Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft
File: 9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft (raw, json)
Hash identifier: 197DFexSJKa3gR5ND0Qxo+s4VPshT7w4Ypl5O0XJdpg=
Subject key identifier: CF:F1:C7:43:97:A8:AD:B7:D5:ED:A2:E9:24:B1:B7:18:41:50:A6:B0
Authority key identifier: F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6
Certificate issuer: /CN=A911911C/serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6
Certificate serial: 352C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft
Manifest number: 34CF
Signing time: Fri 31 Jan 2025 14:22:39 +0000
Manifest this update: Fri 31 Jan 2025 14:22:38 +0000
Manifest next update: Fri 07 Feb 2025 14:22:38 +0000
Files and hashes: 1: 9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl (hash: 215pxUKWx2dpEV9I/pBUEczoiTNp/MrEi8BUfLbmLmw=)
2: 3931B4364E9D11EFB8701A32C4F9AE02.roa (hash: nVegQxWNWrb99F1Eu2ZQZA/CFkDXKnPbfJ2XCkUJqkM=)
3: 8EEE648AE63811EB91D48033C4F9AE02.roa (hash: 6ZDExvD8R6lfn1UNMFWFgjBfUXdJGstZiRI0vF7/Wus=)
4: 3217A18E809711EFB1A3805FC4F9AE02.roa (hash: IExbtiolQQ65jCv5u1UwJWeDcm4gG8UyargWa4/V1IY=)
5: 6E340B9C4EA811EFA593A24CC4F9AE02.roa (hash: Owe/AbEsMPyKxZYlgL12xosv4eIWMfqMjX4SIt/KeiA=)
6: 24D0960C4AFA11EFB1EEA481C4F9AE02.roa (hash: 4SnN/Dveh2eNpWKukaIi5N9WfKblXmvZSjIrcjaW3wk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13612 (0x352c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911911C/serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6
Validity
Not Before: Jan 31 14:22:38 2025 GMT
Not After : Feb 7 14:22:38 2025 GMT
Subject: CN=679cdcae-c990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f9:d9:a7:1c:ed:0a:7c:3f:25:86:62:da:11:
0a:d7:3c:43:f4:78:6d:38:24:91:17:1f:cd:91:02:
cf:b0:47:85:be:f1:52:10:4c:99:de:e0:40:a1:3a:
d1:34:e6:c0:3b:56:cd:c4:ad:8c:83:90:b3:88:ae:
8d:66:f6:5f:9e:1d:03:d8:88:24:ef:21:5a:10:92:
8c:5e:33:2e:0a:0a:08:6a:71:59:bd:61:58:31:2e:
45:41:f6:aa:92:98:92:66:fb:dc:02:43:bf:d3:78:
4c:8a:0c:f5:26:d1:3e:02:13:3f:9b:87:01:56:fc:
85:9d:c8:74:1c:4c:ec:f5:9a:ff:cc:14:a2:ef:00:
bc:1d:91:76:e9:f3:f2:dc:7d:5f:3b:40:4e:50:64:
cf:74:e0:ba:44:94:57:05:03:6a:2d:e1:02:ab:f6:
fa:78:bd:3c:dc:7e:7b:d0:0e:9f:1d:e5:65:26:da:
f0:43:1a:b1:d5:df:36:3c:87:b1:ca:3d:e3:d5:8d:
04:ec:d0:46:f4:88:49:85:e5:cf:29:1b:b8:aa:b1:
2f:c8:37:81:36:ea:f6:4d:4b:91:61:bd:d1:d1:05:
40:58:fd:2a:0a:99:e0:ff:25:a3:24:24:c8:9f:45:
19:cf:b3:56:b7:cd:a5:4a:b7:10:6f:a0:c0:9d:9b:
29:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F1:C7:43:97:A8:AD:B7:D5:ED:A2:E9:24:B1:B7:18:41:50:A6:B0
