Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.mft
File: CUoNzYAqBb91c_96buCnqXIFUNE.mft (raw, json)
Hash identifier: Uw/qPYlthaiawLewZw/XUM/uHKnnbvbntq3nl6Zrhtg=
Subject key identifier: 25:DD:BC:D0:FC:D9:46:D7:FC:78:7A:88:43:0B:81:39:C9:FB:A6:47
Authority key identifier: 09:4A:0D:CD:80:2A:05:BF:75:73:FF:7A:6E:E0:A7:A9:72:05:50:D1
Certificate issuer: /CN=A91EC93F/serialNumber=094A0DCD802A05BF7573FF7A6EE0A7A9720550D1
Certificate serial: 0150
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUoNzYAqBb91c_96buCnqXIFUNE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.mft
Manifest number: 014E
Signing time: Fri 31 Jan 2025 03:25:21 +0000
Manifest this update: Fri 31 Jan 2025 03:25:21 +0000
Manifest next update: Fri 07 Feb 2025 03:25:21 +0000
Files and hashes: 1: CUoNzYAqBb91c_96buCnqXIFUNE.crl (hash: KgmNxGD0flP5OYJ97qd/3mVqmZR39K0R/PnqxtU+Tps=)
2: 5BA557A6DEB011EDB7B0C04EC4F9AE02.roa (hash: rqsGCczlTsAssnjE3lU2t0y5qqxlPSKotk0BlBeeudM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 336 (0x150)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC93F/serialNumber=094A0DCD802A05BF7573FF7A6EE0A7A9720550D1
Validity
Not Before: Jan 31 03:25:21 2025 GMT
Not After : Feb 7 03:25:21 2025 GMT
Subject: CN=679c42a1-5046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:51:7d:7c:53:4f:d1:39:13:24:73:11:e3:ed:
da:b9:f5:ad:f7:a5:4e:ad:10:c7:1c:e0:2d:14:7e:
bb:bf:3d:79:bb:70:6c:41:3f:7a:7a:00:01:55:f5:
a3:8f:9f:db:3b:39:6e:f1:98:ed:98:de:52:b2:0d:
21:4e:53:82:cf:9a:0b:82:bb:13:f9:67:41:1e:d5:
13:2f:85:05:54:b3:53:11:a8:4d:0b:aa:2e:7e:f6:
7e:b7:7a:4c:df:c6:43:64:fe:3d:0a:eb:cb:c1:2c:
bb:56:a6:d6:ec:71:86:81:50:3f:9b:7b:67:d7:3e:
a6:70:67:76:4c:a9:fe:c5:8e:2e:56:a5:df:f2:68:
32:84:84:99:27:ee:d6:9c:bb:49:ba:ca:d3:53:a1:
77:f9:00:f2:43:4e:b8:65:95:3f:df:15:fc:43:32:
13:38:14:dc:7e:de:fa:1c:71:0e:a2:3c:a0:c1:8e:
d6:15:4a:f2:48:e2:fb:22:a6:98:9a:47:bf:69:9d:
53:77:74:d5:db:6c:4e:72:06:a4:b4:06:fa:d8:2c:
53:73:90:74:2a:aa:0c:33:7c:62:d9:ce:e4:45:79:
3c:7c:31:6e:b3:7a:bd:88:04:3b:52:2f:b3:ea:ef:
0b:88:b9:97:5a:3f:ad:f0:73:74:e5:b2:65:20:b6:
a0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DD:BC:D0:FC:D9:46:D7:FC:78:7A:88:43:0B:81:39:C9:FB:A6:47
X509v3 Authority Key Identifier:
keyid:09:4A:0D:CD:80:2A:05:BF:75:73:FF:7A:6E:E0:A7:A9:72:05:50:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUoNzYAqBb91c_96buCnqXIFUNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:53:8a:d3:82:35:d7:d9:bc:30:d7:e4:3a:7c:98:14:9a:fe:
c5:0b:97:be:70:f2:f2:c9:b3:31:0e:92:ca:74:43:8a:73:9c:
c2:2b:19:4a:84:0c:84:84:91:2d:c6:c7:bd:6c:17:3b:d8:2c:
5f:69:85:92:17:e8:36:ed:41:e8:2e:29:d6:52:57:15:39:12:
e8:7c:83:8c:a3:8c:9c:88:cc:bb:d6:b0:8f:81:2f:3e:65:d4:
77:5d:60:e5:d8:a6:e4:c8:f4:eb:01:ff:f4:90:38:bd:68:40:
7d:3d:54:eb:17:64:c8:25:57:86:19:7c:6d:b9:90:5d:d8:72:
99:5e:ec:cd:c3:47:d4:c2:e2:47:85:f7:23:01:57:2c:98:26:
2b:db:77:57:9c:d9:d3:2a:17:5f:35:9f:1a:f0:3a:c4:a0:3d:
38:4c:ad:81:31:e6:f2:d6:4f:f0:88:bf:a6:c2:2e:65:e1:a7:
51:1d:c2:4e:25:ca:7e:e4:f8:0e:66:64:be:96:fb:fe:9a:06:
88:b4:37:51:a2:aa:ce:ac:bf:66:bc:de:14:13:1e:42:b6:27:
67:32:17:84:68:65:86:8f:d1:5d:6e:61:26:d3:8c:22:f7:8b:
ed:8c:bb:2e:23:82:33:2f:d5:86:7d:f3:62:67:d9:0d:ac:04:
6c:cd:48:20
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUM5M0YxMTAvBgNVBAUTKDA5NEEwRENEODAyQTA1QkY3NTczRkY3QTZFRTBBN0E5
NzIwNTUwRDEwHhcNMjUwMTMxMDMyNTIxWhcNMjUwMjA3MDMyNTIxWjAYMRYwFAYD
VQQDEw02NzljNDJhMS01MDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6FF9fFNP0TkTJHMR4+3aufWt96VOrRDHHOAtFH67vz15u3BsQT96egABVfWj
j5/bOzlu8ZjtmN5Ssg0hTlOCz5oLgrsT+WdBHtUTL4UFVLNTEahNC6oufvZ+t3pM
38ZDZP49CuvLwSy7VqbW7HGGgVA/m3tn1z6mcGd2TKn+xY4uVqXf8mgyhISZJ+7W
nLtJusrTU6F3+QDyQ064ZZU/3xX8QzITOBTcft76HHEOojygwY7WFUrySOL7IqaY
mke/aZ1Td3TV22xOcgaktAb62CxTc5B0KqoMM3xi2c7kRXk8fDFus3q9iAQ7Ui+z
6u8LiLmXWj+t8HN05bJlILagAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXdvND8
2UbX/Hh6iEMLgTnJ+6ZHMB8GA1UdIwQYMBaAFAlKDc2AKgW/dXP/em7gp6lyBVDR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzkzRi82MEE4Rjg4Q0RF
QUQxMUVEOEE2REYxNERDNEY5QUUwMi9DVW9OellBcUJiOTFjXzk2YnVDbnFYSUZV
TkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NVb056WUFxQmI5MWNfOTZidUNucVhJRlVORS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QzkzRi82MEE4Rjg4Q0RFQUQxMUVEOEE2REYxNERDNEY5QUUwMi9DVW9OellBcUJi
OTFjXzk2YnVDbnFYSUZVTkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBUU4rTgjXX2bww1+Q6fJgUmv7FC5e+cPLyybMxDpLKdEOKc5zCKxlK
hAyEhJEtxse9bBc72CxfaYWSF+g27UHoLinWUlcVORLofIOMo4yciMy71rCPgS8+
ZdR3XWDl2KbkyPTrAf/0kDi9aEB9PVTrF2TIJVeGGXxtuZBd2HKZXuzNw0fUwuJH
hfcjAVcsmCYr23dXnNnTKhdfNZ8a8DrEoD04TK2BMeby1k/wiL+mwi5l4adRHcJO
Jcp+5PgOZmS+lvv+mgaItDdRoqrOrL9mvN4UEx5CtidnMheEaGWGj9FdbmEm04wi
94vtjLsuI4IzL9WGffNiZ9kNrARszUgg
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:39:45 2025 by rpki-client