Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
File: fn476Ik3CnHlUhVXuwOgDxs5v9g.mft (raw, json)
Hash identifier: Z/5neredxeju+JzhmZy1vSt0kB85oy3F/ovS/ZGmRAQ=
Subject key identifier: F8:9A:34:E5:69:A8:C3:8C:B9:7E:94:17:67:1E:B8:61:E6:5C:B9:68
Authority key identifier: 7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8
Certificate issuer: /CN=A911784E/serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8
Certificate serial: 077D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
Manifest number: 0773
Signing time: Thu 30 Jan 2025 21:20:39 +0000
Manifest this update: Thu 30 Jan 2025 21:20:39 +0000
Manifest next update: Thu 06 Feb 2025 21:20:39 +0000
Files and hashes: 1: fn476Ik3CnHlUhVXuwOgDxs5v9g.crl (hash: V7Rq9F8YO8XluIugqwT/5IMMCjHwaB5UHEsF6FwPMyI=)
2: 211EA566FEC411EAA6579A78C4F9AE02.roa (hash: cAsn+ZLvFSOZU0pEtCrrDWsBwNszEN0eL2057zAiYjQ=)
3: 8AA99B52FEC511EABAAE7814C4F9AE02.roa (hash: d4YjT+wZz2FF52dbAjBXkm9vxrKKV8DOl0ST7TwKzd4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1917 (0x77d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911784E/serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8
Validity
Not Before: Jan 30 21:20:39 2025 GMT
Not After : Feb 6 21:20:39 2025 GMT
Subject: CN=679bed27-bc05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:67:5c:e1:54:fb:5b:d0:25:b9:53:6f:27:4d:
02:3e:57:9b:5a:e7:56:21:c8:5e:f5:dc:1a:26:ae:
d2:4d:b6:dc:08:88:83:84:2e:1e:55:23:ed:d2:4f:
b1:8a:fe:92:4c:7b:38:a6:bb:f0:3b:27:53:25:a6:
0d:c0:58:de:e1:30:c3:e0:af:4d:54:f4:76:38:47:
cc:2d:3b:56:ee:f7:5e:4f:6c:40:c5:4a:c5:f3:dd:
b9:68:e3:1c:8b:71:b9:70:c8:3f:73:5b:b1:a6:28:
e5:31:73:e6:7e:25:10:f7:4f:35:68:23:0a:a0:a6:
66:b3:ea:e5:d1:4d:0a:18:6f:6b:81:69:c3:fa:fb:
26:67:c1:e4:cc:7d:6e:e5:7d:34:84:77:b9:6a:28:
85:6a:ad:e1:be:b4:a9:10:85:d0:5d:7f:8c:66:08:
0a:1c:21:2b:f8:7e:78:c4:13:fc:6a:a2:4a:1c:00:
01:85:39:1c:29:39:0a:93:1a:9a:51:32:02:a3:85:
4d:ed:0a:d7:6f:fc:bf:5e:3f:73:8a:cb:3e:b4:22:
4a:b8:41:89:9d:0e:14:67:1f:64:f6:3e:61:c3:c9:
a9:eb:ea:f7:00:8f:ac:26:bb:82:9b:e0:b7:86:b5:
95:54:60:c3:b3:ff:b0:66:da:d5:de:78:3e:36:d6:
e0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9A:34:E5:69:A8:C3:8C:B9:7E:94:17:67:1E:B8:61:E6:5C:B9:68
X509v3 Authority Key Identifier:
keyid:7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:14:dc:5c:5c:12:1b:a7:e8:37:6c:4b:92:10:8a:6b:6d:af:
