Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft
File: G43u2x08SMwcTCF7lpx5hUGkzHc.mft (raw, json)
Hash identifier: OWF2CGvh/nbRggc0qri94wWb/P5SZRLtg9zs6MA1rYs=
Subject key identifier: 68:FE:29:4E:F8:2B:E6:BB:E0:76:61:19:37:BE:7C:C5:87:86:40:AE
Authority key identifier: 1B:8D:EE:DB:1D:3C:48:CC:1C:4C:21:7B:96:9C:79:85:41:A4:CC:77
Certificate issuer: /CN=A9124803/serialNumber=1B8DEEDB1D3C48CC1C4C217B969C798541A4CC77
Certificate serial: 0613
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft
Manifest number: 060D
Signing time: Thu 30 Jan 2025 22:46:55 +0000
Manifest this update: Thu 30 Jan 2025 22:46:54 +0000
Manifest next update: Thu 06 Feb 2025 22:46:54 +0000
Files and hashes: 1: G43u2x08SMwcTCF7lpx5hUGkzHc.crl (hash: Z5/A+Ol5BSet9MwfyH3Zca8Rr6dgR4bHaaDzDXWU7BU=)
2: 62CCFF308C7211EB98A6DD43C4F9AE02.roa (hash: gunOvJOlbGjXfJHFh/SepIdDyMi1uvKafrROfkiVnXI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1555 (0x613)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124803/serialNumber=1B8DEEDB1D3C48CC1C4C217B969C798541A4CC77
Validity
Not Before: Jan 30 22:46:54 2025 GMT
Not After : Feb 6 22:46:54 2025 GMT
Subject: CN=679c015e-47a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7e:50:51:7d:49:4a:0f:36:5d:59:ac:74:15:
27:95:ff:99:30:ce:69:94:d1:25:8b:1d:a4:28:1c:
78:01:d1:39:06:e8:d5:71:b0:10:a2:34:d6:87:c7:
15:bb:59:91:20:74:29:e0:6a:7d:eb:3d:71:7f:a6:
52:04:ef:97:82:cf:16:fd:51:ac:00:80:0c:3d:31:
26:92:5b:a8:07:1f:52:24:63:7f:b6:3a:b7:07:0f:
bd:46:91:59:d2:70:ba:97:ed:8b:31:d7:4a:05:46:
9a:52:cc:6a:5e:d4:57:b2:5d:33:ee:96:bf:df:62:
09:b2:bd:2c:2c:b0:7d:48:03:1a:ea:e5:7b:d6:fa:
32:27:4b:aa:2c:a0:1c:ec:d3:f8:6a:ea:2d:43:30:
dd:d7:ea:e9:08:a9:91:37:7f:aa:1a:cc:da:4e:53:
03:6e:7a:90:5f:bc:19:74:f7:54:89:4a:74:c9:78:
e2:4d:08:6f:32:92:20:06:58:64:22:93:fa:73:44:
66:5a:69:2d:87:6e:97:a5:e0:69:fa:c4:e7:96:0e:
d0:45:1d:91:32:54:a7:44:75:6a:fb:48:d5:73:9c:
93:66:c5:74:95:59:48:cf:65:f5:5a:3a:e3:95:0d:
a3:89:6d:79:66:e9:08:cc:38:7c:25:af:81:95:08:
aa:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FE:29:4E:F8:2B:E6:BB:E0:76:61:19:37:BE:7C:C5:87:86:40:AE
X509v3 Authority Key Identifier:
keyid:1B:8D:EE:DB:1D:3C:48:CC:1C:4C:21:7B:96:9C:79:85:41:A4:CC:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:5c:55:77:32:73:f0:bd:45:59:b5:6a:d6:e6:73:16:a7:5e:
10:36:9f:ff:5e:45:b0:cb:fc:d6:68:ab:bd:db:96:ec:90:d3:
b2:e8:5f:fc:1e:f6:c8:8c:c7:0a:7d:9d:b6:f7:10:38:cf:d0:
9e:9d:d9:29:ff:83:1c:cc:f2:b2:98:25:09:a2:dc:d2:90:ea:
b2:c6:49:59:7f:1e:be:01:02:d6:53:f9:92:a1:67:23:00:b7:
7b:df:f5:27:af:37:b1:77:7e:9b:ec:49:fd:84:83:0c:2d:7d:
72:85:04:d8:e7:b5:51:19:9e:76:74:cb:69:c1:40:96:11:59:
05:71:29:20:94:4e:d3:14:c6:45:46:ea:18:b6:3c:87:ca:77:
e3:00:54:dc:ca:2e:b1:ea:dd:1b:83:19:e0:ee:5b:56:57:c9:
f6:fe:13:f9:ac:f9:45:f9:03:56:39:2e:e1:ab:0d:5d:ba:b1:
ee:1a:ae:04:e5:4f:d4:67:1f:03:c9:ae:bd:4f:4e:03:cd:de:
cd:9e:a5:fb:be:7a:73:29:c4:39:3e:1b:74:80:f5:94:56:17:
11:10:21:b9:25:33:96:fb:44:9e:32:69:c8:9c:92:bd:41:ff:
af:3f:a1:b1:e8:59:fb:40:a1:eb:d3:5c:cd:c6:a4:db:4f:58:
34:bc:06:cc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQ4MDMxMTAvBgNVBAUTKDFCOERFRURCMUQzQzQ4Q0MxQzRDMjE3Qjk2OUM3OTg1
NDFBNENDNzcwHhcNMjUwMTMwMjI0NjU0WhcNMjUwMjA2MjI0NjU0WjAYMRYwFAYD
VQQDEw02NzljMDE1ZS00N2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvH5QUX1JSg82XVmsdBUnlf+ZMM5plNElix2kKBx4AdE5BujVcbAQojTWh8cV
u1mRIHQp4Gp96z1xf6ZSBO+Xgs8W/VGsAIAMPTEmkluoBx9SJGN/tjq3Bw+9RpFZ
0nC6l+2LMddKBUaaUsxqXtRXsl0z7pa/32IJsr0sLLB9SAMa6uV71voyJ0uqLKAc
7NP4auotQzDd1+rpCKmRN3+qGszaTlMDbnqQX7wZdPdUiUp0yXjiTQhvMpIgBlhk
IpP6c0RmWmkth26XpeBp+sTnlg7QRR2RMlSnRHVq+0jVc5yTZsV0lVlIz2X1Wjrj
lQ2jiW15ZukIzDh8Ja+BlQiq7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGj+KU74
K+a74HZhGTe+fMWHhkCuMB8GA1UdIwQYMBaAFBuN7tsdPEjMHEwhe5aceYVBpMx3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDgwMy85NzdENzM2MDhD
NzAxMUVCQUVBMTEzNDFDNEY5QUUwMi9HNDN1MngwOFNNd2NUQ0Y3bHB4NWhVR2t6
SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0c0M3UyeDA4U013Y1RDRjdscHg1aFVHa3pIYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NDgwMy85NzdENzM2MDhDNzAxMUVCQUVBMTEzNDFDNEY5QUUwMi9HNDN1MngwOFNN
d2NUQ0Y3bHB4NWhVR2t6SGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBlXFV3MnPwvUVZtWrW5nMWp14QNp//XkWwy/zWaKu925bskNOy6F/8
HvbIjMcKfZ229xA4z9Cendkp/4MczPKymCUJotzSkOqyxklZfx6+AQLWU/mSoWcj
ALd73/Unrzexd36b7En9hIMMLX1yhQTY57VRGZ52dMtpwUCWEVkFcSkglE7TFMZF
RuoYtjyHynfjAFTcyi6x6t0bgxng7ltWV8n2/hP5rPlF+QNWOS7hqw1durHuGq4E
5U/UZx8Dya69T04Dzd7NnqX7vnpzKcQ5Pht0gPWUVhcRECG5JTOW+0SeMmnInJK9
Qf+vP6Gx6Fn7QKHr01zNxqTbT1g0vAbM
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:29 2025 by rpki-client