Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft
File: 4xZnlgSAzwfjwi15DeTiAe9wQNs.mft (raw, json)
Hash identifier: yyRqj3KOxQ0X7W+ZktmmlfXRqdmKHq8df6fo+eOMqB4=
Subject key identifier: AB:09:0F:22:F0:A1:9D:B5:B3:0F:DD:9A:9B:8B:09:81:B7:C1:CE:D5
Authority key identifier: E3:16:67:96:04:80:CF:07:E3:C2:2D:79:0D:E4:E2:01:EF:70:40:DB
Certificate issuer: /CN=A911B310/serialNumber=E31667960480CF07E3C22D790DE4E201EF7040DB
Certificate serial: 0179
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft
Manifest number: 0172
Signing time: Fri 31 Jan 2025 03:05:10 +0000
Manifest this update: Fri 31 Jan 2025 03:05:09 +0000
Manifest next update: Fri 07 Feb 2025 03:05:09 +0000
Files and hashes: 1: 4xZnlgSAzwfjwi15DeTiAe9wQNs.crl (hash: 1XthKj7OSzzs6LhsoxL4PeJaa1mXV4e6G12tHJRGC4w=)
2: B1335F1AC56A11ED9C305A33C4F9AE02.roa (hash: 89tg93/qvyRfNlsV5jj75ONUo2PDbucb+SsFfLo6D58=)
3: F2A9D4BAC36211ED9D79ED6FC4F9AE02.roa (hash: XWjLFsGDfe+yx8HJSv7/TrbqDPkINeE4w88NW6FVyf4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 377 (0x179)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B310/serialNumber=E31667960480CF07E3C22D790DE4E201EF7040DB
Validity
Not Before: Jan 31 03:05:09 2025 GMT
Not After : Feb 7 03:05:09 2025 GMT
Subject: CN=679c3de5-da91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fc:ee:ea:b8:4a:ba:fc:21:c7:a7:00:77:ad:
51:63:10:c5:cd:96:50:e8:54:5d:a0:c5:f1:b4:68:
cf:9f:a8:62:0c:44:b7:fc:55:05:b0:a6:37:2c:b8:
ee:62:a0:b3:02:86:98:68:6b:81:df:32:7e:0d:9c:
ca:ee:40:d5:41:00:6d:d8:f6:b6:90:29:61:e7:60:
a6:01:b4:67:23:f1:6e:c8:78:d6:2f:13:e1:01:f0:
25:1f:0a:6e:ab:1c:62:a8:18:b6:68:91:df:e9:06:
27:ef:61:ae:e3:85:34:0a:22:57:38:bb:7b:73:f1:
24:dc:3f:5b:df:78:60:cf:48:58:76:b1:81:b8:28:
a3:79:cf:43:92:5c:18:40:fc:5a:59:a2:34:4d:2e:
f5:af:4e:c7:e0:05:1c:c7:96:d2:ad:0a:f1:4b:23:
5a:4e:21:9e:e0:bb:e1:eb:db:cc:07:98:db:c8:05:
f8:ba:a3:c4:ca:20:50:9f:fd:a7:e1:60:87:cc:f7:
99:b7:7a:3c:bb:cc:4a:b2:22:3c:16:e5:80:1d:be:
cd:d7:68:fe:a4:36:50:81:9e:d5:7b:95:3a:24:2c:
8b:86:2e:64:ec:5c:e6:8a:30:5d:1e:79:dc:b6:84:
f9:42:9f:14:3c:75:b8:9e:27:27:42:d4:70:13:66:
97:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:09:0F:22:F0:A1:9D:B5:B3:0F:DD:9A:9B:8B:09:81:B7:C1:CE:D5
X509v3 Authority Key Identifier:
keyid:E3:16:67:96:04:80:CF:07:E3:C2:2D:79:0D:E4:E2:01:EF:70:40:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:42:0f:98:8d:16:66:d1:af:bf:9f:82:b6:70:ff:2c:8e:87:
