Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft
File: v49Do1Dk9qJgvwPtS9_BqB2itaE.mft (raw, json)
Hash identifier: ffsYqdqueyq3vXCrGPRHNKtGK3RLEnQIDnME52LhB94=
Subject key identifier: 32:A5:1C:3C:38:C7:C3:9C:87:51:2D:6F:BF:F1:CE:24:10:B0:13:37
Authority key identifier: BF:8F:43:A3:50:E4:F6:A2:60:BF:03:ED:4B:DF:C1:A8:1D:A2:B5:A1
Certificate issuer: /CN=A91FAB62/serialNumber=BF8F43A350E4F6A260BF03ED4BDFC1A81DA2B5A1
Certificate serial: 0639
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft
Manifest number: 061A
Signing time: Thu 30 Jan 2025 22:56:29 +0000
Manifest this update: Thu 30 Jan 2025 22:56:29 +0000
Manifest next update: Thu 06 Feb 2025 22:56:29 +0000
Files and hashes: 1: v49Do1Dk9qJgvwPtS9_BqB2itaE.crl (hash: JDd1ow8TX/HPmvhYi4gXZQTe1qyjRoyCgFQNGqsyv5c=)
2: 606DB4B298D111EB84F5A23CC4F9AE02.roa (hash: d5GPHUQ6PbzbALE1pusneP0He2eAPmJTteAnoAOf/Gs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1593 (0x639)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAB62/serialNumber=BF8F43A350E4F6A260BF03ED4BDFC1A81DA2B5A1
Validity
Not Before: Jan 30 22:56:29 2025 GMT
Not After : Feb 6 22:56:29 2025 GMT
Subject: CN=679c039d-5c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:82:00:eb:5b:ae:c5:46:49:88:f9:f0:d0:07:
98:5f:4c:6c:c5:77:61:c8:e3:c5:65:d4:8a:46:02:
f7:4b:d5:48:ce:83:13:12:bc:7d:51:4e:98:63:62:
c2:80:d4:10:0c:36:06:76:b4:f6:6d:47:e1:86:a4:
e4:8d:32:c3:63:36:24:b9:87:50:95:17:69:43:9b:
16:61:40:05:a5:1a:7e:80:82:6f:eb:d5:b7:38:8f:
f2:e8:98:ca:88:b8:0f:21:a7:08:1e:2d:e2:bb:d8:
fa:a9:f0:40:78:02:07:80:65:84:73:c9:a8:a5:28:
01:3d:21:60:8a:c7:52:68:12:ab:27:2e:da:b3:f6:
18:93:0b:b2:8f:74:51:6a:64:74:6a:6e:14:b4:c4:
f3:2b:89:53:68:2b:2a:33:e4:a4:bc:f1:1c:05:75:
b1:38:31:bb:b6:f7:ea:c6:35:cc:25:6f:54:12:8c:
20:c9:a0:f8:df:53:b3:8f:ef:d9:bc:24:c6:26:0f:
15:8b:5a:fb:74:67:58:17:1b:ab:b8:d5:81:c7:66:
e4:c7:c7:12:f5:c4:53:d5:bf:bf:b2:15:a0:ed:c8:
47:f2:5e:56:d2:aa:c8:5a:e2:04:03:c9:e0:38:57:
30:62:b4:0a:ce:c2:a1:f7:5e:85:70:8f:17:b1:90:
bc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A5:1C:3C:38:C7:C3:9C:87:51:2D:6F:BF:F1:CE:24:10:B0:13:37
X509v3 Authority Key Identifier:
keyid:BF:8F:43:A3:50:E4:F6:A2:60:BF:03:ED:4B:DF:C1:A8:1D:A2:B5:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:f7:36:ce:d1:ac:b8:af:fe:68:f3:28:ac:e0:7f:5a:56:b7:
