Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft
File: 40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft (raw, json)
Hash identifier: 7uiatEpemYoXLJgCIffPeVy5OoagCIMDvQ8VyiQuT3M=
Subject key identifier: 1E:D0:B0:0F:7F:1F:86:B9:81:9E:62:8E:9A:CB:75:7E:60:3E:04:63
Authority key identifier: E3:43:84:05:47:64:02:A3:AA:8F:98:7C:3A:FA:06:90:D9:6E:D4:74
Certificate issuer: /CN=A91E9406/serialNumber=E3438405476402A3AA8F987C3AFA0690D96ED474
Certificate serial: 0227
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft
Manifest number: 0222
Signing time: Fri 31 Jan 2025 02:06:21 +0000
Manifest this update: Fri 31 Jan 2025 02:06:21 +0000
Manifest next update: Fri 07 Feb 2025 02:06:20 +0000
Files and hashes: 1: 40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl (hash: 0gXtl85MTN7VSI0AYdV//sZRKmIjSGIxbx7u/6062mI=)
2: F76D8A5C170D11EDA7EC2F87C4F9AE02.roa (hash: bEQWXluQGkjHtzXhhM0LUOXQhLNvUEvMyEXkpICCpAQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 551 (0x227)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9406/serialNumber=E3438405476402A3AA8F987C3AFA0690D96ED474
Validity
Not Before: Jan 31 02:06:21 2025 GMT
Not After : Feb 7 02:06:20 2025 GMT
Subject: CN=679c301d-821a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:70:2e:c2:9c:5d:36:3a:ca:77:4e:44:05:52:
cb:30:01:e7:bb:9e:b8:14:9b:6e:87:92:5a:b6:79:
60:53:e9:76:2f:e4:10:4f:34:b8:bc:e0:74:95:18:
10:92:24:2a:71:ee:52:0a:22:41:14:1f:2d:13:cb:
2e:84:19:4d:fe:99:26:43:32:e5:a4:8f:86:e3:fe:
46:65:23:33:72:e9:fa:ef:30:22:92:59:5c:9b:a2:
f0:29:e3:f5:9d:06:bd:19:a5:d1:00:de:6e:46:72:
56:8d:8d:2e:f1:9f:05:62:de:b8:97:6e:7b:a0:59:
9e:84:f5:e5:ba:a2:88:76:77:7f:62:29:8a:f7:d8:
19:49:a7:a7:09:5a:cd:87:34:1c:9b:c3:76:b2:e1:
d6:82:ae:c7:7f:13:85:d0:dd:1d:3f:a1:17:12:41:
4b:bb:d0:1a:a0:84:b7:ed:b8:e5:f3:ee:22:7d:a3:
37:92:17:59:12:c4:63:1d:95:a2:e2:64:70:81:cb:
2b:87:3b:42:99:d7:77:46:f2:60:6e:95:96:ba:63:
51:1d:2e:fc:01:8e:65:a0:77:df:7e:08:54:fb:f9:
66:79:4f:7b:4c:fd:d7:76:dd:b8:88:a1:0e:a3:1e:
e6:29:ee:87:b4:23:f9:28:32:58:25:3f:51:4c:11:
2c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D0:B0:0F:7F:1F:86:B9:81:9E:62:8E:9A:CB:75:7E:60:3E:04:63
X509v3 Authority Key Identifier:
keyid:E3:43:84:05:47:64:02:A3:AA:8F:98:7C:3A:FA:06:90:D9:6E:D4:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:da:a8:4b:cc:9f:31:23:c7:d9:c4:39:19:9e:b4:32:c4:d2:
