Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft
File: rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft (raw, json)
Hash identifier: GDRP/E15wzG1qtU66rntIAAB6nT/hzH4OpJqVBuSSKs=
Subject key identifier: 4D:30:F4:0D:6E:47:91:C0:77:36:DF:17:4B:26:22:F7:69:9D:0D:87
Authority key identifier: AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45
Certificate issuer: /CN=A9120974/serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145
Certificate serial: 101B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft
Manifest number: 1017
Signing time: Fri 31 Jan 2025 17:25:00 +0000
Manifest this update: Fri 31 Jan 2025 17:24:59 +0000
Manifest next update: Fri 07 Feb 2025 17:24:59 +0000
Files and hashes: 1: rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl (hash: LltIagEos3eq9uEj4MHtnsVsjpSRSW5igNZ4ojUA2U4=)
2: CBAED530FE6A11ECAB640344C4F9AE02.roa (hash: ICClcvVBKcFuPdfdFfNgviyTAzomOOoPWyOYhtZ5b7Q=)
3: 6B1B75BC756311EFB6C7E64CC4F9AE02.roa (hash: H1dTpSfdD/QgGNFcXeYoqv9nvsCcB8MXgkClUdfFMB4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4123 (0x101b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120974/serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145
Validity
Not Before: Jan 31 17:24:59 2025 GMT
Not After : Feb 7 17:24:59 2025 GMT
Subject: CN=679d076c-3055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f1:a3:b7:68:ac:c9:7d:39:2f:55:9b:34:46:
f1:91:31:59:89:ce:a7:71:68:8c:59:c0:ff:5e:86:
42:6e:43:0b:6c:ee:05:09:ed:73:6b:4a:95:fa:00:
78:f4:24:61:60:bb:65:da:87:67:fb:91:b5:38:af:
c3:29:28:65:50:9b:39:8b:38:c6:be:73:dd:ee:79:
d0:a9:b7:e6:d6:bd:ce:5e:bf:64:77:83:6e:d5:d2:
18:e9:49:d7:93:00:0d:d8:0c:eb:0a:a6:3f:bc:8c:
be:cd:d1:7b:86:8c:42:07:17:12:5d:d7:01:d4:0c:
3d:2e:45:ea:49:24:ad:1d:79:f3:65:b0:c0:f8:3c:
63:75:90:bd:f1:db:5c:2b:61:39:0c:9d:9c:2b:8e:
32:04:c2:7f:38:b1:e4:b1:ed:06:5d:5f:c5:7e:58:
af:53:db:05:02:c6:cb:b5:70:ba:a8:70:4e:56:6a:
1a:78:3b:63:35:a7:31:fc:55:40:39:eb:5b:0b:10:
6b:fa:f8:42:cc:54:a9:32:30:bd:4e:d3:20:8a:a2:
1f:39:fd:50:f2:bc:59:05:cb:f5:1b:57:09:03:dc:
7f:0c:26:95:4f:25:0f:ca:12:9e:d2:aa:10:91:ab:
33:19:0b:95:b4:e0:ff:e7:d4:66:75:95:61:a4:21:
45:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:30:F4:0D:6E:47:91:C0:77:36:DF:17:4B:26:22:F7:69:9D:0D:87
X509v3 Authority Key Identifier:
keyid:AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c4:40:58:26:69:67:5d:9e:af:e4:9b:c8:38:de:1b:78:21:
58:c5:a5:3a:69:59:fc:1d:f1:f6:77:00:d7:4f:71:d2:82:de:
c6:73:01:3f:1e:21:ef:f5:d1:03:a3:8b:cd:c0:b8:a7:41:bd:
ac:84:5f:9f:1c:4c:39:cc:7f:90:3a:46:cf:34:e6:77:7c:55:
99:0c:75:53:ab:99:69:b6:7d:d8:80:8b:d1:d7:0a:b3:e8:01:
16:75:05:d3:8d:36:20:29:ff:1b:c0:af:39:a6:d8:a6:e3:f9:
9e:cb:07:f2:94:cb:6d:3d:76:aa:18:30:58:80:68:a6:92:cc:
a9:1f:fc:36:e7:4f:8b:d1:46:6c:8d:fa:41:0a:55:db:8a:50:
9b:5b:f9:96:00:95:02:d7:df:5c:d5:b8:f0:f8:e1:3d:fd:c1:
3f:de:97:08:7d:45:aa:3f:60:c9:b3:fa:9b:48:b0:7e:a9:0d:
3b:33:be:a1:c5:69:0f:eb:33:05:21:b0:b7:88:e7:1e:f1:a8:
76:c3:0a:f9:ec:55:a0:db:f9:fb:70:6d:43:57:05:64:5a:65:
ca:44:c4:f0:e7:eb:ba:6b:ce:b2:2a:ca:a9:d3:08:3c:f2:cb:
bd:c1:e3:ef:2e:02:12:5d:80:17:50:bc:ab:96:7d:dd:a8:d7:
11:f0:34:30
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjA5NzQxMTAvBgNVBAUTKEFDODg2NDI2MzgyNEVERTM2NTVCOTk3NDJERkIzOUU4
ODNCQjkxNDUwHhcNMjUwMTMxMTcyNDU5WhcNMjUwMjA3MTcyNDU5WjAYMRYwFAYD
VQQDEw02NzlkMDc2Yy0zMDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqvGjt2isyX05L1WbNEbxkTFZic6ncWiMWcD/XoZCbkMLbO4FCe1za0qV+gB4
9CRhYLtl2odn+5G1OK/DKShlUJs5izjGvnPd7nnQqbfm1r3OXr9kd4Nu1dIY6UnX
kwAN2AzrCqY/vIy+zdF7hoxCBxcSXdcB1Aw9LkXqSSStHXnzZbDA+DxjdZC98dtc
K2E5DJ2cK44yBMJ/OLHkse0GXV/FflivU9sFAsbLtXC6qHBOVmoaeDtjNacx/FVA
OetbCxBr+vhCzFSpMjC9TtMgiqIfOf1Q8rxZBcv1G1cJA9x/DCaVTyUPyhKe0qoQ
kaszGQuVtOD/59RmdZVhpCFF9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE0w9A1u
R5HAdzbfF0smIvdpnQ2HMB8GA1UdIwQYMBaAFKyIZCY4JO3jZVuZdC37OeiDu5FF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9FMTA1QjNCQTNB
NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9ySWhrSmpnazdlTmxXNWwwTGZzNTZJTzdr
VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3JJaGtKamdrN2VObFc1bDBMZnM1NklPN2tVVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MDk3NC9FMTA1QjNCQTNBNDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9ySWhrSmpnazdl
TmxXNWwwTGZzNTZJTzdrVVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB7xEBYJmlnXZ6v5JvION4beCFYxaU6aVn8HfH2dwDXT3HSgt7GcwE/
HiHv9dEDo4vNwLinQb2shF+fHEw5zH+QOkbPNOZ3fFWZDHVTq5lptn3YgIvR1wqz
6AEWdQXTjTYgKf8bwK85ptim4/meywfylMttPXaqGDBYgGimksypH/w250+L0UZs
jfpBClXbilCbW/mWAJUC199c1bjw+OE9/cE/3pcIfUWqP2DJs/qbSLB+qQ07M76h
xWkP6zMFIbC3iOce8ah2wwr57FWg2/n7cG1DVwVkWmXKRMTw5+u6a86yKsqp0wg8
8su9wePvLgISXYAXULyrln3dqNcR8DQw
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:34:59 2025 by rpki-client