Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
File: q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft (raw, json)
Hash identifier: Ym5F/lKmkiwDBIjrcZ/L2e9NP+QQlICf2+YUx4lwcrk=
Subject key identifier: 91:6A:E9:E0:62:4D:DE:9B:C1:A5:E3:06:AD:4F:C9:20:B0:77:42:A3
Authority key identifier: AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5
Certificate issuer: /CN=A91F67F5/serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5
Certificate serial: 08A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
Manifest number: 0894
Signing time: Thu 30 Jan 2025 20:38:12 +0000
Manifest this update: Thu 30 Jan 2025 20:38:12 +0000
Manifest next update: Thu 06 Feb 2025 20:38:12 +0000
Files and hashes: 1: q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl (hash: lnWkKiMAsVuDdGt5mDJguLJAVYVilW1YW72C7317WrU=)
2: E3829F3CB1CF11EAA8732709C4F9AE02.roa (hash: YwnEBUIIwCJtRBxz+rjLHt3w237awmJC1uWnaTU6Q3M=)
3: 7CA0A2E2B1CE11EAAF2F2784C4F9AE02.roa (hash: WYE1oD8S3ftmPZ9P42MC6m1geSKXvRB8dw3HalDWvGA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2211 (0x8a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F67F5/serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5
Validity
Not Before: Jan 30 20:38:12 2025 GMT
Not After : Feb 6 20:38:12 2025 GMT
Subject: CN=679be334-1b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:25:90:87:f8:dd:f4:c0:58:db:c7:e1:c5:3a:
a6:02:50:dc:65:a6:1e:26:00:da:ee:1d:33:f2:71:
4e:0e:96:8d:88:e4:65:a8:e4:65:8c:56:8a:37:13:
00:15:4e:04:fa:6f:d8:ff:18:ec:f2:f4:42:14:f3:
b8:6c:9a:44:be:04:f3:f7:5e:97:80:42:3d:6f:76:
ce:12:b4:02:a4:66:a0:e6:d2:17:38:4b:67:a1:14:
0b:44:2c:db:c1:e8:7b:08:d5:2f:2b:e2:d3:86:cd:
77:a6:f8:97:0c:99:55:96:3b:b9:6e:af:85:df:cd:
6f:bb:31:28:25:b5:9d:e4:4c:fd:72:48:38:27:48:
d2:9c:d3:06:8a:95:64:d4:ec:5f:c1:d6:72:6c:0d:
a4:06:cb:9d:93:b4:a2:fa:2b:f3:6d:be:45:9f:11:
2b:fe:72:9f:4b:01:f0:0e:5c:fc:1e:2a:86:0e:23:
9a:d0:ef:0c:d5:16:a8:99:f5:33:c7:32:bf:a2:a8:
0b:16:12:01:4e:f6:9c:e3:1a:ba:7d:eb:a9:cd:19:
9a:06:ea:70:e2:ca:2e:3e:4f:11:37:ef:79:fc:94:
56:00:8b:87:79:d4:13:33:ae:9d:c3:39:96:e4:2c:
2b:86:c4:c9:03:e8:c7:d5:83:02:7e:3e:bf:fa:02:
1b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6A:E9:E0:62:4D:DE:9B:C1:A5:E3:06:AD:4F:C9:20:B0:77:42:A3
X509v3 Authority Key Identifier:
keyid:AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:e8:52:ec:3e:56:a2:94:1a:7c:9b:63:1c:1e:05:c6:34:14:
87:19:4c:0a:dd:a1:e7:25:08:46:00:3d:b1:4a:8b:81:fd:92:
21:75:e5:33:f9:bf:f3:e5:72:49:64:f7:f0:b1:2d:4a:cb:ca:
d7:5d:d0:6f:b9:43:e9:47:d1:9b:36:6d:f4:14:0a:b8:5b:5a:
c1:7a:45:f6:b9:4e:3f:88:ef:63:31:2a:24:72:98:6d:01:83:
de:0d:aa:6d:9c:23:aa:ed:bf:43:7b:67:32:31:de:59:67:56:
a6:5e:ff:23:07:d5:d0:b6:64:35:6c:28:b7:64:ca:a9:30:64:
9c:39:5c:65:0c:a4:01:70:10:c7:1c:6c:16:7b:52:02:fc:1c:
14:b8:1f:f8:ea:81:6f:29:4c:90:a7:24:f8:a4:9f:b4:72:d8:
44:0c:33:45:cc:e4:5c:86:2e:0d:75:d0:b4:7b:5b:e4:45:2b:
62:1e:c1:21:cd:a5:3f:b0:94:6c:7b:67:fb:b5:1e:ca:bc:20:
f0:dc:5b:ff:0f:09:25:5c:86:99:de:37:98:53:d5:43:28:3d:
aa:28:a8:e9:4f:bf:d7:89:41:7c:a9:c5:b0:cd:5c:17:49:c9:
85:40:26:b6:54:bb:00:23:e0:17:64:d7:34:7c:89:f0:1e:f4:
ff:c5:81:81
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjY3RjUxMTAvBgNVBAUTKEFCRjE3M0RDMEEyNTg2OTU5MjkxNzY5QTA2NzAzNzMx
OUFGQThGRDUwHhcNMjUwMTMwMjAzODEyWhcNMjUwMjA2MjAzODEyWjAYMRYwFAYD
VQQDEw02NzliZTMzNC0xYjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5iWQh/jd9MBY28fhxTqmAlDcZaYeJgDa7h0z8nFODpaNiORlqORljFaKNxMA
FU4E+m/Y/xjs8vRCFPO4bJpEvgTz916XgEI9b3bOErQCpGag5tIXOEtnoRQLRCzb
weh7CNUvK+LThs13pviXDJlVlju5bq+F381vuzEoJbWd5Ez9ckg4J0jSnNMGipVk
1OxfwdZybA2kBsudk7Si+ivzbb5FnxEr/nKfSwHwDlz8HiqGDiOa0O8M1RaomfUz
xzK/oqgLFhIBTvac4xq6feupzRmaBupw4souPk8RN+95/JRWAIuHedQTM66dwzmW
5CwrhsTJA+jH1YMCfj6/+gIb0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJFq6eBi
Td6bwaXjBq1PySCwd0KjMB8GA1UdIwQYMBaAFKvxc9wKJYaVkpF2mgZwNzGa+o/V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdGNS9CRDEwQjREQ0Ix
QzYxMUVBQTg0ODI5NkNDNEY5QUUwMi9xX0Z6M0FvbGhwV1NrWGFhQm5BM01acjZq
OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FfRnozQW9saHBXU2tYYWFCbkEzTVpyNmo5VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NjdGNS9CRDEwQjREQ0IxQzYxMUVBQTg0ODI5NkNDNEY5QUUwMi9xX0Z6M0FvbGhw
V1NrWGFhQm5BM01acjZqOVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBV6FLsPlailBp8m2McHgXGNBSHGUwK3aHnJQhGAD2xSouB/ZIhdeUz
+b/z5XJJZPfwsS1Ky8rXXdBvuUPpR9GbNm30FAq4W1rBekX2uU4/iO9jMSokcpht
AYPeDaptnCOq7b9De2cyMd5ZZ1amXv8jB9XQtmQ1bCi3ZMqpMGScOVxlDKQBcBDH
HGwWe1IC/BwUuB/46oFvKUyQpyT4pJ+0cthEDDNFzORchi4NddC0e1vkRStiHsEh
zaU/sJRse2f7tR7KvCDw3Fv/DwklXIaZ3jeYU9VDKD2qKKjpT7/XiUF8qcWwzVwX
ScmFQCa2VLsAI+AXZNc0fInwHvT/xYGB
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:42:52 2025 by rpki-client