Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft
File: xq-SXz6kP06O56MUIYIWk7Gt9qE.mft (raw, json)
Hash identifier: EMWeKmUkQOiXQZ4Nr+BYAjwy0kElv3ZVKMyBkxzC1ck=
Subject key identifier: 2F:49:F0:C4:38:BB:A7:71:5A:6E:31:BC:BF:4C:D0:68:4C:DE:29:6D
Authority key identifier: C6:AF:92:5F:3E:A4:3F:4E:8E:E7:A3:14:21:82:16:93:B1:AD:F6:A1
Certificate issuer: /CN=A911E807/serialNumber=C6AF925F3EA43F4E8EE7A31421821693B1ADF6A1
Certificate serial: 063F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft
Manifest number: 0637
Signing time: Thu 30 Jan 2025 22:32:20 +0000
Manifest this update: Thu 30 Jan 2025 22:32:19 +0000
Manifest next update: Thu 06 Feb 2025 22:32:19 +0000
Files and hashes: 1: xq-SXz6kP06O56MUIYIWk7Gt9qE.crl (hash: OIKFqr3qDikc7FODazJU6qJ/Q1jncQkChR5SCgwHb6c=)
2: 1A20AAF27BD311EBA6617987C4F9AE02.roa (hash: 6eHddETss++N0efl0wYCBKU3NII6SFsuAEjJL0+ySL4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1599 (0x63f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E807/serialNumber=C6AF925F3EA43F4E8EE7A31421821693B1ADF6A1
Validity
Not Before: Jan 30 22:32:19 2025 GMT
Not After : Feb 6 22:32:19 2025 GMT
Subject: CN=679bfdf4-71be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:27:ed:ee:5d:02:26:33:78:dd:30:f0:e4:fd:
c1:a8:22:f9:fd:69:91:10:30:6a:84:e5:48:b9:98:
88:a6:78:87:1e:f3:13:82:7b:66:dd:c2:e7:20:b7:
59:d2:b5:39:c8:73:3a:0d:d5:ee:82:4d:54:c7:b0:
d7:5e:34:46:e9:7c:c2:03:fe:92:3b:f5:f5:53:7e:
f0:0a:ca:45:d1:b5:98:59:8f:81:a4:a4:30:71:1f:
3f:59:6e:36:6c:ba:67:86:9d:af:f3:73:3f:13:37:
62:35:17:7d:f7:2d:3d:33:fd:9e:46:0f:4d:96:28:
d9:5d:4f:c3:2e:a3:b0:14:50:c4:61:f0:bf:5c:08:
64:e2:8e:48:77:d9:5e:ec:fc:40:de:6f:d8:51:4c:
08:06:6a:d1:c7:a4:a9:9f:01:94:da:4b:cf:9c:56:
b6:0f:09:48:ed:19:8a:a9:77:57:6c:82:d1:e5:94:
6d:97:2b:9e:65:9e:74:1d:96:ac:14:0f:c3:b7:98:
10:0f:d3:8e:af:1a:f6:17:0c:ce:a8:1f:b3:9a:29:
75:34:7d:0f:41:ed:f8:9b:1d:fb:b8:95:16:93:6b:
a6:43:b3:c9:6c:aa:7a:81:04:29:d5:a0:f0:2d:c2:
dc:79:af:3b:1c:88:50:26:37:31:81:f1:01:57:4b:
39:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:49:F0:C4:38:BB:A7:71:5A:6E:31:BC:BF:4C:D0:68:4C:DE:29:6D
X509v3 Authority Key Identifier:
keyid:C6:AF:92:5F:3E:A4:3F:4E:8E:E7:A3:14:21:82:16:93:B1:AD:F6:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:02:42:67:9e:26:76:f4:39:8a:2b:ec:56:f6:42:c5:ce:bf:
