Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
File: DtUqdvMcJCF0oq0ZSByVcDty4jY.mft (raw, json)
Hash identifier: AUy9E51V3hzRaBo7namMp0fFxUMqMgEplOrE4cjPPNE=
Subject key identifier: 25:FE:9B:4D:2A:1C:1A:B7:69:E4:3B:F7:CC:38:93:DB:98:AB:CB:2F
Authority key identifier: 0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36
Certificate issuer: /CN=A91E33D7/serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236
Certificate serial: 0DC8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
Manifest number: 0DBF
Signing time: Fri 31 Jan 2025 17:52:34 +0000
Manifest this update: Fri 31 Jan 2025 17:52:33 +0000
Manifest next update: Fri 07 Feb 2025 17:52:33 +0000
Files and hashes: 1: DtUqdvMcJCF0oq0ZSByVcDty4jY.crl (hash: PXR1XwbW3NSRt/Q3mXJkSey02x/S4lZqZpQ3a4CYr18=)
2: C26576D4F4ED11E9ACC51713C4F9AE02.roa (hash: leeMqNjzFzLxyR/PuwyeZTmIKl73aTot0VdgEtIi1fo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3528 (0xdc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E33D7/serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236
Validity
Not Before: Jan 31 17:52:33 2025 GMT
Not After : Feb 7 17:52:33 2025 GMT
Subject: CN=679d0de2-4a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e3:fe:51:6c:e0:9f:c1:7d:60:91:59:a1:29:
d5:4d:58:8b:6d:0a:bb:1e:dc:df:2e:9a:4c:df:16:
f6:cd:64:fc:ee:73:af:8f:e3:9e:4b:31:06:65:84:
4a:cb:12:2d:a3:43:15:b8:30:0b:d8:75:e9:d1:c6:
be:1d:ed:fb:65:b3:12:95:ba:9f:3b:6d:32:cf:8a:
fc:84:64:29:02:23:54:a7:79:9d:b1:05:1e:fb:51:
30:d0:45:ff:17:28:46:78:5e:9e:d2:79:5c:bd:79:
37:a6:69:9e:96:fb:c3:8f:91:84:c1:0a:4f:a7:d6:
18:5a:de:e6:8e:3b:98:9a:99:dd:4c:c3:2f:eb:a6:
f3:62:8a:cd:a4:27:5f:78:b4:f5:04:f0:c9:b8:d1:
8e:c3:ed:f8:05:f7:24:6a:c1:23:30:7e:e4:d2:79:
a9:ed:7a:67:17:6b:1c:8b:ff:6e:ed:72:2e:a9:af:
d8:4c:a4:ad:b8:a4:1d:61:f8:10:3a:f6:5b:c3:72:
74:81:8f:f6:e5:1c:5e:b8:9e:ac:e5:95:ce:fd:52:
2a:fe:d3:fe:c9:f6:94:14:b8:30:7a:f0:2b:82:f3:
36:f9:dd:5a:b3:2a:53:3e:74:86:89:56:78:06:ef:
fc:91:12:da:9d:09:e4:74:43:ab:b8:50:e9:0d:d3:
83:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FE:9B:4D:2A:1C:1A:B7:69:E4:3B:F7:CC:38:93:DB:98:AB:CB:2F
X509v3 Authority Key Identifier:
keyid:0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:aa:cc:77:1d:b2:6c:b2:84:81:bd:36:24:55:06:d3:04:0f:
8a:92:44:b9:13:20:02:7e:ca:39:f2:e0:29:22:9f:f6:e2:ed:
