Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft
File: 98erVUq_Hcr4wXnBS8h6vPi3dg4.mft (raw, json)
Hash identifier: 82NSXLE/57f99eFThnlo+pMZkMU9Ma2dO+Zngod54DE=
Subject key identifier: E7:47:3B:50:1C:E9:44:10:E2:62:5B:6B:A2:18:B3:E9:24:AB:FB:A4
Authority key identifier: F7:C7:AB:55:4A:BF:1D:CA:F8:C1:79:C1:4B:C8:7A:BC:F8:B7:76:0E
Certificate issuer: /CN=A91E15EA/serialNumber=F7C7AB554ABF1DCAF8C179C14BC87ABCF8B7760E
Certificate serial: 0271
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft
Manifest number: 026C
Signing time: Fri 31 Jan 2025 01:46:51 +0000
Manifest this update: Fri 31 Jan 2025 01:46:51 +0000
Manifest next update: Fri 07 Feb 2025 01:46:51 +0000
Files and hashes: 1: 98erVUq_Hcr4wXnBS8h6vPi3dg4.crl (hash: P+CwJ6st4uFum3UA+VtjEi9RtWMAmhmapWsvVuDRWBI=)
2: A60C101AFB8411ECB7FF456FC4F9AE02.roa (hash: KUkDUfBaYO7x5r7GKr4hhdrUQHUWyKfXeCnKjTowHew=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 625 (0x271)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E15EA/serialNumber=F7C7AB554ABF1DCAF8C179C14BC87ABCF8B7760E
Validity
Not Before: Jan 31 01:46:51 2025 GMT
Not After : Feb 7 01:46:51 2025 GMT
Subject: CN=679c2b8b-ce75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b6:c5:9a:73:7b:7b:b2:b8:ed:66:d5:02:dc:
29:a5:26:59:e9:ad:6b:9c:56:4a:91:b4:70:9e:32:
fd:f0:02:da:e1:62:aa:7a:8a:eb:97:8b:d4:ee:d8:
b9:b8:65:a5:e6:24:bf:1f:e7:b4:9d:d2:6c:8c:11:
7d:fb:71:f0:b6:90:6b:17:52:80:69:73:e1:82:cc:
43:2d:06:06:b0:1e:f3:1c:12:55:83:70:67:ae:43:
0e:d1:16:6b:7c:87:e5:01:5e:a0:34:be:f9:c4:f0:
ce:d7:41:ce:d3:d3:3c:ab:c3:a1:59:66:c1:05:cc:
d3:8f:fc:52:f4:4d:2a:68:fa:5b:74:07:09:aa:d2:
f2:b4:2b:19:a6:3e:86:f5:99:c2:15:e2:c8:33:54:
a9:a7:49:f5:b1:b0:00:de:89:1b:26:2e:6e:fa:9a:
6e:c9:68:0a:ec:90:97:09:90:59:9b:f6:e9:a4:95:
de:ec:95:07:b6:1d:13:4c:c9:8a:62:aa:92:d3:11:
e2:d6:ce:4d:0f:91:30:35:10:15:e1:87:f7:81:a1:
e5:fd:a0:4e:a9:af:a1:58:a5:53:6c:fe:87:19:6d:
f3:77:22:5a:23:67:7a:2e:19:2e:ec:4a:6c:74:ee:
d7:1e:09:14:c2:a5:b1:90:25:0d:8a:8b:d4:bd:3b:
df:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:47:3B:50:1C:E9:44:10:E2:62:5B:6B:A2:18:B3:E9:24:AB:FB:A4
X509v3 Authority Key Identifier:
keyid:F7:C7:AB:55:4A:BF:1D:CA:F8:C1:79:C1:4B:C8:7A:BC:F8:B7:76:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:0e:74:e6:6f:57:e9:bd:68:5e:54:42:22:71:45:ff:d5:6e:
70:81:cf:11:30:d1:23:96:b4:08:1c:10:35:11:5f:11:5a:b2:
84:a0:b7:85:d7:0c:cb:ca:1a:8a:64:27:ad:de:30:be:aa:26:
03:06:2b:ce:d7:64:4d:b3:d6:53:74:6d:eb:8e:4c:59:cf:e4:
d1:ac:83:cc:bb:a0:fd:2c:93:63:5b:e9:6c:75:14:31:ee:5d:
bf:3c:36:c9:7b:bb:87:fa:36:98:be:19:c8:05:d0:c7:1a:44:
e4:72:d3:1f:e8:16:a2:1a:cc:dc:b1:47:66:d8:6b:b9:25:a0:
e0:5d:b8:af:3c:fe:31:e5:8e:0a:aa:0f:96:23:c4:ca:00:12:
71:26:f5:26:5f:f7:e8:66:b6:e8:c0:0e:bc:54:00:d1:53:62:
18:6f:b6:cd:65:d1:60:02:1c:94:2a:c4:88:de:e7:ca:9d:10:
c1:85:4a:f7:cf:a5:ee:42:36:38:00:c7:cf:be:46:20:55:a8:
e4:7f:6e:d4:16:df:b2:22:62:85:23:09:20:ec:fd:26:5d:41:
6f:1a:78:5d:83:b4:37:01:3f:9a:9d:de:a5:f4:80:1f:cc:a2:
52:be:f4:5c:65:1d:b2:83:61:9b:66:9e:fe:06:04:71:b0:44:
c2:e1:e4:e0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTE1RUExMTAvBgNVBAUTKEY3QzdBQjU1NEFCRjFEQ0FGOEMxNzlDMTRCQzg3QUJD
RjhCNzc2MEUwHhcNMjUwMTMxMDE0NjUxWhcNMjUwMjA3MDE0NjUxWjAYMRYwFAYD
VQQDEw02NzljMmI4Yi1jZTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw7bFmnN7e7K47WbVAtwppSZZ6a1rnFZKkbRwnjL98ALa4WKqeorrl4vU7ti5
uGWl5iS/H+e0ndJsjBF9+3HwtpBrF1KAaXPhgsxDLQYGsB7zHBJVg3BnrkMO0RZr
fIflAV6gNL75xPDO10HO09M8q8OhWWbBBczTj/xS9E0qaPpbdAcJqtLytCsZpj6G
9ZnCFeLIM1Spp0n1sbAA3okbJi5u+ppuyWgK7JCXCZBZm/bppJXe7JUHth0TTMmK
YqqS0xHi1s5ND5EwNRAV4Yf3gaHl/aBOqa+hWKVTbP6HGW3zdyJaI2d6Lhku7Eps
dO7XHgkUwqWxkCUNiovUvTvftQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOdHO1Ac
6UQQ4mJba6IYs+kkq/ukMB8GA1UdIwQYMBaAFPfHq1VKvx3K+MF5wUvIerz4t3YO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTVFQS9GMUE3RTJGNEZC
ODExMUVDOUM0MTI2NDRDNEY5QUUwMi85OGVyVlVxX0hjcjR3WG5CUzhoNnZQaTNk
ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzk4ZXJWVXFfSGNyNHdYbkJTOGg2dlBpM2RnNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MTVFQS9GMUE3RTJGNEZCODExMUVDOUM0MTI2NDRDNEY5QUUwMi85OGVyVlVxX0hj
cjR3WG5CUzhoNnZQaTNkZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCXDnTmb1fpvWheVEIicUX/1W5wgc8RMNEjlrQIHBA1EV8RWrKEoLeF
1wzLyhqKZCet3jC+qiYDBivO12RNs9ZTdG3rjkxZz+TRrIPMu6D9LJNjW+lsdRQx
7l2/PDbJe7uH+jaYvhnIBdDHGkTkctMf6BaiGszcsUdm2Gu5JaDgXbivPP4x5Y4K
qg+WI8TKABJxJvUmX/foZrbowA68VADRU2IYb7bNZdFgAhyUKsSI3ufKnRDBhUr3
z6XuQjY4AMfPvkYgVajkf27UFt+yImKFIwkg7P0mXUFvGnhdg7Q3AT+and6l9IAf
zKJSvvRcZR2yg2GbZp7+BgRxsETC4eTg
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:15:42 2025 by rpki-client