Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft
File: jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft (raw, json)
Hash identifier: sTr2Czlv9hpmPntCVVHBa23AdfG5zf5e3dbEVEuoSTI=
Subject key identifier: 41:F4:39:99:9A:B9:ED:75:1B:F2:41:04:AD:BF:49:A8:AE:8F:4B:0D
Authority key identifier: 8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB
Certificate issuer: /CN=A91E30BC/serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB
Certificate serial: 0243
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft
Manifest number: 023E
Signing time: Fri 31 Jan 2025 01:59:50 +0000
Manifest this update: Fri 31 Jan 2025 01:59:49 +0000
Manifest next update: Fri 07 Feb 2025 01:59:49 +0000
Files and hashes: 1: jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl (hash: J2d671GLmn+MvoIzHgJw+ZES9dc0WpMS7wCYW/l5dHY=)
2: EEEB4CA6449011EDACC30815C4F9AE02.roa (hash: 2uGJsNmTSbFLXz0NOaLE4ri/vtQdlsBjdpDRs3IdYUs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 579 (0x243)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E30BC/serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB
Validity
Not Before: Jan 31 01:59:49 2025 GMT
Not After : Feb 7 01:59:49 2025 GMT
Subject: CN=679c2e95-84c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:33:57:fb:54:6e:ce:d0:3b:23:49:03:44:8e:
e9:41:92:0d:db:49:44:bd:0d:88:e2:a6:bb:b1:be:
6d:31:e3:5b:1f:77:31:e1:da:e0:8e:19:7a:af:14:
71:87:7f:4d:d6:44:e5:bb:7b:76:be:f5:a5:6c:31:
ce:99:5d:b4:89:f5:55:1b:20:39:20:c2:a3:02:dc:
77:80:95:50:a9:b1:51:5b:b9:c2:31:63:0b:46:00:
3f:cd:38:5b:d5:8f:94:aa:cc:dd:f0:a5:62:ad:12:
bd:a6:d6:18:e1:91:5e:a8:f1:3b:60:76:1f:ec:f1:
90:0c:0b:b2:03:32:e1:b0:f4:9a:3a:d9:e5:ac:d7:
e6:d7:8a:7b:fa:7e:d2:a1:50:4d:5c:32:69:68:51:
86:74:84:0f:58:aa:db:29:a3:ff:f4:59:a1:71:b6:
ec:74:64:e0:47:53:34:dc:ec:4c:ab:ec:a9:40:ea:
57:86:4b:40:ee:3d:2e:21:97:03:ee:ec:b2:4b:55:
64:e4:2d:8d:bc:9e:1c:ac:d2:1e:cd:07:86:3c:28:
dc:c2:da:8e:7e:a5:9c:bd:eb:02:c2:cc:22:85:0c:
f6:54:6d:75:ec:78:61:d3:94:b1:96:b5:73:98:85:
97:82:cb:71:34:21:17:0e:43:2a:97:87:71:a9:e1:
b7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F4:39:99:9A:B9:ED:75:1B:F2:41:04:AD:BF:49:A8:AE:8F:4B:0D
X509v3 Authority Key Identifier:
keyid:8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7e:15:11:36:a3:74:ac:f5:52:2e:01:10:6c:ef:ba:60:f7:
83:f6:72:ab:3f:5e:9b:a5:05:b9:42:7f:c8:62:30:6e:9c:b7:
c9:ca:99:c4:06:6a:69:f8:b5:29:7e:61:8b:5b:d4:0b:9b:33:
26:d8:cc:05:af:91:5a:37:57:ed:45:f8:50:d3:03:af:ea:e1:
a1:fc:37:5e:ea:91:8b:47:33:0d:9a:0c:ca:51:4b:b1:58:7c:
61:ad:84:48:89:17:ec:e2:72:87:cc:9f:b7:fb:31:58:88:d8:
ed:08:d7:4d:68:2b:f0:fc:55:af:41:a2:e8:16:98:df:df:ce:
d5:40:3a:f3:bb:58:09:8c:9e:53:e2:28:7f:9b:63:92:a2:d2:
3b:81:dd:15:91:71:cf:1a:36:df:46:43:56:48:67:16:e9:16:
e8:77:b8:cc:db:c6:d1:c5:12:6e:d7:03:44:86:b8:ea:69:60:
be:ab:fb:a0:4b:f1:ab:4a:f5:ec:0e:fb:78:dc:1a:4a:1e:06:
cc:58:89:44:21:4e:0e:3f:83:ad:72:a2:28:a4:e8:95:6e:97:
a1:fe:d7:f7:49:78:c4:f3:a8:6d:ad:17:00:28:6f:5e:a7:5b:
5a:15:0f:3d:72:2d:c8:4c:1f:fb:59:dc:79:4d:55:bf:c0:df:
21:a7:6b:28
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTMwQkMxMTAvBgNVBAUTKDhEMTIwQUUxN0I5MUFEQjBGNkEyRTU5RTRFQTRFQTRE
MTc0NEM4REIwHhcNMjUwMTMxMDE1OTQ5WhcNMjUwMjA3MDE1OTQ5WjAYMRYwFAYD
VQQDEw02NzljMmU5NS04NGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxzNX+1RuztA7I0kDRI7pQZIN20lEvQ2I4qa7sb5tMeNbH3cx4drgjhl6rxRx
h39N1kTlu3t2vvWlbDHOmV20ifVVGyA5IMKjAtx3gJVQqbFRW7nCMWMLRgA/zThb
1Y+Uqszd8KVirRK9ptYY4ZFeqPE7YHYf7PGQDAuyAzLhsPSaOtnlrNfm14p7+n7S
oVBNXDJpaFGGdIQPWKrbKaP/9FmhcbbsdGTgR1M03OxMq+ypQOpXhktA7j0uIZcD
7uyyS1Vk5C2NvJ4crNIezQeGPCjcwtqOfqWcvesCwswihQz2VG117Hhh05SxlrVz
mIWXgstxNCEXDkMql4dxqeG3PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEH0OZma
ue11G/JBBK2/Saiuj0sNMB8GA1UdIwQYMBaAFI0SCuF7ka2w9qLlnk6k6k0XRMjb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzBCQy8zODU3REVGMjBF
MUYxMUVEODUzQUY1NjVDNEY5QUUwMi9qUklLNFh1UnJiRDJvdVdlVHFUcVRSZEV5
TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pSSUs0WHVScmJEMm91V2VUcVRxVFJkRXlOcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MzBCQy8zODU3REVGMjBFMUYxMUVEODUzQUY1NjVDNEY5QUUwMi9qUklLNFh1UnJi
RDJvdVdlVHFUcVRSZEV5TnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAMfhURNqN0rPVSLgEQbO+6YPeD9nKrP16bpQW5Qn/IYjBunLfJypnE
Bmpp+LUpfmGLW9QLmzMm2MwFr5FaN1ftRfhQ0wOv6uGh/Dde6pGLRzMNmgzKUUux
WHxhrYRIiRfs4nKHzJ+3+zFYiNjtCNdNaCvw/FWvQaLoFpjf387VQDrzu1gJjJ5T
4ih/m2OSotI7gd0VkXHPGjbfRkNWSGcW6Rbod7jM28bRxRJu1wNEhrjqaWC+q/ug
S/GrSvXsDvt43BpKHgbMWIlEIU4OP4OtcqIopOiVbpeh/tf3SXjE86htrRcAKG9e
p1taFQ89ci3ITB/7Wdx5TVW/wN8hp2so
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:10:18 2025 by rpki-client