0f:4d:3c:83:15:dd:f5:54:28:d3:d8:0c:5f:8f:79:ee:99:06:
cd:1d:14:8f:2f:44:3a:6a:25:65:48:bd:52:ed:f7:c7:87:d3:
61:5f:67:f3:81:5d:8e:62:85:7c:cb:8a:67:95:93:7e:c1:ae:
90:8f:16:1b:48:08:97:ab:fd:ec:57:73:7d:6e:53:6d:d0:9c:
9b:46:8d:7e:01:a0:ec:e6:f7:84:54:a3:3f:da:18:0f:2d:4f:
26:24:48:45:87:78:98:62:57:a6:58:31:aa:ad:f3:8c:b7:9a:
2c:96:c1:a4:05:4a:3e:45:80:7f:5d:d7:f9:33:07:4c:aa:8c:
d0:5f:df:ac:d1:7a:31:77:c7:dc:a9:c5:31:d1:a5:16:82:0e:
37:fb:4f:6e:db:d5:c3:4f:24:b1:98:97:f6:e0:b1:76:83:3c:
37:b1:31:a3:fd:3b:36:47:ba:dd:8c:a2:7d:8a:c1:01:1d:98:
1c:39:cc:ad:f9:d4:22:25:52:a1:ed:bf:c7:90:ba:e3:02:8d:
c8:1f:64:41:9d:de:16:ef:94:ce:15:06:19:26:24:af:77:40:
7b:64:7f:16:45:9c:97:8d:24:f2:83:96:a6:fe:16:9e:61:4e:
e6:71:41:81
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTk0MDYxMTAvBgNVBAUTKEUzNDM4NDA1NDc2NDAyQTNBQThGOTg3QzNBRkEwNjkw
RDk2RUQ0NzQwHhcNMjUwMTMxMDIwNjIxWhcNMjUwMjA3MDIwNjIwWjAYMRYwFAYD
VQQDEw02NzljMzAxZC04MjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxXAuwpxdNjrKd05EBVLLMAHnu564FJtuh5JatnlgU+l2L+QQTzS4vOB0lRgQ
kiQqce5SCiJBFB8tE8suhBlN/pkmQzLlpI+G4/5GZSMzcun67zAikllcm6LwKeP1
nQa9GaXRAN5uRnJWjY0u8Z8FYt64l257oFmehPXluqKIdnd/YimK99gZSaenCVrN
hzQcm8N2suHWgq7HfxOF0N0dP6EXEkFLu9AaoIS37bjl8+4ifaM3khdZEsRjHZWi
4mRwgcsrhztCmdd3RvJgbpWWumNRHS78AY5loHfffghU+/lmeU97TP3Xdt24iKEO
ox7mKe6HtCP5KDJYJT9RTBEsVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7QsA9/
H4a5gZ5ijprLdX5gPgRjMB8GA1UdIwQYMBaAFONDhAVHZAKjqo+YfDr6BpDZbtR0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTQwNi85ODY4QTlGMDE3
MDkxMUVEQjZGODA4NjhDNEY5QUUwMi80ME9FQlVka0FxT3FqNWg4T3ZvR2tObHUx
SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzQwT0VCVWRrQXFPcWo1aDhPdm9Ha05sdTFIUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OTQwNi85ODY4QTlGMDE3MDkxMUVEQjZGODA4NjhDNEY5QUUwMi80ME9FQlVka0Fx
T3FqNWg4T3ZvR2tObHUxSFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBO2qhLzJ8xI8fZxDkZnrQyxNIPTTyDFd31VCjT2Axfj3numQbNHRSP
L0Q6aiVlSL1S7ffHh9NhX2fzgV2OYoV8y4pnlZN+wa6QjxYbSAiXq/3sV3N9blNt
0JybRo1+AaDs5veEVKM/2hgPLU8mJEhFh3iYYlemWDGqrfOMt5oslsGkBUo+RYB/
Xdf5MwdMqozQX9+s0Xoxd8fcqcUx0aUWgg43+09u29XDTySxmJf24LF2gzw3sTGj
/Ts2R7rdjKJ9isEBHZgcOcyt+dQiJVKh7b/HkLrjAo3IH2RBnd4W75TOFQYZJiSv
d0B7ZH8WRZyXjSTyg5am/haeYU7mcUGB
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:06:03 2025 by rpki-client