Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/8ghPeg88CpH4Jf79nxA18zVBWEw.mft
File: 8ghPeg88CpH4Jf79nxA18zVBWEw.mft (raw, json)
Hash identifier: 5m7VSlIC8YPNDhEGkMM3+iDAS8ChjGwkGgdsDN1V9M8=
Subject key identifier: F5:9E:44:27:14:F4:84:17:F6:62:7E:C7:1B:2E:49:03:84:A2:7B:BF
Authority key identifier: F2:08:4F:7A:0F:3C:0A:91:F8:25:FE:FD:9F:10:35:F3:35:41:58:4C
Certificate issuer: /CN=A91EAEAF/serialNumber=F2084F7A0F3C0A91F825FEFD9F1035F33541584C
Certificate serial: 01DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ghPeg88CpH4Jf79nxA18zVBWEw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/8ghPeg88CpH4Jf79nxA18zVBWEw.mft
Manifest number: 01D9
Signing time: Fri 31 Jan 2025 02:17:02 +0000
Manifest this update: Fri 31 Jan 2025 02:17:01 +0000
Manifest next update: Fri 07 Feb 2025 02:17:01 +0000
Files and hashes: 1: 8ghPeg88CpH4Jf79nxA18zVBWEw.crl (hash: S3aYwkUgl1SWAz7EePhQ/AG9gfvnux239Sb93KmiHsU=)
2: EF0EFF5833F511EDA5C4F37DC4F9AE02.roa (hash: LAWmMRc8daUtEB7NaiA0m2Tl41sqEulVfrA7do1Thps=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476 (0x1dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAEAF/serialNumber=F2084F7A0F3C0A91F825FEFD9F1035F33541584C
Validity
Not Before: Jan 31 02:17:01 2025 GMT
Not After : Feb 7 02:17:01 2025 GMT
Subject: CN=679c329d-1aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:68:9d:c9:71:e9:a9:24:09:42:25:fc:4f:0f:
54:07:e9:ec:0d:b6:2f:13:1d:fb:0a:d5:af:34:65:
3f:f1:fd:3a:de:99:cc:00:1a:26:03:8b:b9:b8:df:
72:01:91:7c:ef:2a:b8:bb:be:c3:79:63:46:80:06:
23:dc:0a:b7:37:71:3d:4c:a0:9f:38:5a:b3:b7:88:
91:aa:ef:0d:f7:14:55:ca:57:ba:12:eb:00:81:08:
04:0e:c5:bb:53:d7:d2:c1:59:78:ea:6c:b3:82:96:
96:2d:13:8e:27:00:90:f5:8b:c9:2d:e5:6c:de:b5:
1b:27:8c:ea:fe:aa:ba:53:31:0c:ba:8b:51:d4:37:
ff:ff:78:97:1a:44:7d:7a:64:bc:54:21:35:38:69:
33:39:14:a5:3b:0c:56:d0:25:a3:05:50:1d:29:a5:
a7:43:c0:7a:fd:2c:35:78:20:1e:65:e6:e0:67:17:
bb:d7:58:f8:ab:a1:31:73:ed:4a:98:ef:b8:ff:ea:
c9:b5:15:ae:e2:d1:ee:19:0b:7c:77:6a:0e:87:ff:
06:80:66:49:a0:c8:0e:73:a7:6d:ec:af:ea:65:e9:
37:58:3d:64:6d:1b:56:2d:af:ad:db:0d:cd:22:5c:
c9:8f:dd:90:a9:7d:a0:e0:d4:1d:f2:da:8d:28:68:
89:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9E:44:27:14:F4:84:17:F6:62:7E:C7:1B:2E:49:03:84:A2:7B:BF
X509v3 Authority Key Identifier:
keyid:F2:08:4F:7A:0F:3C:0A:91:F8:25:FE:FD:9F:10:35:F3:35:41:58:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/8ghPeg88CpH4Jf79nxA18zVBWEw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ghPeg88CpH4Jf79nxA18zVBWEw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/8ghPeg88CpH4Jf79nxA18zVBWEw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:26:10:32:64:f3:19:7a:c5:35:93:ef:46:51:db:7b:9a:9b:
f7:f1:a2:45:80:63:29:9c:2f:80:f6:2c:86:50:a6:17:3d:d4:
4b:e4:36:92:40:f2:12:a2:77:91:73:72:07:b8:f3:a8:f8:f0:
3b:a8:b1:53:0e:00:6f:b3:d2:a6:be:f8:7e:79:d1:6b:10:32:
c7:16:78:ba:1e:2f:a6:83:ee:a9:c0:7b:e7:fc:ac:5d:63:bf:
43:78:12:eb:83:d6:4b:62:24:df:d4:53:4a:38:b9:07:bc:97:
ea:75:62:2a:c7:03:dc:d1:10:7e:cf:5e:b8:6d:f1:48:0d:1b:
58:4a:9a:ce:f7:b9:02:0c:f3:5f:7d:1a:53:df:ef:2f:07:c4:
33:03:3f:69:20:8d:9f:0e:43:5b:9d:10:06:f2:bb:b4:7a:6c:
7b:af:1c:f6:af:88:17:e0:5c:b0:f2:bd:5d:dd:d9:1c:4b:82:
25:96:ce:f5:57:0b:33:c2:9b:f5:eb:32:d6:37:1f:c3:40:29:
08:00:05:4b:75:d8:0b:ef:9f:03:d4:36:9d:0b:77:30:93:57:
43:2c:a6:5d:f5:88:8f:15:d9:3f:4a:a2:d1:9d:76:5b:08:62:
9d:6f:49:3d:93:15:08:12:51:9d:a6:ba:51:48:36:6d:bc:eb:
91:05:65:4f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUFFQUYxMTAvBgNVBAUTKEYyMDg0RjdBMEYzQzBBOTFGODI1RkVGRDlGMTAzNUYz
MzU0MTU4NEMwHhcNMjUwMTMxMDIxNzAxWhcNMjUwMjA3MDIxNzAxWjAYMRYwFAYD
VQQDEw02NzljMzI5ZC0xYWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw2idyXHpqSQJQiX8Tw9UB+nsDbYvEx37CtWvNGU/8f063pnMABomA4u5uN9y
AZF87yq4u77DeWNGgAYj3Aq3N3E9TKCfOFqzt4iRqu8N9xRVyle6EusAgQgEDsW7
U9fSwVl46myzgpaWLROOJwCQ9YvJLeVs3rUbJ4zq/qq6UzEMuotR1Df//3iXGkR9
emS8VCE1OGkzORSlOwxW0CWjBVAdKaWnQ8B6/Sw1eCAeZebgZxe711j4q6Exc+1K
mO+4/+rJtRWu4tHuGQt8d2oOh/8GgGZJoMgOc6dt7K/qZek3WD1kbRtWLa+t2w3N
IlzJj92QqX2g4NQd8tqNKGiJtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPWeRCcU
9IQX9mJ+xxsuSQOEonu/MB8GA1UdIwQYMBaAFPIIT3oPPAqR+CX+/Z8QNfM1QVhM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUVBRi9CRTM1MjFCODMz
RjExMUVEQjgzNjEwODZDNEY5QUUwMi84Z2hQZWc4OENwSDRKZjc5bnhBMTh6VkJX
RXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhnaFBlZzg4Q3BINEpmNzlueEExOHpWQldFdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QUVBRi9CRTM1MjFCODMzRjExMUVEQjgzNjEwODZDNEY5QUUwMi84Z2hQZWc4OENw
SDRKZjc5bnhBMTh6VkJXRXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCoJhAyZPMZesU1k+9GUdt7mpv38aJFgGMpnC+A9iyGUKYXPdRL5DaS
QPISoneRc3IHuPOo+PA7qLFTDgBvs9Kmvvh+edFrEDLHFni6Hi+mg+6pwHvn/Kxd
Y79DeBLrg9ZLYiTf1FNKOLkHvJfqdWIqxwPc0RB+z164bfFIDRtYSprO97kCDPNf
fRpT3+8vB8QzAz9pII2fDkNbnRAG8ru0emx7rxz2r4gX4Fyw8r1d3dkcS4Ills71
Vwszwpv16zLWNx/DQCkIAAVLddgL758D1DadC3cwk1dDLKZd9YiPFdk/SqLRnXZb
CGKdb0k9kxUIElGdprpRSDZtvOuRBWVP
-----END CERTIFICATE-----
Generated at Wed Apr 30 15:41:29 2025 by rpki-client