Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
File: CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft (raw, json)
Hash identifier: Bc5vYCcIfaNj/qvAXtOOjFnl7NutrO1Vxk/kFulW30I=
Subject key identifier: 5B:F1:2A:B2:53:8B:F8:65:25:61:04:0F:A3:A5:3F:F4:0A:4D:75:02
Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Certificate serial: 0146
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
Manifest number: 0127
Signing time: Fri 31 Jan 2025 04:09:46 +0000
Manifest this update: Fri 31 Jan 2025 04:09:46 +0000
Manifest next update: Fri 07 Feb 2025 04:09:46 +0000
Files and hashes: 1: CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl (hash: yh9OVHql/8Q4vDSkr1x8EtgLfMvH9jQWZJgWuc7zmVI=)
2: 70CD850071DE11EFA543C55CC4F9AE02.roa (hash: VTk/TnaWkWqlXiaCv1SPhWMrmq/k9L+YL6Xsj9+00fs=)
3: 18AE9CC0764C11EFB4346E73C4F9AE02.roa (hash: WtNK7x1fpi+f6NsDrFsZ9jPtOAmjd5SuohEBjapW1ik=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 326 (0x146)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Validity
Not Before: Jan 31 04:09:46 2025 GMT
Not After : Feb 7 04:09:46 2025 GMT
Subject: CN=679c4d0a-1b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7f:ad:a6:90:bf:4f:11:05:7e:7c:eb:f6:2a:
cf:87:99:7c:a6:dd:b5:e3:a1:f7:b4:c8:10:5e:81:
49:87:16:7f:8b:ab:f6:d4:59:2d:4a:12:b8:8a:d2:
75:a6:8e:a7:ae:7c:5e:7f:d5:1c:c1:a3:04:e7:0d:
c9:b4:ef:e9:a6:a9:c8:f5:98:cd:39:14:96:06:88:
d0:b8:d5:da:92:77:65:0e:89:85:e8:76:0c:7e:41:
98:78:24:dc:c7:38:78:87:db:30:6a:1b:5c:55:1e:
97:27:51:86:05:7a:52:03:45:92:c5:ec:9b:8d:c1:
9d:d8:a2:81:cf:cc:18:ce:2a:7c:4d:e8:f2:06:e2:
8a:4b:92:ec:6d:f6:32:ac:40:fe:04:55:09:8f:e5:
2c:d8:bb:31:e1:89:1b:4a:13:9c:26:c2:a2:33:80:
73:61:3a:e2:c5:0b:d5:38:33:76:df:d2:55:9b:91:
ad:07:b7:8a:93:40:d5:c3:36:0f:5b:6c:89:d0:90:
68:f0:35:a9:7e:76:5e:11:73:66:00:2f:41:58:8c:
35:43:e4:b6:52:6f:b4:2e:45:09:9f:dc:a2:bd:74:
f7:b6:92:69:23:22:c5:16:2b:f6:e6:e8:4d:c2:37:
10:68:e4:12:a3:54:da:9e:69:29:97:b1:cc:23:9e:
0e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F1:2A:B2:53:8B:F8:65:25:61:04:0F:A3:A5:3F:F4:0A:4D:75:02
X509v3 Authority Key Identifier:
keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8c:47:e3:67:05:c8:e4:db:dc:4c:c4:b2:f2:ef:09:76:9e:
aa:73:e2:79:ae:cc:16:2a:b5:ab:60:9b:88:b4:dc:ed:06:be:
41:0c:20:b3:48:bf:17:0a:f5:04:df:44:3b:94:e9:fe:ce:70:
f9:fb:ae:d3:55:66:a7:f4:f8:04:28:89:b8:ab:ce:ff:86:62:
25:dc:5a:58:04:d2:2f:a9:cf:c8:f7:ba:51:9e:3c:57:66:cd:
6c:39:57:63:05:3e:2b:74:d0:e4:8d:f4:2d:e2:b6:8f:56:1b:
e5:6f:78:3c:86:6b:c6:40:2c:b1:c9:01:b1:ab:c6:14:24:c2:
e7:46:e8:ba:0c:97:21:a2:96:99:29:09:81:8c:98:a3:16:06:
19:b5:65:91:3d:9e:c2:83:04:94:95:85:cf:9c:2e:16:27:ce:
61:13:a6:09:80:bb:23:25:67:b0:a1:0e:e8:54:ca:2a:f9:5d:
c8:50:79:dd:1e:78:9f:ce:58:16:d6:51:45:9d:29:0a:5f:1b:
7b:ba:19:91:05:95:e0:22:7a:9f:f7:e6:d3:f2:16:ec:ae:45:
84:96:c8:ef:0d:02:a3:43:58:bf:3d:6b:41:56:73:da:c6:ee:
74:43:42:40:1c:78:19:27:48:13:7e:bd:c0:ab:9d:a9:af:bb:
fa:31:62:9f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjE3QUExMTAvBgNVBAUTKDA5NDcwNTFFRkE1MDQyOTIxNTc1MEE0OEJDMDMxQURB
OTI2RUY2NkUwHhcNMjUwMTMxMDQwOTQ2WhcNMjUwMjA3MDQwOTQ2WjAYMRYwFAYD
VQQDEw02NzljNGQwYS0xYjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2n+tppC/TxEFfnzr9irPh5l8pt2146H3tMgQXoFJhxZ/i6v21FktShK4itJ1
po6nrnxef9UcwaME5w3JtO/ppqnI9ZjNORSWBojQuNXakndlDomF6HYMfkGYeCTc
xzh4h9swahtcVR6XJ1GGBXpSA0WSxeybjcGd2KKBz8wYzip8TejyBuKKS5LsbfYy
rED+BFUJj+Us2Lsx4YkbShOcJsKiM4BzYTrixQvVODN239JVm5GtB7eKk0DVwzYP
W2yJ0JBo8DWpfnZeEXNmAC9BWIw1Q+S2Um+0LkUJn9yivXT3tpJpIyLFFiv25uhN
wjcQaOQSo1Tanmkpl7HMI54OTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFvxKrJT
i/hlJWEED6OlP/QKTXUCMB8GA1UdIwQYMBaAFAlHBR76UEKSFXUKSLwDGtqSbvZu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdBQS80MUYwRjk3RTUy
QjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFwSVZkUXBJdkFNYTJwSnU5
bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NVY0ZIdnBRUXBJVmRRcEl2QU1hMnBKdTltNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MTdBQS80MUYwRjk3RTUyQjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFw
SVZkUXBJdkFNYTJwSnU5bTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA+jEfjZwXI5NvcTMSy8u8Jdp6qc+J5rswWKrWrYJuItNztBr5BDCCz
SL8XCvUE30Q7lOn+znD5+67TVWan9PgEKIm4q87/hmIl3FpYBNIvqc/I97pRnjxX
Zs1sOVdjBT4rdNDkjfQt4raPVhvlb3g8hmvGQCyxyQGxq8YUJMLnRui6DJchopaZ
KQmBjJijFgYZtWWRPZ7CgwSUlYXPnC4WJ85hE6YJgLsjJWewoQ7oVMoq+V3IUHnd
HnifzlgW1lFFnSkKXxt7uhmRBZXgInqf9+bT8hbsrkWElsjvDQKjQ1i/PWtBVnPa
xu50Q0JAHHgZJ0gTfr3Aq52pr7v6MWKf
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:58:57 2025 by rpki-client