Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft
File: -sKy5UFEW1tHxZ2uHeLd6IeauLs.mft (raw, json)
Hash identifier: tzzovoGSCBRg7Irzn6clkDCrSzexAQy4FNcPFEqIsLU=
Subject key identifier: 2D:59:DE:AC:79:BF:97:EC:7C:D1:7F:3D:EC:F0:A8:28:24:9B:10:8C
Authority key identifier: FA:C2:B2:E5:41:44:5B:5B:47:C5:9D:AE:1D:E2:DD:E8:87:9A:B8:BB
Certificate issuer: /CN=A91F11EE/serialNumber=FAC2B2E541445B5B47C59DAE1DE2DDE8879AB8BB
Certificate serial: 77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft
Manifest number: 71
Signing time: Fri 31 Jan 2025 05:57:53 +0000
Manifest this update: Fri 31 Jan 2025 05:57:52 +0000
Manifest next update: Fri 07 Feb 2025 05:57:52 +0000
Files and hashes: 1: -sKy5UFEW1tHxZ2uHeLd6IeauLs.crl (hash: /wUwIqJH0hITANybTjIvjfcbpSARyt/OkcadvF8vOIM=)
2: 8B0201183E8911EFB2DCA846C4F9AE02.roa (hash: 8zOiXd3kRlQoiz32Gjahx1aoeuvy3cZGr/aU3t8eEp8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119 (0x77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F11EE/serialNumber=FAC2B2E541445B5B47C59DAE1DE2DDE8879AB8BB
Validity
Not Before: Jan 31 05:57:52 2025 GMT
Not After : Feb 7 05:57:52 2025 GMT
Subject: CN=679c6661-831e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3f:10:19:43:4d:70:6e:85:7a:54:b7:72:6e:
7f:bf:f4:9e:86:eb:d2:f6:ae:1d:2f:b7:4f:cb:82:
12:cd:45:51:5e:be:1d:91:70:00:d3:f2:d7:35:8a:
53:06:f4:d9:a3:84:cd:97:26:f0:4f:fb:76:5c:e3:
76:3d:60:ed:ba:f0:09:03:62:d3:fb:94:92:90:4d:
09:cd:74:bd:f1:79:7c:f4:12:53:9a:f7:74:40:b2:
77:9e:83:79:f6:5b:d4:61:51:3c:e1:c2:db:84:62:
11:ba:9f:39:ef:0a:f3:9c:08:3d:ab:e8:6d:32:b1:
84:ef:d6:2c:82:09:b3:95:dd:31:f1:0f:b8:d6:f6:
12:26:9d:f3:e6:14:cf:00:10:61:9d:e3:71:3b:89:
7c:05:79:e3:dd:2e:6d:07:ce:d0:38:6f:ff:b2:bc:
33:ea:76:44:49:4f:e6:8a:0a:d2:4e:a1:75:ce:72:
52:66:67:c8:a9:24:7c:32:c0:cc:15:2c:83:fe:aa:
60:0c:4b:eb:20:6d:6a:71:30:87:a7:1f:b3:80:9f:
e9:a8:b5:ad:b0:d6:30:fa:e3:a3:63:3c:0e:49:52:
e3:3d:da:77:14:89:de:b6:1c:05:62:ae:54:59:c0:
d6:aa:d5:d3:ce:73:c3:3f:4f:cc:16:ff:2b:7e:17:
fa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:59:DE:AC:79:BF:97:EC:7C:D1:7F:3D:EC:F0:A8:28:24:9B:10:8C
X509v3 Authority Key Identifier:
keyid:FA:C2:B2:E5:41:44:5B:5B:47:C5:9D:AE:1D:E2:DD:E8:87:9A:B8:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:9a:29:91:f9:fe:e8:6e:23:2a:d3:74:3c:85:ac:39:be:e4:
ee:22:1a:50:0e:f3:8e:f6:16:5b:ae:70:b4:89:82:3e:5e:57:
57:1d:29:f4:ac:f6:c5:16:0e:bf:26:19:59:3d:df:ea:b1:8d:
de:ae:66:e3:0a:dd:6e:65:2e:fb:98:12:ea:bd:f9:e1:ec:f2:
37:24:95:cd:89:46:9d:43:49:3d:0e:56:0d:22:40:fb:b2:ca:
ae:68:75:07:ca:ee:dc:76:cb:0a:e6:4d:13:a7:cc:f1:c4:bd:
d6:4e:19:6b:77:9c:e3:ca:62:39:fb:9f:b4:6f:0a:98:d2:89:
33:9b:46:bd:53:c9:b1:33:42:5a:8a:5a:31:59:ee:14:79:f6:
f2:da:a3:9f:22:35:c5:d5:b7:47:4d:8e:59:56:64:cd:24:b7:
46:c7:51:cd:9f:1f:4c:a0:80:da:33:c1:c9:56:57:bb:b8:d7:
67:ec:8b:d5:0f:ce:f5:65:9c:fb:78:5c:2d:31:a8:fb:f4:e9:
dd:c8:ce:24:74:44:8a:48:34:c4:a4:ee:26:9c:6b:5f:1d:54:
80:f3:12:36:6a:4d:3f:79:95:45:e6:1a:b9:bd:c8:50:35:e7:
8f:3c:b4:d4:a9:94:43:2e:76:ce:6d:9c:17:d2:36:fd:a3:19:
ac:8b:56:9c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
MTFFRTExMC8GA1UEBRMoRkFDMkIyRTU0MTQ0NUI1QjQ3QzU5REFFMURFMkRERTg4
NzlBQjhCQjAeFw0yNTAxMzEwNTU3NTJaFw0yNTAyMDcwNTU3NTJaMBgxFjAUBgNV
BAMTDTY3OWM2NjYxLTgzMWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDcPxAZQ01wboV6VLdybn+/9J6G69L2rh0vt0/LghLNRVFevh2RcADT8tc1ilMG
9NmjhM2XJvBP+3Zc43Y9YO268AkDYtP7lJKQTQnNdL3xeXz0ElOa93RAsneeg3n2
W9RhUTzhwtuEYhG6nznvCvOcCD2r6G0ysYTv1iyCCbOV3THxD7jW9hImnfPmFM8A
EGGd43E7iXwFeePdLm0HztA4b/+yvDPqdkRJT+aKCtJOoXXOclJmZ8ipJHwywMwV
LIP+qmAMS+sgbWpxMIenH7OAn+mota2w1jD646NjPA5JUuM92ncUid62HAVirlRZ
wNaq1dPOc8M/T8wW/yt+F/oRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULVnerHm/
l+x80X897PCoKCSbEIwwHwYDVR0jBBgwFoAU+sKy5UFEW1tHxZ2uHeLd6IeauLsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxMUVFL0U5OEE0NjUyM0U4
NzExRUZBQTI0QUE0M0M0RjlBRTAyLy1zS3k1VUZFVzF0SHhaMnVIZUxkNkllYXVM
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvLXNLeTVVRkVXMXRIeFoydUhlTGQ2SWVhdUxzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx
MUVFL0U5OEE0NjUyM0U4NzExRUZBQTI0QUE0M0M0RjlBRTAyLy1zS3k1VUZFVzF0
SHhaMnVIZUxkNkllYXVMcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAMiaKZH5/uhuIyrTdDyFrDm+5O4iGlAO8472FluucLSJgj5eV1cdKfSs
9sUWDr8mGVk93+qxjd6uZuMK3W5lLvuYEuq9+eHs8jcklc2JRp1DST0OVg0iQPuy
yq5odQfK7tx2ywrmTROnzPHEvdZOGWt3nOPKYjn7n7RvCpjSiTObRr1TybEzQlqK
WjFZ7hR59vLao58iNcXVt0dNjllWZM0kt0bHUc2fH0yggNozwclWV7u412fsi9UP
zvVlnPt4XC0xqPv06d3IziR0RIpINMSk7iaca18dVIDzEjZqTT95lUXmGrm9yFA1
5488tNSplEMuds5tnBfSNv2jGayLVpw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:54:31 2025 by rpki-client