Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft
File: CStU0vnpbT_OHwwNuzGxuCyNLOA.mft (raw, json)
Hash identifier: giZBGrAaTakPlI+JW7axAWazjTPIeZsfyfj91wb+PKE=
Subject key identifier: 18:BE:FD:76:B5:BB:20:E3:01:B2:DC:88:0B:09:D7:66:DC:0D:45:A7
Authority key identifier: 09:2B:54:D2:F9:E9:6D:3F:CE:1F:0C:0D:BB:31:B1:B8:2C:8D:2C:E0
Certificate issuer: /CN=A9122EA2/serialNumber=092B54D2F9E96D3FCE1F0C0DBB31B1B82C8D2CE0
Certificate serial: 019F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CStU0vnpbT_OHwwNuzGxuCyNLOA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft
Manifest number: 0194
Signing time: Fri 31 Jan 2025 02:50:08 +0000
Manifest this update: Fri 31 Jan 2025 02:50:08 +0000
Manifest next update: Fri 07 Feb 2025 02:50:08 +0000
Files and hashes: 1: CStU0vnpbT_OHwwNuzGxuCyNLOA.crl (hash: 3A4imrrT3KZnEFZeCtUevMN20ga5mN0Q3kVS3DHgmJw=)
2: C20F71E0992A11EEBDE4AF84C4F9AE02.roa (hash: OYx0ivaLSuUbR/65DlkjyPYiwNzBJusc4fYNblQt2KA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 415 (0x19f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122EA2/serialNumber=092B54D2F9E96D3FCE1F0C0DBB31B1B82C8D2CE0
Validity
Not Before: Jan 31 02:50:08 2025 GMT
Not After : Feb 7 02:50:08 2025 GMT
Subject: CN=679c3a60-9e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:45:00:4f:5c:22:1c:c4:1b:10:a3:e3:bb:6c:
c2:d5:c2:70:76:69:a3:dd:8b:97:a6:03:16:f4:30:
bf:89:fd:27:36:4d:0c:9b:8a:7e:06:0c:de:aa:14:
bf:62:87:e3:48:1e:f3:d8:2a:79:28:00:ee:03:7b:
db:05:67:8e:5d:03:b8:bc:a0:36:c6:ec:23:2b:b1:
21:4e:e8:0d:2d:b7:6a:b6:1e:c9:4c:8c:68:de:fe:
49:cb:a8:19:6b:45:2c:10:b5:1f:ec:ec:36:ab:81:
41:97:de:4f:b2:ec:31:54:1a:1a:12:1f:2e:c6:50:
a1:e1:85:46:f6:2f:0a:a9:11:1f:51:a4:15:c9:11:
d4:b3:5e:64:2d:8c:3e:c9:7f:b4:fb:1d:fc:22:73:
2e:f9:14:cd:e7:42:85:11:92:81:66:b1:a3:d6:0c:
1e:71:d9:02:5e:fe:a8:f4:fe:0e:1d:df:c5:17:94:
4f:19:a3:c6:a0:25:b1:f4:8a:e2:1c:36:e6:77:23:
de:93:9d:1a:b8:8f:98:f2:97:b4:52:40:bd:68:d2:
33:be:36:26:87:b4:ba:07:17:ba:aa:3a:e7:78:e3:
c8:3a:e9:76:1a:29:83:33:55:04:50:1c:b2:e0:14:
ea:09:9b:d4:d6:33:6b:c7:ce:e5:b1:11:70:d2:c6:
33:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BE:FD:76:B5:BB:20:E3:01:B2:DC:88:0B:09:D7:66:DC:0D:45:A7
X509v3 Authority Key Identifier:
keyid:09:2B:54:D2:F9:E9:6D:3F:CE:1F:0C:0D:BB:31:B1:B8:2C:8D:2C:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CStU0vnpbT_OHwwNuzGxuCyNLOA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e1:3a:6a:44:2b:a8:70:67:2c:33:65:53:b9:e6:11:12:05:fb:
ce:77:43:1d:6b:0d:f1:c3:79:c2:4e:57:1d:46:77:6e:c9:91:
46:66:6c:9b:78:77:f5:b0:56:ec:ae:92:76:84:e7:56:45:9e:
89:29:7d:0f:29:ee:16:5d:64:6b:a7:85:40:12:07:74:af:cd:
49:56:f9:70:01:26:16:9e:e3:16:d4:ce:9c:51:4e:72:ec:1d:
c6:af:45:49:d2:7a:fc:f8:2c:34:6e:7d:66:28:9c:0f:75:54:
bc:60:81:6e:80:27:40:4a:b5:71:7b:fd:77:96:9e:0f:b5:38:
d3:db:64:de:47:ae:57:5e:d7:89:01:73:53:01:d8:84:ac:1e:
ac:a1:4f:ef:b0:bd:83:3b:4d:8a:cb:9b:8b:21:1c:28:ea:79:
03:83:44:51:18:e5:4b:7c:3d:cd:79:7f:34:93:ac:69:58:19:
f5:37:c9:bb:f1:dd:61:75:02:6d:02:87:a5:34:17:69:b7:00:
b2:13:4d:95:63:04:88:36:31:9a:d7:9c:5a:33:2e:e5:b3:af:
a7:68:35:b5:35:d2:be:3e:29:76:e2:05:15:f7:f3:41:8d:00:
77:82:9e:79:c2:a5:44:67:98:68:3c:90:e8:62:bb:3f:f1:bf:
e2:17:78:9c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjJFQTIxMTAvBgNVBAUTKDA5MkI1NEQyRjlFOTZEM0ZDRTFGMEMwREJCMzFCMUI4
MkM4RDJDRTAwHhcNMjUwMTMxMDI1MDA4WhcNMjUwMjA3MDI1MDA4WjAYMRYwFAYD
VQQDEw02NzljM2E2MC05ZThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8UUAT1wiHMQbEKPju2zC1cJwdmmj3YuXpgMW9DC/if0nNk0Mm4p+BgzeqhS/
YofjSB7z2Cp5KADuA3vbBWeOXQO4vKA2xuwjK7EhTugNLbdqth7JTIxo3v5Jy6gZ
a0UsELUf7Ow2q4FBl95PsuwxVBoaEh8uxlCh4YVG9i8KqREfUaQVyRHUs15kLYw+
yX+0+x38InMu+RTN50KFEZKBZrGj1gwecdkCXv6o9P4OHd/FF5RPGaPGoCWx9Iri
HDbmdyPek50auI+Y8pe0UkC9aNIzvjYmh7S6Bxe6qjrneOPIOul2GimDM1UEUByy
4BTqCZvU1jNrx87lsRFw0sYzLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBi+/Xa1
uyDjAbLciAsJ12bcDUWnMB8GA1UdIwQYMBaAFAkrVNL56W0/zh8MDbsxsbgsjSzg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkVBMi8xNTI1MzQxNDg1
NjMxMUVEODJGQjEwMkRDNEY5QUUwMi9DU3RVMHZucGJUX09Id3dOdXpHeHVDeU5M
T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NTdFUwdm5wYlRfT0h3d051ekd4dUN5TkxPQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MkVBMi8xNTI1MzQxNDg1NjMxMUVEODJGQjEwMkRDNEY5QUUwMi9DU3RVMHZucGJU
X09Id3dOdXpHeHVDeU5MT0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDhOmpEK6hwZywzZVO55hESBfvOd0Mdaw3xw3nCTlcdRnduyZFGZmyb
eHf1sFbsrpJ2hOdWRZ6JKX0PKe4WXWRrp4VAEgd0r81JVvlwASYWnuMW1M6cUU5y
7B3Gr0VJ0nr8+Cw0bn1mKJwPdVS8YIFugCdASrVxe/13lp4PtTjT22TeR65XXteJ
AXNTAdiErB6soU/vsL2DO02Ky5uLIRwo6nkDg0RRGOVLfD3NeX80k6xpWBn1N8m7
8d1hdQJtAoelNBdptwCyE02VYwSINjGa15xaMy7ls6+naDW1NdK+Pil24gUV9/NB
jQB3gp55wqVEZ5hoPJDoYrs/8b/iF3ic
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:31:33 2025 by rpki-client