Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft
File: 9AFXH04P6PgNV80CfNnuFdc4jyQ.mft (raw, json)
Hash identifier: AqCXOFiWVMrt4ugLLSXtKWOR4B49YS5UPw3k1mKWQk4=
Subject key identifier: C1:9A:AB:09:8C:CE:F4:39:1F:FC:81:A3:05:26:1E:5C:7A:88:B4:AB
Authority key identifier: F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24
Certificate issuer: /CN=A91EA54A/serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24
Certificate serial: 4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft
Manifest number: 49
Signing time: Fri 31 Jan 2025 06:23:43 +0000
Manifest this update: Fri 31 Jan 2025 06:23:43 +0000
Manifest next update: Fri 07 Feb 2025 06:23:43 +0000
Files and hashes: 1: 9AFXH04P6PgNV80CfNnuFdc4jyQ.crl (hash: bzpXHDQ91aJWzPBZiUIryjzlSQMdybbisJqXibw49Go=)
2: 8D52A23871A611EF8F5B9755C4F9AE02.roa (hash: hF0cvJ5WGf8hjnk2FrHWwiuqbgTh6n818KkJ7xF10xU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA54A/serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24
Validity
Not Before: Jan 31 06:23:43 2025 GMT
Not After : Feb 7 06:23:43 2025 GMT
Subject: CN=679c6c6f-c81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bc:2c:4f:5f:85:61:65:c9:de:0c:b3:bf:f7:
7b:00:5b:62:3e:a6:34:c1:5b:f6:95:04:37:44:e6:
e7:8f:dd:e2:d5:f0:5c:e8:77:fb:a4:02:30:7b:db:
2e:0b:ba:94:52:3f:08:d6:a4:a8:49:5d:af:3a:be:
64:c6:85:0f:65:8a:78:13:e1:a4:2a:0a:b2:09:5e:
eb:32:1d:84:29:99:58:63:90:11:53:7b:b3:fb:93:
16:dc:11:63:07:4e:c8:b7:bd:79:54:63:9f:0b:f1:
34:cf:4e:c3:e2:0b:a4:db:4a:c8:fc:74:c7:05:12:
4f:ad:0a:e4:64:dc:ec:42:5b:f2:28:6e:a2:aa:68:
92:d7:9e:b3:6f:b4:29:c5:e8:d5:da:f4:66:07:39:
6b:49:56:68:39:08:e6:1c:e9:dd:67:fd:5f:b8:e1:
85:9c:01:d4:fa:d8:a4:78:28:e4:fa:5c:10:31:0a:
c3:de:6a:c8:57:79:23:8b:4e:7c:78:90:6d:92:2e:
24:9d:6b:ce:66:ab:0f:1c:ca:11:6d:31:3b:ed:77:
98:d3:de:40:c9:aa:1e:cd:3d:8a:15:98:3b:ae:c5:
b9:c9:14:99:0b:5a:01:15:a2:69:c8:5f:c3:49:b7:
1b:37:e1:bb:7f:94:b1:d6:92:75:e0:58:9b:96:6e:
33:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9A:AB:09:8C:CE:F4:39:1F:FC:81:A3:05:26:1E:5C:7A:88:B4:AB
X509v3 Authority Key Identifier:
keyid:F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:14:a9:b6:58:2c:92:f9:6c:d0:28:bf:5e:94:47:57:84:df:
13:07:22:45:ab:51:fd:06:8b:67:25:64:b7:a1:c4:ed:f1:f7:
