Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft
File: 3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft (raw, json)
Hash identifier: bYZGdWPmvYX6LDn4UyGA9vqf7rSzrK9YbY6nf0QY/z8=
Subject key identifier: 16:92:A8:EA:52:B9:25:DF:E2:EC:A2:4D:CF:59:6B:EB:79:85:22:93
Authority key identifier: DC:62:20:08:A8:A1:AD:42:BE:2A:25:49:43:49:1A:FA:A8:45:49:A5
Certificate issuer: /CN=A911035A/serialNumber=DC622008A8A1AD42BE2A254943491AFAA84549A5
Certificate serial: 09B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GIgCKihrUK-KiVJQ0ka-qhFSaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft
Manifest number: 09AA
Signing time: Thu 30 Jan 2025 20:07:55 +0000
Manifest this update: Thu 30 Jan 2025 20:07:55 +0000
Manifest next update: Thu 06 Feb 2025 20:07:55 +0000
Files and hashes: 1: 3GIgCKihrUK-KiVJQ0ka-qhFSaU.crl (hash: hK4sUeaVdUvH5W24P0YHSqGfiBZsTdS+HJp82kSxtWw=)
2: 5B57754A026F11EDBE22EF64C4F9AE02.roa (hash: 8mDSez92eEkaglLsJMbn0fbrJK3EOKwOEODNJChdaCg=)
3: 5A472FBA026F11EDBE22EF64C4F9AE02.roa (hash: NFs1EDcO1yAz73VGI456tOjnaAawML/lh68ilrawz+Y=)
4: C1B3DE082BBE11EF809E1831C4F9AE02.roa (hash: tW1tMolm5x3GeEA1HyFZqPW/WUluhI939ppCe/JxxEw=)
5: E1935B7A36DD11EFB1E53717C4F9AE02.roa (hash: YrfvW4rspoah4qHdMhFX6/ILs8ePWmGD5xqevIlkW/s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2487 (0x9b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911035A/serialNumber=DC622008A8A1AD42BE2A254943491AFAA84549A5
Validity
Not Before: Jan 30 20:07:55 2025 GMT
Not After : Feb 6 20:07:55 2025 GMT
Subject: CN=679bdc1b-cba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a2:30:01:ce:e4:d7:e7:b9:05:74:f3:f6:62:
0d:bb:c2:12:27:08:86:26:5b:31:4c:71:70:c0:23:
4c:02:8c:cb:88:af:11:1c:f1:2d:25:a8:aa:70:4b:
b5:fe:88:e9:32:c5:e6:ba:69:81:66:ee:cf:3a:b3:
fb:8c:83:b6:14:c3:82:74:d8:fd:2d:b3:f3:86:e0:
ab:08:1a:7f:39:7c:a7:bf:90:94:d3:c0:75:26:0f:
1e:0b:bd:a8:69:c2:0a:37:58:37:1f:27:a6:2e:35:
9d:4f:f2:ee:fb:02:1e:ae:2f:4b:a7:20:07:9a:89:
c0:53:d2:c9:17:11:8c:a6:b6:81:22:5a:b5:8f:61:
aa:d8:2f:ca:40:d3:44:8e:22:6d:bb:db:ff:fc:b3:
b7:fa:f8:19:fd:6c:25:46:c7:61:13:05:73:c5:67:
ea:b0:b4:11:7f:ca:90:dc:68:60:99:f1:3f:fd:2d:
e7:86:19:6c:58:b9:da:ae:bb:3d:86:e6:78:21:3d:
fb:c0:ea:3c:7c:91:79:51:31:94:24:6d:99:b5:84:
9c:f5:40:f5:24:62:84:7b:b9:66:9e:0f:54:77:f6:
e6:7b:df:a4:c3:1b:94:ba:08:5f:fc:9e:81:5a:d7:
0c:69:01:30:4a:f8:54:41:3e:5a:2f:99:19:29:a3:
45:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:92:A8:EA:52:B9:25:DF:E2:EC:A2:4D:CF:59:6B:EB:79:85:22:93
X509v3 Authority Key Identifier:
keyid:DC:62:20:08:A8:A1:AD:42:BE:2A:25:49:43:49:1A:FA:A8:45:49:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GIgCKihrUK-KiVJQ0ka-qhFSaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:b3:12:6b:bc:51:fc:e4:ff:90:72:61:ad:b4:00:41:0b:80:
60:56:0e:a2:8f:81:82:b7:2c:02:f3:92:56:f1:50:57:2d:58:
c6:28:0c:86:a8:83:b4:eb:c0:92:82:fa:8c:d9:9e:ad:20:12:
fe:20:7d:e6:d1:8f:2d:80:81:77:a4:c0:97:99:f8:3a:1b:da:
d4:ef:4b:ef:12:24:31:24:b8:ea:c4:32:24:3d:6e:2b:c4:fa:
a2:8f:2a:38:b0:c6:1f:34:1f:1a:83:a7:04:f6:ed:6f:62:17:
26:1d:50:f3:72:19:44:d4:da:0e:de:ba:4b:da:e6:7c:27:54:
c0:d7:5e:2b:08:c7:24:1e:d6:ea:63:72:e9:7e:37:ce:a3:bb:
53:2f:f7:da:10:3b:69:3f:cd:69:88:50:6f:b2:52:52:6e:5c:
ff:a3:72:3d:2c:26:69:0a:35:e0:e6:53:c4:ae:04:60:6e:a1:
7f:12:df:70:b8:16:e7:4c:7a:a3:87:58:34:61:ba:72:be:2c:
b8:58:cd:c9:71:45:93:02:c1:0a:3c:6d:c8:84:ca:46:50:34:
91:9f:83:b5:de:7b:89:72:fc:67:df:40:ed:71:5b:25:da:00:
ad:8e:b0:b0:87:95:ec:99:8e:87:71:3d:0d:7e:90:33:6c:9e:
5c:3d:fe:2d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTAzNUExMTAvBgNVBAUTKERDNjIyMDA4QThBMUFENDJCRTJBMjU0OTQzNDkxQUZB
QTg0NTQ5QTUwHhcNMjUwMTMwMjAwNzU1WhcNMjUwMjA2MjAwNzU1WjAYMRYwFAYD
VQQDEw02NzliZGMxYi1jYmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6aIwAc7k1+e5BXTz9mINu8ISJwiGJlsxTHFwwCNMAozLiK8RHPEtJaiqcEu1
/ojpMsXmummBZu7POrP7jIO2FMOCdNj9LbPzhuCrCBp/OXynv5CU08B1Jg8eC72o
acIKN1g3HyemLjWdT/Lu+wIeri9LpyAHmonAU9LJFxGMpraBIlq1j2Gq2C/KQNNE
jiJtu9v//LO3+vgZ/WwlRsdhEwVzxWfqsLQRf8qQ3GhgmfE//S3nhhlsWLnarrs9
huZ4IT37wOo8fJF5UTGUJG2ZtYSc9UD1JGKEe7lmng9Ud/bme9+kwxuUughf/J6B
WtcMaQEwSvhUQT5aL5kZKaNFJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBaSqOpS
uSXf4uyiTc9Za+t5hSKTMB8GA1UdIwQYMBaAFNxiIAiooa1CviolSUNJGvqoRUml
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDM1QS8zQzYwOUI0NDdD
NjYxMUVBODA4OUYzNTFDNEY5QUUwMi8zR0lnQ0tpaHJVSy1LaVZKUTBrYS1xaEZT
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNHSWdDS2loclVLLUtpVkpRMGthLXFoRlNhVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDM1QS8zQzYwOUI0NDdDNjYxMUVBODA4OUYzNTFDNEY5QUUwMi8zR0lnQ0tpaHJV
Sy1LaVZKUTBrYS1xaEZTYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAGsxJrvFH85P+QcmGttABBC4BgVg6ij4GCtywC85JW8VBXLVjGKAyG
qIO068CSgvqM2Z6tIBL+IH3m0Y8tgIF3pMCXmfg6G9rU70vvEiQxJLjqxDIkPW4r
xPqijyo4sMYfNB8ag6cE9u1vYhcmHVDzchlE1NoO3rpL2uZ8J1TA114rCMckHtbq
Y3LpfjfOo7tTL/faEDtpP81piFBvslJSblz/o3I9LCZpCjXg5lPErgRgbqF/Et9w
uBbnTHqjh1g0Ybpyviy4WM3JcUWTAsEKPG3IhMpGUDSRn4O13nuJcvxn30DtcVsl
2gCtjrCwh5XsmY6HcT0NfpAzbJ5cPf4t
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:25:36 2025 by rpki-client