Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft
File: 8clCYy-m_HcQgWCI8MuMEzUlHN0.mft (raw, json)
Hash identifier: 6nwoVaZjgCUiylFH668+/0ww1SUo3qlPrmz2Jp24pZg=
Subject key identifier: A9:64:2E:1C:5D:98:ED:6F:CD:8F:F5:DF:B2:0C:50:B2:99:F1:EB:3B
Authority key identifier: F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD
Certificate issuer: /CN=A911911C/serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD
Certificate serial: 4E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft
Manifest number: 4D
Signing time: Fri 31 Jan 2025 14:22:41 +0000
Manifest this update: Fri 31 Jan 2025 14:22:40 +0000
Manifest next update: Fri 07 Feb 2025 14:22:40 +0000
Files and hashes: 1: 8clCYy-m_HcQgWCI8MuMEzUlHN0.crl (hash: LcyeK2s6gd6UaUzJPRTbqxAPuDh21+pI92qQdN83mxA=)
2: 880F25226E5311EFB4671957C4F9AE02.roa (hash: gkEBBlb5hiB7NcbdGZU3eHKvEG+IJP6u0ZkY2XHXvHY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911911C/serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD
Validity
Not Before: Jan 31 14:22:40 2025 GMT
Not After : Feb 7 14:22:40 2025 GMT
Subject: CN=679cdcb1-ae93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:96:55:be:18:69:9e:ce:cc:26:d9:8a:4b:00:
46:f0:c3:5d:71:34:39:9f:9f:c5:4a:7c:7a:a0:67:
ee:1f:7f:ca:e4:61:a4:11:ca:31:ac:cd:d1:f1:71:
c0:48:be:f6:6c:5f:70:74:a8:f7:72:b1:1f:44:8d:
68:66:10:43:84:7a:77:a6:af:16:ed:39:f5:8f:46:
c7:ee:62:38:f7:cf:d2:e7:2f:24:8e:6a:78:e9:ef:
d1:ae:e0:94:6d:cb:b1:e7:40:aa:d3:a4:cf:c6:b7:
32:2e:03:78:93:4c:d0:97:be:8d:25:3c:77:50:66:
62:82:f5:3d:37:7f:f7:45:f9:08:2b:32:23:13:3b:
3d:08:10:8e:70:b2:ed:9f:b8:c5:91:d9:f0:01:a2:
3a:64:5e:5f:40:f9:b4:c2:86:db:a4:34:fb:22:60:
2e:63:41:e7:84:f1:e7:7f:80:92:b1:21:d7:6d:f4:
13:de:6c:53:9c:55:c2:cd:86:ec:d1:90:f0:88:3b:
ba:7a:8b:a6:25:c1:76:0d:f2:91:63:ae:c3:fe:ae:
52:ee:bb:b9:b7:29:01:c6:53:f0:2b:dd:b0:88:44:
7f:5d:46:cc:0a:d7:33:86:44:5d:5e:52:d9:25:e4:
3d:e2:54:f0:a6:f3:76:ab:8b:d5:ef:33:bf:7a:38:
6e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:64:2E:1C:5D:98:ED:6F:CD:8F:F5:DF:B2:0C:50:B2:99:F1:EB:3B
X509v3 Authority Key Identifier:
keyid:F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:43:6b:bc:51:21:34:3d:64:76:1b:c9:24:a1:9b:f8:49:fb:
56:5a:06:79:98:ac:dc:2c:81:a1:40:58:2f:7b:a9:1d:f0:68:
7b:00:6c:8f:07:53:8d:9c:e5:ba:72:cd:49:2d:f9:ac:d7:9f:
75:46:e3:c4:de:af:c5:d2:09:63:66:be:71:c0:49:da:c6:b6:
a8:84:8d:10:6a:30:e9:e3:4c:28:f8:c7:22:c0:a9:54:f5:0e:
05:f2:27:75:14:4e:92:18:36:28:a0:b3:7e:43:ba:fc:c0:35:
5e:25:f8:29:36:7f:e5:99:01:4b:ed:d4:72:84:db:1c:3d:27:
19:f5:ab:cc:c3:db:e6:12:cc:88:8e:cc:59:13:03:68:7c:9e:
47:95:f6:3a:6a:d9:37:de:32:df:ff:ca:44:f8:82:63:3b:73:
87:3f:f4:02:54:9b:53:ea:59:61:20:84:c0:9c:77:c5:cb:3b:
70:be:d4:4c:ad:b2:3c:b3:09:66:1a:04:ab:b0:86:ba:0d:ec:
05:f9:46:65:7a:77:c6:16:0d:db:fa:1c:49:05:12:6e:7f:b8:
07:16:4f:04:fb:f1:6a:02:b7:5c:e6:db:fd:b9:77:96:e9:76:
66:d4:2a:3e:74:57:f1:f7:6f:c1:1c:0a:da:a0:0b:e4:12:4d:
cb:09:18:14
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
OTExQzExMC8GA1UEBRMoRjFDOTQyNjMyRkE2RkM3NzEwODE2MDg4RjBDQjhDMTMz
NTI1MUNERDAeFw0yNTAxMzExNDIyNDBaFw0yNTAyMDcxNDIyNDBaMBgxFjAUBgNV
BAMTDTY3OWNkY2IxLWFlOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDRllW+GGmezswm2YpLAEbww11xNDmfn8VKfHqgZ+4ff8rkYaQRyjGszdHxccBI
vvZsX3B0qPdysR9EjWhmEEOEenemrxbtOfWPRsfuYjj3z9LnLySOanjp79Gu4JRt
y7HnQKrTpM/GtzIuA3iTTNCXvo0lPHdQZmKC9T03f/dF+QgrMiMTOz0IEI5wsu2f
uMWR2fABojpkXl9A+bTChtukNPsiYC5jQeeE8ed/gJKxIddt9BPebFOcVcLNhuzR
kPCIO7p6i6YlwXYN8pFjrsP+rlLuu7m3KQHGU/Ar3bCIRH9dRswK1zOGRF1eUtkl
5D3iVPCm83ari9XvM796OG4LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqWQuHF2Y
7W/Nj/XfsgxQspnx6zswHwYDVR0jBBgwFoAU8clCYy+m/HcQgWCI8MuMEzUlHN0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5MTFDLzgwN0RCQ0JDNkU0
MjExRUZCOTA3Nzk3REM0RjlBRTAyLzhjbENZeS1tX0hjUWdXQ0k4TXVNRXpVbEhO
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvOGNsQ1l5LW1fSGNRZ1dDSThNdU1FelVsSE4wLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5
MTFDLzgwN0RCQ0JDNkU0MjExRUZCOTA3Nzk3REM0RjlBRTAyLzhjbENZeS1tX0hj
UWdXQ0k4TXVNRXpVbEhOMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAFdDa7xRITQ9ZHYbySShm/hJ+1ZaBnmYrNwsgaFAWC97qR3waHsAbI8H
U42c5bpyzUkt+azXn3VG48Ter8XSCWNmvnHASdrGtqiEjRBqMOnjTCj4xyLAqVT1
DgXyJ3UUTpIYNiigs35DuvzANV4l+Ck2f+WZAUvt1HKE2xw9Jxn1q8zD2+YSzIiO
zFkTA2h8nkeV9jpq2TfeMt//ykT4gmM7c4c/9AJUm1PqWWEghMCcd8XLO3C+1Eyt
sjyzCWYaBKuwhroN7AX5RmV6d8YWDdv6HEkFEm5/uAcWTwT78WoCt1zm2/25d5bp
dmbUKj50V/H3b8EcCtqgC+QSTcsJGBQ=
-----END CERTIFICATE-----
Generated at Sat May 3 00:42:31 2025 by rpki-client