Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft
File: _RYHGGNz6B9E0TeyoOlpV-YquKE.mft (raw, json)
Hash identifier: bFnzvwx0kUIeicsZPGmFJKFeQFIgOfsnVUlZEApmMw0=
Subject key identifier: C1:38:8A:FC:1A:95:6F:F6:B3:DF:6C:C3:8B:89:16:FD:9F:01:41:7F
Authority key identifier: FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1
Certificate issuer: /CN=A91EA958/serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1
Certificate serial: 3489
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft
Manifest number: 346C
Signing time: Fri 31 Jan 2025 15:06:11 +0000
Manifest this update: Fri 31 Jan 2025 15:06:10 +0000
Manifest next update: Fri 07 Feb 2025 15:06:10 +0000
Files and hashes: 1: _RYHGGNz6B9E0TeyoOlpV-YquKE.crl (hash: u1solo6/LQvSjhj/laLOugwJhbnGOAID2kYoWvgzHEg=)
2: 5A7BB752BD2F11EBB84EE532C4F9AE02.roa (hash: BdwgkrEVvS7EaJMjyx021N1wHkcgwHBJVY8E6E534xQ=)
3: D347187A7E9511ECA9132A0BC4F9AE02.roa (hash: 4i/7LdEU/T1ZHgOr95PKDKNxvTm/ZtFlmP55xUeSbB0=)
4: 59F4A758BD2F11EBB84EE532C4F9AE02.roa (hash: c0Nj/EakD9jZWUmq6GYt4WJPzbB76p849p8VWNsKos4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13449 (0x3489)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA958/serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1
Validity
Not Before: Jan 31 15:06:10 2025 GMT
Not After : Feb 7 15:06:10 2025 GMT
Subject: CN=679ce6e3-13e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:09:bb:2c:d2:59:eb:18:d4:e8:44:6e:ca:66:
87:ef:12:0e:84:77:13:dd:81:7b:33:22:4d:73:b1:
67:67:df:8a:cd:cc:e6:61:eb:50:ad:c7:62:32:18:
d1:1e:dd:0a:57:db:d3:92:a5:15:27:f6:14:a6:e1:
2c:2d:78:01:41:23:e7:0c:18:e0:15:a0:62:19:6c:
bf:9a:41:14:9d:cb:e6:fd:ca:31:02:26:3c:a5:bf:
9f:0c:97:fa:0e:a8:60:d2:f6:3b:0d:80:e1:ca:99:
9e:5c:31:34:6e:30:e7:98:ab:b0:ae:6b:a9:06:c0:
fc:7a:e3:bf:a6:18:b4:94:8c:dd:04:61:af:fd:bf:
08:c3:f5:66:96:06:c5:c7:49:2d:4e:5e:47:26:53:
26:97:21:97:01:10:b1:74:d9:a0:02:86:d9:37:f4:
13:c3:9d:80:41:7e:73:ab:dd:29:e3:b5:86:07:c4:
3d:a4:dc:45:2f:b9:79:ac:b5:64:79:fd:bd:9f:f5:
29:37:92:40:3f:4e:02:1d:e9:ea:58:fc:39:c6:44:
f0:93:c3:dc:be:8c:f2:4f:08:cc:9f:44:8f:56:c3:
e5:06:a2:e2:fa:2d:3f:c1:f5:e0:38:7a:aa:d4:12:
db:7d:74:12:3f:17:47:0f:ba:c8:dd:f0:4f:92:55:
39:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:38:8A:FC:1A:95:6F:F6:B3:DF:6C:C3:8B:89:16:FD:9F:01:41:7F
X509v3 Authority Key Identifier:
keyid:FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:e3:59:2b:35:e2:00:0f:e9:64:5e:a2:fe:68:2c:a1:c8:3e:
95:d2:8e:5e:8a:99:59:86:65:fa:9a:3b:39:b6:4e:ca:51:81:
0a:28:1f:73:cc:82:ee:e2:4c:87:f6:28:4c:7b:2c:1d:84:bd:
c9:1f:73:92:54:aa:41:5c:76:52:4c:0b:73:93:9e:df:0f:a1:
99:9a:db:bf:a6:d1:8d:92:ba:4a:8d:0e:fd:2d:32:49:a4:46:
49:89:c6:3e:83:ab:2a:7b:37:5e:4c:63:38:48:9c:fd:a5:50:
5e:41:11:b5:2b:85:ba:24:15:4c:29:54:c3:c7:23:e4:ac:30:
10:26:c1:99:f0:f0:57:7a:5a:e2:09:19:ef:b3:d2:38:e8:11:
d6:15:5a:a8:7f:f0:aa:f1:88:5a:82:9f:36:b2:1d:07:2f:02:
55:75:26:d8:5e:68:d3:45:72:43:f9:d7:bb:80:f5:93:f1:ee:
11:90:66:c1:5a:76:54:97:d4:73:7b:c0:cf:a7:44:04:d1:b4:
f5:29:2d:14:bf:95:76:6c:5f:93:e4:57:b2:31:7d:ce:53:ff:
a9:7b:83:9f:31:55:5b:24:ff:f8:53:86:47:43:71:8f:d8:77:
2a:4e:03:b8:8b:0b:a9:0a:91:4c:b6:d8:8e:66:fe:a3:fa:c5:
cd:3a:c0:5b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUE5NTgxMTAvBgNVBAUTKEZEMTYwNzE4NjM3M0U4MUY0NEQxMzdCMkEwRTk2OTU3
RTYyQUI4QTEwHhcNMjUwMTMxMTUwNjEwWhcNMjUwMjA3MTUwNjEwWjAYMRYwFAYD
VQQDEw02NzljZTZlMy0xM2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAowm7LNJZ6xjU6ERuymaH7xIOhHcT3YF7MyJNc7FnZ9+KzczmYetQrcdiMhjR
Ht0KV9vTkqUVJ/YUpuEsLXgBQSPnDBjgFaBiGWy/mkEUncvm/coxAiY8pb+fDJf6
Dqhg0vY7DYDhypmeXDE0bjDnmKuwrmupBsD8euO/phi0lIzdBGGv/b8Iw/VmlgbF
x0ktTl5HJlMmlyGXARCxdNmgAobZN/QTw52AQX5zq90p47WGB8Q9pNxFL7l5rLVk
ef29n/UpN5JAP04CHenqWPw5xkTwk8PcvozyTwjMn0SPVsPlBqLi+i0/wfXgOHqq
1BLbfXQSPxdHD7rI3fBPklU5BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFME4ivwa
lW/2s99sw4uJFv2fAUF/MB8GA1UdIwQYMBaAFP0WBxhjc+gfRNE3sqDpaVfmKrih
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk1OC81QUUxOTdGNDFE
OUYxMUUyQkNCRkY3OEYwOEIwMkNEMi9fUllIR0dOejZCOUUwVGV5b09scFYtWXF1
S0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19SWUhHR056NkI5RTBUZXlvT2xwVi1ZcXVLRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QTk1OC81QUUxOTdGNDFEOUYxMUUyQkNCRkY3OEYwOEIwMkNEMi9fUllIR0dOejZC
OUUwVGV5b09scFYtWXF1S0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC541krNeIAD+lkXqL+aCyhyD6V0o5eiplZhmX6mjs5tk7KUYEKKB9z
zILu4kyH9ihMeywdhL3JH3OSVKpBXHZSTAtzk57fD6GZmtu/ptGNkrpKjQ79LTJJ
pEZJicY+g6sqezdeTGM4SJz9pVBeQRG1K4W6JBVMKVTDxyPkrDAQJsGZ8PBXelri
CRnvs9I46BHWFVqof/Cq8Yhagp82sh0HLwJVdSbYXmjTRXJD+de7gPWT8e4RkGbB
WnZUl9Rze8DPp0QE0bT1KS0Uv5V2bF+T5FeyMX3OU/+pe4OfMVVbJP/4U4ZHQ3GP
2HcqTgO4iwupCpFMttiOZv6j+sXNOsBb
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:06:37 2025 by rpki-client