b5:bf:ee:f2:e4:d8:24:3a:54:22:9d:c4:c6:bc:bc:df:86:9f:
7e:49:85:b2:2d:98:4a:33:2d:62:f8:61:20:90:7d:54:d9:fb:
65:6a:2b:c1:a6:2e:fb:f7:9f:e9:ff:55:9d:54:bc:b8:22:ee:
e4:ee:24:2f:5f:c0:5e:4f:f3:bc:03:2e:3b:3c:bc:96:d1:46:
47:d8:85:15:47:3a:b8:ac:96:54:fd:91:0f:4a:4b:61:c6:1d:
f6:ba:3d:4f:12:cf:65:9a:2c:56:21:37:49:fc:f2:6b:f7:02:
db:56:65:6d:72:e9:5a:cc:94:ec:5f:9f:93:ce:d9:95:38:4a:
2d:1b:df:5d:64:40:0f:26:ba:b8:23:88:b2:c7:8a:7d:b9:c9:
bd:77:5a:73:98:24:ae:9b:02:25:53:e0:9e:8d:b8:ec:fd:47:
c8:72:fc:57:c9:d8:94:37:e4:32:f2:c6:9e:9d:8a:f2:56:6a:
d7:7d:09:93:b4:ae:4c:b4:b0:da:3a:32:f0:8b:6e:2f:60:b0:
d7:11:cb:8a:c8:ed:81:f8:5b:eb:f3:28:bb:2d:39:62:90:50:
d8:b4:37:a9:48:e2:66:74:69:ec:aa:06:e2:0b:8d:05:88:00:
e4:7d:10:b9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUIzMTAxMTAvBgNVBAUTKEUzMTY2Nzk2MDQ4MENGMDdFM0MyMkQ3OTBERTRFMjAx
RUY3MDQwREIwHhcNMjUwMTMxMDMwNTA5WhcNMjUwMjA3MDMwNTA5WjAYMRYwFAYD
VQQDEw02NzljM2RlNS1kYTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu/zu6rhKuvwhx6cAd61RYxDFzZZQ6FRdoMXxtGjPn6hiDES3/FUFsKY3LLju
YqCzAoaYaGuB3zJ+DZzK7kDVQQBt2Pa2kClh52CmAbRnI/FuyHjWLxPhAfAlHwpu
qxxiqBi2aJHf6QYn72Gu44U0CiJXOLt7c/Ek3D9b33hgz0hYdrGBuCijec9DklwY
QPxaWaI0TS71r07H4AUcx5bSrQrxSyNaTiGe4Lvh69vMB5jbyAX4uqPEyiBQn/2n
4WCHzPeZt3o8u8xKsiI8FuWAHb7N12j+pDZQgZ7Ve5U6JCyLhi5k7FzmijBdHnnc
toT5Qp8UPHW4nicnQtRwE2aX2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKsJDyLw
oZ21sw/dmpuLCYG3wc7VMB8GA1UdIwQYMBaAFOMWZ5YEgM8H48IteQ3k4gHvcEDb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjMxMC8zRUJEMTdDMkFE
MTAxMUVEODU0QTNFMURDNEY5QUUwMi80eFpubGdTQXp3Zmp3aTE1RGVUaUFlOXdR
TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzR4Wm5sZ1NBendmandpMTVEZVRpQWU5d1FOcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QjMxMC8zRUJEMTdDMkFEMTAxMUVEODU0QTNFMURDNEY5QUUwMi80eFpubGdTQXp3
Zmp3aTE1RGVUaUFlOXdRTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAfQg+YjRZm0a+/n4K2cP8sjoe1v+7y5NgkOlQincTGvLzfhp9+SYWy
LZhKMy1i+GEgkH1U2ftlaivBpi7795/p/1WdVLy4Iu7k7iQvX8BeT/O8Ay47PLyW
0UZH2IUVRzq4rJZU/ZEPSkthxh32uj1PEs9lmixWITdJ/PJr9wLbVmVtculazJTs
X5+TztmVOEotG99dZEAPJrq4I4iyx4p9ucm9d1pzmCSumwIlU+Cejbjs/UfIcvxX
ydiUN+Qy8saenYryVmrXfQmTtK5MtLDaOjLwi24vYLDXEcuKyO2B+Fvr8yi7LTli
kFDYtDepSOJmdGnsqgbiC40FiADkfRC5
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:54:22 2025 by rpki-client