Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft
File: NYQa4z32kxIBQGeYrmT8wIf1oeU.mft (raw, json)
Hash identifier: lhdR5Fpal002IlIW66MC37GNWNOXyZOuPrAkhvefj9I=
Subject key identifier: 04:2C:64:E8:E8:4B:C0:EF:A7:E3:F4:12:22:3C:D4:E3:D0:A4:08:F0
Authority key identifier: 35:84:1A:E3:3D:F6:93:12:01:40:67:98:AE:64:FC:C0:87:F5:A1:E5
Certificate issuer: /CN=A912929D/serialNumber=35841AE33DF6931201406798AE64FCC087F5A1E5
Certificate serial: 21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft
Manifest number: 20
Signing time: Fri 31 Jan 2025 06:56:39 +0000
Manifest this update: Fri 31 Jan 2025 06:56:39 +0000
Manifest next update: Fri 07 Feb 2025 06:56:39 +0000
Files and hashes: 1: NYQa4z32kxIBQGeYrmT8wIf1oeU.crl (hash: cDjragRkbdsPnLyqBFFqb0ZiuxaafTrYi8FyTER9tbs=)
2: AC205A92B13011EFB45E6B3BC4F9AE02.roa (hash: uKwkZfPxaBZe+NEWyqJ10DRoEbJiI4u5JFaaWffNJlI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912929D/serialNumber=35841AE33DF6931201406798AE64FCC087F5A1E5
Validity
Not Before: Jan 31 06:56:39 2025 GMT
Not After : Feb 7 06:56:39 2025 GMT
Subject: CN=679c7427-b181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:36:6c:d2:e8:44:0e:a6:4a:88:40:ac:98:44:
03:be:39:2a:39:19:2a:41:34:3b:f5:61:24:f5:c2:
60:43:fa:b0:9c:98:32:2f:3a:07:0b:80:09:e8:19:
56:8f:77:e7:50:e0:9f:a2:fb:7b:d6:c4:f0:01:50:
99:7e:6c:5e:77:52:44:75:a5:92:92:4c:17:df:86:
0b:03:1e:96:71:24:54:fa:65:0c:8a:dd:e4:ab:a3:
31:70:98:a2:4d:70:dd:76:d8:12:46:43:d0:e0:e3:
57:0d:f1:8c:b2:aa:5b:1b:b1:40:cd:fb:b2:2f:5e:
6e:fd:b8:21:1c:b3:a0:3f:6f:2b:d8:ba:e7:f5:d1:
67:48:48:6d:b8:01:40:cd:67:c5:56:8b:e5:c6:78:
9f:95:26:ea:33:3b:1b:56:c1:5d:71:6a:16:29:66:
a9:ad:89:d5:d3:07:89:45:ce:48:23:f9:5b:3c:e0:
ab:37:56:8e:3e:8b:58:43:ce:58:65:e4:d7:2b:bc:
95:a7:70:c8:16:5c:4f:11:43:05:10:49:2e:be:bb:
10:d9:48:0f:d5:7d:40:86:04:dd:9f:42:8a:7f:56:
8b:95:e8:30:73:18:18:db:91:72:3a:5d:7d:1a:b0:
8e:f0:13:55:e1:8a:49:92:6c:77:fa:a9:5c:cb:b7:
52:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2C:64:E8:E8:4B:C0:EF:A7:E3:F4:12:22:3C:D4:E3:D0:A4:08:F0
X509v3 Authority Key Identifier:
keyid:35:84:1A:E3:3D:F6:93:12:01:40:67:98:AE:64:FC:C0:87:F5:A1:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:10:d9:19:47:e0:30:ea:81:ef:e6:84:1e:fb:eb:72:50:d1:
fd:9b:d3:74:47:33:fd:b7:a9:b7:2c:b8:8a:24:0a:3c:da:c3:
