Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft
File: sxnfFFXYouFJjNxdSRVpgxxa_aE.mft (raw, json)
Hash identifier: vbJ2Yk7vvmoOs3fWH8VUCcwQS26TQaq/tIHpnEM5Xy8=
Subject key identifier: 77:C4:8E:16:75:C9:23:F6:7E:C5:9B:18:DB:1B:CE:5D:A7:2E:C6:E2
Authority key identifier: B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1
Certificate issuer: /CN=A91F87BB/serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1
Certificate serial: 03BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft
Manifest number: 03B1
Signing time: Fri 31 Jan 2025 00:46:13 +0000
Manifest this update: Fri 31 Jan 2025 00:46:13 +0000
Manifest next update: Fri 07 Feb 2025 00:46:13 +0000
Files and hashes: 1: sxnfFFXYouFJjNxdSRVpgxxa_aE.crl (hash: 4hzAqaeh/parKOJ8bEpwoJRLgLwjMWxg3qe7dS0fUtw=)
2: 88B3F0026E9F11EEB03D9582C4F9AE02.roa (hash: XwKeJLskTB6Imr0S9o23k/3GveOx7qAiEQDWVAowUlY=)
3: DDCB6B02D9D311EEBB3BDF10C4F9AE02.roa (hash: fa+qO5xpgOgt/uE45uXILHD+EmZJYo5mycKYiXut9tM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 955 (0x3bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F87BB/serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1
Validity
Not Before: Jan 31 00:46:13 2025 GMT
Not After : Feb 7 00:46:13 2025 GMT
Subject: CN=679c1d55-5c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ec:7a:36:55:51:27:23:af:b0:7c:7e:0e:f2:
b1:6b:7d:ad:49:7c:ec:7e:a8:ee:2d:0a:c1:c5:e5:
ff:88:2f:f9:ab:9b:ec:ac:a7:ec:05:e1:85:d2:f7:
e9:e1:0b:c8:d0:52:b2:e8:8d:ea:26:c8:61:9f:00:
e5:70:55:0a:c6:83:df:2d:20:88:86:15:42:c9:f4:
fc:d9:d9:c2:77:7a:3c:20:fc:2b:dc:b5:4d:56:2f:
f4:73:3e:fe:4b:11:78:ea:50:46:14:8d:84:51:ea:
c3:b0:c2:75:94:b9:69:02:05:eb:97:35:60:12:c0:
38:e7:1f:24:58:ef:94:9a:00:c3:35:39:de:f0:aa:
c1:bb:d2:41:0e:44:90:76:19:72:52:75:f9:cb:23:
b0:31:18:2f:83:a9:3f:dc:d1:50:b1:81:ab:fc:69:
34:24:e5:d7:25:b9:02:48:23:b0:1d:e7:32:c6:97:
d7:75:de:aa:bb:fe:59:ec:3b:a2:49:bf:e2:a8:9b:
7e:8a:9e:15:b0:9a:bb:b0:95:9c:bc:2f:49:56:25:
3e:d1:4c:aa:cb:03:90:55:95:dc:75:21:f5:91:11:
b3:96:62:60:9d:1e:78:73:76:ff:8b:ed:b2:b2:e6:
ae:73:09:8a:4e:62:63:91:8c:2e:00:1a:78:6d:da:
0d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C4:8E:16:75:C9:23:F6:7E:C5:9B:18:DB:1B:CE:5D:A7:2E:C6:E2
X509v3 Authority Key Identifier:
keyid:B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:91:01:b6:c3:b9:73:57:47:19:1d:4b:85:29:dd:ca:c2:0c:
