Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft
File: cri4zRAwexYyTYeYJ98ypKqNaqE.mft (raw, json)
Hash identifier: sHszHKq7W4VdcIL63PzmzW3bLWQGeIZ6hOdXw23Pq/A=
Subject key identifier: 54:E6:96:67:BD:76:C0:D2:51:DB:E1:47:1A:44:18:F8:E3:91:5A:24
Authority key identifier: 72:B8:B8:CD:10:30:7B:16:32:4D:87:98:27:DF:32:A4:AA:8D:6A:A1
Certificate issuer: /CN=A91FF19B/serialNumber=72B8B8CD10307B16324D879827DF32A4AA8D6AA1
Certificate serial: 03F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft
Manifest number: 03EA
Signing time: Fri 31 Jan 2025 00:38:19 +0000
Manifest this update: Fri 31 Jan 2025 00:38:19 +0000
Manifest next update: Fri 07 Feb 2025 00:38:19 +0000
Files and hashes: 1: cri4zRAwexYyTYeYJ98ypKqNaqE.crl (hash: WviPqtfaue+Zbljbml5jsAhjPJCWCRxHprkMgfsB/2o=)
2: 0C023160C4C911EE9278E261C4F9AE02.roa (hash: RLzlmcW/oxo3+VUjO1sUrRUA07nzGadIHmec6ld3tSY=)
3: 4D87ACF0C4C911EE9E405162C4F9AE02.roa (hash: GbO0pfdRRcEQHd1XoMpUxyX6yosrdAznLWaP+V/m//0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1011 (0x3f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF19B/serialNumber=72B8B8CD10307B16324D879827DF32A4AA8D6AA1
Validity
Not Before: Jan 31 00:38:19 2025 GMT
Not After : Feb 7 00:38:19 2025 GMT
Subject: CN=679c1b7b-cecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1c:5c:68:55:5a:85:0a:68:d7:f5:77:46:73:
bd:db:6b:e7:fe:3b:79:44:17:b2:8a:94:eb:84:7f:
aa:6d:32:d2:f5:f7:06:55:7e:23:bb:ce:9d:ab:0f:
43:a0:3e:39:f0:f4:f1:72:4a:b7:bb:6b:cf:bb:17:
85:76:a7:81:4e:9f:b2:d4:f4:15:1d:c2:d0:97:a7:
ec:73:ec:0f:92:1f:4b:26:15:b4:e3:6c:41:41:2a:
6f:0b:97:7b:25:22:f2:88:0d:bd:d6:bb:8d:7c:fd:
6d:e9:0b:5b:c7:87:bf:f2:5e:0a:7c:d3:8b:c1:d7:
40:dd:7f:73:56:d5:12:66:9a:d7:3a:dc:59:73:fe:
e8:6d:6f:73:a9:0e:6a:2e:00:82:ac:ae:4c:e5:7f:
6c:06:a7:aa:b4:20:89:e3:27:bd:0a:ac:28:4f:f2:
b7:8d:25:f3:5f:aa:2a:52:d1:86:a5:33:5e:af:62:
71:1e:35:c8:02:20:86:82:1c:e1:46:19:ff:8e:00:
2f:88:f0:49:ed:aa:50:f5:5a:c2:64:0e:7a:d1:5c:
e8:a6:fe:9d:a2:c4:b6:bb:83:e2:03:38:28:db:ee:
7c:51:84:30:44:42:6e:c1:98:d3:0c:e1:66:3e:57:
c0:5d:85:0d:2c:ae:b3:c8:5a:0e:ef:c8:5c:ea:cd:
b7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E6:96:67:BD:76:C0:D2:51:DB:E1:47:1A:44:18:F8:E3:91:5A:24
X509v3 Authority Key Identifier:
keyid:72:B8:B8:CD:10:30:7B:16:32:4D:87:98:27:DF:32:A4:AA:8D:6A:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a3:1c:bd:40:fc:91:6f:01:5a:30:16:fc:7c:b7:45:3d:40:
a7:ca:f4:39:c4:f1:33:d1:48:e3:c7:db:78:69:10:58:e4:8a:
07:b7:ec:37:22:c0:7c:e9:77:ec:d3:e6:01:6d:fa:3c:32:9b:
65:e4:cc:6b:76:42:06:3b:8c:1f:4b:6a:0f:e1:d6:49:6d:11:
28:ea:ce:bb:ba:2c:66:f7:76:12:0a:a0:21:ae:22:d2:ba:8b:
4f:ce:87:d5:48:fa:a6:7f:d5:a8:82:34:50:ca:fa:26:39:78:
6e:83:c5:51:79:1a:55:75:e9:0c:35:f7:d9:4f:f5:cb:ef:81:
85:7f:0d:41:76:4b:dd:7a:0b:4d:20:50:6f:8e:a7:a7:96:9f:
d1:ec:dc:74:bd:76:da:f7:9a:0f:f5:95:4f:33:75:b4:0d:5e:
ff:e7:e6:a3:5e:dc:e8:5f:fd:ea:73:ce:11:98:c9:1f:e5:42:
48:bd:a7:23:30:61:6d:1a:30:d9:e6:a0:e3:cf:fc:ad:6a:9b:
99:65:54:f6:c5:df:08:11:c2:d5:55:ca:43:2d:0c:0c:32:b5:
5a:f4:a4:9b:11:f2:24:db:52:77:3c:20:cd:13:67:74:39:48:
6d:1f:22:b4:23:9d:f2:4d:e9:59:5b:06:a7:a0:5a:22:59:56:
0a:76:c4:ff
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkYxOUIxMTAvBgNVBAUTKDcyQjhCOENEMTAzMDdCMTYzMjREODc5ODI3REYzMkE0
QUE4RDZBQTEwHhcNMjUwMTMxMDAzODE5WhcNMjUwMjA3MDAzODE5WjAYMRYwFAYD
VQQDEw02NzljMWI3Yi1jZWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0RxcaFVahQpo1/V3RnO922vn/jt5RBeyipTrhH+qbTLS9fcGVX4ju86dqw9D
oD458PTxckq3u2vPuxeFdqeBTp+y1PQVHcLQl6fsc+wPkh9LJhW042xBQSpvC5d7
JSLyiA291ruNfP1t6Qtbx4e/8l4KfNOLwddA3X9zVtUSZprXOtxZc/7obW9zqQ5q
LgCCrK5M5X9sBqeqtCCJ4ye9CqwoT/K3jSXzX6oqUtGGpTNer2JxHjXIAiCGghzh
Rhn/jgAviPBJ7apQ9VrCZA560Vzopv6dosS2u4PiAzgo2+58UYQwREJuwZjTDOFm
PlfAXYUNLK6zyFoO78hc6s23KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFTmlme9
dsDSUdvhRxpEGPjjkVokMB8GA1UdIwQYMBaAFHK4uM0QMHsWMk2HmCffMqSqjWqh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjE5Qi8zNjQ4OEQ4MDY2
NUIxMUVDODg4NUE0ODBDNEY5QUUwMi9jcmk0elJBd2V4WXlUWWVZSjk4eXBLcU5h
cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NyaTR6UkF3ZXhZeVRZZVlKOTh5cEtxTmFxRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RjE5Qi8zNjQ4OEQ4MDY2NUIxMUVDODg4NUE0ODBDNEY5QUUwMi9jcmk0elJBd2V4
WXlUWWVZSjk4eXBLcU5hcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA7oxy9QPyRbwFaMBb8fLdFPUCnyvQ5xPEz0Ujjx9t4aRBY5IoHt+w3
IsB86Xfs0+YBbfo8Mptl5MxrdkIGO4wfS2oP4dZJbREo6s67uixm93YSCqAhriLS
uotPzofVSPqmf9WogjRQyvomOXhug8VReRpVdekMNffZT/XL74GFfw1BdkvdegtN
IFBvjqenlp/R7Nx0vXba95oP9ZVPM3W0DV7/5+ajXtzoX/3qc84RmMkf5UJIvacj
MGFtGjDZ5qDjz/ytapuZZVT2xd8IEcLVVcpDLQwMMrVa9KSbEfIk21J3PCDNE2d0
OUhtHyK0I53yTelZWwanoFoiWVYKdsT/
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:24:10 2025 by rpki-client