X509v3 Authority Key Identifier:
keyid:F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:3b:f5:51:51:04:3e:ba:16:9b:be:52:c9:fe:16:8b:00:6e:
c8:8e:e9:2f:96:e2:c0:5c:80:55:f3:4e:4e:10:4d:28:e9:de:
a0:cb:54:19:71:89:d9:35:8a:bb:d9:8b:6e:5b:8d:88:52:3f:
3d:2c:4b:81:27:3b:87:d9:30:e5:cd:7e:31:f2:e7:18:d9:89:
89:56:19:25:03:9d:40:fb:05:7a:f1:59:42:26:91:90:25:44:
59:9f:73:07:41:fe:35:58:f1:66:c0:85:0a:3c:5f:de:b7:b2:
54:ef:2d:a8:c0:83:91:72:07:94:a9:03:64:f9:2a:e1:2a:fc:
f2:13:a2:ef:a9:a5:9a:34:8b:2a:cd:b5:82:a6:26:7e:c4:96:
01:94:44:35:3d:f7:38:60:24:98:99:01:50:fa:87:56:66:c1:
0c:8f:eb:33:1f:31:95:d1:eb:dc:e2:5f:f4:b5:a3:a2:fb:e8:
fd:29:e7:26:b6:aa:35:c3:c7:e7:9f:7b:af:27:b4:c6:66:9f:
0e:c5:dd:13:f9:cb:7b:6e:f4:7d:1b:46:f2:01:5a:27:6c:7f:
ea:a2:b1:85:6c:46:d1:8a:46:56:20:fe:ba:e0:a7:8d:8d:32:
ba:6f:83:b4:ac:d8:0f:33:0f:78:87:13:5f:22:d1:d2:ed:87:
a2:3a:36:8a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTkxMUMxMTAvBgNVBAUTKEY0NTdFRjhDMTlBQTA5NzZDRTA0NTlBNUZGNzA5QzVE
Q0E0RkM3RDYwHhcNMjUwMTMxMTQyMjM4WhcNMjUwMjA3MTQyMjM4WjAYMRYwFAYD
VQQDEw02NzljZGNhZS1jOTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp/nZpxztCnw/JYZi2hEK1zxD9HhtOCSRFx/NkQLPsEeFvvFSEEyZ3uBAoTrR
NObAO1bNxK2Mg5CziK6NZvZfnh0D2Igk7yFaEJKMXjMuCgoIanFZvWFYMS5FQfaq
kpiSZvvcAkO/03hMigz1JtE+AhM/m4cBVvyFnch0HEzs9Zr/zBSi7wC8HZF26fPy
3H1fO0BOUGTPdOC6RJRXBQNqLeECq/b6eL083H570A6fHeVlJtrwQxqx1d82PIex
yj3j1Y0E7NBG9IhJheXPKRu4qrEvyDeBNur2TUuRYb3R0QVAWP0qCpng/yWjJCTI
n0UZz7NWt82lSrcQb6DAnZspZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/xx0OX
qK231e2i6SSxtxhBUKawMB8GA1UdIwQYMBaAFPRX74wZqgl2zgRZpf9wnF3KT8fW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTExQy9CQkM1NEJBNDFE
ODMxMUUyOEU3RTJERDkwOEIwMkNEMi85RmZ2akJtcUNYYk9CRm1sXzNDY1hjcFB4
OVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlGZnZqQm1xQ1hiT0JGbWxfM0NjWGNwUHg5WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OTExQy9CQkM1NEJBNDFEODMxMUUyOEU3RTJERDkwOEIwMkNEMi85RmZ2akJtcUNY
Yk9CRm1sXzNDY1hjcFB4OVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBSO/VRUQQ+uhabvlLJ/haLAG7IjukvluLAXIBV805OEE0o6d6gy1QZ
cYnZNYq72YtuW42IUj89LEuBJzuH2TDlzX4x8ucY2YmJVhklA51A+wV68VlCJpGQ
JURZn3MHQf41WPFmwIUKPF/et7JU7y2owIORcgeUqQNk+SrhKvzyE6LvqaWaNIsq
zbWCpiZ+xJYBlEQ1Pfc4YCSYmQFQ+odWZsEMj+szHzGV0evc4l/0taOi++j9Kecm
tqo1w8fnn3uvJ7TGZp8Oxd0T+ct7bvR9G0byAVonbH/qorGFbEbRikZWIP664KeN
jTK6b4O0rNgPMw94hxNfItHS7YeiOjaK
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:16 2025 by rpki-client