97:c9:89:4e:8b:fd:3b:3a:3b:1e:4b:d8:a8:0f:33:6e:21:20:
be:d4:5d:91:52:17:dd:b0:cb:46:ef:45:5a:62:a7:79:d5:69:
88:ff:d2:eb:e0:0d:81:4e:21:61:a8:10:9a:ce:08:60:87:ce:
c4:bf:11:5f:f3:72:29:8e:42:87:d2:09:d4:87:4f:00:b9:05:
c3:3c:80:03:3a:2d:08:bd:ae:45:67:9e:08:81:dc:fe:6f:4d:
e3:71:33:38:e9:56:ef:5f:77:3b:f2:e4:57:52:e1:35:d4:03:
f1:e3:c8:f2:b3:1f:2a:cd:0e:2b:b6:e0:b3:b8:e8:46:42:6e:
37:24:2d:3d:f3:3c:78:5c:c4:a9:fb:00:6b:87:9b:f6:b0:77:
08:2e:dd:7a:82:aa:87:db:ac:79:aa:38:8f:26:fb:87:05:6c:
13:5d:9e:a2:db:a3:6c:86:d7:7e:d7:c5:08:94:d1:ae:36:2c:
94:51:ac:81:13:4b:86:c5:a5:a0:d8:57:5f:95:e0:82:4d:d3:
99:fe:d3:3a:49:8c:da:93:6b:05:f3:90:35:61:57:f9:56:ec:
66:85:87:33:5f:d4:8b:fe:15:13:ec:98:27:4d:17:d5:de:04:
36:75:bd:78
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkFCNjIxMTAvBgNVBAUTKEJGOEY0M0EzNTBFNEY2QTI2MEJGMDNFRDRCREZDMUE4
MURBMkI1QTEwHhcNMjUwMTMwMjI1NjI5WhcNMjUwMjA2MjI1NjI5WjAYMRYwFAYD
VQQDEw02NzljMDM5ZC01YzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwoIA61uuxUZJiPnw0AeYX0xsxXdhyOPFZdSKRgL3S9VIzoMTErx9UU6YY2LC
gNQQDDYGdrT2bUfhhqTkjTLDYzYkuYdQlRdpQ5sWYUAFpRp+gIJv69W3OI/y6JjK
iLgPIacIHi3iu9j6qfBAeAIHgGWEc8mopSgBPSFgisdSaBKrJy7as/YYkwuyj3RR
amR0am4UtMTzK4lTaCsqM+SkvPEcBXWxODG7tvfqxjXMJW9UEowgyaD431Ozj+/Z
vCTGJg8Vi1r7dGdYFxuruNWBx2bkx8cS9cRT1b+/shWg7chH8l5W0qrIWuIEA8ng
OFcwYrQKzsKh916FcI8XsZC8TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDKlHDw4
x8Och1Etb7/xziQQsBM3MB8GA1UdIwQYMBaAFL+PQ6NQ5PaiYL8D7UvfwagdorWh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUI2Mi84MkU5M0YyQzk4
Q0YxMUVCQjc1NzJBM0FDNEY5QUUwMi92NDlEbzFEazlxSmd2d1B0UzlfQnFCMml0
YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Y0OURvMURrOXFKZ3Z3UHRTOV9CcUIyaXRhRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QUI2Mi84MkU5M0YyQzk4Q0YxMUVCQjc1NzJBM0FDNEY5QUUwMi92NDlEbzFEazlx
Smd2d1B0UzlfQnFCMml0YUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCd9zbO0ay4r/5o8yis4H9aVreXyYlOi/07OjseS9ioDzNuISC+1F2R
UhfdsMtG70VaYqd51WmI/9Lr4A2BTiFhqBCazghgh87EvxFf83IpjkKH0gnUh08A
uQXDPIADOi0Iva5FZ54Igdz+b03jcTM46VbvX3c78uRXUuE11APx48jysx8qzQ4r
tuCzuOhGQm43JC098zx4XMSp+wBrh5v2sHcILt16gqqH26x5qjiPJvuHBWwTXZ6i
26Nshtd+18UIlNGuNiyUUayBE0uGxaWg2FdfleCCTdOZ/tM6SYzak2sF85A1YVf5
VuxmhYczX9SL/hUT7JgnTRfV3gQ2db14
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:09:49 2025 by rpki-client