Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.mft
File: V8WBYb3sTcee9I4gXyuNEgKPCuo.mft (raw, json)
Hash identifier: LRY1ogllLiNVHAzBpotmtB68RqQtTeRZtaLOKhJV1qo=
Subject key identifier: D3:0E:75:A1:69:5D:E3:1E:05:C8:45:22:10:89:9C:D9:6A:30:03:F5
Authority key identifier: 57:C5:81:61:BD:EC:4D:C7:9E:F4:8E:20:5F:2B:8D:12:02:8F:0A:EA
Certificate issuer: /CN=A91BB7DE/serialNumber=57C58161BDEC4DC79EF48E205F2B8D12028F0AEA
Certificate serial: 17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V8WBYb3sTcee9I4gXyuNEgKPCuo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.mft
Manifest number: 11
Signing time: Mon 17 Feb 2025 09:13:39 +0000
Manifest this update: Mon 17 Feb 2025 09:13:38 +0000
Manifest next update: Mon 24 Feb 2025 09:13:38 +0000
Files and hashes: 1: V8WBYb3sTcee9I4gXyuNEgKPCuo.crl (hash: FqRHedfkBZ7+rTeBIcxzyuGoMCOWSXgN5daAK4TGDps=)
2: 12316BAEE42C11EF9066AE3AC4F9AE02.roa (hash: Ij4MYxmZ1kvvIkA44sca2pptoxt6bSkjj51C+GS/Tgs=)
3: F971AC8CE42B11EFACAC6F3AC4F9AE02.roa (hash: PGaqXaUYwNRQvWR/0qrY71jZOIngXVLT0XurTqit5EI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB7DE
Validity
Not Before: Feb 17 09:13:38 2025 GMT
Not After : Feb 24 09:13:38 2025 GMT
Subject: CN=67b2fdc2-3587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:50:ef:ca:dc:35:c3:ed:33:df:f8:f0:28:a0:
2d:ef:39:9b:02:9e:c9:62:fb:48:6f:78:aa:96:08:
8b:00:57:f0:ae:0b:0e:44:c1:b5:3b:9c:f1:78:30:
26:79:4e:d1:25:f4:46:17:72:fc:d8:0c:19:b6:a9:
21:18:89:59:19:ce:f9:f3:c3:c5:f1:8d:f3:51:1f:
e9:30:cd:d5:6d:c9:18:59:7c:d6:96:40:6b:e5:72:
fb:50:23:28:53:1b:cd:a6:0a:ab:2f:2c:3e:c9:62:
f2:f4:86:c3:36:9d:f8:5d:5a:4d:02:cb:61:22:34:
cd:fe:6e:42:86:75:cb:1a:95:d5:8f:5b:2b:c1:d7:
22:90:c0:97:be:6d:52:d9:f7:ce:e1:e4:ba:56:f3:
65:cf:7b:48:5e:a2:99:90:a7:69:ab:b2:aa:f5:3d:
51:81:bc:fc:82:37:69:ce:54:50:a8:2e:8d:03:a2:
d0:af:d6:b4:5a:14:8a:a1:0d:98:83:0a:1b:d2:85:
10:64:71:9f:6d:b3:59:f4:d0:ab:94:86:62:2d:96:
33:ca:43:b8:0d:1c:da:d8:e7:e6:56:3e:b9:9d:31:
f9:5f:92:c9:ed:62:cc:14:41:7e:d5:6a:c9:bf:71:
b6:05:e2:8b:5e:5b:64:a7:1f:93:f8:bc:ef:20:f3:
b1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0E:75:A1:69:5D:E3:1E:05:C8:45:22:10:89:9C:D9:6A:30:03:F5
X509v3 Authority Key Identifier:
keyid:57:C5:81:61:BD:EC:4D:C7:9E:F4:8E:20:5F:2B:8D:12:02:8F:0A:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V8WBYb3sTcee9I4gXyuNEgKPCuo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:c2:d5:56:c2:19:bd:8a:dd:e0:08:74:37:85:1c:b6:50:90:
1a:05:14:0e:89:85:f5:36:5b:5b:0d:6b:98:b9:27:b1:b3:55:
83:61:1e:5e:be:ff:76:7d:2c:94:ef:53:df:61:87:7c:9d:8e:
f2:ea:b1:fe:98:0f:54:69:f8:63:a2:c8:c0:bb:39:33:9c:c6:
f8:a0:84:95:ac:e7:97:60:6c:25:a3:c6:f5:41:22:62:61:86:
66:8c:a8:c5:39:da:7c:b6:b0:49:ce:88:5d:c3:3d:a0:d2:53:
5c:95:60:45:f2:f4:87:60:ba:e2:8c:05:8c:11:41:34:e7:ab:
83:b0:6b:36:ca:e3:26:f5:af:26:80:72:58:11:d9:4a:c6:4c:
f1:13:a1:89:04:86:d1:9b:6f:e6:99:ae:fc:25:69:93:e5:e2:
0e:8c:10:2c:73:da:87:51:f7:87:56:99:a6:a2:e8:47:ca:d5:
bb:e0:04:79:c9:17:93:83:2d:cd:a7:ea:65:ed:42:07:ea:cd:
d6:25:4f:70:2c:df:a0:25:ee:ba:c6:30:be:0f:01:e7:db:32:
84:ac:d7:fa:60:aa:81:57:ce:06:44:5e:75:8b:6d:37:7b:d2:
bd:19:62:08:19:98:a9:f6:d5:f0:4a:43:09:93:f5:64:34:f5:
fc:e6:eb:83
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
QjdERTExMC8GA1UEBRMoNTdDNTgxNjFCREVDNERDNzlFRjQ4RTIwNUYyQjhEMTIw
MjhGMEFFQTAeFw0yNTAyMTcwOTEzMzhaFw0yNTAyMjQwOTEzMzhaMBgxFjAUBgNV
BAMTDTY3YjJmZGMyLTM1ODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDcUO/K3DXD7TPf+PAooC3vOZsCnsli+0hveKqWCIsAV/CuCw5EwbU7nPF4MCZ5
TtEl9EYXcvzYDBm2qSEYiVkZzvnzw8XxjfNRH+kwzdVtyRhZfNaWQGvlcvtQIyhT
G82mCqsvLD7JYvL0hsM2nfhdWk0Cy2EiNM3+bkKGdcsaldWPWyvB1yKQwJe+bVLZ
987h5LpW82XPe0heopmQp2mrsqr1PVGBvPyCN2nOVFCoLo0DotCv1rRaFIqhDZiD
ChvShRBkcZ9ts1n00KuUhmItljPKQ7gNHNrY5+ZWPrmdMflfksntYswUQX7Vasm/
cbYF4oteW2SnH5P4vO8g87FDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0w51oWld
4x4FyEUiEImc2WowA/UwHwYDVR0jBBgwFoAUV8WBYb3sTcee9I4gXyuNEgKPCuow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCN0RFLzZDRTZCNDA0RTEz
RjExRUZBRjE4ODQxRkM0RjlBRTAyL1Y4V0JZYjNzVGNlZTlJNGdYeXVORWdLUEN1
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVjhXQlliM3NUY2VlOUk0Z1h5dU5FZ0tQQ3VvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC
N0RFLzZDRTZCNDA0RTEzRjExRUZBRjE4ODQxRkM0RjlBRTAyL1Y4V0JZYjNzVGNl
ZTlJNGdYeXVORWdLUEN1by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBACHC1VbCGb2K3eAIdDeFHLZQkBoFFA6JhfU2W1sNa5i5J7GzVYNhHl6+
/3Z9LJTvU99hh3ydjvLqsf6YD1Rp+GOiyMC7OTOcxvighJWs55dgbCWjxvVBImJh
hmaMqMU52ny2sEnOiF3DPaDSU1yVYEXy9IdguuKMBYwRQTTnq4OwazbK4yb1ryaA
clgR2UrGTPEToYkEhtGbb+aZrvwlaZPl4g6MECxz2odR94dWmaai6EfK1bvgBHnJ
F5ODLc2n6mXtQgfqzdYlT3As36Al7rrGML4PAefbMoSs1/pgqoFXzgZEXnWLbTd7
0r0ZYggZmKn21fBKQwmT9WQ09fzm64M=
-----END CERTIFICATE-----
Generated at Fri Feb 21 10:27:06 2025 by rpki-client