Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft
File: yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft (raw, json)
Hash identifier: LRI/dUsFRJcTV16vOC2Hcs22i+1znxQmYsgLBkW+RtU=
Subject key identifier: 44:AB:8B:95:9F:CB:3F:E8:45:1D:D9:C7:F2:96:45:F2:36:F6:D1:15
Authority key identifier: C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47
Certificate issuer: /CN=A912438F/serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47
Certificate serial: 0730
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft
Manifest number: 071F
Signing time: Thu 30 Jan 2025 21:47:09 +0000
Manifest this update: Thu 30 Jan 2025 21:47:08 +0000
Manifest next update: Thu 06 Feb 2025 21:47:08 +0000
Files and hashes: 1: yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl (hash: YuiU7Rmotg2S8iYoE+NeEv3tA2XO//fOdP3xFauCsLs=)
2: 5C95BDC0C12E11EEA47CBB59C4F9AE02.roa (hash: 3i/bsnBVCwTkaRt5VNWAWhHJ6/+t7BMJDdGcwpMXiuk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1840 (0x730)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912438F/serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47
Validity
Not Before: Jan 30 21:47:08 2025 GMT
Not After : Feb 6 21:47:08 2025 GMT
Subject: CN=679bf35c-59b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:95:07:c9:1c:c2:42:18:65:f6:9f:06:53:ec:
7c:b2:83:b1:e1:02:37:de:04:13:95:90:72:df:c5:
eb:d5:c2:e2:f2:18:db:51:86:2a:ea:ec:1b:54:39:
b8:28:33:c0:9a:9f:ea:4f:a9:df:91:6a:20:b3:08:
27:b5:2c:0e:36:04:e8:5a:bd:d5:a5:2a:6c:b9:1d:
14:7a:36:89:de:9f:f1:a0:e9:6d:a7:eb:46:73:cf:
11:9c:42:d2:ea:a5:60:5a:c2:f6:14:96:9b:87:ca:
79:dc:ca:7b:35:4f:3e:91:e9:1e:e7:14:01:bf:13:
a3:db:18:3e:0e:6b:77:1c:e9:5c:5c:7b:57:ad:c8:
35:f3:8d:c0:55:d0:d2:b0:26:d8:75:19:83:7a:69:
07:2f:79:12:9d:9a:68:96:17:bc:b9:93:82:d4:e4:
a6:08:d4:04:0e:d6:af:72:c5:76:87:ac:88:c7:dd:
97:56:0c:54:97:79:73:d8:44:c9:96:5c:48:a1:27:
48:03:68:dd:4e:9c:1a:a4:67:5f:57:29:c0:8b:1b:
92:73:bf:b3:a7:ea:4a:b6:5b:3b:a9:8d:9b:8b:66:
6d:00:8c:2e:e3:55:fd:b5:01:25:b3:10:99:05:35:
c9:51:16:94:0e:1e:58:43:7f:03:67:64:62:34:8f:
85:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AB:8B:95:9F:CB:3F:E8:45:1D:D9:C7:F2:96:45:F2:36:F6:D1:15
X509v3 Authority Key Identifier:
keyid:C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:04:d3:b3:5c:91:8a:ff:9f:1b:96:06:23:dc:c4:e4:99:b3:
08:2e:67:c3:72:58:ad:1f:b0:34:c8:42:f4:b8:d1:95:28:4b:
fc:af:8e:b2:c6:df:1f:9a:c2:ed:14:7a:56:0b:2a:69:95:60:
d8:98:fe:3e:7d:9b:fd:2a:f0:dc:10:b8:08:b4:eb:0b:c9:23:
de:54:bf:99:ee:74:fb:ec:d1:e0:20:5b:bb:2f:60:06:7f:94:
5f:79:16:e0:41:63:f2:d3:50:4b:b5:06:97:7c:f9:bc:04:e3:
d4:02:e3:5c:8b:6b:9a:54:72:37:fe:ff:34:75:70:c9:fa:91:
54:3b:8c:b7:d7:73:8e:08:e6:6b:30:6e:98:18:fe:e1:67:da:
e0:f2:0f:9a:9f:c7:15:3c:c4:54:81:a0:3d:94:1b:b5:73:64:
4b:d3:00:1b:b1:2e:81:6a:89:41:43:09:46:18:97:7a:75:c9:
bd:a1:8f:f0:b0:27:ef:82:52:b1:50:99:d4:c8:cd:ed:39:be:
97:fa:26:27:be:d0:3a:52:3e:15:00:49:23:70:11:af:9f:6b:
30:b3:90:d6:c5:e9:30:9d:9d:5d:3b:cd:2b:96:b2:fe:bd:0f:
13:23:24:26:cd:38:b9:8f:60:a5:bb:0f:ce:78:32:30:fe:e1:
cc:1a:d8:39
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQzOEYxMTAvBgNVBAUTKEM4ODhEMUVFRTA0QkVGM0U4MTVGMDlEREZBMTkxOTNE
Njk5QjRGNDcwHhcNMjUwMTMwMjE0NzA4WhcNMjUwMjA2MjE0NzA4WjAYMRYwFAYD
VQQDEw02NzliZjM1Yy01OWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxpUHyRzCQhhl9p8GU+x8soOx4QI33gQTlZBy38Xr1cLi8hjbUYYq6uwbVDm4
KDPAmp/qT6nfkWogswgntSwONgToWr3VpSpsuR0UejaJ3p/xoOltp+tGc88RnELS
6qVgWsL2FJabh8p53Mp7NU8+keke5xQBvxOj2xg+Dmt3HOlcXHtXrcg1843AVdDS
sCbYdRmDemkHL3kSnZpolhe8uZOC1OSmCNQEDtavcsV2h6yIx92XVgxUl3lz2ETJ
llxIoSdIA2jdTpwapGdfVynAixuSc7+zp+pKtls7qY2bi2ZtAIwu41X9tQElsxCZ
BTXJURaUDh5YQ38DZ2RiNI+F1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFESri5Wf
yz/oRR3Zx/KWRfI29tEVMB8GA1UdIwQYMBaAFMiI0e7gS+8+gV8J3foZGT1pm09H
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDM4Ri9DNzU5MEJENjI1
QUUxMUVCOEVFQzIyMEFDNEY5QUUwMi95SWpSN3VCTDd6NkJYd25kLWhrWlBXbWJU
MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lJalI3dUJMN3o2Qlh3bmQtaGtaUFdtYlQwYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NDM4Ri9DNzU5MEJENjI1QUUxMUVCOEVFQzIyMEFDNEY5QUUwMi95SWpSN3VCTDd6
NkJYd25kLWhrWlBXbWJUMGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCcBNOzXJGK/58blgYj3MTkmbMILmfDclitH7A0yEL0uNGVKEv8r46y
xt8fmsLtFHpWCypplWDYmP4+fZv9KvDcELgItOsLySPeVL+Z7nT77NHgIFu7L2AG
f5RfeRbgQWPy01BLtQaXfPm8BOPUAuNci2uaVHI3/v80dXDJ+pFUO4y313OOCOZr
MG6YGP7hZ9rg8g+an8cVPMRUgaA9lBu1c2RL0wAbsS6BaolBQwlGGJd6dcm9oY/w
sCfvglKxUJnUyM3tOb6X+iYnvtA6Uj4VAEkjcBGvn2sws5DWxekwnZ1dO80rlrL+
vQ8TIyQmzTi5j2Cluw/OeDIw/uHMGtg5
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:43:09 2025 by rpki-client