Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft
File: L0yMSsxFXG1aSQxAkLOjUqivHLU.mft (raw, json)
Hash identifier: lgntVrvBO8kpY8PBUZJAxwzKsWBls6hZWdF/48mq37w=
Subject key identifier: 10:E9:48:04:C2:1D:C7:8E:DD:8A:D6:EB:AF:93:98:3A:D1:04:6E:89
Authority key identifier: 2F:4C:8C:4A:CC:45:5C:6D:5A:49:0C:40:90:B3:A3:52:A8:AF:1C:B5
Certificate issuer: /CN=A9130128/serialNumber=2F4C8C4ACC455C6D5A490C4090B3A352A8AF1CB5
Certificate serial: 03EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft
Manifest number: 03E1
Signing time: Fri 31 Jan 2025 00:39:41 +0000
Manifest this update: Fri 31 Jan 2025 00:39:41 +0000
Manifest next update: Fri 07 Feb 2025 00:39:41 +0000
Files and hashes: 1: L0yMSsxFXG1aSQxAkLOjUqivHLU.crl (hash: qQnBDZBz4skL5vXUdwCkWmbaMroKZ9ptGoTCNAr3JDw=)
2: BD6C86326AEC11ECB61ECF30C4F9AE02.roa (hash: ycvRnCz+W4ba8DDROuCngyAKLqsVfBGFpl90bOtHXMA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1004 (0x3ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130128/serialNumber=2F4C8C4ACC455C6D5A490C4090B3A352A8AF1CB5
Validity
Not Before: Jan 31 00:39:41 2025 GMT
Not After : Feb 7 00:39:41 2025 GMT
Subject: CN=679c1bcd-c7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:56:06:3f:a0:a2:24:48:52:7a:24:16:9d:43:
67:4a:e3:a3:ae:1f:1b:ce:6e:ad:e7:80:64:f9:6d:
54:70:32:64:ad:e4:82:d6:8e:33:39:97:4b:72:17:
8d:89:e0:92:58:dc:39:c6:6d:f1:47:41:63:16:4b:
e9:2b:57:69:d8:b7:77:e7:e6:fe:05:3e:42:75:2a:
c0:42:53:2a:df:c8:0a:36:5c:2a:bf:88:0b:6a:46:
a1:48:ed:d5:7a:ed:9d:f7:50:c5:89:97:c6:a9:d8:
68:f6:c1:7c:a2:e9:40:53:8d:bd:f4:0c:4b:c6:df:
51:77:88:37:db:c5:f8:bd:9d:c9:b0:ea:78:3e:3c:
43:c0:72:83:6d:11:20:e1:89:67:dd:e9:0e:87:9e:
5a:19:6e:85:92:65:26:ac:4a:87:ca:23:c9:b1:50:
0e:02:8f:e1:1b:e5:ae:4e:ff:87:ba:6f:12:84:20:
8f:97:d1:98:4e:d4:65:23:ec:60:8c:dc:9a:b0:2a:
3c:f8:01:3b:d3:44:71:7d:14:03:2b:00:af:99:7f:
50:ba:54:f9:8f:a4:5e:d2:76:81:c6:62:91:f6:95:
7a:9c:bd:a7:e0:a6:85:ae:de:2d:79:fe:c3:0d:2a:
60:5b:ef:dc:c0:2c:ac:76:6f:69:ba:4a:7e:62:d3:
0c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E9:48:04:C2:1D:C7:8E:DD:8A:D6:EB:AF:93:98:3A:D1:04:6E:89
X509v3 Authority Key Identifier:
keyid:2F:4C:8C:4A:CC:45:5C:6D:5A:49:0C:40:90:B3:A3:52:A8:AF:1C:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:a3:6f:d5:8c:fb:5c:8c:ad:30:71:a6:18:e2:47:8e:ee:9e:
2a:61:ea:22:54:ec:5e:4d:b1:00:55:71:fb:0d:b1:43:0a:4b:
d4:39:20:8f:09:84:eb:ba:ff:4b:10:cd:cc:86:17:e0:db:bf:
65:7a:56:42:89:bd:f2:6d:79:05:08:f8:ca:91:ff:90:9f:2a:
96:96:77:93:62:41:9f:a1:de:e6:4b:f7:fa:f0:eb:8c:e2:93:
b7:52:6c:69:61:29:f6:8f:8e:d3:30:ec:f8:2a:13:eb:6b:54:
58:ca:17:34:28:80:2d:54:83:07:b8:f9:e4:d6:a2:30:1a:5f:
0d:03:89:c3:b2:d7:d8:3f:ed:8f:2d:35:45:d6:a6:16:e1:45:
f7:b6:36:38:70:20:1f:6c:6b:d5:3d:a6:9a:15:26:a4:a8:bb:
a1:98:37:ea:98:84:ee:c6:f9:1c:3d:91:5a:e4:d8:d2:08:4d:
ed:c5:78:c0:93:95:df:59:10:0c:cb:c3:96:81:62:42:82:a4:
2f:6e:96:f6:a1:ea:84:58:40:1d:db:0c:cf:64:22:c3:7f:f9:
d4:64:f7:58:61:83:6b:82:85:71:b2:4f:67:3a:d3:6b:f9:52:
3e:3a:f6:aa:7f:47:30:78:72:be:64:52:a8:4c:e4:6f:cc:6d:
c6:27:7e:12
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzAxMjgxMTAvBgNVBAUTKDJGNEM4QzRBQ0M0NTVDNkQ1QTQ5MEM0MDkwQjNBMzUy
QThBRjFDQjUwHhcNMjUwMTMxMDAzOTQxWhcNMjUwMjA3MDAzOTQxWjAYMRYwFAYD
VQQDEw02NzljMWJjZC1jN2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApFYGP6CiJEhSeiQWnUNnSuOjrh8bzm6t54Bk+W1UcDJkreSC1o4zOZdLcheN
ieCSWNw5xm3xR0FjFkvpK1dp2Ld35+b+BT5CdSrAQlMq38gKNlwqv4gLakahSO3V
eu2d91DFiZfGqdho9sF8oulAU4299AxLxt9Rd4g328X4vZ3JsOp4PjxDwHKDbREg
4Yln3ekOh55aGW6FkmUmrEqHyiPJsVAOAo/hG+WuTv+Hum8ShCCPl9GYTtRlI+xg
jNyasCo8+AE700RxfRQDKwCvmX9QulT5j6Re0naBxmKR9pV6nL2n4KaFrt4tef7D
DSpgW+/cwCysdm9pukp+YtMMnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBDpSATC
HceO3YrW66+TmDrRBG6JMB8GA1UdIwQYMBaAFC9MjErMRVxtWkkMQJCzo1Korxy1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDEyOC85MUJDMzc1MjZB
RTgxMUVDQTQ0ODQ2NUJDNEY5QUUwMi9MMHlNU3N4RlhHMWFTUXhBa0xPalVxaXZI
TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0wweU1Tc3hGWEcxYVNReEFrTE9qVXFpdkhMVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MDEyOC85MUJDMzc1MjZBRTgxMUVDQTQ0ODQ2NUJDNEY5QUUwMi9MMHlNU3N4RlhH
MWFTUXhBa0xPalVxaXZITFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB5o2/VjPtcjK0wcaYY4keO7p4qYeoiVOxeTbEAVXH7DbFDCkvUOSCP
CYTruv9LEM3Mhhfg279lelZCib3ybXkFCPjKkf+QnyqWlneTYkGfod7mS/f68OuM
4pO3UmxpYSn2j47TMOz4KhPra1RYyhc0KIAtVIMHuPnk1qIwGl8NA4nDstfYP+2P
LTVF1qYW4UX3tjY4cCAfbGvVPaaaFSakqLuhmDfqmITuxvkcPZFa5NjSCE3txXjA
k5XfWRAMy8OWgWJCgqQvbpb2oeqEWEAd2wzPZCLDf/nUZPdYYYNrgoVxsk9nOtNr
+VI+Ovaqf0cweHK+ZFKoTORvzG3GJ34S
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:17:31 2025 by rpki-client