76:50:4d:38:bd:c8:44:b4:23:58:a1:e4:de:99:4f:c2:fc:62:
6c:dc:d7:df:ab:b2:fb:a7:2a:a2:66:42:1a:d2:b7:85:cc:e5:
d1:50:94:7d:43:1a:90:56:36:2a:7d:54:6d:db:ea:a8:b7:55:
dc:72:41:2d:e9:2d:c6:e2:d5:25:a0:82:f8:45:bb:46:5a:2c:
3d:a6:aa:08:25:f5:62:c1:f6:a6:16:bd:48:de:d3:66:1c:04:
85:87:18:2f:20:b7:11:ff:19:c8:52:60:99:62:a3:f1:c7:fb:
fd:cf:a0:c6:84:c5:0b:66:29:2e:51:ee:c5:3f:b9:ea:82:b6:
2b:89:90:fa:68:48:86:66:c8:00:ff:bc:c1:c1:4f:cc:c2:71:
74:ef:42:da:cb:0a:b3:c7:a6:34:6e:5f:a5:fd:1e:7f:b4:f8:
c0:ae:5d:cf:af:36:1d:48:ed:ab:e1:a3:6e:2a:1a:2b:c9:50:
a7:36:71:f2:25:88:1a:d8:95:0e:0d:86:8a:d5:52:f7:ee:6c:
ac:0f:59:77:ed:4a:fd:b4:f6:ee:86:04:c3:d1:3f:78:30:fa:
f8:2b:0a:73
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
QTU0QTExMC8GA1UEBRMoRjQwMTU3MUY0RTBGRThGODBENTdDRDAyN0NEOUVFMTVE
NzM4OEYyNDAeFw0yNTAxMzEwNjIzNDNaFw0yNTAyMDcwNjIzNDNaMBgxFjAUBgNV
BAMTDTY3OWM2YzZmLWM4MWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDMvCxPX4VhZcneDLO/93sAW2I+pjTBW/aVBDdE5ueP3eLV8Fzod/ukAjB72y4L
upRSPwjWpKhJXa86vmTGhQ9lingT4aQqCrIJXusyHYQpmVhjkBFTe7P7kxbcEWMH
Tsi3vXlUY58L8TTPTsPiC6TbSsj8dMcFEk+tCuRk3OxCW/IobqKqaJLXnrNvtCnF
6NXa9GYHOWtJVmg5COYc6d1n/V+44YWcAdT62KR4KOT6XBAxCsPeashXeSOLTnx4
kG2SLiSda85mqw8cyhFtMTvtd5jT3kDJqh7NPYoVmDuuxbnJFJkLWgEVomnIX8NJ
txs34bt/lLHWknXgWJuWbjPfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwZqrCYzO
9Dkf/IGjBSYeXHqItKswHwYDVR0jBBgwFoAU9AFXH04P6PgNV80CfNnuFdc4jyQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBNTRBL0JFODRBODIwNzFB
NTExRUY4RDgwNUM3OEM0RjlBRTAyLzlBRlhIMDRQNlBnTlY4MENmTm51RmRjNGp5
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvOUFGWEgwNFA2UGdOVjgwQ2ZObnVGZGM0anlRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB
NTRBL0JFODRBODIwNzFBNTExRUY4RDgwNUM3OEM0RjlBRTAyLzlBRlhIMDRQNlBn
TlY4MENmTm51RmRjNGp5US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAEQUqbZYLJL5bNAov16UR1eE3xMHIkWrUf0Gi2clZLehxO3x93ZQTTi9
yES0I1ih5N6ZT8L8Ymzc19+rsvunKqJmQhrSt4XM5dFQlH1DGpBWNip9VG3b6qi3
VdxyQS3pLcbi1SWggvhFu0ZaLD2mqggl9WLB9qYWvUje02YcBIWHGC8gtxH/GchS
YJlio/HH+/3PoMaExQtmKS5R7sU/ueqCtiuJkPpoSIZmyAD/vMHBT8zCcXTvQtrL
CrPHpjRuX6X9Hn+0+MCuXc+vNh1I7avho24qGivJUKc2cfIliBrYlQ4NhorVUvfu
bKwPWXftSv209u6GBMPRP3gw+vgrCnM=
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:32:42 2025 by rpki-client