Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft
File: 4XI0Y4kx9DllENfQutUfivTrhrY.mft (raw, json)
Hash identifier: VIH/vcwVFfmOzONZg8zNKfqx6FqGzidB5NhdIz9l/8Y=
Subject key identifier: 15:97:2B:AC:C5:53:D8:41:F0:2D:C3:6A:8D:C8:36:24:86:B9:91:CD
Authority key identifier: E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6
Certificate issuer: /CN=A91F34FA/serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6
Certificate serial: 01A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft
Manifest number: 019D
Signing time: Fri 31 Jan 2025 02:35:36 +0000
Manifest this update: Fri 31 Jan 2025 02:35:36 +0000
Manifest next update: Fri 07 Feb 2025 02:35:36 +0000
Files and hashes: 1: 4XI0Y4kx9DllENfQutUfivTrhrY.crl (hash: YLDdMtl8FDy+wn0zq+oTcG82uIf9R38bUE7sdSqax0c=)
2: 8256A692444A11EFB043DE36C4F9AE02.roa (hash: Ple4OYydaAojanyJwx7ZWPyKox9DD4lFfc6gQi2CwTI=)
3: 81B847F4444A11EFB043DE36C4F9AE02.roa (hash: iBZ0Vc5oqFw84Bi0mykH6jGLVo3+N0cmUjqo5T+vIIo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 417 (0x1a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F34FA/serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6
Validity
Not Before: Jan 31 02:35:36 2025 GMT
Not After : Feb 7 02:35:36 2025 GMT
Subject: CN=679c36f8-7f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0b:ca:52:f4:05:3d:06:bf:55:b3:de:19:1f:
a5:2b:d3:91:80:f5:a9:fa:60:02:65:91:b2:da:ef:
66:e5:c2:66:07:3e:c4:02:07:44:3d:d4:cc:23:57:
2b:2c:65:31:9a:9d:72:3d:47:7b:25:65:17:fb:87:
37:a7:59:a7:f4:61:db:e2:3e:c5:d7:0b:4c:a3:d5:
22:56:ca:75:d7:12:e7:b2:7b:73:e4:cf:a1:9b:b2:
af:6f:ce:ac:74:37:b8:bb:fa:d5:b7:0b:82:dc:08:
37:b7:f7:54:37:99:01:16:f6:fc:c5:3f:ac:d0:04:
db:d7:ef:fc:1d:fe:de:4f:7d:b2:44:90:4b:05:b0:
7c:b3:b5:47:1e:e9:73:80:c3:07:b1:e4:c1:0d:70:
dc:2a:e1:a7:d1:2f:8c:f3:9a:a4:a2:74:3b:34:1f:
c4:44:7a:60:06:6f:04:58:21:62:b7:0e:f2:34:bd:
37:3e:7e:13:51:62:6f:40:06:52:67:86:57:9f:b8:
05:b7:e2:33:c4:4b:ba:76:2a:d5:58:26:a5:ee:90:
fd:d2:95:50:14:d2:ba:04:5f:c3:82:1b:03:e0:d3:
e1:5f:0e:5e:98:08:c8:ef:30:e3:7b:7d:d4:ec:9c:
f6:4f:03:bf:a7:f3:b6:29:6c:b1:d6:6c:24:fb:f4:
a0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:97:2B:AC:C5:53:D8:41:F0:2D:C3:6A:8D:C8:36:24:86:B9:91:CD
X509v3 Authority Key Identifier:
keyid:E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:1b:82:f2:b4:71:ad:4a:e8:3d:fd:86:3c:c2:10:53:96:72:
e0:e7:35:1b:1b:b3:80:0a:97:aa:67:95:e3:4e:7e:f2:76:26:
6f:e2:81:97:b3:c5:71:1c:51:bb:90:59:dd:ba:70:6e:2f:1e:
fa:c1:19:1b:e8:66:0c:72:8f:bc:5c:8e:ed:36:78:9b:35:c9:
66:ce:46:50:eb:cf:35:fa:53:be:a5:37:ce:23:e4:5e:7e:8d:
cd:e0:5f:3e:96:77:45:07:9d:27:9d:b9:e8:c2:c9:4f:6c:b7:
f3:6a:32:a3:a4:cb:27:04:47:7d:91:78:fe:76:d5:23:d6:1d:
10:e1:b2:a4:c0:d2:ba:a3:26:11:35:b3:8c:2e:aa:0d:2b:09:
5a:a7:47:99:9c:80:7e:7c:a2:5e:33:65:66:22:79:a7:6a:a4:
83:d8:10:2d:38:ab:18:fe:73:e9:c9:0e:48:35:77:4f:52:47:
1c:e7:be:07:e4:4a:61:cb:0e:8f:a0:0b:6e:a1:4e:f4:17:8e:
97:a1:57:b7:45:c9:76:11:ef:ad:6d:5f:d4:09:a0:d7:78:7c:
2e:6b:d1:e3:23:f6:46:f3:fa:2f:2e:19:b6:ea:11:98:de:1a:
54:ad:91:a0:16:24:ee:7c:ad:df:81:e9:2b:95:1b:7e:f1:18:
1d:9b:68:50
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjM0RkExMTAvBgNVBAUTKEUxNzIzNDYzODkzMUY0Mzk2NTEwRDdEMEJBRDUxRjhB
RjRFQjg2QjYwHhcNMjUwMTMxMDIzNTM2WhcNMjUwMjA3MDIzNTM2WjAYMRYwFAYD
VQQDEw02NzljMzZmOC03ZjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvQvKUvQFPQa/VbPeGR+lK9ORgPWp+mACZZGy2u9m5cJmBz7EAgdEPdTMI1cr
LGUxmp1yPUd7JWUX+4c3p1mn9GHb4j7F1wtMo9UiVsp11xLnsntz5M+hm7Kvb86s
dDe4u/rVtwuC3Ag3t/dUN5kBFvb8xT+s0ATb1+/8Hf7eT32yRJBLBbB8s7VHHulz
gMMHseTBDXDcKuGn0S+M85qkonQ7NB/ERHpgBm8EWCFitw7yNL03Pn4TUWJvQAZS
Z4ZXn7gFt+IzxEu6dirVWCal7pD90pVQFNK6BF/DghsD4NPhXw5emAjI7zDje33U
7Jz2TwO/p/O2KWyx1mwk+/SgBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBWXK6zF
U9hB8C3Dao3INiSGuZHNMB8GA1UdIwQYMBaAFOFyNGOJMfQ5ZRDX0LrVH4r064a2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzRGQS80NUU5RTE2QTY1
OEExMUVEOTlBMjFCNkZDNEY5QUUwMi80WEkwWTRreDlEbGxFTmZRdXRVZml2VHJo
clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRYSTBZNGt4OURsbEVOZlF1dFVmaXZUcmhyWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MzRGQS80NUU5RTE2QTY1OEExMUVEOTlBMjFCNkZDNEY5QUUwMi80WEkwWTRreDlE
bGxFTmZRdXRVZml2VHJoclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBxG4LytHGtSug9/YY8whBTlnLg5zUbG7OACpeqZ5XjTn7ydiZv4oGX
s8VxHFG7kFndunBuLx76wRkb6GYMco+8XI7tNnibNclmzkZQ6881+lO+pTfOI+Re
fo3N4F8+lndFB50nnbnowslPbLfzajKjpMsnBEd9kXj+dtUj1h0Q4bKkwNK6oyYR
NbOMLqoNKwlap0eZnIB+fKJeM2VmInmnaqSD2BAtOKsY/nPpyQ5INXdPUkcc574H
5Ephyw6PoAtuoU70F46XoVe3Rcl2Ee+tbV/UCaDXeHwua9HjI/ZG8/ovLhm26hGY
3hpUrZGgFiTufK3fgekrlRt+8Rgdm2hQ
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:32:52 2025 by rpki-client