9a:27:b3:87:e7:bd:cc:3e:e3:bc:d6:98:79:8a:84:07:a2:ed:
b2:a4:dc:6d:cd:38:d4:95:26:b0:d6:29:a2:a0:4a:c4:59:c3:
08:eb:8c:34:a2:4b:5a:39:88:95:14:8b:ab:0c:fd:ec:b9:76:
84:93:7b:de:ee:04:9c:f0:16:08:16:43:6e:12:cd:7a:dd:25:
1a:70:48:07:49:3b:29:7e:ff:78:7c:af:68:b1:76:dc:af:8a:
8c:fe:b5:36:2d:a8:6f:c4:29:26:ea:73:67:83:96:7b:44:77:
c4:99:95:94:23:dc:ae:1d:2b:d0:b0:86:5c:1f:06:61:fe:f3:
34:d8:f7:6a:d3:55:0d:b4:7c:a6:e2:e7:dc:78:14:3a:98:08:
c7:69:02:e4:e3:15:ef:f3:c5:2e:c8:e9:73:cf:5d:22:cc:d1:
2e:8b:a3:34:d6:9d:17:4f:96:38:07:41:d4:e7:c1:e9:bc:83:
e0:fe:a5:e8:7b:e4:fa:74:a0:88:17:33:10:93:39:92:ec:55:
7e:80:a7:e1:22:6d:62:d3:93:0d:8a:68:19:ad:a3:d0:18:0d:
0a:68:7a:27:b3:0f:58:83:01:d5:d1:52:c5:fa:f0:89:0a:57:
73:1e:64:ef
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTc4NEUxMTAvBgNVBAUTKDdFN0UzQkU4ODkzNzBBNzFFNTUyMTU1N0JCMDNBMDBG
MUIzOUJGRDgwHhcNMjUwMTMwMjEyMDM5WhcNMjUwMjA2MjEyMDM5WjAYMRYwFAYD
VQQDEw02NzliZWQyNy1iYzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAumdc4VT7W9AluVNvJ00CPlebWudWIche9dwaJq7STbbcCIiDhC4eVSPt0k+x
iv6STHs4prvwOydTJaYNwFje4TDD4K9NVPR2OEfMLTtW7vdeT2xAxUrF8925aOMc
i3G5cMg/c1uxpijlMXPmfiUQ9081aCMKoKZms+rl0U0KGG9rgWnD+vsmZ8HkzH1u
5X00hHe5aiiFaq3hvrSpEIXQXX+MZggKHCEr+H54xBP8aqJKHAABhTkcKTkKkxqa
UTICo4VN7QrXb/y/Xj9ziss+tCJKuEGJnQ4UZx9k9j5hw8mp6+r3AI+sJruCm+C3
hrWVVGDDs/+wZtrV3ng+Ntbg2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPiaNOVp
qMOMuX6UF2ceuGHmXLloMB8GA1UdIwQYMBaAFH5+O+iJNwpx5VIVV7sDoA8bOb/Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzg0RS82QjU0RDlDOEZF
QzExMUVBOUU3MzMzNzVDNEY5QUUwMi9mbjQ3NklrM0NuSGxVaFZYdXdPZ0R4czV2
OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZuNDc2SWszQ25IbFVoVlh1d09nRHhzNXY5Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
Nzg0RS82QjU0RDlDOEZFQzExMUVBOUU3MzMzNzVDNEY5QUUwMi9mbjQ3NklrM0Nu
SGxVaFZYdXdPZ0R4czV2OWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA2FNxcXBIbp+g3bEuSEIprba+aJ7OH573MPuO81ph5ioQHou2ypNxt
zTjUlSaw1imioErEWcMI64w0oktaOYiVFIurDP3suXaEk3ve7gSc8BYIFkNuEs16
3SUacEgHSTspfv94fK9osXbcr4qM/rU2LahvxCkm6nNng5Z7RHfEmZWUI9yuHSvQ
sIZcHwZh/vM02Pdq01UNtHym4ufceBQ6mAjHaQLk4xXv88UuyOlzz10izNEui6M0
1p0XT5Y4B0HU58HpvIPg/qXoe+T6dKCIFzMQkzmS7FV+gKfhIm1i05MNimgZraPQ
GA0KaHonsw9YgwHV0VLF+vCJCldzHmTv
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:18 2025 by rpki-client