Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
File: dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft (raw, json)
Hash identifier: +dmkdpOlZIm6dKfQSCQarMB9f4GmTakw3jMKQTMIoYA=
Subject key identifier: BF:9F:E0:85:F3:83:C2:BB:FC:20:39:CE:3C:DD:98:45:84:73:C5:A6
Authority key identifier: 76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4
Certificate issuer: /CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
Certificate serial: 0B0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
Manifest number: 0ABA
Signing time: Thu 30 Jan 2025 19:50:47 +0000
Manifest this update: Thu 30 Jan 2025 19:50:47 +0000
Manifest next update: Thu 06 Feb 2025 19:50:47 +0000
Files and hashes: 1: dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl (hash: /QW4CBB/VLcQV9mOjGbLMu/EVgeuuCNm0V5OzuQQJzw=)
2: 9D060E183ED611ED8963B549C4F9AE02.roa (hash: JbOgcVk0SFjuz3pFR2xuSgFphJgl+zaZw80ujiiRGfQ=)
3: 261A2BA2F39611EDA98C5D4DC4F9AE02.roa (hash: cO+lO6yNoyaxQ9zIQdsncGR/46no6uoF1ZfttfCv9RE=)
4: 50448A72911411EF9CAF3E55C4F9AE02.roa (hash: XnoJK+j2aYdpJPJmHEzYHnSl0odvMBBf4WRRJO5tlac=)
5: DCFFE916452611EDA4853E62C4F9AE02.roa (hash: cg0pTB0tQ3lVw+//8QI1VGIKFNM43Q8JPHW5fx5VAek=)
6: 0FB29E462A0811EE9A08C30FC4F9AE02.roa (hash: ZqdtECDRqDG4B5sUURVHvsrynmrQ1unVucYfwH8ae+A=)
7: 305F24342A0811EE9D810010C4F9AE02.roa (hash: e9thDBmL8sJM6wfIji6pTwGCU4p0X8HaVmN0zYAxnPk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2830 (0xb0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
Validity
Not Before: Jan 30 19:50:47 2025 GMT
Not After : Feb 6 19:50:47 2025 GMT
Subject: CN=679bd817-7b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9f:d8:5b:8c:ca:82:f8:e0:fe:09:f3:66:ba:
1a:e5:83:ea:e5:f5:18:ba:ae:1a:cb:ad:92:bc:01:
64:c6:75:16:72:1b:f5:0e:a6:dd:f4:09:70:51:53:
f4:1f:00:b5:a9:fe:38:8a:2f:d2:c3:a5:67:53:9f:
6e:99:2d:e6:b4:a6:cb:53:e3:3d:9a:34:87:41:dd:
ad:6a:76:68:3a:54:c3:71:c5:38:3e:46:1a:0c:2e:
7f:1b:88:cf:a0:e5:b9:53:7c:1d:b0:39:b0:b5:71:
1a:3c:bf:0b:1b:7a:1a:ee:cb:d3:0f:3c:a0:00:bf:
c8:9b:7e:bc:19:c3:34:f6:1e:b8:2a:90:15:e7:f9:
80:82:8e:35:77:49:32:b7:03:25:3a:e3:92:47:a7:
84:31:1e:08:09:f4:3d:78:29:e8:c4:ef:90:41:2f:
ca:03:f0:e1:26:52:b1:fa:9c:39:84:46:32:fe:7d:
7f:2f:92:f5:06:4b:60:bb:9d:cb:d8:45:cd:1c:ef:
e5:ad:80:62:ce:09:ca:74:fe:8c:1e:71:2c:7b:ca:
f9:01:08:3b:80:39:be:bc:df:5a:eb:99:cc:ce:61:
2b:37:2d:86:d4:75:af:13:71:ac:93:34:14:71:c6:
7f:1d:5a:33:80:42:30:fa:6b:b6:9c:07:ff:5d:6f:
5b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9F:E0:85:F3:83:C2:BB:FC:20:39:CE:3C:DD:98:45:84:73:C5:A6
