Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft
File: rJEs76dYoRmcG-3gaxSp6jmJdfc.mft (raw, json)
Hash identifier: 5lQsFiucnPQqMf43ufEtYovzdUAYBYfaoGljDO95jFg=
Subject key identifier: F9:BA:ED:7F:13:38:D0:4F:74:16:9B:BD:FF:9F:8C:E0:C6:78:D4:FE
Authority key identifier: AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7
Certificate issuer: /CN=A911285C/serialNumber=AC912CEFA758A1199C1BEDE06B14A9EA398975F7
Certificate serial: 01BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft
Manifest number: 01AF
Signing time: Fri 31 Jan 2025 02:31:55 +0000
Manifest this update: Fri 31 Jan 2025 02:31:54 +0000
Manifest next update: Fri 07 Feb 2025 02:31:54 +0000
Files and hashes: 1: rJEs76dYoRmcG-3gaxSp6jmJdfc.crl (hash: vZiyZKDZ/1MwirdtvDNIoB5+2VhVSWrl7VoUIP9z13k=)
2: 38E02CDC04EE11EE89900876C4F9AE02.roa (hash: A+Aqziv+l/eva8pdjPnNDIFSBuh+7kSFLQzVhKrXMMo=)
3: EE0C206E96FF11ED87B56F84C4F9AE02.roa (hash: nWteaBso5vE4iYgh/So+lkoA6pmFNyiwA37OG5bT7wo=)
4: EF1E23F896FF11ED87B56F84C4F9AE02.roa (hash: I9Pcv4IIcwx4nw81OeoGh2DbUKg+x99yv1jaTnfKTew=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 446 (0x1be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911285C/serialNumber=AC912CEFA758A1199C1BEDE06B14A9EA398975F7
Validity
Not Before: Jan 31 02:31:54 2025 GMT
Not After : Feb 7 02:31:54 2025 GMT
Subject: CN=679c361b-c091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:22:9f:75:ce:ce:eb:85:16:ef:ae:f1:e4:b1:
15:42:d9:80:9d:da:d3:66:96:ab:89:6d:9d:5c:39:
a6:07:25:58:4c:a3:51:a1:cc:a3:d4:12:83:cd:4d:
17:48:23:dc:04:89:9e:01:3c:1e:5a:f3:3d:22:9f:
46:86:72:e8:81:25:a4:0c:b4:ae:c6:7e:94:c7:5d:
27:82:d7:fc:f1:69:02:17:6e:da:5b:71:20:91:46:
48:09:e9:f1:bb:15:cf:8b:0a:9a:b6:da:d6:2d:22:
31:2f:6c:1d:84:64:d5:ee:2c:a1:65:56:5d:0c:32:
e2:bc:50:58:25:f9:e5:a3:9a:2e:8e:a3:d9:fb:23:
57:27:1d:da:18:1b:44:9c:bb:35:cb:f1:b6:3b:ff:
d6:ff:de:c8:66:09:8f:3d:d4:41:dc:d3:f0:31:f7:
43:69:56:35:a8:75:75:99:2c:50:86:ae:ce:04:f5:
d7:f4:8f:70:5c:67:93:c7:34:69:8e:aa:32:ac:e1:
a5:4b:84:37:b7:ea:54:4a:18:26:f3:c6:1e:0e:28:
3d:33:fc:14:45:5c:82:c1:74:3e:0f:c5:f0:1d:f7:
95:0d:ff:08:25:eb:9f:66:3f:1c:ba:10:2e:3b:63:
8d:ef:5d:34:76:6b:42:b3:86:7d:8e:12:bc:56:71:
d2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BA:ED:7F:13:38:D0:4F:74:16:9B:BD:FF:9F:8C:E0:C6:78:D4:FE
X509v3 Authority Key Identifier:
keyid:AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:5b:43:89:db:22:59:1b:3f:8c:5f:95:70:0d:d5:ca:67:6c:
be:25:70:1b:4b:42:90:7f:91:11:82:4f:80:93:3e:2c:8c:68:
af:c2:94:15:b3:06:57:7a:fd:36:07:6d:83:b6:17:64:ef:68:
51:c4:e5:a9:54:fc:bd:1f:61:40:35:5a:d1:db:59:cc:4a:dd:
1e:fd:b8:90:38:1f:72:dd:d2:11:fa:cb:e5:7b:f4:4a:77:57:
8e:3e:c4:cf:c7:27:4b:2f:9c:16:98:51:2e:12:ba:16:a3:0f:
97:c0:d1:bc:1a:0a:d1:19:f0:92:0b:65:d3:3b:f0:2b:9a:35:
32:f2:1c:71:a0:33:eb:51:16:20:14:c3:1d:38:c5:ce:e2:ff:
36:51:73:e3:e7:4f:80:77:62:85:98:b7:2d:ed:c5:31:fa:91:
e3:58:ba:af:ad:cd:82:30:f3:03:62:37:01:db:ee:2b:de:33:
cf:c9:51:32:c0:e6:1a:5e:56:ea:b2:ca:22:e5:8d:09:32:e2:
c3:0d:89:74:e4:d6:25:ec:1c:08:ba:eb:61:f8:3f:98:82:ce:
2c:9f:5b:45:15:88:69:37:ea:0c:47:a8:c1:84:54:76:bf:0f:
55:e1:35:4f:bf:09:5a:b4:90:8b:86:5f:bb:b7:1d:11:ac:9f:
94:a3:da:61
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTI4NUMxMTAvBgNVBAUTKEFDOTEyQ0VGQTc1OEExMTk5QzFCRURFMDZCMTRBOUVB
Mzk4OTc1RjcwHhcNMjUwMTMxMDIzMTU0WhcNMjUwMjA3MDIzMTU0WjAYMRYwFAYD
VQQDEw02NzljMzYxYi1jMDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAniKfdc7O64UW767x5LEVQtmAndrTZpariW2dXDmmByVYTKNRocyj1BKDzU0X
SCPcBImeATweWvM9Ip9GhnLogSWkDLSuxn6Ux10ngtf88WkCF27aW3EgkUZICenx
uxXPiwqattrWLSIxL2wdhGTV7iyhZVZdDDLivFBYJfnlo5oujqPZ+yNXJx3aGBtE
nLs1y/G2O//W/97IZgmPPdRB3NPwMfdDaVY1qHV1mSxQhq7OBPXX9I9wXGeTxzRp
jqoyrOGlS4Q3t+pUShgm88YeDig9M/wURVyCwXQ+D8XwHfeVDf8IJeufZj8cuhAu
O2ON7100dmtCs4Z9jhK8VnHSiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPm67X8T
ONBPdBabvf+fjODGeNT+MB8GA1UdIwQYMBaAFKyRLO+nWKEZnBvt4GsUqeo5iXX3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjg1Qy8wQTY4QjExODYw
OEQxMUVEQUYyQzY1NjdDNEY5QUUwMi9ySkVzNzZkWW9SbWNHLTNnYXhTcDZqbUpk
ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JKRXM3NmRZb1JtY0ctM2dheFNwNmptSmRmYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
Mjg1Qy8wQTY4QjExODYwOEQxMUVEQUYyQzY1NjdDNEY5QUUwMi9ySkVzNzZkWW9S
bWNHLTNnYXhTcDZqbUpkZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB2W0OJ2yJZGz+MX5VwDdXKZ2y+JXAbS0KQf5ERgk+Akz4sjGivwpQV
swZXev02B22Dthdk72hRxOWpVPy9H2FANVrR21nMSt0e/biQOB9y3dIR+svle/RK
d1eOPsTPxydLL5wWmFEuEroWow+XwNG8GgrRGfCSC2XTO/ArmjUy8hxxoDPrURYg
FMMdOMXO4v82UXPj50+Ad2KFmLct7cUx+pHjWLqvrc2CMPMDYjcB2+4r3jPPyVEy
wOYaXlbqssoi5Y0JMuLDDYl05NYl7BwIuuth+D+Ygs4sn1tFFYhpN+oMR6jBhFR2
vw9V4TVPvwlatJCLhl+7tx0RrJ+Uo9ph
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:39:08 2025 by rpki-client