Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
File: VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft (raw, json)
Hash identifier: Ir1BNmOJs57tApnQ7hc3XFm0ZLBDfagRo/YNr7tDafo=
Subject key identifier: DB:81:B0:27:44:39:0D:9D:9F:51:4A:9E:18:FD:F6:58:BE:A3:37:08
Authority key identifier: 54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E
Certificate issuer: /CN=A91FDAD4/serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E
Certificate serial: 03EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
Manifest number: 03D9
Signing time: Fri 31 Jan 2025 00:43:29 +0000
Manifest this update: Fri 31 Jan 2025 00:43:29 +0000
Manifest next update: Fri 07 Feb 2025 00:43:29 +0000
Files and hashes: 1: VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl (hash: zcxTls3Ao9y4jP+jdavZYmrC+cCKY5OhAUOl9qNJrHU=)
2: 616435103F3E11EE81024074C4F9AE02.roa (hash: rIjstnLA7oqlzAIte1weUL9/6bXimc7BXsGDyH6RUSM=)
3: 168BE8747EEE11ECAB036C59C4F9AE02.roa (hash: TppD7q+u0sPAuA1rQvYwssRFX3TfXUVSrYK0z7MZYzY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1006 (0x3ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDAD4/serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E
Validity
Not Before: Jan 31 00:43:29 2025 GMT
Not After : Feb 7 00:43:29 2025 GMT
Subject: CN=679c1cb1-9ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ce:85:36:23:65:7f:eb:04:74:28:b4:8a:97:
72:00:a2:27:a2:2d:90:43:e1:5f:d2:bd:b0:ce:2a:
49:a1:bf:08:10:ca:be:a7:37:e6:65:fa:09:7e:2b:
44:ff:4d:52:97:c6:5d:25:f5:df:c2:57:0e:bb:41:
ed:cd:2c:a3:98:a4:a7:7f:35:c0:b9:aa:c2:22:33:
e9:83:a0:3b:51:71:76:6f:b5:4b:c4:62:ed:19:45:
b1:1d:59:97:30:c1:e4:d0:20:60:86:2a:13:4c:0f:
dc:b5:c9:ab:ea:bd:07:2a:dd:8f:9e:dd:ad:a3:39:
e0:0e:21:2e:fd:75:0a:f4:ad:13:b3:65:b9:67:bc:
a0:08:cc:3a:8b:f8:33:ee:7a:21:72:a0:57:70:a3:
0a:2d:91:79:18:d0:41:50:1f:1b:a5:26:68:5c:c1:
43:c8:6c:53:a1:4c:e8:f5:21:5e:c7:35:3d:f5:07:
c9:a0:b4:7c:5f:8a:bd:29:1a:5a:c2:8c:10:b8:e4:
1d:6c:19:90:ea:a5:4e:36:4c:1a:23:72:ab:26:e6:
c1:bd:70:7e:83:e9:67:46:30:70:d7:bc:30:f6:b6:
d0:59:e6:4d:b1:44:28:a2:57:13:44:8a:5b:0d:ec:
0d:c7:20:62:cb:69:dc:25:59:3f:9f:9b:5d:da:f7:
42:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:81:B0:27:44:39:0D:9D:9F:51:4A:9E:18:FD:F6:58:BE:A3:37:08
X509v3 Authority Key Identifier:
keyid:54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:5e:f6:4e:b5:1a:41:88:98:50:16:2f:d1:32:c8:19:56:8c:
52:4c:82:f0:76:38:47:45:63:0e:0e:d2:f1:90:49:72:f5:93:
e4:27:6c:df:96:43:14:8b:c1:a6:26:b1:de:f5:af:89:e1:64:
6b:a6:1d:9b:7b:82:de:b3:6b:d7:2c:8c:05:d1:c6:41:0d:2e:
72:72:63:0c:be:08:3d:89:61:8d:63:3b:2a:ad:ed:58:18:59:
9a:29:26:b5:45:1a:1f:ef:43:fd:0e:a2:92:39:10:dd:df:62:
b0:bd:8f:70:a9:53:b9:dd:d2:7b:9d:c7:ac:66:0c:5f:e5:72:
58:03:a2:2b:ad:9d:6d:ca:b6:6c:c1:11:68:a1:43:11:a7:91:
25:f8:62:d3:65:01:0d:da:95:c8:d4:5f:25:46:62:6e:8a:c3:
a9:aa:7a:c9:c0:a4:0e:4b:ad:71:c3:64:b2:a8:30:5c:f9:17:
d8:db:16:d6:26:51:9c:ef:05:a7:e5:5c:03:3b:10:0f:46:77:
6a:03:ca:8b:8b:f3:22:20:29:61:ce:12:74:c2:8c:1a:04:86:
ae:d2:6f:2d:3a:4e:9d:50:d9:2b:89:f3:49:6a:a6:79:b4:dd:
a8:d2:14:4c:63:6c:5a:6f:f0:90:cf:9e:93:99:54:3a:7d:5a:
33:06:3f:aa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkRBRDQxMTAvBgNVBAUTKDU0MzBBNDE0QUEwNUI2NzMxREMyRDY0QTcwQzYxOUM2
NjkzNDZBMEUwHhcNMjUwMTMxMDA0MzI5WhcNMjUwMjA3MDA0MzI5WjAYMRYwFAYD
VQQDEw02NzljMWNiMS05Y2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA586FNiNlf+sEdCi0ipdyAKInoi2QQ+Ff0r2wzipJob8IEMq+pzfmZfoJfitE
/01Sl8ZdJfXfwlcOu0HtzSyjmKSnfzXAuarCIjPpg6A7UXF2b7VLxGLtGUWxHVmX
MMHk0CBghioTTA/ctcmr6r0HKt2Pnt2tozngDiEu/XUK9K0Ts2W5Z7ygCMw6i/gz
7nohcqBXcKMKLZF5GNBBUB8bpSZoXMFDyGxToUzo9SFexzU99QfJoLR8X4q9KRpa
wowQuOQdbBmQ6qVONkwaI3KrJubBvXB+g+lnRjBw17ww9rbQWeZNsUQoolcTRIpb
DewNxyBiy2ncJVk/n5td2vdCqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNuBsCdE
OQ2dn1FKnhj99li+ozcIMB8GA1UdIwQYMBaAFFQwpBSqBbZzHcLWSnDGGcZpNGoO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREFENC9DNDIzMTgzMDc3
QjUxMUVDQTVCQ0UwNUZDNEY5QUUwMi9WRENrRktvRnRuTWR3dFpLY01ZWnhtazBh
ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZEQ2tGS29GdG5NZHd0WktjTVlaeG1rMGFnNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
REFENC9DNDIzMTgzMDc3QjUxMUVDQTVCQ0UwNUZDNEY5QUUwMi9WRENrRktvRnRu
TWR3dFpLY01ZWnhtazBhZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCFXvZOtRpBiJhQFi/RMsgZVoxSTILwdjhHRWMODtLxkEly9ZPkJ2zf
lkMUi8GmJrHe9a+J4WRrph2be4Les2vXLIwF0cZBDS5ycmMMvgg9iWGNYzsqre1Y
GFmaKSa1RRof70P9DqKSORDd32KwvY9wqVO53dJ7ncesZgxf5XJYA6IrrZ1tyrZs
wRFooUMRp5El+GLTZQEN2pXI1F8lRmJuisOpqnrJwKQOS61xw2SyqDBc+RfY2xbW
JlGc7wWn5VwDOxAPRndqA8qLi/MiIClhzhJ0wowaBIau0m8tOk6dUNkrifNJaqZ5
tN2o0hRMY2xab/CQz56TmVQ6fVozBj+q
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:52:15 2025 by rpki-client