Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft
File: a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft (raw, json)
Hash identifier: xYH6t6v/ikdypTD1bZ8QK3oRVkcobV43APLFgalDyac=
Subject key identifier: 3A:3E:69:93:4E:18:32:F7:8F:FC:65:7C:A7:8D:0B:0E:1B:BD:A6:F9
Authority key identifier: 6B:57:09:32:90:D1:1F:65:CF:B9:1F:12:12:C2:8C:F7:33:F9:C2:B5
Certificate issuer: /CN=A9120AAA/serialNumber=6B57093290D11F65CFB91F1212C28CF733F9C2B5
Certificate serial: FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1cJMpDRH2XPuR8SEsKM9zP5wrU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft
Manifest number: FD
Signing time: Fri 31 Jan 2025 04:14:31 +0000
Manifest this update: Fri 31 Jan 2025 04:14:31 +0000
Manifest next update: Fri 07 Feb 2025 04:14:31 +0000
Files and hashes: 1: a1cJMpDRH2XPuR8SEsKM9zP5wrU.crl (hash: sILSi3eDpt64qMknsdm8vExbz+VH1U+OtE2IurRsVDc=)
2: 8A389AC25C4811EEBE1CF06BC4F9AE02.roa (hash: 9QttLF7HMnJDx+HbQAXC0YtWXOJ+pz+cgouITeRm1GU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255 (0xff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120AAA/serialNumber=6B57093290D11F65CFB91F1212C28CF733F9C2B5
Validity
Not Before: Jan 31 04:14:31 2025 GMT
Not After : Feb 7 04:14:31 2025 GMT
Subject: CN=679c4e27-97ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b4:6b:68:dc:56:c0:d7:5d:05:11:b5:24:8b:
59:a9:29:f8:18:d1:c2:e3:b2:ce:06:31:ef:6f:b7:
6c:4d:50:b6:7c:36:07:59:ee:90:a0:6a:49:d6:31:
b4:da:aa:31:28:f8:df:c2:60:84:38:b5:4a:11:80:
9e:bf:5e:67:00:bf:3a:7e:ad:51:af:b3:f2:91:39:
a0:2a:2b:6e:c8:c1:0a:21:21:4a:f1:2e:b7:c0:df:
21:e1:a0:4e:81:07:14:cc:fb:a1:d3:7e:40:d4:5a:
62:e7:80:c9:74:bf:ff:64:7d:4c:5b:a1:21:d8:1b:
01:e8:a7:18:4a:85:a5:bf:2d:f6:44:ce:48:08:dd:
a0:2e:19:07:b1:bb:54:50:85:ba:c5:9c:63:32:dd:
e5:d8:3e:01:94:03:2e:12:34:c0:fe:96:88:b2:e4:
13:ed:17:bb:83:1f:67:56:b6:b6:e5:17:30:d7:b8:
10:a8:20:9c:93:34:2d:66:b3:48:cc:b5:45:a9:c1:
32:24:22:46:d6:37:3c:ce:6b:e8:95:e8:46:05:3e:
c3:e3:92:5d:42:cb:05:a1:de:e7:b6:eb:45:31:b6:
28:fd:5e:e0:9f:eb:5c:4e:db:02:a0:37:43:35:14:
66:4e:06:a0:63:54:d8:ab:bd:c7:b3:75:b5:6d:75:
36:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3E:69:93:4E:18:32:F7:8F:FC:65:7C:A7:8D:0B:0E:1B:BD:A6:F9
X509v3 Authority Key Identifier:
keyid:6B:57:09:32:90:D1:1F:65:CF:B9:1F:12:12:C2:8C:F7:33:F9:C2:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1cJMpDRH2XPuR8SEsKM9zP5wrU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:cf:25:17:b8:21:bd:2b:f8:96:41:8c:9d:c3:e3:db:18:fc:
6c:80:14:92:1a:1a:64:7e:61:e8:45:80:73:97:81:b2:fa:0b:
b0:cf:a4:a3:57:79:30:82:f5:d9:9e:d1:4e:3f:8f:6d:7b:c6:
51:8e:96:ad:62:4f:51:d3:8d:8c:ff:58:b5:c7:3a:6a:43:8c:
45:7a:ed:0e:ac:60:f2:4b:be:93:26:46:f3:58:ce:bb:26:a5:
25:e3:fa:1f:26:c3:cf:fe:31:17:dc:63:ff:87:0f:8f:7c:2f:
b9:a4:21:33:a2:9e:41:ad:56:3f:47:32:f2:e0:dd:53:ef:d6:
b0:ff:1d:15:01:31:be:01:94:4a:66:03:e9:d8:0f:a7:2b:0d:
8c:fe:ec:3d:e8:93:ab:7f:8f:5a:8b:6d:0c:51:d5:d5:8d:ff:
ac:07:07:04:d6:b8:c3:c7:de:78:81:25:37:bd:45:05:a1:0a:
11:04:1f:0c:c2:22:5f:98:8d:3f:97:fb:e4:0e:1a:93:69:e6:
e0:12:1f:76:a7:5a:bd:32:7e:64:7d:eb:b9:44:0a:f7:04:c0:
2c:8f:4c:1f:88:84:3e:aa:1f:c0:69:90:0e:a2:b7:b3:00:a4:
cb:77:8d:ae:bb:8b:ec:a7:c1:f8:29:d5:7d:09:37:e7:72:f5:
ab:09:01:af
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjBBQUExMTAvBgNVBAUTKDZCNTcwOTMyOTBEMTFGNjVDRkI5MUYxMjEyQzI4Q0Y3
MzNGOUMyQjUwHhcNMjUwMTMxMDQxNDMxWhcNMjUwMjA3MDQxNDMxWjAYMRYwFAYD
VQQDEw02NzljNGUyNy05N2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvbRraNxWwNddBRG1JItZqSn4GNHC47LOBjHvb7dsTVC2fDYHWe6QoGpJ1jG0
2qoxKPjfwmCEOLVKEYCev15nAL86fq1Rr7PykTmgKituyMEKISFK8S63wN8h4aBO
gQcUzPuh035A1Fpi54DJdL//ZH1MW6Eh2BsB6KcYSoWlvy32RM5ICN2gLhkHsbtU
UIW6xZxjMt3l2D4BlAMuEjTA/paIsuQT7Re7gx9nVra25Rcw17gQqCCckzQtZrNI
zLVFqcEyJCJG1jc8zmvolehGBT7D45JdQssFod7ntutFMbYo/V7gn+tcTtsCoDdD
NRRmTgagY1TYq73Hs3W1bXU2vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDo+aZNO
GDL3j/xlfKeNCw4bvab5MB8GA1UdIwQYMBaAFGtXCTKQ0R9lz7kfEhLCjPcz+cK1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFBQS8wQ0E3N0M4MjVD
NDcxMUVFQUE5RkU5NjZDNEY5QUUwMi9hMWNKTXBEUkgyWFB1UjhTRXNLTTl6UDV3
clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ExY0pNcERSSDJYUHVSOFNFc0tNOXpQNXdyVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MEFBQS8wQ0E3N0M4MjVDNDcxMUVFQUE5RkU5NjZDNEY5QUUwMi9hMWNKTXBEUkgy
WFB1UjhTRXNLTTl6UDV3clUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA9zyUXuCG9K/iWQYydw+PbGPxsgBSSGhpkfmHoRYBzl4Gy+guwz6Sj
V3kwgvXZntFOP49te8ZRjpatYk9R042M/1i1xzpqQ4xFeu0OrGDyS76TJkbzWM67
JqUl4/ofJsPP/jEX3GP/hw+PfC+5pCEzop5BrVY/RzLy4N1T79aw/x0VATG+AZRK
ZgPp2A+nKw2M/uw96JOrf49ai20MUdXVjf+sBwcE1rjDx954gSU3vUUFoQoRBB8M
wiJfmI0/l/vkDhqTaebgEh92p1q9Mn5kfeu5RAr3BMAsj0wfiIQ+qh/AaZAOorez
AKTLd42uu4vsp8H4KdV9CTfncvWrCQGv
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:47:55 2025 by rpki-client