Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft
File: EJhSul3Eo2jPdhIFFeysYu_aPkA.mft (raw, json)
Hash identifier: vnocltv/Z6siYPA5OD76/tGjAl308EkLgvV/vH8YzJY=
Subject key identifier: 35:EB:93:54:F8:7E:6F:D6:66:50:D1:EC:E2:67:D0:8C:CF:09:A5:85
Authority key identifier: 10:98:52:BA:5D:C4:A3:68:CF:76:12:05:15:EC:AC:62:EF:DA:3E:40
Certificate issuer: /CN=A91FE637/serialNumber=109852BA5DC4A368CF76120515ECAC62EFDA3E40
Certificate serial: 0E33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft
Manifest number: 0E2E
Signing time: Fri 31 Jan 2025 17:43:03 +0000
Manifest this update: Fri 31 Jan 2025 17:43:03 +0000
Manifest next update: Fri 07 Feb 2025 17:43:03 +0000
Files and hashes: 1: EJhSul3Eo2jPdhIFFeysYu_aPkA.crl (hash: Zh58e8WA4oLBo5QVTw5criaxekbAo8uMjtem/uiS2v0=)
2: 3D88426C974511E982D6FD1BC4F9AE02.roa (hash: H8knPIbuLtwUcaByLoJZ9f2Kl4YvVFA0lwHyLpg+7j8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3635 (0xe33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE637/serialNumber=109852BA5DC4A368CF76120515ECAC62EFDA3E40
Validity
Not Before: Jan 31 17:43:03 2025 GMT
Not After : Feb 7 17:43:03 2025 GMT
Subject: CN=679d0ba7-cdbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:08:79:02:e0:98:98:01:50:55:10:a2:54:27:
ff:f2:aa:b8:02:a1:7a:da:88:01:ca:3d:5e:7b:df:
f3:ad:2a:76:28:18:09:5a:68:44:b3:e2:33:63:9e:
a6:51:28:3c:35:e1:f0:eb:e0:15:93:66:5d:b5:02:
8d:94:80:0d:d0:91:d2:d2:aa:86:96:b6:16:17:d8:
3c:95:b5:33:16:f7:f6:3e:a1:6a:7d:65:15:f1:75:
17:cd:6d:9d:7b:18:10:15:ec:65:e2:bc:2a:76:ae:
f4:47:aa:65:0b:7e:09:55:41:9f:68:06:8d:d8:15:
26:80:dc:cf:0e:e0:e5:5d:9d:6e:30:da:75:a1:1a:
dd:e6:af:e8:65:a5:a4:a5:cf:cb:97:aa:76:e0:ea:
31:f6:c2:1b:43:65:74:5b:95:2c:4e:59:7a:e4:d9:
2f:06:6b:df:9d:46:ea:bf:e1:f8:8e:96:5d:f6:ad:
ad:c4:2c:33:a6:b7:e1:6d:d0:8b:b8:de:02:4d:cf:
83:89:3b:2d:45:66:9e:53:49:8a:61:77:3d:72:bf:
c9:73:1a:e4:f9:f6:9a:05:98:d1:89:fe:64:24:37:
4d:26:6d:78:e9:bd:f8:75:2c:ae:73:67:37:ad:73:
85:6e:3e:ac:71:f4:bf:fc:02:c4:4a:83:f1:18:39:
a9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:EB:93:54:F8:7E:6F:D6:66:50:D1:EC:E2:67:D0:8C:CF:09:A5:85
X509v3 Authority Key Identifier:
keyid:10:98:52:BA:5D:C4:A3:68:CF:76:12:05:15:EC:AC:62:EF:DA:3E:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f1:ec:c0:93:f3:b6:c4:9a:6e:34:d0:8e:ba:96:4e:a2:f3:
