Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft
File: XJzBFCqQdWDNmfBuXdAt5OIulEU.mft (raw, json)
Hash identifier: a4zDGnlbEFKsHwOrgeJdSzcEfCoisZZan0VVh20W1NI=
Subject key identifier: D2:4D:4C:46:66:FF:A7:22:DA:40:CC:05:C6:C0:6C:BC:C0:85:99:66
Authority key identifier: 5C:9C:C1:14:2A:90:75:60:CD:99:F0:6E:5D:D0:2D:E4:E2:2E:94:45
Certificate issuer: /CN=A911636A/serialNumber=5C9CC1142A907560CD99F06E5DD02DE4E22E9445
Certificate serial: 01AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft
Manifest number: 01A6
Signing time: Fri 31 Jan 2025 02:36:13 +0000
Manifest this update: Fri 31 Jan 2025 02:36:13 +0000
Manifest next update: Fri 07 Feb 2025 02:36:13 +0000
Files and hashes: 1: XJzBFCqQdWDNmfBuXdAt5OIulEU.crl (hash: 7hoxOfxQOL1D5acGILcquiDuvOutoUo/b0K9N3mu0sM=)
2: A3A7ADEAB19711EF8A23BC39C4F9AE02.roa (hash: Xxhg1IOUnWIosjBDDjlaAvNnXCEgOL/Rukp1auAELC4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 430 (0x1ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911636A/serialNumber=5C9CC1142A907560CD99F06E5DD02DE4E22E9445
Validity
Not Before: Jan 31 02:36:13 2025 GMT
Not After : Feb 7 02:36:13 2025 GMT
Subject: CN=679c371d-c90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8a:d5:f3:e4:9c:fd:43:6e:28:9e:f0:a7:78:
bb:64:a0:3d:de:a7:ec:93:c8:09:00:d4:24:57:60:
22:d0:d6:56:81:e3:cb:13:2b:a7:88:68:5a:26:5a:
95:dd:26:4f:45:44:58:cf:b0:2a:92:b3:39:48:00:
35:5a:23:86:bf:41:cf:e4:45:ae:45:ae:33:e0:49:
92:40:6d:e8:ef:de:72:4e:4e:b5:15:83:48:e9:b4:
20:ff:6c:de:d1:5f:65:90:2f:fd:01:6b:f4:bb:50:
b5:c9:a3:1d:ae:35:1d:c4:1b:c9:d8:9d:d4:83:1d:
f8:83:d1:c5:9d:71:bc:6c:41:19:16:33:c0:e9:83:
f1:44:cd:40:15:4f:02:74:fb:d7:e7:12:c8:bc:4e:
99:e1:37:c9:b9:05:66:6e:13:c0:f1:1b:91:fa:95:
ef:2c:b6:3d:f0:80:e1:2a:d4:9d:ad:a7:2b:23:b6:
f2:ac:b2:5f:81:18:fb:2a:22:15:87:67:91:c2:df:
af:ad:86:02:8b:55:a6:31:8d:b9:42:f6:11:4b:9a:
43:ed:95:9f:95:78:77:f8:c3:58:d0:24:1c:37:30:
02:5c:7e:49:91:6a:6b:4c:80:df:a9:74:76:05:a9:
0e:25:01:50:18:98:48:07:8d:75:04:bb:b2:9d:a5:
e9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4D:4C:46:66:FF:A7:22:DA:40:CC:05:C6:C0:6C:BC:C0:85:99:66
X509v3 Authority Key Identifier:
keyid:5C:9C:C1:14:2A:90:75:60:CD:99:F0:6E:5D:D0:2D:E4:E2:2E:94:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:88:47:ba:c8:1a:e2:e0:47:e9:1f:95:ba:cd:0c:3d:2a:f5:
