Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft
File: cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft (raw, json)
Hash identifier: SK9FgkaPiqLAxL4Np03hY8hXshRPGT60n0aq82PigZE=
Subject key identifier: CE:C4:2C:F4:0C:89:E0:88:50:FE:98:8B:31:76:39:6F:03:08:28:9F
Authority key identifier: 71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6
Certificate issuer: /CN=A911F627/serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6
Certificate serial: 0126
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft
Manifest number: 0124
Signing time: Fri 31 Jan 2025 03:48:25 +0000
Manifest this update: Fri 31 Jan 2025 03:48:25 +0000
Manifest next update: Fri 07 Feb 2025 03:48:25 +0000
Files and hashes: 1: cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl (hash: /b36CnNWG0t3nLHxR8jYZlQmQawsIk6+4bmp5HLlTZk=)
2: C001E5861FCC11EEB409C35EC4F9AE02.roa (hash: HsjfDSOih06ECrmd3NlukL0cYpkEm4olWRK90K810ck=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294 (0x126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F627/serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6
Validity
Not Before: Jan 31 03:48:25 2025 GMT
Not After : Feb 7 03:48:25 2025 GMT
Subject: CN=679c4809-3aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1c:95:dc:10:f8:c9:9c:84:a6:94:1a:3d:12:
41:4f:54:e2:e8:c7:93:33:4f:e9:c6:c6:af:c6:ac:
a4:a8:2f:c1:e7:a2:aa:30:18:2c:09:8b:b4:70:68:
dd:e6:94:c0:18:55:f6:a3:55:eb:9a:e8:77:ba:1d:
d3:1d:8f:fb:30:64:85:c2:4a:c7:94:bd:8b:1a:a4:
85:a2:15:a6:2d:f5:2b:1e:30:31:bb:f0:c1:60:ff:
22:cc:b4:57:73:34:2c:94:13:02:6d:ae:72:81:ba:
8f:e0:48:c1:59:33:e9:3d:73:48:4d:39:3d:d7:b2:
03:37:08:7e:36:55:ba:bb:3d:f7:1c:64:af:83:63:
57:d6:62:7f:43:92:87:22:57:26:02:06:e4:62:e8:
27:54:47:43:ca:05:02:c7:98:54:b6:c8:44:97:48:
2a:76:c7:10:46:d9:c8:5e:08:fa:f5:ae:66:41:3c:
85:16:8c:62:86:67:b7:d6:fa:d4:a4:c8:2c:9e:31:
29:38:91:82:48:bb:55:26:9f:b4:df:c5:a5:b7:1a:
51:95:b6:6b:20:b3:c3:9c:47:89:2c:ff:58:67:68:
83:a1:08:30:a3:df:27:f3:f1:d3:ee:37:02:78:92:
92:a7:18:91:cc:89:bf:b5:46:23:e2:b1:89:70:36:
c2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C4:2C:F4:0C:89:E0:88:50:FE:98:8B:31:76:39:6F:03:08:28:9F
X509v3 Authority Key Identifier:
keyid:71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:c8:ba:ff:0e:f1:aa:d8:0b:38:18:fb:b0:cd:79:f2:c4:ac:
bb:45:db:14:f4:df:fe:19:af:7b:4d:af:89:1f:e9:e0:4b:ea:
0e:85:35:ab:2a:a3:a9:81:5f:99:4b:57:45:0f:ac:f3:f4:fc:
30:a1:82:cc:da:bf:1a:75:8f:62:d9:e1:4f:72:ec:d0:dd:ee:
b8:29:88:43:ac:2e:9e:5e:f6:39:3b:fc:6d:1b:d5:ec:d5:62:
fb:5f:92:f7:bf:c2:b5:7d:f5:f5:fd:79:d4:79:a1:dc:28:5b:
21:85:f9:27:e0:84:b1:1f:25:cc:8b:3e:21:61:fc:c6:52:f1:
21:a2:f9:74:a2:7b:29:ac:df:12:1a:b2:57:f8:ea:ee:6d:08:
ec:bc:40:72:ef:5f:24:a5:79:14:53:87:ec:f5:fb:4a:20:a2:
62:aa:45:59:de:86:1f:c0:d5:85:20:cc:3a:a6:a4:d7:0f:4b:
93:b0:db:e3:ec:aa:dd:cd:7e:ea:1e:a7:fe:14:4f:6e:34:0a:
fa:61:51:d4:69:d1:09:aa:b3:dc:55:09:5b:2b:dd:a0:f1:19:
c9:46:22:3a:39:8d:77:ff:5f:81:1b:7a:5b:59:45:54:d2:d3:
93:82:87:ec:24:bb:ec:f6:67:1b:e3:6e:e2:97:4e:d5:31:2e:
b9:e5:d8:82
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUY2MjcxMTAvBgNVBAUTKDcxMTczRURBNzMwNUNDRkQxMEJENzhEODNBOTMzMEU4
Qzc2NDBERjYwHhcNMjUwMTMxMDM0ODI1WhcNMjUwMjA3MDM0ODI1WjAYMRYwFAYD
VQQDEw02NzljNDgwOS0zYWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5RyV3BD4yZyEppQaPRJBT1Ti6MeTM0/pxsavxqykqC/B56KqMBgsCYu0cGjd
5pTAGFX2o1Xrmuh3uh3THY/7MGSFwkrHlL2LGqSFohWmLfUrHjAxu/DBYP8izLRX
czQslBMCba5ygbqP4EjBWTPpPXNITTk917IDNwh+NlW6uz33HGSvg2NX1mJ/Q5KH
IlcmAgbkYugnVEdDygUCx5hUtshEl0gqdscQRtnIXgj69a5mQTyFFoxihme31vrU
pMgsnjEpOJGCSLtVJp+038WltxpRlbZrILPDnEeJLP9YZ2iDoQgwo98n8/HT7jcC
eJKSpxiRzIm/tUYj4rGJcDbCLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7ELPQM
ieCIUP6YizF2OW8DCCifMB8GA1UdIwQYMBaAFHEXPtpzBcz9EL142DqTMOjHZA32
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjYyNy80OTNEQTM2NjFG
QzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQMFF2WGpZT3BNdzZNZGtE
ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NSYy0ybk1GelAwUXZYallPcE13Nk1ka0RmWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RjYyNy80OTNEQTM2NjFGQzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQ
MFF2WGpZT3BNdzZNZGtEZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBxyLr/DvGq2As4GPuwzXnyxKy7RdsU9N/+Ga97Ta+JH+ngS+oOhTWr
KqOpgV+ZS1dFD6zz9PwwoYLM2r8adY9i2eFPcuzQ3e64KYhDrC6eXvY5O/xtG9Xs
1WL7X5L3v8K1ffX1/XnUeaHcKFshhfkn4ISxHyXMiz4hYfzGUvEhovl0onsprN8S
GrJX+OrubQjsvEBy718kpXkUU4fs9ftKIKJiqkVZ3oYfwNWFIMw6pqTXD0uTsNvj
7KrdzX7qHqf+FE9uNAr6YVHUadEJqrPcVQlbK92g8RnJRiI6OY13/1+BG3pbWUVU
0tOTgofsJLvs9mcb427il07VMS655diC
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:03:50 2025 by rpki-client