Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft
File: DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft (raw, json)
Hash identifier: TKizrclAHeHkWk5Z25BkCXB1/qam1jnNRj8meXXbBfg=
Subject key identifier: 0A:24:ED:B4:0E:75:EE:CA:57:0D:60:20:74:51:74:AD:0C:BA:78:19
Authority key identifier: 0E:6A:43:01:95:68:F9:77:11:4E:6D:46:5B:0A:6F:55:69:F5:38:3E
Certificate issuer: /CN=A912FE31/serialNumber=0E6A43019568F977114E6D465B0A6F5569F5383E
Certificate serial: 09C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmpDAZVo-XcRTm1GWwpvVWn1OD4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft
Manifest number: 09B8
Signing time: Thu 30 Jan 2025 20:05:28 +0000
Manifest this update: Thu 30 Jan 2025 20:05:28 +0000
Manifest next update: Thu 06 Feb 2025 20:05:28 +0000
Files and hashes: 1: DmpDAZVo-XcRTm1GWwpvVWn1OD4.crl (hash: 00jeJ10bCDUCoDlqwLi09w1/WsGLbo2bAc4s7YHRroA=)
2: A42489D8799211EAA230E17FC4F9AE02.roa (hash: OnZAowiVuvOnwLvfgL0R8vIbc2U3axlj1bMkwdwdu4I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2496 (0x9c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FE31/serialNumber=0E6A43019568F977114E6D465B0A6F5569F5383E
Validity
Not Before: Jan 30 20:05:28 2025 GMT
Not After : Feb 6 20:05:28 2025 GMT
Subject: CN=679bdb88-6fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bb:0b:4a:f4:41:28:65:c3:ab:e2:be:c0:f1:
de:84:c2:8b:cc:0f:f4:c9:ce:bd:d4:97:a0:20:a6:
65:11:ab:6f:8d:0f:c6:a3:2c:38:54:a9:77:3e:f9:
dc:b2:88:68:be:67:39:4e:c3:7e:55:a2:22:0b:50:
09:c4:08:61:cc:0b:ad:5f:28:5e:e2:a1:f4:98:4f:
38:b8:ab:1c:76:c9:58:03:fe:45:be:07:a8:25:71:
23:6e:b3:cf:a9:0e:48:cb:0e:12:f7:56:3f:5d:5e:
73:26:d4:62:9d:91:e6:d1:a5:f5:4c:16:94:26:f7:
1c:ef:9e:d0:e3:3a:da:1d:0a:fd:ad:a2:03:66:bf:
0e:33:ef:02:e1:a6:cd:1e:2f:15:2d:e0:dd:39:08:
d3:12:0e:45:33:d0:c2:f8:c7:7d:b9:50:ca:46:2b:
bd:24:fb:22:26:c5:73:cb:dc:0e:31:07:df:07:9a:
99:71:9b:e2:98:62:f4:74:43:4b:0e:4b:1d:57:c3:
41:b1:e4:d6:d2:e1:9c:10:ff:dd:9e:fb:59:cd:ad:
98:0b:18:44:1b:f6:89:08:50:ba:91:f3:2b:72:5f:
ef:85:d0:9a:ac:ce:8e:33:28:0e:25:73:f9:2d:b5:
49:26:a3:3f:16:3a:89:6d:87:3d:3f:4c:e4:18:6c:
3f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:24:ED:B4:0E:75:EE:CA:57:0D:60:20:74:51:74:AD:0C:BA:78:19
X509v3 Authority Key Identifier:
keyid:0E:6A:43:01:95:68:F9:77:11:4E:6D:46:5B:0A:6F:55:69:F5:38:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmpDAZVo-XcRTm1GWwpvVWn1OD4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:80:4a:42:da:ce:f2:fb:2f:ba:5e:28:32:f9:05:07:3f:85:
40:ad:34:5e:c6:54:0e:61:da:56:b5:43:e7:0b:9c:87:0e:32:
7d:d9:fc:25:51:ef:28:73:28:45:83:a9:d1:dc:2e:98:4c:96:
75:ef:4c:9a:88:50:a5:41:60:e7:de:99:b7:3c:2d:25:4e:1a:
f9:ea:a2:ef:98:8d:8e:f1:1c:81:01:8b:0e:27:35:88:f4:6e:
72:1d:ac:c0:72:f5:20:0d:d5:1c:3e:0b:53:c0:9a:d8:b6:ab:
46:a2:7b:55:62:45:6d:1b:81:f6:64:ea:48:b9:46:ab:62:5e:
24:60:15:9d:10:5f:b2:5e:31:ff:73:5a:b3:c5:2e:be:9c:d8:
6d:5e:1a:5a:0b:53:24:82:ff:41:51:01:59:ab:f9:75:6e:4c:
04:86:8b:bd:b5:45:87:30:bd:e6:f0:25:a0:61:83:2a:2a:95:
c1:43:a8:c0:f4:5b:3f:9d:18:01:e3:c5:02:7a:13:f8:7c:4e:
d1:e4:06:62:a3:db:a7:4e:41:a5:b7:fa:e0:de:15:19:46:9c:
00:9c:3a:83:90:35:95:11:b3:cd:5a:77:73:6a:d1:bc:1a:bc:
a2:96:2e:51:29:cf:ce:35:43:87:6c:61:f8:52:e3:ee:5b:f8:
8d:c3:da:40
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkZFMzExMTAvBgNVBAUTKDBFNkE0MzAxOTU2OEY5NzcxMTRFNkQ0NjVCMEE2RjU1
NjlGNTM4M0UwHhcNMjUwMTMwMjAwNTI4WhcNMjUwMjA2MjAwNTI4WjAYMRYwFAYD
VQQDEw02NzliZGI4OC02ZmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqrsLSvRBKGXDq+K+wPHehMKLzA/0yc691JegIKZlEatvjQ/Goyw4VKl3Pvnc
sohovmc5TsN+VaIiC1AJxAhhzAutXyhe4qH0mE84uKscdslYA/5FvgeoJXEjbrPP
qQ5Iyw4S91Y/XV5zJtRinZHm0aX1TBaUJvcc757Q4zraHQr9raIDZr8OM+8C4abN
Hi8VLeDdOQjTEg5FM9DC+Md9uVDKRiu9JPsiJsVzy9wOMQffB5qZcZvimGL0dENL
DksdV8NBseTW0uGcEP/dnvtZza2YCxhEG/aJCFC6kfMrcl/vhdCarM6OMygOJXP5
LbVJJqM/FjqJbYc9P0zkGGw/JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAok7bQO
de7KVw1gIHRRdK0MungZMB8GA1UdIwQYMBaAFA5qQwGVaPl3EU5tRlsKb1Vp9Tg+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkUzMS9BQjc5NTZENDc5
MzYxMUVBOTIwOEM1NThDNEY5QUUwMi9EbXBEQVpWby1YY1JUbTFHV3dwdlZXbjFP
RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RtcERBWlZvLVhjUlRtMUdXd3B2VlduMU9ENC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RkUzMS9BQjc5NTZENDc5MzYxMUVBOTIwOEM1NThDNEY5QUUwMi9EbXBEQVpWby1Y
Y1JUbTFHV3dwdlZXbjFPRDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC7gEpC2s7y+y+6Xigy+QUHP4VArTRexlQOYdpWtUPnC5yHDjJ92fwl
Ue8ocyhFg6nR3C6YTJZ170yaiFClQWDn3pm3PC0lThr56qLvmI2O8RyBAYsOJzWI
9G5yHazAcvUgDdUcPgtTwJrYtqtGontVYkVtG4H2ZOpIuUarYl4kYBWdEF+yXjH/
c1qzxS6+nNhtXhpaC1Mkgv9BUQFZq/l1bkwEhou9tUWHML3m8CWgYYMqKpXBQ6jA
9Fs/nRgB48UCehP4fE7R5AZio9unTkGlt/rg3hUZRpwAnDqDkDWVEbPNWndzatG8
Gryili5RKc/ONUOHbGH4UuPuW/iNw9pA
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:50:46 2025 by rpki-client