c4:34:e8:48:47:50:3a:f4:2e:03:a0:e3:e6:ba:06:66:e5:a6:
b1:e8:88:93:3d:b7:84:48:d5:dc:94:fc:ee:64:28:d0:73:1a:
18:66:cc:f1:b0:ce:ce:6f:db:ac:1c:ee:23:14:7d:09:4c:a2:
27:9a:6b:d6:f6:4d:1e:2e:82:05:95:20:2f:bc:a2:7f:79:6f:
ab:26:5d:c3:6e:e8:f7:8f:a3:cf:96:b3:f7:b8:1c:1a:84:6f:
d2:37:a7:e2:2e:bf:58:f4:42:b4:d1:e2:c1:d0:e9:36:e2:3b:
86:2a:2a:d1:b3:ca:b4:96:31:44:8a:ac:54:55:db:46:81:8b:
e7:d6:06:50:23:f2:e4:22:01:f4:f4:c7:6f:76:07:66:5c:a6:
e6:56:5e:06:cf:f1:2a:e8:3e:83:aa:f8:17:aa:7c:7c:36:e0:
9f:85:49:26:f6:f1:ab:17:d6:dd:ca:8e:ae:70:84:6b:32:5a:
c3:78:9b:ae:3b:c3:d6:38:46:08:04:34:39:f8:db:7b:96:56:
d5:8c:b8:69:6f:af:ec:c3:5a:fd:e6:af:a7:1e:0b:bd:13:ca:
d9:1d:47:18:87:f2:e4:b6:0a:a6:e2:40:f8:af:b7:d1:2d:2d:
f6:7d:a7:0e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUU4MDcxMTAvBgNVBAUTKEM2QUY5MjVGM0VBNDNGNEU4RUU3QTMxNDIxODIxNjkz
QjFBREY2QTEwHhcNMjUwMTMwMjIzMjE5WhcNMjUwMjA2MjIzMjE5WjAYMRYwFAYD
VQQDEw02NzliZmRmNC03MWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+ift7l0CJjN43TDw5P3BqCL5/WmREDBqhOVIuZiIpniHHvMTgntm3cLnILdZ
0rU5yHM6DdXugk1Ux7DXXjRG6XzCA/6SO/X1U37wCspF0bWYWY+BpKQwcR8/WW42
bLpnhp2v83M/EzdiNRd99y09M/2eRg9NlijZXU/DLqOwFFDEYfC/XAhk4o5Id9le
7PxA3m/YUUwIBmrRx6SpnwGU2kvPnFa2DwlI7RmKqXdXbILR5ZRtlyueZZ50HZas
FA/Dt5gQD9OOrxr2FwzOqB+zmil1NH0PQe34mx37uJUWk2umQ7PJbKp6gQQp1aDw
LcLcea87HIhQJjcxgfEBV0s5NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9J8MQ4
u6dxWm4xvL9M0GhM3iltMB8GA1UdIwQYMBaAFMavkl8+pD9OjuejFCGCFpOxrfah
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTgwNy8yNjk2RjZDNjdC
MzYxMUVCQkU4NzY0NjFDNEY5QUUwMi94cS1TWHo2a1AwNk81Nk1VSVlJV2s3R3Q5
cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hxLVNYejZrUDA2TzU2TVVJWUlXazdHdDlxRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RTgwNy8yNjk2RjZDNjdCMzYxMUVCQkU4NzY0NjFDNEY5QUUwMi94cS1TWHo2a1Aw
Nk81Nk1VSVlJV2s3R3Q5cUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCsAkJnniZ29DmKK+xW9kLFzr/ENOhIR1A69C4DoOPmugZm5aax6IiT
PbeESNXclPzuZCjQcxoYZszxsM7Ob9usHO4jFH0JTKInmmvW9k0eLoIFlSAvvKJ/
eW+rJl3Dbuj3j6PPlrP3uBwahG/SN6fiLr9Y9EK00eLB0Ok24juGKirRs8q0ljFE
iqxUVdtGgYvn1gZQI/LkIgH09MdvdgdmXKbmVl4Gz/Eq6D6DqvgXqnx8NuCfhUkm
9vGrF9bdyo6ucIRrMlrDeJuuO8PWOEYIBDQ5+Nt7llbVjLhpb6/sw1r95q+nHgu9
E8rZHUcYh/Lktgqm4kD4r7fRLS32facO
-----END CERTIFICATE-----
Generated at Mon Apr 28 04:22:13 2025 by rpki-client