56:58:d7:47:d5:af:72:d2:8b:3f:a9:ce:2a:01:ec:35:eb:dd:
3b:86:31:a4:47:74:bc:b0:39:e1:5e:78:b7:dd:d5:5f:13:08:
d3:4d:90:f8:fa:e7:0f:f8:e7:93:74:4a:f0:f4:f3:35:bf:27:
b2:e5:a0:f7:47:9d:1c:3f:35:dd:f7:55:d7:e1:f1:85:41:45:
a2:1e:1b:81:13:50:72:f9:f6:8a:4d:98:c7:21:be:18:98:03:
29:00:72:f2:25:48:72:41:58:8a:0c:18:6c:11:8a:f9:0a:d1:
cd:19:7e:02:9b:21:00:ab:7d:bd:d1:c4:62:7b:6d:e0:03:df:
67:f3:28:19:cc:46:bc:b1:e0:ac:2b:63:4d:b0:e9:a0:df:1c:
73:bc:d3:4e:f5:33:76:4e:85:99:67:ff:6a:c2:b1:11:6b:e3:
5d:12:19:de:6f:ff:13:35:41:1c:b2:81:23:26:ea:7f:8c:aa:
57:63:d7:b1:1a:f7:ac:4b:a0:11:d7:a0:f1:f6:1b:8a:a2:91:
15:59:6e:56:75:d4:5a:e2:d0:80:aa:16:e5:91:47:b3:51:9e:
96:8e:e2:95
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTMzRDcxMTAvBgNVBAUTKDBFRDUyQTc2RjMxQzI0MjE3NEEyQUQxOTQ4MUM5NTcw
M0I3MkUyMzYwHhcNMjUwMTMxMTc1MjMzWhcNMjUwMjA3MTc1MjMzWjAYMRYwFAYD
VQQDEw02NzlkMGRlMi00YTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuOP+UWzgn8F9YJFZoSnVTViLbQq7HtzfLppM3xb2zWT87nOvj+OeSzEGZYRK
yxIto0MVuDAL2HXp0ca+He37ZbMSlbqfO20yz4r8hGQpAiNUp3mdsQUe+1Ew0EX/
FyhGeF6e0nlcvXk3pmmelvvDj5GEwQpPp9YYWt7mjjuYmpndTMMv66bzYorNpCdf
eLT1BPDJuNGOw+34BfckasEjMH7k0nmp7XpnF2sci/9u7XIuqa/YTKStuKQdYfgQ
OvZbw3J0gY/25RxeuJ6s5ZXO/VIq/tP+yfaUFLgwevArgvM2+d1asypTPnSGiVZ4
Bu/8kRLanQnkdEOruFDpDdODjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCX+m00q
HBq3aeQ798w4k9uYq8svMB8GA1UdIwQYMBaAFA7VKnbzHCQhdKKtGUgclXA7cuI2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzNENy9EQzdEODg2NEFF
QjAxMUU5OEQwOEUxM0NDNEY5QUUwMi9EdFVxZHZNY0pDRjBvcTBaU0J5VmNEdHk0
alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0R0VXFkdk1jSkNGMG9xMFpTQnlWY0R0eTRqWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MzNENy9EQzdEODg2NEFFQjAxMUU5OEQwOEUxM0NDNEY5QUUwMi9EdFVxZHZNY0pD
RjBvcTBaU0J5VmNEdHk0alkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDNqsx3HbJssoSBvTYkVQbTBA+KkkS5EyACfso58uApIp/24u1WWNdH
1a9y0os/qc4qAew16907hjGkR3S8sDnhXni33dVfEwjTTZD4+ucP+OeTdErw9PM1
vyey5aD3R50cPzXd91XX4fGFQUWiHhuBE1By+faKTZjHIb4YmAMpAHLyJUhyQViK
DBhsEYr5CtHNGX4CmyEAq3290cRie23gA99n8ygZzEa8seCsK2NNsOmg3xxzvNNO
9TN2ToWZZ/9qwrERa+NdEhneb/8TNUEcsoEjJup/jKpXY9exGvesS6AR16Dx9huK
opEVWW5WddRa4tCAqhblkUezUZ6WjuKV
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:03:49 2025 by rpki-client