3d:25:5d:38:96:74:45:64:2c:bd:9f:12:cd:5a:d3:28:26:bc:
56:17:74:42:80:6a:0b:6c:04:56:e2:50:62:3f:2f:66:38:74:
f5:88:e9:3d:a0:cf:54:70:08:09:44:61:31:4e:c0:3e:6c:0f:
dc:50:2f:af:64:22:1d:42:32:81:0e:9f:e3:30:1e:3d:52:de:
9c:b0:cc:cf:a4:94:1d:2a:4a:2c:86:c1:92:15:2f:16:b3:56:
a4:92:de:bd:0d:27:5a:07:17:e7:6f:c5:89:4c:85:43:20:69:
09:4f:72:b6:b9:1f:23:8b:cb:e4:16:9c:9b:a7:77:92:32:69:
4c:14:98:2c:25:92:84:b7:11:3f:3d:87:cf:9d:e5:d7:d5:54:
74:24:ce:95:34:da:c6:49:9b:04:6a:2c:e5:5f:00:8d:25:13:
d2:65:eb:b1:bf:a2:5c:81:f8:3b:ad:6a:25:60:e5:17:dc:38:
2f:3d:3e:f3:03:97:b3:37:ca:c8:4f:93:b1:b5:62:ae:1c:f1:
38:08:a0:3d:34:cc:fa:45:8c:fd:3e:34:09:e7:b3:55:09:9a:
4a:2c:75:69:d9:9f:88:a0:3f:db:2f:81:ef:f9:6c:88:ed:74:
e7:3d:9a:f1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjg3QkIxMTAvBgNVBAUTKEIzMTlERjE0NTVEOEEyRTE0OThDREM1RDQ5MTU2OTgz
MUM1QUZEQTEwHhcNMjUwMTMxMDA0NjEzWhcNMjUwMjA3MDA0NjEzWjAYMRYwFAYD
VQQDEw02NzljMWQ1NS01YzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1Ox6NlVRJyOvsHx+DvKxa32tSXzsfqjuLQrBxeX/iC/5q5vsrKfsBeGF0vfp
4QvI0FKy6I3qJshhnwDlcFUKxoPfLSCIhhVCyfT82dnCd3o8IPwr3LVNVi/0cz7+
SxF46lBGFI2EUerDsMJ1lLlpAgXrlzVgEsA45x8kWO+UmgDDNTne8KrBu9JBDkSQ
dhlyUnX5yyOwMRgvg6k/3NFQsYGr/Gk0JOXXJbkCSCOwHecyxpfXdd6qu/5Z7Dui
Sb/iqJt+ip4VsJq7sJWcvC9JViU+0UyqywOQVZXcdSH1kRGzlmJgnR54c3b/i+2y
suaucwmKTmJjkYwuABp4bdoNbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHfEjhZ1
ySP2fsWbGNsbzl2nLsbiMB8GA1UdIwQYMBaAFLMZ3xRV2KLhSYzcXUkVaYMcWv2h
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODdCQi85REYwREZCRTdE
RTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91RkpqTnhkU1JWcGd4eGFf
YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3N4bmZGRlhZb3VGSmpOeGRTUlZwZ3h4YV9hRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODdCQi85REYwREZCRTdERTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91
RkpqTnhkU1JWcGd4eGFfYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB4kQG2w7lzV0cZHUuFKd3Kwgw9JV04lnRFZCy9nxLNWtMoJrxWF3RC
gGoLbARW4lBiPy9mOHT1iOk9oM9UcAgJRGExTsA+bA/cUC+vZCIdQjKBDp/jMB49
Ut6csMzPpJQdKkoshsGSFS8Ws1akkt69DSdaBxfnb8WJTIVDIGkJT3K2uR8ji8vk
Fpybp3eSMmlMFJgsJZKEtxE/PYfPneXX1VR0JM6VNNrGSZsEaizlXwCNJRPSZeux
v6Jcgfg7rWolYOUX3DgvPT7zA5ezN8rIT5OxtWKuHPE4CKA9NMz6RYz9PjQJ57NV
CZpKLHVp2Z+IoD/bL4Hv+WyI7XTnPZrx
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:19:50 2025 by rpki-client