Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft
File: oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft (raw, json)
Hash identifier: /RgjakVZYKIReDhztrnRDhlb6PsIl550URlNsS1gOoA=
Subject key identifier: 4D:4E:D5:71:80:3F:8C:91:B2:48:31:ED:CB:26:7B:B3:2E:D5:92:98
Authority key identifier: A2:24:36:84:22:3D:2C:25:C6:AF:17:6A:5F:02:FA:02:B2:4F:68:0B
Certificate issuer: /CN=A91E953B/serialNumber=A2243684223D2C25C6AF176A5F02FA02B24F680B
Certificate serial: F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft
Manifest number: F3
Signing time: Fri 31 Jan 2025 04:22:38 +0000
Manifest this update: Fri 31 Jan 2025 04:22:37 +0000
Manifest next update: Fri 07 Feb 2025 04:22:37 +0000
Files and hashes: 1: oiQ2hCI9LCXGrxdqXwL6ArJPaAs.crl (hash: oBG/hUSqQc6XM8mTgMMGbT2k78kPCzX/EwJdEH5FJW8=)
2: 12E1FD886C9C11EE9F3C5653C4F9AE02.roa (hash: QQ5QrwGTURdTMG/7o8+lIRwrf/ztbEh4ekM9cA/bz/4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E953B/serialNumber=A2243684223D2C25C6AF176A5F02FA02B24F680B
Validity
Not Before: Jan 31 04:22:37 2025 GMT
Not After : Feb 7 04:22:37 2025 GMT
Subject: CN=679c500d-3596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:21:6a:a8:30:55:78:a2:b6:d9:f6:22:a3:d0:
40:20:94:aa:c4:e5:d7:1e:24:10:62:90:4a:c7:12:
92:02:f1:aa:58:63:84:e3:32:8b:31:0d:f7:7d:09:
9a:a0:3d:ac:03:a1:2e:2c:dd:74:ed:9e:72:66:a9:
1d:57:32:3f:38:89:dc:20:38:38:bb:02:06:c7:43:
e8:43:52:bc:2d:47:38:b5:6b:9b:d0:46:51:a8:38:
79:0d:30:f5:cc:7c:34:46:3a:1e:5a:f1:8c:7d:13:
ce:d2:59:0e:be:6d:6b:bf:65:67:03:3e:5b:6f:95:
b1:ce:55:e7:fd:42:40:2c:6c:d7:48:32:ef:68:dc:
11:72:78:28:5a:ed:13:e7:d8:07:82:fc:9d:ff:86:
07:66:f1:ea:ee:70:2b:a6:0c:f8:7b:4b:a1:d1:5e:
75:46:64:9a:65:60:ab:be:22:42:11:c5:6d:67:ca:
8d:da:05:4a:fb:4b:71:c5:c9:f8:1b:6a:d1:51:fc:
1c:68:ee:33:22:2a:6e:bb:ce:74:17:f0:18:1a:b1:
8d:24:ed:a3:86:61:8e:fd:92:a2:8d:a1:ef:29:81:
17:1e:a0:73:e2:44:27:04:7c:4c:3e:10:bf:5f:d1:
ee:ab:92:47:d5:a6:45:96:8d:b2:e7:30:a1:cb:45:
c4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4E:D5:71:80:3F:8C:91:B2:48:31:ED:CB:26:7B:B3:2E:D5:92:98
X509v3 Authority Key Identifier:
keyid:A2:24:36:84:22:3D:2C:25:C6:AF:17:6A:5F:02:FA:02:B2:4F:68:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:d2:68:78:d2:f4:03:c2:77:52:f3:70:6b:82:66:7d:e0:36:
ba:29:62:7d:93:37:f7:9d:4d:14:2d:aa:37:6b:93:08:17:b6:
05:2b:87:50:96:d3:7e:69:31:e5:29:33:1e:a4:e0:55:df:8c:
eb:e3:7b:12:a8:3f:ee:34:54:ca:15:0c:8d:4e:d9:c2:8a:cc:
a8:7f:f4:2f:76:98:07:73:80:b7:2c:c4:ef:45:5b:5b:e2:80:
ca:ef:eb:e9:c0:ff:ae:4c:40:34:e8:57:82:cd:b4:2c:2c:6a:
5a:07:cf:22:ed:74:a5:02:cb:29:d2:1a:6a:51:fa:1b:de:73:
19:b3:35:e1:b6:66:2c:65:51:7c:2a:58:0d:d7:25:79:7c:d2:
3b:d7:33:91:fe:c4:27:95:26:70:1e:8f:ca:a6:04:c9:3b:ec:
0f:82:7b:1e:fb:d7:39:f9:1a:1a:d3:6c:5b:b1:58:e2:ca:aa:
cd:d7:93:03:ca:fc:e5:38:2b:6a:32:bc:16:6d:3c:72:89:e1:
fd:d4:5c:d6:67:e6:1f:2a:e0:c6:a7:8f:3d:c7:d1:85:36:cc:
4e:d6:7d:03:73:f6:af:32:ce:0a:b5:9c:d4:56:80:48:70:e2:
71:75:1f:ca:c3:7f:75:e9:8b:8b:98:cd:1d:50:05:1a:56:fb:
2e:c3:f1:c7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTk1M0IxMTAvBgNVBAUTKEEyMjQzNjg0MjIzRDJDMjVDNkFGMTc2QTVGMDJGQTAy
QjI0RjY4MEIwHhcNMjUwMTMxMDQyMjM3WhcNMjUwMjA3MDQyMjM3WjAYMRYwFAYD
VQQDEw02NzljNTAwZC0zNTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxCFqqDBVeKK22fYio9BAIJSqxOXXHiQQYpBKxxKSAvGqWGOE4zKLMQ33fQma
oD2sA6EuLN107Z5yZqkdVzI/OIncIDg4uwIGx0PoQ1K8LUc4tWub0EZRqDh5DTD1
zHw0RjoeWvGMfRPO0lkOvm1rv2VnAz5bb5WxzlXn/UJALGzXSDLvaNwRcngoWu0T
59gHgvyd/4YHZvHq7nArpgz4e0uh0V51RmSaZWCrviJCEcVtZ8qN2gVK+0txxcn4
G2rRUfwcaO4zIipuu850F/AYGrGNJO2jhmGO/ZKijaHvKYEXHqBz4kQnBHxMPhC/
X9Huq5JH1aZFlo2y5zChy0XEkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE1O1XGA
P4yRskgx7csme7Mu1ZKYMB8GA1UdIwQYMBaAFKIkNoQiPSwlxq8Xal8C+gKyT2gL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTUzQi9DOEQwMzkyMjZD
OUExMUVFODVCRkRGNEZDNEY5QUUwMi9vaVEyaENJOUxDWEdyeGRxWHdMNkFySlBh
QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29pUTJoQ0k5TENYR3J4ZHFYd0w2QXJKUGFBcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OTUzQi9DOEQwMzkyMjZDOUExMUVFODVCRkRGNEZDNEY5QUUwMi9vaVEyaENJOUxD
WEdyeGRxWHdMNkFySlBhQXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAI0mh40vQDwndS83BrgmZ94Da6KWJ9kzf3nU0ULao3a5MIF7YFK4dQ
ltN+aTHlKTMepOBV34zr43sSqD/uNFTKFQyNTtnCisyof/QvdpgHc4C3LMTvRVtb
4oDK7+vpwP+uTEA06FeCzbQsLGpaB88i7XSlAssp0hpqUfob3nMZszXhtmYsZVF8
KlgN1yV5fNI71zOR/sQnlSZwHo/KpgTJO+wPgnse+9c5+Roa02xbsVjiyqrN15MD
yvzlOCtqMrwWbTxyieH91FzWZ+YfKuDGp489x9GFNsxO1n0Dc/avMs4KtZzUVoBI
cOJxdR/Kw3916YuLmM0dUAUaVvsuw/HH
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:33:46 2025 by rpki-client