
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft
File: CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft (raw, json)
Hash identifier: cRriToxH2uSsXn4WPkiEzKH4DgcG5q2U9RqKPuE+8hM=
Subject key identifier: 1A:1B:3E:2D:EA:2B:51:F8:69:EF:B7:D5:F2:15:70:73:AD:93:E1:23
Authority key identifier: 08:D9:F4:83:E4:54:21:58:F6:2C:BE:70:58:69:EB:ED:77:FB:92:7F
Certificate issuer: /CN=A91FF7FC/serialNumber=08D9F483E4542158F62CBE705869EBED77FB927F
Certificate serial: 0484
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft
Manifest number: 047F
Signing time: Fri 31 Jan 2025 00:04:53 +0000
Manifest this update: Fri 31 Jan 2025 00:04:52 +0000
Manifest next update: Fri 07 Feb 2025 00:04:52 +0000
Files and hashes: 1: CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl (hash: rqj+wxeEuPlViaVKzeZ/6n168mmb5DaRg34mTlMCfhU=)
2: 5CA72CF82A6911EC94518740C4F9AE02.roa (hash: DNv6RERe4SqIzEBmNx3Q6xCWL7cpJvtrVCrMm/mBf0c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1156 (0x484)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF7FC/serialNumber=08D9F483E4542158F62CBE705869EBED77FB927F
Validity
Not Before: Jan 31 00:04:52 2025 GMT
Not After : Feb 7 00:04:52 2025 GMT
Subject: CN=679c13a5-b94a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:55:77:b4:21:48:4b:27:79:e0:2d:d7:33:80:
2a:5b:44:d9:ab:f9:ad:c8:15:85:2c:b3:82:70:4b:
80:2c:45:52:05:a4:07:f9:3d:32:3c:ad:6a:03:8e:
b4:60:ff:c3:63:f9:2f:3f:43:cd:f5:54:98:1b:91:
d9:9f:67:d2:2a:dd:48:1e:dc:2b:bd:b3:a8:b2:13:
c3:cf:1c:ab:55:fe:f2:47:cd:54:50:ad:e0:0b:32:
db:9a:6a:fc:16:23:df:e2:ab:0f:7c:af:21:e6:45:
95:90:7d:86:af:62:c3:b5:5e:c8:da:47:0e:8c:59:
f6:2d:36:67:1a:be:d1:f0:58:d7:e1:6f:a1:6e:45:
79:12:24:e4:89:b9:18:01:e3:b7:bd:08:1b:dd:5d:
66:6d:f0:c3:f2:7f:b0:e4:49:fe:77:1b:35:5e:fd:
d8:ca:3d:84:b9:ca:ff:e0:84:80:5c:bf:14:00:37:
92:66:9d:11:62:eb:3d:61:c8:53:bd:ca:40:68:5a:
77:ee:8b:e1:8e:6c:d9:a9:97:45:b8:62:78:e6:f2:
56:00:90:cc:83:54:b1:29:dd:39:12:f7:e8:c3:59:
b9:90:94:93:0b:67:6d:ba:ba:f2:89:7c:ea:1b:ce:
37:eb:17:a2:84:fe:59:9a:37:4a:fa:97:5d:4e:87:
43:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1B:3E:2D:EA:2B:51:F8:69:EF:B7:D5:F2:15:70:73:AD:93:E1:23
X509v3 Authority Key Identifier:
keyid:08:D9:F4:83:E4:54:21:58:F6:2C:BE:70:58:69:EB:ED:77:FB:92:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:09:eb:0a:8e:d3:31:75:57:77:b7:5f:f9:9a:a3:1c:a4:3c:
fa:30:80:1f:24:d2:fe:a2:f0:28:72:ff:26:52:e3:65:74:29:
2e:20:ae:60:e9:ce:cf:14:ae:9f:c8:54:c4:ef:b6:ef:b5:64:
be:99:1b:fb:39:04:21:e3:c2:01:f7:0c:32:0d:6b:72:34:e7:
83:22:fa:42:0a:3d:48:c6:ef:93:0c:c4:ac:9e:f4:33:03:2b:
94:db:4c:0c:6a:0f:ea:11:af:7c:c5:52:34:1d:0a:b5:04:4e:
48:b4:8f:66:38:46:38:0f:67:67:0c:49:dd:cc:7e:e4:c9:44:
ce:e4:a4:c6:4b:52:3f:c6:73:d5:e8:f0:2f:91:bd:70:b0:1f:
bb:d3:a4:cd:77:d9:07:a9:be:87:27:e3:b3:ac:eb:ba:9a:49:
ce:02:64:30:c7:e1:e6:7a:47:c0:f2:67:52:50:c3:ad:b0:95:
20:23:c3:5e:db:3f:29:5d:02:f2:f3:90:5d:77:09:b7:38:b0:
71:00:bd:a0:a7:8b:fc:fa:7a:c4:26:29:35:14:0e:5e:af:7d:
0c:86:60:7a:b1:11:30:b6:0e:c0:5c:ca:dc:f4:15:2f:00:61:
86:c1:f7:6b:cd:3e:28:68:ce:bc:e9:a2:dd:6d:d7:1f:e5:70:
c3:9c:91:b3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkY3RkMxMTAvBgNVBAUTKDA4RDlGNDgzRTQ1NDIxNThGNjJDQkU3MDU4NjlFQkVE
NzdGQjkyN0YwHhcNMjUwMTMxMDAwNDUyWhcNMjUwMjA3MDAwNDUyWjAYMRYwFAYD
VQQDEw02NzljMTNhNS1iOTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs1V3tCFISyd54C3XM4AqW0TZq/mtyBWFLLOCcEuALEVSBaQH+T0yPK1qA460
YP/DY/kvP0PN9VSYG5HZn2fSKt1IHtwrvbOoshPDzxyrVf7yR81UUK3gCzLbmmr8
FiPf4qsPfK8h5kWVkH2Gr2LDtV7I2kcOjFn2LTZnGr7R8FjX4W+hbkV5EiTkibkY
AeO3vQgb3V1mbfDD8n+w5En+dxs1Xv3Yyj2Eucr/4ISAXL8UADeSZp0RYus9YchT
vcpAaFp37ovhjmzZqZdFuGJ45vJWAJDMg1SxKd05Evfow1m5kJSTC2dturryiXzq
G8436xeihP5ZmjdK+pddTodD6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBobPi3q
K1H4ae+31fIVcHOtk+EjMB8GA1UdIwQYMBaAFAjZ9IPkVCFY9iy+cFhp6+13+5J/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjdGQy80RTIzQjM5QzJB
NjIxMUVDQTlBNjdDMzBDNEY5QUUwMi9DTm4wZy1SVUlWajJMTDV3V0ducjdYZjdr
bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NObjBnLVJVSVZqMkxMNXdXR25yN1hmN2tuOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RjdGQy80RTIzQjM5QzJBNjIxMUVDQTlBNjdDMzBDNEY5QUUwMi9DTm4wZy1SVUlW
ajJMTDV3V0ducjdYZjdrbjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBGCesKjtMxdVd3t1/5mqMcpDz6MIAfJNL+ovAocv8mUuNldCkuIK5g
6c7PFK6fyFTE77bvtWS+mRv7OQQh48IB9wwyDWtyNOeDIvpCCj1Ixu+TDMSsnvQz
AyuU20wMag/qEa98xVI0HQq1BE5ItI9mOEY4D2dnDEndzH7kyUTO5KTGS1I/xnPV
6PAvkb1wsB+706TNd9kHqb6HJ+OzrOu6mknOAmQwx+HmekfA8mdSUMOtsJUgI8Ne
2z8pXQLy85Bddwm3OLBxAL2gp4v8+nrEJik1FA5er30MhmB6sREwtg7AXMrc9BUv
AGGGwfdrzT4oaM686aLdbdcf5XDDnJGz
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:37:57 2025 by rpki-client