Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
File: cL0eSV4lCyLieYKWlpeFotd9c38.mft (raw, json)
Hash identifier: kyZr4JGl1ycF2TNV4vgTdZrhuFcnrAsO0IaVJ5a18FY=
Subject key identifier: F4:7F:82:5F:60:A6:FD:13:27:F9:A6:12:66:09:23:ED:45:18:0A:5A
Authority key identifier: 70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F
Certificate issuer: /CN=A91EE1C4/serialNumber=70BD1E495E250B22E2798296969785A2D77D737F
Certificate serial: 0708
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
Manifest number: 06F9
Signing time: Thu 30 Jan 2025 21:53:31 +0000
Manifest this update: Thu 30 Jan 2025 21:53:30 +0000
Manifest next update: Thu 06 Feb 2025 21:53:30 +0000
Files and hashes: 1: cL0eSV4lCyLieYKWlpeFotd9c38.crl (hash: Wy7skKytwUwCwjpU2rAeLQs2GDU6tuUceHyxWHKJVqY=)
2: AEFB1B262FB111EB89A04D37C4F9AE02.roa (hash: Wg8lhii6fS+ISW5JHYHpOa6pzoQlnpj7gMJiQaNStNA=)
3: D992CDCE2FBC11EB8E017F5CC4F9AE02.roa (hash: qKRjykDno1daJfQQjFQDgdcngx+c1WC/QlLs58bkJD4=)
4: D8EA255C2FBC11EB8E017F5CC4F9AE02.roa (hash: BkTcuyEezWUWEkhN6v2tftRUBORfyEfzklVup25IVEk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1800 (0x708)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE1C4/serialNumber=70BD1E495E250B22E2798296969785A2D77D737F
Validity
Not Before: Jan 30 21:53:30 2025 GMT
Not After : Feb 6 21:53:30 2025 GMT
Subject: CN=679bf4da-2958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:47:3a:98:3c:7d:88:a0:d7:b9:95:6b:93:63:
88:0d:f4:7c:53:ef:a4:17:31:b3:df:6a:93:04:10:
f9:a9:3a:17:96:c2:9b:56:c8:2f:45:74:f5:d4:79:
ec:68:63:8a:3b:4a:b3:96:0d:eb:b1:8a:df:1b:c0:
a7:13:4b:ca:b7:cb:ae:23:e1:06:81:f5:c3:67:82:
2e:8c:c1:65:74:25:93:80:61:c2:ea:0e:18:12:a4:
77:b9:4b:ae:74:af:ef:19:ce:7f:04:5a:f0:cb:de:
20:fb:b3:c9:d2:55:b8:f5:f7:46:e9:0a:3c:85:d9:
25:89:ca:8b:04:a3:ed:40:5c:61:c8:54:8b:d5:6d:
74:23:80:05:23:b3:9f:84:09:b2:fc:f4:57:47:fb:
ad:72:97:c9:96:d2:6a:f2:e0:87:01:13:b6:5c:e4:
ef:b0:d9:0c:24:4d:fa:ab:a5:4f:32:2b:ad:23:7e:
03:eb:3f:0b:86:d1:e8:36:35:eb:5b:75:7a:05:64:
93:4a:d7:0d:a0:e9:7f:ed:05:80:50:4e:51:93:ff:
3a:00:fd:be:07:d5:00:4d:7e:f5:86:f2:d2:38:71:
17:40:53:5b:e8:f6:71:73:64:60:ee:43:67:0b:44:
19:2a:5f:d4:e7:6e:ce:35:e3:43:c5:eb:28:ac:71:
71:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7F:82:5F:60:A6:FD:13:27:F9:A6:12:66:09:23:ED:45:18:0A:5A
X509v3 Authority Key Identifier:
keyid:70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:96:d9:70:a8:9c:af:d9:3d:83:e7:99:a7:40:8d:93:ad:90:
a5:4d:f0:19:b9:67:7f:2c:49:f3:1f:75:42:f1:85:8e:f9:7a:
86:1e:5b:ae:d8:0b:11:65:37:01:46:45:0f:ad:a8:3e:20:ee:
8f:fd:01:87:60:91:ce:48:36:66:21:aa:73:51:1a:95:d9:dd:
b7:3b:a1:53:06:8e:79:99:cf:63:48:ad:e6:2a:f4:a5:e4:71:
52:5e:db:aa:0f:c9:1e:be:60:7c:5d:86:34:db:1a:90:3b:41:
ed:bb:29:26:5e:31:25:f7:90:8b:13:d1:d3:8c:bd:ab:7d:0c:
aa:3a:e4:6a:c9:81:8f:42:29:11:de:3d:dc:0f:90:6b:c7:b0:
3e:96:38:af:ff:f5:e1:84:11:13:c5:64:1e:c6:3f:30:a3:1e:
f1:83:e5:40:89:58:e0:77:2e:fc:aa:2b:1e:99:a4:33:b9:09:
6d:9c:57:ba:7b:00:8e:bd:81:2b:67:12:55:2f:d0:6e:bd:9f:
63:40:cf:60:c5:2b:9e:6e:4d:b0:e1:60:bb:89:c5:52:05:50:
d8:b6:1e:fa:2c:14:5f:86:f8:78:4a:5f:f1:13:8e:2a:16:59:
3a:39:b7:ee:e5:b9:64:cc:91:63:cd:0a:65:02:36:c9:7d:dd:
b8:16:f7:12
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBwgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUUxQzQxMTAvBgNVBAUTKDcwQkQxRTQ5NUUyNTBCMjJFMjc5ODI5Njk2OTc4NUEy
RDc3RDczN0YwHhcNMjUwMTMwMjE1MzMwWhcNMjUwMjA2MjE1MzMwWjAYMRYwFAYD
VQQDEw02NzliZjRkYS0yOTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwUc6mDx9iKDXuZVrk2OIDfR8U++kFzGz32qTBBD5qToXlsKbVsgvRXT11Hns
aGOKO0qzlg3rsYrfG8CnE0vKt8uuI+EGgfXDZ4IujMFldCWTgGHC6g4YEqR3uUuu
dK/vGc5/BFrwy94g+7PJ0lW49fdG6Qo8hdklicqLBKPtQFxhyFSL1W10I4AFI7Of
hAmy/PRXR/utcpfJltJq8uCHARO2XOTvsNkMJE36q6VPMiutI34D6z8LhtHoNjXr
W3V6BWSTStcNoOl/7QWAUE5Rk/86AP2+B9UATX71hvLSOHEXQFNb6PZxc2Rg7kNn
C0QZKl/U527ONeNDxesorHFxwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPR/gl9g
pv0TJ/mmEmYJI+1FGApaMB8GA1UdIwQYMBaAFHC9HkleJQsi4nmClpaXhaLXfXN/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTFDNC9GQzY3MkI3MjJG
QUYxMUVCOTQxNTVGMzNDNEY5QUUwMi9jTDBlU1Y0bEN5TGllWUtXbHBlRm90ZDlj
MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NMMGVTVjRsQ3lMaWVZS1dscGVGb3RkOWMzOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RTFDNC9GQzY3MkI3MjJGQUYxMUVCOTQxNTVGMzNDNEY5QUUwMi9jTDBlU1Y0bEN5
TGllWUtXbHBlRm90ZDljMzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAtltlwqJyv2T2D55mnQI2TrZClTfAZuWd/LEnzH3VC8YWO+XqGHluu
2AsRZTcBRkUPrag+IO6P/QGHYJHOSDZmIapzURqV2d23O6FTBo55mc9jSK3mKvSl
5HFSXtuqD8kevmB8XYY02xqQO0HtuykmXjEl95CLE9HTjL2rfQyqOuRqyYGPQikR
3j3cD5Brx7A+ljiv//XhhBETxWQexj8wox7xg+VAiVjgdy78qisemaQzuQltnFe6
ewCOvYErZxJVL9BuvZ9jQM9gxSuebk2w4WC7icVSBVDYth76LBRfhvh4Sl/xE44q
Flk6Obfu5blkzJFjzQplAjbJfd24FvcS
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:38:47 2025 by rpki-client