Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft
File: 1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft (raw, json)
Hash identifier: OdHhkmKMyhAYQLVUopK8oCvcHAVAQTBJF48ky/RSOXo=
Subject key identifier: 46:46:CD:A6:81:C2:30:CE:EB:11:11:B2:B3:F0:EC:69:2F:84:BB:3D
Authority key identifier: D4:39:EE:D6:0D:31:97:09:87:24:74:B9:07:06:63:04:73:B6:DE:5E
Certificate issuer: /CN=A911A70E/serialNumber=D439EED60D319709872474B90706630473B6DE5E
Certificate serial: 018E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft
Manifest number: 0184
Signing time: Fri 31 Jan 2025 03:01:24 +0000
Manifest this update: Fri 31 Jan 2025 03:01:23 +0000
Manifest next update: Fri 07 Feb 2025 03:01:23 +0000
Files and hashes: 1: 1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl (hash: y99o/PMPVupI6C2pnwDxAq/CD3IpIkGEGjXqOYP7+Yg=)
2: 5169DA6EA05D11ED9406DE26C4F9AE02.roa (hash: ubMDKoV/0Mf8cskkFN+EzNxMhabm1KL1nBOoaD8bcg8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398 (0x18e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A70E/serialNumber=D439EED60D319709872474B90706630473B6DE5E
Validity
Not Before: Jan 31 03:01:23 2025 GMT
Not After : Feb 7 03:01:23 2025 GMT
Subject: CN=679c3d04-c4e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:7c:51:5b:62:1c:ae:ea:5f:6d:5a:9f:14:
ce:61:43:8f:9f:96:21:9b:6c:8c:21:6a:f4:20:08:
cc:45:8a:d9:3e:5a:a4:f5:82:62:35:fb:5f:35:45:
11:8a:6d:29:df:7f:c8:63:2a:64:3f:50:f6:4f:57:
8b:26:92:b5:c8:c8:3c:d5:34:d4:a7:42:fc:fe:ed:
22:d4:54:a2:29:6e:42:e5:f8:3d:3c:37:26:6e:64:
95:00:f3:92:1d:90:12:cc:67:6d:6a:0f:87:4f:a7:
ef:74:c2:62:fe:99:2d:31:5e:22:2a:13:8f:56:8e:
6f:3a:57:0e:83:51:c2:69:7a:b1:d1:d2:f8:5e:18:
51:de:d0:20:18:1d:aa:11:a2:0c:02:b3:31:13:5c:
b1:75:e9:ee:5e:a8:52:d8:f4:a2:77:cc:48:d0:3e:
59:91:2a:e8:92:15:67:1f:51:f9:78:e3:86:3d:e6:
e7:3b:5a:2d:62:5d:3a:44:e3:1f:52:6d:70:00:e4:
b5:0a:74:a7:5e:e3:1a:c0:54:c1:7e:b7:0f:b6:8e:
c2:16:4e:bf:46:c6:8a:5a:27:ad:b5:47:47:d9:95:
69:8d:05:17:a8:9d:ae:c8:b0:c7:87:4f:42:6d:06:
57:ae:24:94:57:90:04:f0:3a:d4:ec:c5:fe:8a:c7:
53:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:46:CD:A6:81:C2:30:CE:EB:11:11:B2:B3:F0:EC:69:2F:84:BB:3D
X509v3 Authority Key Identifier:
keyid:D4:39:EE:D6:0D:31:97:09:87:24:74:B9:07:06:63:04:73:B6:DE:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:70:c4:01:68:f0:44:c4:88:ae:b3:b1:b4:87:f7:48:60:62:
65:3b:c5:9a:2f:e4:81:cb:77:d7:94:80:dd:c1:5c:3f:d7:91:
0f:9d:ee:22:e4:18:f0:e0:2f:13:51:ae:9f:a4:b2:b1:16:51:
07:d3:cd:12:5e:cf:bc:24:68:d6:f1:94:22:6a:67:5b:ad:57:
87:ca:2f:94:f6:ed:37:de:d5:5c:34:c4:7a:64:d2:a1:d4:55:
bb:93:c3:f0:51:3a:8f:f9:e4:c4:8e:64:d0:f9:12:64:d1:4b:
4f:67:ad:a0:2a:c5:c5:26:e2:41:20:d3:d9:33:2c:d3:cf:e5:
78:73:24:84:2c:08:08:2f:24:6f:70:d0:5a:4f:b7:09:c8:60:
89:7e:cf:59:42:40:b8:ca:10:5d:ad:c6:2d:e5:87:8c:86:e6:
9e:df:1e:cb:b8:0a:d7:c0:56:94:bd:ff:94:6d:6d:6a:35:cb:
4a:21:05:84:62:68:4b:f4:e6:aa:6b:26:71:ab:2f:98:ef:ce:
c0:54:3e:f1:2b:25:af:9a:08:8d:2b:0f:bf:03:69:4d:50:f4:
b3:27:5d:a5:00:9e:5b:ce:d8:5a:65:a0:09:cb:19:ce:18:e8:
b3:40:42:0f:d0:08:fc:6d:ba:eb:37:2d:5a:83:a2:77:12:56:
be:0e:c1:25
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUE3MEUxMTAvBgNVBAUTKEQ0MzlFRUQ2MEQzMTk3MDk4NzI0NzRCOTA3MDY2MzA0
NzNCNkRFNUUwHhcNMjUwMTMxMDMwMTIzWhcNMjUwMjA3MDMwMTIzWjAYMRYwFAYD
VQQDEw02NzljM2QwNC1jNGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu+d8UVtiHK7qX21anxTOYUOPn5Yhm2yMIWr0IAjMRYrZPlqk9YJiNftfNUUR
im0p33/IYypkP1D2T1eLJpK1yMg81TTUp0L8/u0i1FSiKW5C5fg9PDcmbmSVAPOS
HZASzGdtag+HT6fvdMJi/pktMV4iKhOPVo5vOlcOg1HCaXqx0dL4XhhR3tAgGB2q
EaIMArMxE1yxdenuXqhS2PSid8xI0D5ZkSrokhVnH1H5eOOGPebnO1otYl06ROMf
Um1wAOS1CnSnXuMawFTBfrcPto7CFk6/RsaKWiettUdH2ZVpjQUXqJ2uyLDHh09C
bQZXriSUV5AE8DrU7MX+isdTAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZGzaaB
wjDO6xERsrPw7GkvhLs9MB8GA1UdIwQYMBaAFNQ57tYNMZcJhyR0uQcGYwRztt5e
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTcwRS8wMDA4M0ZBQzlE
NTcxMUVEOUY5ODk1MzBDNEY5QUUwMi8xRG51MWcweGx3bUhKSFM1QndaakJITzIz
bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFEbnUxZzB4bHdtSEpIUzVCd1pqQkhPMjNsNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QTcwRS8wMDA4M0ZBQzlENTcxMUVEOUY5ODk1MzBDNEY5QUUwMi8xRG51MWcweGx3
bUhKSFM1QndaakJITzIzbDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA0cMQBaPBExIius7G0h/dIYGJlO8WaL+SBy3fXlIDdwVw/15EPne4i
5Bjw4C8TUa6fpLKxFlEH080SXs+8JGjW8ZQiamdbrVeHyi+U9u033tVcNMR6ZNKh
1FW7k8PwUTqP+eTEjmTQ+RJk0UtPZ62gKsXFJuJBINPZMyzTz+V4cySELAgILyRv
cNBaT7cJyGCJfs9ZQkC4yhBdrcYt5YeMhuae3x7LuArXwFaUvf+UbW1qNctKIQWE
YmhL9OaqayZxqy+Y787AVD7xKyWvmgiNKw+/A2lNUPSzJ12lAJ5bzthaZaAJyxnO
GOizQEIP0Aj8bbrrNy1ag6J3Ela+DsEl
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:22 2025 by rpki-client