X509v3 Authority Key Identifier:
keyid:76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:bc:a2:b4:34:f1:cf:f9:06:f4:a9:32:64:dd:7f:95:16:f7:
f2:57:6a:9d:b3:95:10:25:8e:a1:c6:07:aa:53:20:70:20:ef:
91:71:4c:97:cd:c2:3a:e8:33:cd:ed:f5:ea:b4:86:32:6c:3d:
39:63:b5:03:4b:5b:12:a6:9b:3d:d4:8b:39:76:ef:8a:2a:a2:
e3:6f:05:76:ab:fe:a7:0f:30:5f:9b:2b:9b:f6:4a:bd:4c:bb:
2d:0b:fe:f6:8a:f8:d1:ba:4c:b1:ba:4e:7b:72:81:6d:bc:7a:
02:e7:ca:92:b3:d7:f4:e2:f6:b4:ac:a1:9b:27:f6:17:7a:88:
d0:e0:d0:f4:42:b1:96:ac:d1:14:41:f4:6a:19:54:04:67:bb:
b2:9c:8d:a1:c6:1c:53:5f:2d:22:b7:23:01:c1:15:dc:32:87:
25:62:e8:11:61:87:d5:47:79:68:f0:aa:b3:1b:d9:37:89:99:
6e:81:03:5a:62:59:ab:63:a7:f8:10:95:29:c5:4f:f5:19:13:
0b:0c:ba:8f:d7:0c:c4:8a:52:90:55:a7:49:44:e6:7c:01:3a:
e9:33:5a:5f:1d:b0:8c:e1:e8:bb:b7:10:6a:2e:e9:90:09:d2:
09:6a:04:42:f5:91:a0:e2:e2:62:9a:43:64:6f:28:9c:a7:74:
84:99:93:03
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkM4QUYxMTAvBgNVBAUTKDc2M0Y3RkJEOTY0QTFDMzY2ODMwOEM5QTI5RTE1MDI1
QzBEREY5RDQwHhcNMjUwMTMwMTk1MDQ3WhcNMjUwMjA2MTk1MDQ3WjAYMRYwFAYD
VQQDEw02NzliZDgxNy03YjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7Z/YW4zKgvjg/gnzZroa5YPq5fUYuq4ay62SvAFkxnUWchv1Dqbd9AlwUVP0
HwC1qf44ii/Sw6VnU59umS3mtKbLU+M9mjSHQd2tanZoOlTDccU4PkYaDC5/G4jP
oOW5U3wdsDmwtXEaPL8LG3oa7svTDzygAL/Im368GcM09h64KpAV5/mAgo41d0ky
twMlOuOSR6eEMR4ICfQ9eCnoxO+QQS/KA/DhJlKx+pw5hEYy/n1/L5L1Bktgu53L
2EXNHO/lrYBizgnKdP6MHnEse8r5AQg7gDm+vN9a65nMzmErNy2G1HWvE3GskzQU
ccZ/HVozgEIw+mu2nAf/XW9bZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+f4IXz
g8K7/CA5zjzdmEWEc8WmMB8GA1UdIwQYMBaAFHY/f72WShw2aDCMminhUCXA3fnU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9EMUY2NEU3MjVF
RUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hEWm9NSXlhS2VGUUpjRGQt
ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RqOV92WlpLSERab01JeWFLZUZRSmNEZC1kUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QzhBRi9EMUY2NEU3MjVFRUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hE
Wm9NSXlhS2VGUUpjRGQtZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQADvKK0NPHP+Qb0qTJk3X+VFvfyV2qds5UQJY6hxgeqUyBwIO+RcUyX
zcI66DPN7fXqtIYybD05Y7UDS1sSpps91Is5du+KKqLjbwV2q/6nDzBfmyub9kq9
TLstC/72ivjRukyxuk57coFtvHoC58qSs9f04va0rKGbJ/YXeojQ4ND0QrGWrNEU
QfRqGVQEZ7uynI2hxhxTXy0ityMBwRXcMoclYugRYYfVR3lo8KqzG9k3iZlugQNa
YlmrY6f4EJUpxU/1GRMLDLqP1wzEilKQVadJROZ8ATrpM1pfHbCM4ei7txBqLumQ
CdIJagRC9ZGg4uJimkNkbyicp3SEmZMD
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:19:44 2025 by rpki-client