Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/uQQiVZtYxNqonyJNSccf9E-byjQ.mft
File: uQQiVZtYxNqonyJNSccf9E-byjQ.mft (raw, json)
Hash identifier: zAY/iDTXQ1nT/UjsMks3FxIYTJ+ugV4VVb3njCzWBQ8=
Subject key identifier: 34:15:E9:EA:AF:8C:8E:F6:2B:EE:31:B2:69:94:74:D0:57:E6:61:5C
Authority key identifier: B9:04:22:55:9B:58:C4:DA:A8:9F:22:4D:49:C7:1F:F4:4F:9B:CA:34
Certificate issuer: /CN=A91EA723/serialNumber=B90422559B58C4DAA89F224D49C71FF44F9BCA34
Certificate serial: 0172
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uQQiVZtYxNqonyJNSccf9E-byjQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/uQQiVZtYxNqonyJNSccf9E-byjQ.mft
Manifest number: 016E
Signing time: Fri 31 Jan 2025 03:07:08 +0000
Manifest this update: Fri 31 Jan 2025 03:07:07 +0000
Manifest next update: Fri 07 Feb 2025 03:07:07 +0000
Files and hashes: 1: uQQiVZtYxNqonyJNSccf9E-byjQ.crl (hash: OsRxWsFhTKAo6syddkJ9t7nqZR/KRYiTHqL+6AR4VCM=)
2: A948EB7AE90A11EEAD95B85FC4F9AE02.roa (hash: lgResqozHMSjBCPcbPjf0wTjzslhaQ7QQ5VEGI72qEc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 370 (0x172)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA723/serialNumber=B90422559B58C4DAA89F224D49C71FF44F9BCA34
Validity
Not Before: Jan 31 03:07:07 2025 GMT
Not After : Feb 7 03:07:07 2025 GMT
Subject: CN=679c3e5b-4e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:39:e3:84:a3:bb:7f:09:a6:a4:1f:80:8d:7b:
49:3e:1c:0c:25:c9:35:65:3e:9d:00:e5:0e:75:75:
f9:47:2c:23:7d:b0:e6:c3:dc:e0:11:ad:c8:40:27:
56:a6:a7:b4:40:32:17:db:7e:29:eb:f7:cf:9a:dc:
aa:1d:27:3a:a8:65:d0:2b:db:c0:57:32:6d:d5:64:
5e:a1:87:b3:24:42:3e:07:cf:f0:ba:46:d8:a6:ff:
57:01:79:c2:bf:df:d1:d0:5a:c3:84:de:af:cb:48:
a4:f9:8a:b8:b3:af:86:b1:03:cd:bf:d7:4f:84:f6:
54:47:78:49:15:be:da:4c:20:50:92:57:dd:88:d1:
f1:17:37:41:f8:44:44:f7:c5:89:e1:89:1a:f0:04:
39:cf:09:00:49:97:8d:4a:c1:0f:06:69:b4:dc:c4:
8e:7e:95:07:ba:e2:ca:8a:98:c3:60:b8:58:a7:39:
5d:23:e7:48:f8:e0:a6:80:38:cf:1d:5d:d7:84:9f:
9a:33:85:c0:61:12:7a:bd:96:bc:01:3c:bc:90:39:
9a:2f:78:a3:e6:9b:76:c4:1f:fa:fd:9c:33:95:7a:
c5:fc:8c:89:17:78:c7:7b:75:91:08:5f:aa:0e:87:
1b:56:90:48:1a:d2:1a:9e:d1:7d:1a:60:c8:f1:98:
97:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:15:E9:EA:AF:8C:8E:F6:2B:EE:31:B2:69:94:74:D0:57:E6:61:5C
X509v3 Authority Key Identifier:
keyid:B9:04:22:55:9B:58:C4:DA:A8:9F:22:4D:49:C7:1F:F4:4F:9B:CA:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/uQQiVZtYxNqonyJNSccf9E-byjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uQQiVZtYxNqonyJNSccf9E-byjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/uQQiVZtYxNqonyJNSccf9E-byjQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:40:05:8e:f1:e6:a3:ac:7e:db:fc:08:56:83:23:a7:c7:dd:
8c:15:11:9b:1c:5b:42:b1:b5:48:75:b7:1e:d0:5a:0b:8e:95:
29:14:05:3e:3c:22:fa:79:9b:44:5f:d5:40:ad:60:9c:e7:2a:
3c:67:54:95:2e:69:18:70:bd:c2:b9:83:81:25:68:c0:5d:21:
1e:f2:8f:d4:5f:0b:22:9f:c7:43:55:35:76:c2:44:57:cd:80:
2f:0e:ac:19:82:a6:b0:2e:6a:8b:db:fb:27:3d:e0:b1:19:19:
4f:80:cd:da:af:e7:0b:08:24:2e:bc:ba:6e:f7:0b:00:28:5d:
dc:cf:e1:83:d9:74:44:b9:98:4e:82:9a:8d:7b:4b:17:bc:62:
ce:26:cb:8c:f8:1a:44:7b:4c:23:80:a3:62:89:73:74:07:b3:
19:38:19:dd:95:c8:f4:a9:26:3d:2b:af:7a:14:0c:c9:ed:3f:
83:5e:b3:5e:9b:b5:f8:24:30:dd:60:d3:2b:9b:93:1d:d7:94:
84:4e:61:0a:f4:e4:02:76:26:8c:a8:2b:23:e9:0f:2f:12:92:
2b:c1:ed:5c:a6:21:71:b3:54:0f:e8:0b:c9:d6:26:f6:8d:be:
2d:d9:f4:06:5e:0e:15:ca:a0:24:2a:84:2b:6e:4f:aa:bb:8c:
95:79:75:b7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUE3MjMxMTAvBgNVBAUTKEI5MDQyMjU1OUI1OEM0REFBODlGMjI0RDQ5QzcxRkY0
NEY5QkNBMzQwHhcNMjUwMTMxMDMwNzA3WhcNMjUwMjA3MDMwNzA3WjAYMRYwFAYD
VQQDEw02NzljM2U1Yi00ZTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyjnjhKO7fwmmpB+AjXtJPhwMJck1ZT6dAOUOdXX5RywjfbDmw9zgEa3IQCdW
pqe0QDIX234p6/fPmtyqHSc6qGXQK9vAVzJt1WReoYezJEI+B8/wukbYpv9XAXnC
v9/R0FrDhN6vy0ik+Yq4s6+GsQPNv9dPhPZUR3hJFb7aTCBQklfdiNHxFzdB+ERE
98WJ4Yka8AQ5zwkASZeNSsEPBmm03MSOfpUHuuLKipjDYLhYpzldI+dI+OCmgDjP
HV3XhJ+aM4XAYRJ6vZa8ATy8kDmaL3ij5pt2xB/6/ZwzlXrF/IyJF3jHe3WRCF+q
DocbVpBIGtIantF9GmDI8ZiX+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQV6eqv
jI72K+4xsmmUdNBX5mFcMB8GA1UdIwQYMBaAFLkEIlWbWMTaqJ8iTUnHH/RPm8o0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTcyMy8yQ0Q3RjVDOEIy
N0QxMUVEODg1NkZBODFDNEY5QUUwMi91UVFpVlp0WXhOcW9ueUpOU2NjZjlFLWJ5
alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VRUWlWWnRZeE5xb255Sk5TY2NmOUUtYnlqUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QTcyMy8yQ0Q3RjVDOEIyN0QxMUVEODg1NkZBODFDNEY5QUUwMi91UVFpVlp0WXhO
cW9ueUpOU2NjZjlFLWJ5alEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCEQAWO8eajrH7b/AhWgyOnx92MFRGbHFtCsbVIdbce0FoLjpUpFAU+
PCL6eZtEX9VArWCc5yo8Z1SVLmkYcL3CuYOBJWjAXSEe8o/UXwsin8dDVTV2wkRX
zYAvDqwZgqawLmqL2/snPeCxGRlPgM3ar+cLCCQuvLpu9wsAKF3cz+GD2XREuZhO
gpqNe0sXvGLOJsuM+BpEe0wjgKNiiXN0B7MZOBndlcj0qSY9K696FAzJ7T+DXrNe
m7X4JDDdYNMrm5Md15SETmEK9OQCdiaMqCsj6Q8vEpIrwe1cpiFxs1QP6AvJ1ib2
jb4t2fQGXg4VyqAkKoQrbk+qu4yVeXW3
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:44:03 2025 by rpki-client