9a:d1:a8:bb:66:d8:93:b5:2a:c6:6d:b5:70:6a:e3:b5:ec:37:
ab:34:14:17:61:c0:49:99:9a:8c:79:53:1d:8f:c5:04:00:22:
ab:3a:f9:10:a1:01:46:04:5b:f4:5e:c7:d5:f0:37:d6:14:c1:
33:bc:b4:11:1b:fa:9f:23:23:c3:09:29:89:4b:4a:6b:8c:6d:
62:b3:8a:eb:90:69:be:40:6f:06:17:2f:b3:0e:78:2c:ca:68:
7a:05:39:64:d4:f9:67:13:8a:0f:5d:df:4b:be:ad:98:73:a5:
e6:1b:13:15:96:f3:47:e7:ed:35:d7:84:45:9b:1e:d8:22:b4:
45:fc:46:e2:e3:dc:75:0e:e5:83:2e:a3:09:39:f4:71:cf:39:
66:ce:a2:f1:55:17:04:d3:5d:48:93:04:35:9c:f1:05:05:97:
d8:e0:46:59:42:b6:6d:7e:7d:8c:8d:60:57:61:93:fb:6d:bd:
41:d3:af:d0:37:6f:03:43:a7:af:1d:bd:36:82:31:73:08:ab:
ce:e7:4c:70:67:68:58:73:e2:eb:0d:73:f9:28:7c:c6:00:05:
5a:df:2c:ad:86:fc:e8:bd:78:9a:df:b0:d6:65:1d:a0:8e:33:
90:0c:30:cc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTYzNkExMTAvBgNVBAUTKDVDOUNDMTE0MkE5MDc1NjBDRDk5RjA2RTVERDAyREU0
RTIyRTk0NDUwHhcNMjUwMTMxMDIzNjEzWhcNMjUwMjA3MDIzNjEzWjAYMRYwFAYD
VQQDEw02NzljMzcxZC1jOTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvorV8+Sc/UNuKJ7wp3i7ZKA93qfsk8gJANQkV2Ai0NZWgePLEyuniGhaJlqV
3SZPRURYz7AqkrM5SAA1WiOGv0HP5EWuRa4z4EmSQG3o795yTk61FYNI6bQg/2ze
0V9lkC/9AWv0u1C1yaMdrjUdxBvJ2J3Ugx34g9HFnXG8bEEZFjPA6YPxRM1AFU8C
dPvX5xLIvE6Z4TfJuQVmbhPA8RuR+pXvLLY98IDhKtSdracrI7byrLJfgRj7KiIV
h2eRwt+vrYYCi1WmMY25QvYRS5pD7ZWflXh3+MNY0CQcNzACXH5JkWprTIDfqXR2
BakOJQFQGJhIB411BLuynaXpmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJNTEZm
/6ci2kDMBcbAbLzAhZlmMB8GA1UdIwQYMBaAFFycwRQqkHVgzZnwbl3QLeTiLpRF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjM2QS9CMEYzM0QyQTY2
RUUxMUVEQjNCNDFBNURDNEY5QUUwMi9YSnpCRkNxUWRXRE5tZkJ1WGRBdDVPSXVs
RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hKekJGQ3FRZFdETm1mQnVYZEF0NU9JdWxFVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjM2QS9CMEYzM0QyQTY2RUUxMUVEQjNCNDFBNURDNEY5QUUwMi9YSnpCRkNxUWRX
RE5tZkJ1WGRBdDVPSXVsRVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAviEe6yBri4EfpH5W6zQw9KvWa0ai7ZtiTtSrGbbVwauO17DerNBQX
YcBJmZqMeVMdj8UEACKrOvkQoQFGBFv0XsfV8DfWFMEzvLQRG/qfIyPDCSmJS0pr
jG1is4rrkGm+QG8GFy+zDngsymh6BTlk1PlnE4oPXd9Lvq2Yc6XmGxMVlvNH5+01
14RFmx7YIrRF/Ebi49x1DuWDLqMJOfRxzzlmzqLxVRcE011IkwQ1nPEFBZfY4EZZ
QrZtfn2MjWBXYZP7bb1B06/QN28DQ6evHb02gjFzCKvO50xwZ2hYc+LrDXP5KHzG
AAVa3yythvzovXia37DWZR2gjjOQDDDM
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:09:11 2025 by rpki-client