Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft
File: 3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft (raw, json)
Hash identifier: 0AX4uXxL4q8mNNF7ADO/w/tthkta2uxOZn9Bc6W4ngA=
Subject key identifier: AE:64:3D:00:3C:CA:46:BD:93:9A:FC:76:92:4F:BF:2C:8A:6B:75:89
Authority key identifier: DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E
Certificate issuer: /CN=A9116351/serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E
Certificate serial: 0126
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft
Manifest number: 0123
Signing time: Fri 31 Jan 2025 03:50:20 +0000
Manifest this update: Fri 31 Jan 2025 03:50:19 +0000
Manifest next update: Fri 07 Feb 2025 03:50:19 +0000
Files and hashes: 1: 3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl (hash: R2T04ciyTPi99MiBRzaFH2MdJF8wOIz2hL775mf2kis=)
2: 602678F8252A11EEA290E91FC4F9AE02.roa (hash: tEbg35ruInXFvBobh8FVluJNLAlP7tv3JLnCppA5H5Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294 (0x126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116351/serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E
Validity
Not Before: Jan 31 03:50:19 2025 GMT
Not After : Feb 7 03:50:19 2025 GMT
Subject: CN=679c487c-d347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:73:df:d9:68:07:79:f9:94:1d:27:c2:9a:87:
9b:20:7c:82:04:84:6d:d2:73:b5:7d:1e:cd:ea:9e:
fb:11:5f:da:bc:6b:e1:d5:59:21:0b:e5:dd:c6:68:
9d:95:e4:c1:9e:42:a1:84:4e:e3:4b:42:ad:95:fc:
b9:e3:55:5a:68:ff:1d:67:bc:e4:f1:5e:ca:3b:29:
7d:a8:9c:9d:93:cb:2b:b4:b6:26:a1:b2:87:a2:45:
b4:4f:9c:74:f8:8c:93:58:29:a4:37:72:23:f9:9f:
07:94:d8:91:41:c8:96:ee:d3:4a:2a:94:49:3e:e0:
39:15:47:37:d2:bc:dc:a2:0d:18:c2:2d:a0:7a:65:
6b:2f:2e:7a:7f:16:8e:d0:89:8d:de:79:c8:47:d9:
01:ae:01:cd:06:a4:91:66:68:b2:f1:3c:d7:0d:8a:
7e:bd:10:15:ea:b0:cb:37:78:69:4e:75:f7:44:36:
aa:a4:61:74:92:c0:60:3e:0e:40:01:21:62:51:01:
38:37:76:ee:23:34:de:f1:99:53:23:cf:d1:92:cb:
ce:98:bd:71:b4:62:de:be:a5:f3:45:36:3b:bd:27:
37:25:cf:88:51:1b:cb:d8:b9:7c:e1:37:b8:4b:aa:
d3:81:95:3c:0e:84:73:40:87:2c:23:dd:29:9d:b8:
f0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:64:3D:00:3C:CA:46:BD:93:9A:FC:76:92:4F:BF:2C:8A:6B:75:89
X509v3 Authority Key Identifier:
keyid:DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:07:b8:1b:c8:6d:ba:4f:72:84:97:f0:b6:4c:49:62:c7:86:
88:5e:4c:32:f0:f9:96:42:d8:56:6a:ba:00:08:a2:c5:f5:c7:
8c:1d:44:3e:49:b0:ae:92:1f:be:e2:04:47:90:7e:d1:7f:98:
30:44:01:d9:6c:5a:dc:54:46:df:57:db:93:56:2a:c3:2e:9d:
dc:69:46:a6:0d:cd:68:a0:e7:d1:f1:2c:7d:56:ca:a0:0d:6a:
e8:b7:c4:35:10:23:6b:89:d0:20:9d:2a:db:06:b1:36:1a:e5:
1b:28:ae:7b:a1:61:30:f8:8e:80:b0:09:04:b0:ad:80:60:2c:
8b:e5:58:e6:72:4e:e2:7a:ce:01:58:87:d5:0e:1e:2f:9b:ae:
8f:2d:d2:c4:77:d2:bf:3f:25:c8:05:8b:b5:b3:cf:a8:91:56:
60:c8:02:4b:18:bb:ff:ce:bf:2b:0d:67:ba:80:47:d4:3b:9f:
cf:46:84:99:c1:d5:37:f9:ef:2c:5d:aa:86:f6:ca:44:c9:ea:
26:cb:f0:a4:ed:59:15:14:ae:ae:f5:09:b0:8e:53:2d:22:18:
a7:8f:1c:fe:c3:cd:b6:5e:92:b6:60:38:4b:1a:fd:62:84:67:
28:ec:eb:53:d3:e7:83:72:3f:a4:8d:2f:2d:38:e6:7f:16:91:
29:90:41:69
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTYzNTExMTAvBgNVBAUTKERDMjFCOTAyOUVBQzA3OTA4NzhGQUNBN0NBODEzQjRC
M0FFREM5MEUwHhcNMjUwMTMxMDM1MDE5WhcNMjUwMjA3MDM1MDE5WjAYMRYwFAYD
VQQDEw02NzljNDg3Yy1kMzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuHPf2WgHefmUHSfCmoebIHyCBIRt0nO1fR7N6p77EV/avGvh1VkhC+Xdxmid
leTBnkKhhE7jS0Ktlfy541VaaP8dZ7zk8V7KOyl9qJydk8srtLYmobKHokW0T5x0
+IyTWCmkN3Ij+Z8HlNiRQciW7tNKKpRJPuA5FUc30rzcog0Ywi2gemVrLy56fxaO
0ImN3nnIR9kBrgHNBqSRZmiy8TzXDYp+vRAV6rDLN3hpTnX3RDaqpGF0ksBgPg5A
ASFiUQE4N3buIzTe8ZlTI8/RksvOmL1xtGLevqXzRTY7vSc3Jc+IURvL2Ll84Te4
S6rTgZU8DoRzQIcsI90pnbjwBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK5kPQA8
yka9k5r8dpJPvyyKa3WJMB8GA1UdIwQYMBaAFNwhuQKerAeQh4+sp8qBO0s67ckO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjM1MS9DOEE4RDk3NjI1
MjkxMUVFOTM5RkMzMUVDNEY5QUUwMi8zQ0c1QXA2c0I1Q0hqNnlueW9FN1N6cnR5
UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNDRzVBcDZzQjVDSGo2eW55b0U3U3pydHlRNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjM1MS9DOEE4RDk3NjI1MjkxMUVFOTM5RkMzMUVDNEY5QUUwMi8zQ0c1QXA2c0I1
Q0hqNnlueW9FN1N6cnR5UTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA+B7gbyG26T3KEl/C2TElix4aIXkwy8PmWQthWaroACKLF9ceMHUQ+
SbCukh++4gRHkH7Rf5gwRAHZbFrcVEbfV9uTVirDLp3caUamDc1ooOfR8Sx9Vsqg
DWrot8Q1ECNridAgnSrbBrE2GuUbKK57oWEw+I6AsAkEsK2AYCyL5Vjmck7ies4B
WIfVDh4vm66PLdLEd9K/PyXIBYu1s8+okVZgyAJLGLv/zr8rDWe6gEfUO5/PRoSZ
wdU3+e8sXaqG9spEyeomy/Ck7VkVFK6u9QmwjlMtIhinjxz+w822XpK2YDhLGv1i
hGco7OtT0+eDcj+kjS8tOOZ/FpEpkEFp
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:48:28 2025 by rpki-client