1f:11:57:d8:f4:ac:51:8c:0c:47:58:65:4d:8f:e6:15:53:24:
6b:6a:c9:98:0b:12:89:6e:35:ed:92:3a:47:cc:96:6f:09:1d:
9b:b8:7e:39:ba:77:eb:fd:37:d4:0b:fc:1e:92:fa:09:f8:34:
c6:b3:2d:1c:55:b3:07:52:51:a7:56:0b:e4:56:ef:2b:16:8a:
ce:79:09:49:25:39:85:fa:d6:50:f2:fb:55:ae:0d:74:7b:1b:
d8:ee:ef:f3:b7:33:3a:d9:49:77:3d:46:a0:94:db:3c:16:24:
89:e2:71:0a:98:6e:d2:7b:ac:77:cf:60:8a:c8:bf:c4:ed:90:
c3:ef:77:02:6f:b8:ad:15:67:fc:67:67:b7:4c:42:8f:b8:4a:
a4:51:78:fa:a3:00:81:2b:df:bd:17:1d:be:c0:2d:64:60:df:
6e:4e:7e:d6:12:f8:a0:e3:9d:89:46:33:b2:a6:5b:a6:9a:d8:
1a:7c:36:92:06:a0:38:f2:c6:57:4b:fe:43:4c:32:ad:95:3d:
03:96:69:a4:a1:aa:0b:4c:0f:44:ad:0f:a4:8b:25:e4:e3:1b:
82:7b:91:6f:f5:49:6c:a2:61:1c:aa:2e:6a:10:72:82:72:e7:
a7:a2:a6:d1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkU2MzcxMTAvBgNVBAUTKDEwOTg1MkJBNURDNEEzNjhDRjc2MTIwNTE1RUNBQzYy
RUZEQTNFNDAwHhcNMjUwMTMxMTc0MzAzWhcNMjUwMjA3MTc0MzAzWjAYMRYwFAYD
VQQDEw02NzlkMGJhNy1jZGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxAh5AuCYmAFQVRCiVCf/8qq4AqF62ogByj1ee9/zrSp2KBgJWmhEs+IzY56m
USg8NeHw6+AVk2ZdtQKNlIAN0JHS0qqGlrYWF9g8lbUzFvf2PqFqfWUV8XUXzW2d
exgQFexl4rwqdq70R6plC34JVUGfaAaN2BUmgNzPDuDlXZ1uMNp1oRrd5q/oZaWk
pc/Ll6p24Oox9sIbQ2V0W5UsTll65NkvBmvfnUbqv+H4jpZd9q2txCwzprfhbdCL
uN4CTc+DiTstRWaeU0mKYXc9cr/Jcxrk+faaBZjRif5kJDdNJm146b34dSyuc2c3
rXOFbj6scfS//ALESoPxGDmpVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDXrk1T4
fm/WZlDR7OJn0IzPCaWFMB8GA1UdIwQYMBaAFBCYUrpdxKNoz3YSBRXsrGLv2j5A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTYzNy85QkFFQTEzQTk3
NDMxMUU5QkZEOEU1MTlDNEY5QUUwMi9FSmhTdWwzRW8yalBkaElGRmV5c1l1X2FQ
a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VKaFN1bDNFbzJqUGRoSUZGZXlzWXVfYVBrQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RTYzNy85QkFFQTEzQTk3NDMxMUU5QkZEOEU1MTlDNEY5QUUwMi9FSmhTdWwzRW8y
alBkaElGRmV5c1l1X2FQa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAb8ezAk/O2xJpuNNCOupZOovMfEVfY9KxRjAxHWGVNj+YVUyRrasmY
CxKJbjXtkjpHzJZvCR2buH45unfr/TfUC/wekvoJ+DTGsy0cVbMHUlGnVgvkVu8r
ForOeQlJJTmF+tZQ8vtVrg10exvY7u/ztzM62Ul3PUaglNs8FiSJ4nEKmG7Se6x3
z2CKyL/E7ZDD73cCb7itFWf8Z2e3TEKPuEqkUXj6owCBK9+9Fx2+wC1kYN9uTn7W
Evig452JRjOyplummtgafDaSBqA48sZXS/5DTDKtlT0DlmmkoaoLTA9ErQ+kiyXk
4xuCe5Fv9UlsomEcqi5qEHKCcuenoqbR
-----END CERTIFICATE-----
Generated at Fri May 9 10:44:24 2025 by rpki-client