj01btqU-m0GSYQSBpdiBZUY.crl (hash: IwwI+loQTmjk2qZT1yfbfnGI7JSTUxFtXvVCwkaCDvg=)
2: 1E1E9122565411EBA14ED510C4F9AE02.roa (hash: j/OpYEtDuYk8PfhysOsvn+uhuepZ3xGdAVnmL79tUAw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2724 (0xaa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E12AD/serialNumber=B38D2B8F4D5BB6A53E9B4192610481A5D8816546
Validity
Not Before: Jan 30 19:38:44 2025 GMT
Not After : Feb 6 19:38:44 2025 GMT
Subject: CN=679bd545-9b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f6:1e:10:09:9f:dd:9d:f0:73:27:b9:31:f8:
c2:e9:07:4e:f9:59:a6:14:f3:68:9f:31:05:53:98:
98:6a:8d:b1:ea:f6:7a:3c:c8:df:e1:05:2a:e8:fd:
eb:cc:81:06:ea:10:01:8b:f5:8e:d7:79:c6:c2:b6:
e1:75:25:f7:72:5e:fd:0a:49:cf:da:65:07:7c:c6:
9b:ee:d8:b2:6a:e6:05:59:f0:f1:75:2b:7c:09:39:
48:44:4f:c4:9c:7f:b7:59:ea:d5:fe:1c:66:80:5a:
f4:0e:b3:e6:73:35:23:4c:ee:85:34:f4:7e:2e:f1:
61:1c:e7:c8:f4:5f:5a:1d:51:99:65:02:41:80:a0:
06:12:d9:6d:b3:cf:e7:94:e3:06:78:c5:a2:2e:e1:
29:e2:75:75:2d:78:97:c6:cc:8f:30:42:95:46:d4:
3c:dd:d1:c0:f5:f9:81:9c:8f:f4:d3:ce:a0:f4:12:
e8:f2:68:83:3e:59:8e:13:39:41:0f:4e:6f:0c:47:
18:1c:ad:e0:ef:cf:1d:7f:1f:d4:b9:66:60:ec:41:
20:56:36:2a:6c:33:46:84:e5:e5:cd:fb:02:c6:4c:
28:2a:53:c0:c3:92:c7:36:e1:8f:8f:70:7b:c6:93:
fa:d9:bb:b9:de:af:a7:27:3e:a2:e1:b6:59:79:39:
22:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:87:BA:72:C3:3E:23:73:7D:68:45:B5:C1:D0:44:53:44:97:58:95
X509v3 Authority Key Identifier:
keyid:B3:8D:2B:8F:4D:5B:B6:A5:3E:9B:41:92:61:04:81:A5:D8:81:65:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:28:c0:a2:69:ec:55:d2:89:95:3d:34:68:ae:31:20:09:dc:
f0:cd:89:5c:d2:42:e2:5f:dd:2b:07:fb:f2:41:4b:7a:0d:86:
19:90:4b:1d:94:d6:9b:b5:65:3e:33:ea:aa:06:17:27:b0:c7:
8b:63:6e:ea:09:42:96:c1:11:40:55:70:79:f5:4b:2b:5c:cf:
e4:ae:17:05:b6:d3:1a:bd:82:a9:35:db:a4:f4:e3:cb:4b:d5:
95:2b:37:59:d2:05:68:21:af:7c:07:6e:68:1d:82:74:65:6e:
83:06:c0:73:9e:a9:85:f2:04:80:76:3e:a4:19:d4:fe:ab:32:
b2:eb:33:b1:e8:dc:85:ce:30:60:4b:d6:86:49:7a:de:75:d5:
8d:b2:e6:2d:7b:f6:2d:94:53:01:13:8b:8f:80:0c:6e:e3:56:
b6:ea:c0:b3:5d:58:53:10:52:43:86:4e:f5:dc:1c:4e:80:c5:
a6:86:94:21:47:8b:52:8e:14:cb:6d:52:e8:11:6e:d1:22:10:
0c:eb:19:33:0d:6b:8f:0b:4a:02:41:d3:43:ff:cb:d3:60:5c:
19:85:1e:25:d9:24:26:d0:e3:8e:42:41:18:33:55:ac:ef:ad:
48:28:04:7d:d1:06:60:5a:0c:ed:10:2a:1f:52:b9:58:82:71:
9b:03:1c:b5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTEyQUQxMTAvBgNVBAUTKEIzOEQyQjhGNEQ1QkI2QTUzRTlCNDE5MjYxMDQ4MUE1
RDg4MTY1NDYwHhcNMjUwMTMwMTkzODQ0WhcNMjUwMjA2MTkzODQ0WjAYMRYwFAYD
VQQDEw02NzliZDU0NS05YjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtvYeEAmf3Z3wcye5MfjC6QdO+VmmFPNonzEFU5iYao2x6vZ6PMjf4QUq6P3r
zIEG6hABi/WO13nGwrbhdSX3cl79CknP2mUHfMab7tiyauYFWfDxdSt8CTlIRE/E
nH+3WerV/hxmgFr0DrPmczUjTO6FNPR+LvFhHOfI9F9aHVGZZQJBgKAGEtlts8/n
lOMGeMWiLuEp4nV1LXiXxsyPMEKVRtQ83dHA9fmBnI/0086g9BLo8miDPlmOEzlB
D05vDEcYHK3g788dfx/UuWZg7EEgVjYqbDNGhOXlzfsCxkwoKlPAw5LHNuGPj3B7
xpP62bu53q+nJz6i4bZZeTkiKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN6HunLD
PiNzfWhFtcHQRFNEl1iVMB8GA1UdIwQYMBaAFLONK49NW7alPptBkmEEgaXYgWVG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTJBRC8zOERBQTA2QzRC
MjExMUVBQjdBMDA1NThDNEY5QUUwMi9zNDByajAxYnRxVS1tMEdTWVFTQnBkaUJa
VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3M0MHJqMDFidHFVLW0wR1NZUVNCcGRpQlpVWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MTJBRC8zOERBQTA2QzRCMjExMUVBQjdBMDA1NThDNEY5QUUwMi9zNDByajAxYnRx
VS1tMEdTWVFTQnBkaUJaVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBHKMCiaexV0omVPTRorjEgCdzwzYlc0kLiX90rB/vyQUt6DYYZkEsd
lNabtWU+M+qqBhcnsMeLY27qCUKWwRFAVXB59UsrXM/krhcFttMavYKpNduk9OPL
S9WVKzdZ0gVoIa98B25oHYJ0ZW6DBsBznqmF8gSAdj6kGdT+qzKy6zOx6NyFzjBg
S9aGSXreddWNsuYte/YtlFMBE4uPgAxu41a26sCzXVhTEFJDhk713BxOgMWmhpQh
R4tSjhTLbVLoEW7RIhAM6xkzDWuPC0oCQdND/8vTYFwZhR4l2SQm0OOOQkEYM1Ws
761IKAR90QZgWgztECofUrlYgnGbAxy1
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:57:51 2025 by rpki-client