Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft
File: lQJWKPFDQQRhRqwgujJGFEYanMM.mft (raw, json)
Hash identifier: PAFJzRoNhe2TGBdo+IrYGIdJHNo8pcltETiVBLqmvtg=
Subject key identifier: 1C:91:61:B5:FC:82:10:42:E0:A0:D6:15:68:D0:46:64:13:72:9C:3C
Authority key identifier: 95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3
Certificate issuer: /CN=A91E5A9F/serialNumber=95025628F14341046146AC20BA324614461A9CC3
Certificate serial: 0645
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft
Manifest number: 1187
Signing time: Fri 31 Jan 2025 17:10:51 +0000
Manifest this update: Fri 31 Jan 2025 17:10:50 +0000
Manifest next update: Fri 07 Feb 2025 17:10:50 +0000
Files and hashes: 1: lQJWKPFDQQRhRqwgujJGFEYanMM.crl (hash: WxVhwWmBppqNr0GzGqWaezasAWKdbwyEiETbxEh3sKk=)
2: E4BB55347C4E11EBB889AF7EC4F9AE02.roa (hash: j4Rp5D2+LCtQywvaF1YDJd+cLnUdbw+y2x0d8ZW0p8Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1605 (0x645)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5A9F/serialNumber=95025628F14341046146AC20BA324614461A9CC3
Validity
Not Before: Jan 31 17:10:50 2025 GMT
Not After : Feb 7 17:10:50 2025 GMT
Subject: CN=679d041a-5c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:76:7a:fd:f1:46:fd:13:d1:6c:08:40:c1:ca:
93:23:31:29:44:92:30:99:95:80:98:ac:c6:5f:a4:
dc:3e:e6:9f:d8:77:13:24:df:fb:86:d4:69:67:ed:
7c:fb:ce:df:77:6a:af:f1:46:84:18:00:d3:e9:b1:
a7:fa:f2:5d:eb:f2:8d:09:f6:87:79:e4:cf:db:a8:
db:57:5b:98:f8:1f:eb:1c:41:10:ac:9e:25:c5:da:
f5:81:f6:cc:c7:dc:fc:d5:1f:4c:b2:69:82:b8:6c:
75:a7:20:b6:b4:22:f0:c7:c5:3e:e0:79:d1:0e:79:
17:c1:83:87:85:72:96:1c:27:e5:91:da:2c:44:c4:
25:30:64:22:68:9b:f3:9f:56:88:46:fc:82:c7:50:
45:80:ab:f4:84:3a:ff:d9:59:d4:b3:39:ab:a3:a1:
26:82:16:06:16:6a:a8:89:98:21:b5:34:d4:45:15:
17:ac:dd:b4:72:ce:87:26:93:17:79:ad:b5:fd:f9:
d8:19:16:e0:42:4d:ea:17:68:97:21:a1:7b:69:88:
c3:9a:d4:e8:18:c7:27:17:9a:64:d1:0f:c6:3e:3d:
15:d6:01:dd:0b:f8:d3:82:60:0b:c8:0d:ff:9b:25:
8f:37:d7:3c:d1:03:45:56:b6:de:5c:12:51:72:f1:
01:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:91:61:B5:FC:82:10:42:E0:A0:D6:15:68:D0:46:64:13:72:9C:3C
X509v3 Authority Key Identifier:
keyid:95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:22:dd:e3:50:81:ce:2c:74:09:c9:c6:c5:2f:6d:9f:26:9c:
85:2c:e2:0c:c6:32:66:95:04:4a:53:91:d8:68:9c:7d:c0:13:
5b:48:9a:01:17:7e:1e:5e:2c:5c:1b:df:2f:1a:d0:f1:4e:69:
87:ff:07:be:6d:dd:ac:9f:a1:2c:e4:16:62:23:ca:c8:9a:c4:
97:1d:f1:05:7b:dc:b9:34:cc:fb:31:dd:6c:c5:bd:2c:11:17:
5c:b6:a9:5b:13:63:64:a0:9b:dd:58:9c:09:84:fc:f3:7d:68:
2d:45:f3:d4:fb:82:89:bf:49:f0:8e:9f:ad:86:be:c9:56:6e:
c1:2d:ad:12:ec:7c:63:01:92:93:cd:46:a2:e2:7a:27:8d:cc:
d5:bf:22:37:26:7f:d0:e9:bd:e3:0e:fa:ac:fd:45:14:c7:b0:
fb:76:d2:d7:74:2a:29:0f:50:75:50:00:cb:43:eb:02:f8:31:
27:86:bc:1a:a1:e2:e7:81:2c:91:38:a2:fb:d1:81:6d:b6:f7:
35:48:66:29:d9:58:3f:7a:74:3a:1a:f4:33:8a:35:26:86:2b:
27:90:e8:d5:98:de:ab:01:c3:4e:3d:51:fc:3b:50:1c:1b:1f:
c5:4e:ef:c2:9b:fd:c3:9a:aa:d7:76:ad:8f:d1:0e:65:0d:3e:
0b:2b:61:eb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTVBOUYxMTAvBgNVBAUTKDk1MDI1NjI4RjE0MzQxMDQ2MTQ2QUMyMEJBMzI0NjE0
NDYxQTlDQzMwHhcNMjUwMTMxMTcxMDUwWhcNMjUwMjA3MTcxMDUwWjAYMRYwFAYD
VQQDEw02NzlkMDQxYS01YzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA/XZ6/fFG/RPRbAhAwcqTIzEpRJIwmZWAmKzGX6TcPuaf2HcTJN/7htRpZ+18
+87fd2qv8UaEGADT6bGn+vJd6/KNCfaHeeTP26jbV1uY+B/rHEEQrJ4lxdr1gfbM
x9z81R9MsmmCuGx1pyC2tCLwx8U+4HnRDnkXwYOHhXKWHCflkdosRMQlMGQiaJvz
n1aIRvyCx1BFgKv0hDr/2VnUszmro6EmghYGFmqoiZghtTTURRUXrN20cs6HJpMX
ea21/fnYGRbgQk3qF2iXIaF7aYjDmtToGMcnF5pk0Q/GPj0V1gHdC/jTgmALyA3/
myWPN9c80QNFVrbeXBJRcvEB9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFByRYbX8
ghBC4KDWFWjQRmQTcpw8MB8GA1UdIwQYMBaAFJUCVijxQ0EEYUasILoyRhRGGpzD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUE5Ri82NzM2RjMzNEUz
M0ExMUU4ODYxMTc3ODBDNEY5QUUwMi9sUUpXS1BGRFFRUmhScXdndWpKR0ZFWWFu
TU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xRSldLUEZEUVFSaFJxd2d1akpHRkVZYW5NTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NUE5Ri82NzM2RjMzNEUzM0ExMUU4ODYxMTc3ODBDNEY5QUUwMi9sUUpXS1BGRFFR
UmhScXdndWpKR0ZFWWFuTU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDAIt3jUIHOLHQJycbFL22fJpyFLOIMxjJmlQRKU5HYaJx9wBNbSJoB
F34eXixcG98vGtDxTmmH/we+bd2sn6Es5BZiI8rImsSXHfEFe9y5NMz7Md1sxb0s
ERdctqlbE2NkoJvdWJwJhPzzfWgtRfPU+4KJv0nwjp+thr7JVm7BLa0S7HxjAZKT
zUai4nonjczVvyI3Jn/Q6b3jDvqs/UUUx7D7dtLXdCopD1B1UADLQ+sC+DEnhrwa
oeLngSyROKL70YFttvc1SGYp2Vg/enQ6GvQzijUmhisnkOjVmN6rAcNOPVH8O1Ac
Gx/FTu/Cm/3DmqrXdq2P0Q5lDT4LK2Hr
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:21 2025 by rpki-client