f7:73:30:67:2e:3c:87:fe:af:df:88:b1:cd:ae:4a:ab:9d:b7:
1c:e5:ec:28:dd:d4:3d:9b:14:fc:30:74:d5:45:dd:35:5a:12:
09:75:47:9b:bb:d3:51:a9:45:a2:ae:00:1e:e5:ff:14:17:d1:
a6:cb:45:bd:cf:3b:93:45:b2:17:07:18:99:31:ee:8a:9d:61:
db:0c:54:b2:87:ce:d3:12:cd:64:4e:43:55:3b:7c:ac:1c:b8:
9d:ff:13:ab:b0:2e:00:c6:c8:54:a6:4b:67:fd:14:fa:4f:e8:
b7:1b:90:5d:01:0d:0d:8b:b4:10:1d:e9:d8:bd:c2:a7:f1:f0:
aa:e6:f5:1c:34:16:4c:b7:2c:49:d3:a3:73:b7:8f:a7:f7:5f:
e8:c2:d8:b5:56:18:37:b0:f3:96:d3:b9:82:f3:a6:34:17:0f:
1a:a8:e1:0b:c6:bd:08:16:5b:77:2c:6a:73:6e:c3:a2:a9:4d:
97:e9:6e:b9:1b:ac:da:ca:b3:40:42:ce:97:27:a0:7a:64:c2:
92:26:48:a8:a2:55:47:02:8f:9a:21:50:1a:9b:f5:bf:74:cf:
c4:d8:6e:78
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
OTI5RDExMC8GA1UEBRMoMzU4NDFBRTMzREY2OTMxMjAxNDA2Nzk4QUU2NEZDQzA4
N0Y1QTFFNTAeFw0yNTAxMzEwNjU2MzlaFw0yNTAyMDcwNjU2MzlaMBgxFjAUBgNV
BAMTDTY3OWM3NDI3LWIxODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8NmzS6EQOpkqIQKyYRAO+OSo5GSpBNDv1YST1wmBD+rCcmDIvOgcLgAnoGVaP
d+dQ4J+i+3vWxPABUJl+bF53UkR1pZKSTBffhgsDHpZxJFT6ZQyK3eSrozFwmKJN
cN122BJGQ9Dg41cN8YyyqlsbsUDN+7IvXm79uCEcs6A/byvYuuf10WdISG24AUDN
Z8VWi+XGeJ+VJuozOxtWwV1xahYpZqmtidXTB4lFzkgj+Vs84Ks3Vo4+i1hDzlhl
5NcrvJWncMgWXE8RQwUQSS6+uxDZSA/VfUCGBN2fQop/VouV6DBzGBjbkXI6XX0a
sI7wE1XhikmSbHf6qVzLt1JBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBCxk6OhL
wO+n4/QSIjzU49CkCPAwHwYDVR0jBBgwFoAUNYQa4z32kxIBQGeYrmT8wIf1oeUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5MjlELzZFMDUwRUY2QjEz
MDExRUZBQTBCQjUzQUM0RjlBRTAyL05ZUWE0ejMya3hJQlFHZVlybVQ4d0lmMW9l
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTllRYTR6MzJreElCUUdlWXJtVDh3SWYxb2VVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5
MjlELzZFMDUwRUY2QjEzMDExRUZBQTBCQjUzQUM0RjlBRTAyL05ZUWE0ejMya3hJ
QlFHZVlybVQ4d0lmMW9lVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBALEQ2RlH4DDqge/mhB7763JQ0f2b03RHM/23qbcsuIokCjzaw/dzMGcu
PIf+r9+Isc2uSqudtxzl7Cjd1D2bFPwwdNVF3TVaEgl1R5u701GpRaKuAB7l/xQX
0abLRb3PO5NFshcHGJkx7oqdYdsMVLKHztMSzWROQ1U7fKwcuJ3/E6uwLgDGyFSm
S2f9FPpP6LcbkF0BDQ2LtBAd6di9wqfx8Krm9Rw0Fky3LEnTo3O3j6f3X+jC2LVW
GDew85bTuYLzpjQXDxqo4QvGvQgWW3csanNuw6KpTZfpbrkbrNrKs0BCzpcnoHpk
wpImSKiiVUcCj5ohUBqb9b90z8TYbng=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:01:19 2025 by rpki-client