Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft
File: 5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft (raw, json)
Hash identifier: /1YkFanUWfHSu3atkKNG4zlGkW/E51zIvWKcEOcL/mk=
Subject key identifier: 44:D4:C5:82:E7:AC:4B:E4:24:E0:F6:97:A4:52:EE:6C:20:B6:AA:D0
Authority key identifier: E5:06:93:CA:18:5B:B6:5D:92:CA:FB:30:E3:76:F5:1B:95:9A:D2:D8
Certificate issuer: /CN=A9115122/serialNumber=E50693CA185BB65D92CAFB30E376F51B959AD2D8
Certificate serial: 0149
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QaTyhhbtl2Syvsw43b1G5Wa0tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft
Manifest number: 0146
Signing time: Fri 31 Jan 2025 03:30:53 +0000
Manifest this update: Fri 31 Jan 2025 03:30:52 +0000
Manifest next update: Fri 07 Feb 2025 03:30:52 +0000
Files and hashes: 1: 5QaTyhhbtl2Syvsw43b1G5Wa0tg.crl (hash: 2Hn2G7ooCHx0jynsp+430Q0A82FxGeniSCGJUJXA4DI=)
2: D4B97082EF2211EDB7EFE882C4F9AE02.roa (hash: hB47ivnW+fJgf8IJJ0l6aDuxJFT7bxRrB7EorTuGqJc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329 (0x149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115122/serialNumber=E50693CA185BB65D92CAFB30E376F51B959AD2D8
Validity
Not Before: Jan 31 03:30:52 2025 GMT
Not After : Feb 7 03:30:52 2025 GMT
Subject: CN=679c43ed-2c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ce:53:6e:fa:12:4e:e4:b8:7a:ae:5d:54:b7:
cf:12:24:b3:c0:66:6b:3b:68:63:e8:82:20:9e:00:
3f:e5:5b:47:9f:4f:6e:e5:af:f6:88:a6:08:c3:48:
ba:e7:07:2a:6f:cf:d5:32:f4:63:70:20:c7:f8:a6:
dd:f2:f7:3d:e4:35:9a:e4:25:d0:97:54:04:84:d8:
11:0f:7b:dd:85:df:6c:8a:85:85:e9:15:79:60:23:
c3:e4:33:af:ef:ad:a2:b8:ed:9a:00:ee:58:89:55:
c9:17:7e:04:88:a9:d6:68:69:23:4e:b9:07:68:71:
ca:67:60:e5:e9:96:b5:56:65:07:93:6f:cf:ea:dc:
0a:da:77:6a:29:e3:10:2d:a1:6c:22:fc:13:a3:54:
ac:a0:f0:ca:73:c5:1c:ba:79:ee:21:6f:96:3d:9a:
40:f0:e9:fd:74:cc:d9:77:20:bc:51:a0:3c:24:12:
b1:31:12:30:86:55:5e:8d:87:05:ce:51:ab:fc:39:
9f:26:da:9e:89:b7:c1:ec:d2:43:ec:13:95:8f:2d:
1f:ff:e5:3d:c3:53:34:cf:23:fb:1b:79:d2:30:a4:
af:f6:d1:f5:c4:50:cf:75:f8:7f:16:ae:d6:d7:b8:
6f:17:a2:e5:db:a3:99:7d:25:5f:30:a9:bf:02:9a:
2f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D4:C5:82:E7:AC:4B:E4:24:E0:F6:97:A4:52:EE:6C:20:B6:AA:D0
X509v3 Authority Key Identifier:
keyid:E5:06:93:CA:18:5B:B6:5D:92:CA:FB:30:E3:76:F5:1B:95:9A:D2:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QaTyhhbtl2Syvsw43b1G5Wa0tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:94:8c:8c:ff:37:16:03:fb:89:83:6f:be:2f:e5:57:6f:b6:
bd:85:06:05:22:e2:70:62:ae:ab:7a:9c:ca:0a:12:d6:fd:3e:
ca:85:c2:3c:de:7d:38:72:37:ce:53:40:70:d6:72:35:39:ec:
c7:95:86:e0:31:ea:2f:d3:c4:56:6f:9b:78:95:e3:e1:c2:20:
b7:37:bd:63:64:48:e7:bf:4b:45:cb:4d:1f:91:84:b8:f9:1c:
94:b0:a2:d3:ee:81:33:03:f0:e1:1b:68:1c:d9:5b:44:27:35:
92:19:75:e3:35:2c:a3:e2:20:a5:6e:1b:1e:f2:c9:bd:f0:6a:
fd:4f:89:4b:58:6e:68:b2:24:11:85:a3:92:37:d9:70:f6:8e:
ad:5e:4a:43:4c:21:c0:26:0a:2b:10:af:e2:3d:8d:65:6d:c4:
a3:b2:95:1d:98:2c:b3:4c:2e:d3:31:95:ca:6d:dc:2d:54:f9:
7c:0c:39:a1:d8:ac:93:ab:65:0f:c9:07:4b:13:d4:b9:21:ae:
44:58:cf:e0:64:07:60:4a:a6:86:c4:fe:36:cb:4c:37:bd:f0:
07:2a:62:81:ec:10:5b:84:16:d9:07:ad:19:21:75:5c:13:00:
43:5e:f1:fe:bf:bc:3d:7a:bc:bf:f6:e0:c7:ca:51:52:64:6a:
21:86:5d:dc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTUxMjIxMTAvBgNVBAUTKEU1MDY5M0NBMTg1QkI2NUQ5MkNBRkIzMEUzNzZGNTFC
OTU5QUQyRDgwHhcNMjUwMTMxMDMzMDUyWhcNMjUwMjA3MDMzMDUyWjAYMRYwFAYD
VQQDEw02NzljNDNlZC0yYzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtM5TbvoSTuS4eq5dVLfPEiSzwGZrO2hj6IIgngA/5VtHn09u5a/2iKYIw0i6
5wcqb8/VMvRjcCDH+Kbd8vc95DWa5CXQl1QEhNgRD3vdhd9sioWF6RV5YCPD5DOv
762iuO2aAO5YiVXJF34EiKnWaGkjTrkHaHHKZ2Dl6Za1VmUHk2/P6twK2ndqKeMQ
LaFsIvwTo1SsoPDKc8UcunnuIW+WPZpA8On9dMzZdyC8UaA8JBKxMRIwhlVejYcF
zlGr/DmfJtqeibfB7NJD7BOVjy0f/+U9w1M0zyP7G3nSMKSv9tH1xFDPdfh/Fq7W
17hvF6Ll26OZfSVfMKm/Apov4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFETUxYLn
rEvkJOD2l6RS7mwgtqrQMB8GA1UdIwQYMBaAFOUGk8oYW7Zdksr7MON29RuVmtLY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTEyMi8zMEM3QTM4RUVG
MUYxMUVEQkY3MUNDODBDNEY5QUUwMi81UWFUeWhoYnRsMlN5dnN3NDNiMUc1V2Ew
dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVRYVR5aGhidGwyU3l2c3c0M2IxRzVXYTB0Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NTEyMi8zMEM3QTM4RUVGMUYxMUVEQkY3MUNDODBDNEY5QUUwMi81UWFUeWhoYnRs
MlN5dnN3NDNiMUc1V2EwdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAVlIyM/zcWA/uJg2++L+VXb7a9hQYFIuJwYq6repzKChLW/T7KhcI8
3n04cjfOU0Bw1nI1OezHlYbgMeov08RWb5t4lePhwiC3N71jZEjnv0tFy00fkYS4
+RyUsKLT7oEzA/DhG2gc2VtEJzWSGXXjNSyj4iClbhse8sm98Gr9T4lLWG5osiQR
haOSN9lw9o6tXkpDTCHAJgorEK/iPY1lbcSjspUdmCyzTC7TMZXKbdwtVPl8DDmh
2KyTq2UPyQdLE9S5Ia5EWM/gZAdgSqaGxP42y0w3vfAHKmKB7BBbhBbZB60ZIXVc
EwBDXvH+v7w9ery/9uDHylFSZGohhl3c
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:05:53 2025 by rpki-client