Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft
File: r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft (raw, json)
Hash identifier: mksuh/n39bpa9QXend9BIQkzSyGmfArGSNNfbzW/2JQ=
Subject key identifier: 63:79:2A:66:93:69:E4:63:6E:16:7A:69:DB:00:B9:A6:6C:A1:7A:C7
Authority key identifier: AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B
Certificate issuer: /CN=A91F5972/serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B
Certificate serial: 0518
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft
Manifest number: 0512
Signing time: Thu 30 Jan 2025 23:37:46 +0000
Manifest this update: Thu 30 Jan 2025 23:37:45 +0000
Manifest next update: Thu 06 Feb 2025 23:37:45 +0000
Files and hashes: 1: r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl (hash: iXgIjQgTDQwWKPcFbjaYaDMnwfvX10YhLZFNRUrjfCw=)
2: B52EA19A6E0B11ECA6057963C4F9AE02.roa (hash: sRAPrM6e/yJbsGZwUamXGzz2TWejjmVOjZsdsTU0i6Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1304 (0x518)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5972/serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B
Validity
Not Before: Jan 30 23:37:45 2025 GMT
Not After : Feb 6 23:37:45 2025 GMT
Subject: CN=679c0d4a-7f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c5:a6:3f:ea:33:e2:d8:0f:bb:b5:1d:7e:51:
de:ad:15:d3:e9:94:06:01:2e:51:e4:95:3b:73:f4:
08:69:28:1b:5d:f9:02:7f:ad:9b:60:3e:41:4a:5b:
dc:c5:d6:d4:d9:a8:e2:1e:35:91:26:02:b6:fc:07:
3b:8a:10:e0:f6:eb:d0:d2:2e:88:0a:f4:26:ae:f3:
a5:4d:e2:b5:48:a3:85:94:a1:3c:b5:2f:f1:d8:23:
40:f5:03:f5:fc:23:27:61:fa:59:8f:62:30:28:05:
d3:fc:ac:e4:4e:1b:64:d5:81:24:86:f7:c7:59:df:
be:ff:25:8f:44:40:db:44:2b:fc:9e:73:b0:d6:4b:
4d:cb:94:6b:da:92:b1:57:c6:d9:87:0d:98:d7:85:
ca:37:b8:f5:7f:27:3a:18:b3:10:91:8e:19:d6:56:
7c:d7:c6:bf:7f:cf:cf:b3:8d:24:a0:8b:5f:e5:3e:
9d:67:6f:09:b6:c6:fa:5a:98:e5:87:bf:70:de:2c:
1b:4b:82:a0:21:7d:f1:08:e5:92:4d:d5:96:e7:45:
eb:c5:45:e2:b5:1f:74:0a:e3:02:49:69:5a:56:54:
81:b7:7e:1c:db:a1:a6:c9:1d:db:c4:4d:57:2e:62:
73:fa:8f:33:2d:a9:2d:55:f0:36:8f:bf:fc:c3:9a:
f6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:79:2A:66:93:69:E4:63:6E:16:7A:69:DB:00:B9:A6:6C:A1:7A:C7
X509v3 Authority Key Identifier:
keyid:AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a0:57:d0:f4:62:9a:6d:f9:06:3f:4c:4e:5d:fb:17:96:03:
d8:61:2b:38:20:ba:74:5c:05:c8:04:cf:38:ed:57:f0:d6:67:
3c:27:1c:4e:40:0a:9d:61:95:42:ba:4b:9e:6d:e8:47:d6:72:
58:b0:7e:d4:5d:be:94:bd:72:bc:a6:2e:4a:52:88:df:04:ed:
ac:15:5c:f8:e3:ef:29:9a:72:de:ef:f9:c8:2e:30:15:43:2f:
b9:70:42:f6:8b:3a:34:45:2a:14:d9:68:56:82:3d:81:6f:fc:
84:53:3a:33:10:cf:c7:6d:bf:21:a2:58:9b:e7:b0:8a:17:06:
67:96:cc:97:02:4d:80:d2:08:29:0d:c4:e4:10:01:fc:0e:68:
85:d4:65:49:f5:2a:be:2f:24:62:a0:7e:79:30:32:1d:ba:39:
27:40:e1:5b:f1:21:e9:e2:8d:17:f2:f2:92:1c:76:98:d5:39:
ae:84:c5:1f:13:a1:d7:90:44:37:24:79:86:81:06:c9:35:0a:
c3:de:03:0e:1a:b8:92:ed:b4:a2:02:36:fb:e6:eb:ed:0e:b3:
f5:46:3b:c8:ca:77:62:a7:ae:63:ab:55:47:7d:d7:b5:d3:7b:
f5:e9:c7:94:da:58:91:2d:d9:12:e4:b9:45:74:37:79:32:54:
4d:7e:bc:b8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjU5NzIxMTAvBgNVBAUTKEFGNzk4NzQzREFCNjQ3ODY4QUI2NjY3M0FGN0ExMzZD
MkVBMEVBNUIwHhcNMjUwMTMwMjMzNzQ1WhcNMjUwMjA2MjMzNzQ1WjAYMRYwFAYD
VQQDEw02NzljMGQ0YS03ZjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwsWmP+oz4tgPu7UdflHerRXT6ZQGAS5R5JU7c/QIaSgbXfkCf62bYD5BSlvc
xdbU2ajiHjWRJgK2/Ac7ihDg9uvQ0i6ICvQmrvOlTeK1SKOFlKE8tS/x2CNA9QP1
/CMnYfpZj2IwKAXT/KzkThtk1YEkhvfHWd++/yWPREDbRCv8nnOw1ktNy5Rr2pKx
V8bZhw2Y14XKN7j1fyc6GLMQkY4Z1lZ818a/f8/Ps40koItf5T6dZ28Jtsb6Wpjl
h79w3iwbS4KgIX3xCOWSTdWW50XrxUXitR90CuMCSWlaVlSBt34c26GmyR3bxE1X
LmJz+o8zLaktVfA2j7/8w5r2YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGN5KmaT
aeRjbhZ6adsAuaZsoXrHMB8GA1UdIwQYMBaAFK95h0PatkeGirZmc696E2wuoOpb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTk3Mi85QkY2QzQ0RUYw
MzExMUVCOTVGNzY3NDhDNEY5QUUwMi9yM21IUTlxMlI0YUt0bVp6cjNvVGJDNmc2
bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3IzbUhROXEyUjRhS3RtWnpyM29UYkM2ZzZscy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NTk3Mi85QkY2QzQ0RUYwMzExMUVCOTVGNzY3NDhDNEY5QUUwMi9yM21IUTlxMlI0
YUt0bVp6cjNvVGJDNmc2bHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA8oFfQ9GKabfkGP0xOXfsXlgPYYSs4ILp0XAXIBM847Vfw1mc8JxxO
QAqdYZVCukuebehH1nJYsH7UXb6UvXK8pi5KUojfBO2sFVz44+8pmnLe7/nILjAV
Qy+5cEL2izo0RSoU2WhWgj2Bb/yEUzozEM/Hbb8holib57CKFwZnlsyXAk2A0ggp
DcTkEAH8DmiF1GVJ9Sq+LyRioH55MDIdujknQOFb8SHp4o0X8vKSHHaY1TmuhMUf
E6HXkEQ3JHmGgQbJNQrD3gMOGriS7bSiAjb75uvtDrP1RjvIyndip65jq1VHfde1
03v16ceU2liRLdkS5LlFdDd5MlRNfry4
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:56:33 2025 by rpki-client