Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
File: 5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft (raw, json)
Hash identifier: 9PIW4wu4MsaUkddIVj13sqyEMpy5JRQrGTGTp8Me5kE=
Subject key identifier: 20:AB:E0:26:91:A2:B2:AC:20:65:C4:25:54:8E:60:1A:59:B1:64:E4
Authority key identifier: 5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B
Certificate issuer: /CN=A91DD5100000/serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B
Certificate serial: 1159588A53D22AA96C4C15F788C7475BD2505787
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
Manifest number: 42
Signing time: Fri 31 Jan 2025 15:38:51 +0000
Manifest this update: Fri 31 Jan 2025 15:33:51 +0000
Manifest next update: Sat 01 Feb 2025 16:59:51 +0000
Files and hashes: 1: 34332e3235322e32302e302f32342d3234203d3e203134363138.roa (hash: XDDdDDTvhwuUQNA2Wh+VHuXm9Rtlz4RE52q366sMQs0=)
2: 34332e3235322e32332e302f32342d3234203d3e20383334.roa (hash: Ckvsi/Jrrdn+9lUGrni8Urgb3SPkwZ9AdY4b74p3JNc=)
3: 34332e3235322e32322e302f32342d3234203d3e203438323636.roa (hash: lh0a38K8JAllhrAcZvOqWh+3NCJyyj25skARvaE+EWo=)
4: 5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl (hash: gyzmO+7UniRMHs7i3pUlZPU4vmgEdblQlqER0/lBbAI=)
5: 34332e3235322e32302e302f32342d3234203d3e203136353039.roa (hash: guQ1d9UBBlP30nZtQVeNl3psArLTSiYHfIbHiGyRYfA=)
6: 34332e3235322e32312e302f32342d3234203d3e203530333835.roa (hash: baGBWXcDrtK+cAVKGJBMAmZee53ol0gPCj9NO0O551w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:59:58:8a:53:d2:2a:a9:6c:4c:15:f7:88:c7:47:5b:d2:50:57:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD5100000/serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B
Validity
Not Before: Jan 31 15:33:51 2025 GMT
Not After : Feb 1 16:59:51 2025 GMT
Subject: CN=20ABE02691A2B2AC2065C425548E601A59B164E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:19:7b:a9:b3:fd:64:30:9c:d9:64:af:52:c8:
92:10:fb:0e:d1:89:9f:10:ab:1d:13:ae:8f:d1:0c:
f5:53:a4:33:d1:ae:23:58:c3:24:37:c8:9f:b0:21:
2e:9e:a9:52:71:62:9b:4e:bc:d1:cc:72:77:c4:5f:
64:63:cf:1d:39:4e:ae:db:e8:bb:64:ba:04:6d:b3:
a2:56:6f:58:3d:ba:0e:b0:b4:5a:9c:cb:0e:25:af:
9e:db:9b:6f:54:89:04:72:b8:4d:81:bc:ce:8d:f5:
06:6e:49:9d:4a:d7:eb:57:8a:54:68:a4:2c:9e:39:
3c:2a:ea:cc:00:fe:c8:96:ac:4a:d8:05:85:47:b4:
a5:7a:0d:1e:05:95:30:30:b1:66:18:9d:eb:a6:bb:
d9:74:1c:61:0e:3a:17:7b:f6:f0:7c:1d:6f:6f:1a:
65:d7:fa:80:4f:81:3f:ea:3b:f9:1a:50:52:ee:cb:
a9:71:8b:24:cd:42:da:c5:a8:32:78:9d:97:72:07:
a4:2a:1e:99:fb:39:70:8c:21:01:8e:a4:ca:46:ab:
83:a7:cd:c8:9f:de:c8:83:78:9d:b5:18:47:96:20:
aa:e7:a6:c9:fd:99:1f:7a:75:cc:f1:8e:d8:47:eb:
43:33:56:74:73:d1:35:d3:1b:12:00:3a:2f:8e:52:
2c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AB:E0:26:91:A2:B2:AC:20:65:C4:25:54:8E:60:1A:59:B1:64:E4
X509v3 Authority Key Identifier:
keyid:5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:60:24:11:83:b7:7c:bb:48:da:6b:00:72:b2:90:0d:d1:75:
5c:d1:3d:7c:6d:20:5c:c0:6a:06:dd:31:93:f5:c7:11:c8:55:
12:b8:be:cc:33:e9:9e:85:e5:0e:0f:b2:7a:38:2a:fa:fc:77:
43:73:76:23:c8:f5:91:09:18:59:c6:0d:b6:37:e9:81:c2:2c:
a4:b7:4a:3e:27:8a:df:bf:19:dd:73:72:3b:1e:22:61:46:0c:
49:61:4c:f1:92:78:e6:22:d1:49:31:ed:dc:fd:bc:99:ed:a5:
30:b7:e9:c6:be:19:e6:bc:93:2f:cd:26:fa:e6:54:68:ff:cc:
4d:93:35:31:21:47:2a:45:ae:1e:2c:8b:22:43:06:fb:5d:c3:
d1:e0:54:25:8d:84:28:bc:f3:e4:68:60:cd:9b:e1:d8:c2:2c:
19:63:d7:ab:dd:50:7a:3a:17:99:24:d9:9a:e2:9c:36:15:9b:
ee:8f:c5:c2:88:2d:55:8b:71:75:97:f6:ad:44:68:07:7a:d6:
cf:72:ca:46:3f:b3:d7:10:88:ca:bf:4e:04:fb:8d:f4:70:68:
57:67:60:5f:bd:c6:75:6a:cf:da:39:bc:34:57:0d:ae:8b:4e:
c5:ee:51:97:3a:9c:e7:98:d7:3c:bb:01:66:b5:af:ab:8d:f0:
0d:80:11:76
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUEVlYilPSKqlsTBX3iMdHW9JQV4cwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxREQ1MTAwMDAwMTEwLwYDVQQFEyg1RDcwN0IwRDM1
Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdCMB4XDTI1MDEzMTE1MzM1MVoX
DTI1MDIwMTE2NTk1MVowMzExMC8GA1UEAxMoMjBBQkUwMjY5MUEyQjJBQzIwNjVD
NDI1NTQ4RTYwMUE1OUIxNjRFNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALIZe6mz/WQwnNlkr1LIkhD7DtGJnxCrHROuj9EM9VOkM9GuI1jDJDfIn7Ah
Lp6pUnFim0680cxyd8RfZGPPHTlOrtvou2S6BG2zolZvWD26DrC0WpzLDiWvntub
b1SJBHK4TYG8zo31Bm5JnUrX61eKVGikLJ45PCrqzAD+yJasStgFhUe0pXoNHgWV
MDCxZhid66a72XQcYQ46F3v28Hwdb28aZdf6gE+BP+o7+RpQUu7LqXGLJM1C2sWo
Mnidl3IHpCoemfs5cIwhAY6kykarg6fNyJ/eyIN4nbUYR5Ygquemyf2ZH3p1zPGO
2EfrQzNWdHPRNdMbEgA6L45SLGsCAwEAAaOCAhswggIXMB0GA1UdDgQWBBQgq+Am
kaKyrCBlxCVUjmAaWbFk5DAfBgNVHSMEGDAWgBRdcHsNNWliJDK0vcv9Mg+ai23c
ezAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFERDUxMDAwMDAvMC81RDcwN0Iw
RDM1Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdCLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9YWEI3RFRWcFlp
UXl0TDNMX1RJUG1vdHQzSHMuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFERDUx
MDAwMDAvMC81RDcwN0IwRDM1Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdC
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAVWAkEYO3fLtI2msAcrKQDdF1XNE9fG0gXMBqBt0xk/XHEchV
Eri+zDPpnoXlDg+yejgq+vx3Q3N2I8j1kQkYWcYNtjfpgcIspLdKPieK378Z3XNy
Ox4iYUYMSWFM8ZJ45iLRSTHt3P28me2lMLfpxr4Z5ryTL80m+uZUaP/MTZM1MSFH
KkWuHiyLIkMG+13D0eBUJY2EKLzz5GhgzZvh2MIsGWPXq91QejoXmSTZmuKcNhWb
7o/FwogtVYtxdZf2rURoB3rWz3LKRj+z1xCIyr9OBPuN9HBoV2dgX73GdWrP2jm8
NFcNrotOxe5Rlzqc55jXPLsBZrWvq43wDYARdg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:48:58 2025 by rpki-client