Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft
File: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft (raw, json)
Hash identifier: c3RwJGWabYBkS49ETkBRSinG4qwbbWuzH0brrhO1PEc=
Subject key identifier: B1:AA:A1:AB:81:0C:EF:D2:C5:A4:71:7B:F6:B8:69:56:03:B6:3B:67
Authority key identifier: DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55
Certificate issuer: /CN=A9133A27/serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955
Certificate serial: 9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft
Manifest number: 99
Signing time: Fri 31 Jan 2025 05:27:56 +0000
Manifest this update: Fri 31 Jan 2025 05:27:56 +0000
Manifest next update: Fri 07 Feb 2025 05:27:56 +0000
Files and hashes: 1: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl (hash: b7vfekDeLfCn+RTwYozDKtZfRHAJoosPUDCKp3cIV6A=)
2: 90195128FAC411EEB1CDF882C4F9AE02.roa (hash: zKqmtZ3hPlN9AWLx9aGbTTOZenzY439Vd/KzhKuSP5I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155 (0x9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133A27/serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955
Validity
Not Before: Jan 31 05:27:56 2025 GMT
Not After : Feb 7 05:27:56 2025 GMT
Subject: CN=679c5f5c-b8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:da:68:11:17:72:82:46:78:04:23:bc:c6:ca:
85:03:b7:ae:71:9a:28:84:12:ef:a2:b6:83:70:bc:
fc:24:3b:ee:c2:65:87:c8:8d:0a:6d:36:63:10:8a:
2a:6a:eb:12:18:b8:82:e0:0e:4b:7d:49:fc:c4:d7:
e7:58:41:05:e4:a3:7e:c2:c4:5b:89:d9:1d:c3:b8:
09:f6:10:8b:d8:2a:66:ac:b4:6b:be:c8:53:fa:78:
a1:91:2f:d8:23:aa:21:0b:8f:6b:e3:67:c8:09:c7:
44:90:7a:51:ce:be:6f:46:f1:6b:82:8b:3d:dc:ea:
36:03:b7:b7:1c:b3:d2:65:84:c2:31:48:9f:e6:92:
3f:b4:05:61:43:7f:6a:83:f9:7b:b7:75:25:04:b6:
3c:af:7d:a7:c4:87:8b:c8:eb:9c:df:4d:6f:4d:8c:
5b:a7:af:04:37:51:14:90:79:cb:ed:29:a8:b3:20:
48:28:55:5f:f0:0f:18:6f:42:1e:01:46:df:6a:ab:
bf:e5:e1:0a:0d:f0:9c:e0:86:73:46:95:6d:54:cf:
8b:a3:60:c8:71:30:f0:b6:fd:52:3a:2f:76:e1:88:
b2:ab:1f:57:d2:16:ef:23:a3:4f:e8:fb:1e:20:db:
dd:be:fb:18:05:11:96:74:b8:0c:58:2d:2b:ad:01:
04:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AA:A1:AB:81:0C:EF:D2:C5:A4:71:7B:F6:B8:69:56:03:B6:3B:67
X509v3 Authority Key Identifier:
keyid:DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:8c:ae:48:59:90:21:b7:ba:9d:66:ab:23:66:a3:c3:5d:89:
2f:56:32:98:80:c6:b7:92:7e:49:42:54:7d:19:43:43:e8:22:
2c:35:10:e7:ff:95:81:6e:05:6d:09:b9:91:7d:bd:40:10:11:
fb:8d:df:82:27:bd:9c:25:d8:8f:54:1a:31:07:9a:48:d3:4d:
8d:07:d2:1f:78:bf:46:8b:d0:0a:80:18:57:13:85:68:0d:29:
ab:98:88:55:43:96:a8:1d:a3:5c:06:91:31:5c:b0:66:75:07:
4d:77:67:ce:0d:17:a2:81:46:62:a0:c1:66:00:a2:34:e3:47:
c6:36:91:2c:59:6c:db:1a:1a:fc:ea:50:bc:24:bb:f4:e0:f9:
26:a6:02:49:b7:04:a2:15:83:44:05:11:9c:8a:f9:58:68:f8:
4f:d9:9b:1c:78:61:ef:16:70:ff:cd:96:cb:47:13:70:e1:05:
2a:8f:09:33:31:74:e1:0b:0e:3e:d3:98:b8:7f:f8:84:f9:76:
e8:7f:2b:98:44:b2:31:91:c3:b8:11:a3:b9:8f:2f:1a:cc:30:
5e:1f:f7:03:c4:7a:5e:68:6c:d0:1a:83:3d:8c:6a:14:40:94:
22:2f:69:fd:2a:4e:5b:8e:9c:18:ea:09:a0:55:21:77:9e:a9:
05:c0:f6:b3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzNBMjcxMTAvBgNVBAUTKERDQUQ2NDQ3MDVDRjE4QzI3RDdGQzIwMTczODVEMjNF
RTcyMDM5NTUwHhcNMjUwMTMxMDUyNzU2WhcNMjUwMjA3MDUyNzU2WjAYMRYwFAYD
VQQDEw02NzljNWY1Yy1iOGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAydpoERdygkZ4BCO8xsqFA7eucZoohBLvoraDcLz8JDvuwmWHyI0KbTZjEIoq
ausSGLiC4A5LfUn8xNfnWEEF5KN+wsRbidkdw7gJ9hCL2CpmrLRrvshT+nihkS/Y
I6ohC49r42fICcdEkHpRzr5vRvFrgos93Oo2A7e3HLPSZYTCMUif5pI/tAVhQ39q
g/l7t3UlBLY8r32nxIeLyOuc301vTYxbp68EN1EUkHnL7SmosyBIKFVf8A8Yb0Ie
AUbfaqu/5eEKDfCc4IZzRpVtVM+Lo2DIcTDwtv1SOi924Yiyqx9X0hbvI6NP6Pse
INvdvvsYBRGWdLgMWC0rrQEE5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGqoauB
DO/SxaRxe/a4aVYDtjtnMB8GA1UdIwQYMBaAFNytZEcFzxjCfX/CAXOF0j7nIDlV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0EyNy9FMjY2NDZFNEY3
MDMxMUVFQTMxRjVEN0FDNEY5QUUwMi8zSzFrUndYUEdNSjlmOElCYzRYU1B1Y2dP
VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNLMWtSd1hQR01KOWY4SUJjNFhTUHVjZ09WVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
M0EyNy9FMjY2NDZFNEY3MDMxMUVFQTMxRjVEN0FDNEY5QUUwMi8zSzFrUndYUEdN
SjlmOElCYzRYU1B1Y2dPVlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAojK5IWZAht7qdZqsjZqPDXYkvVjKYgMa3kn5JQlR9GUND6CIsNRDn
/5WBbgVtCbmRfb1AEBH7jd+CJ72cJdiPVBoxB5pI002NB9IfeL9Gi9AKgBhXE4Vo
DSmrmIhVQ5aoHaNcBpExXLBmdQdNd2fODReigUZioMFmAKI040fGNpEsWWzbGhr8
6lC8JLv04PkmpgJJtwSiFYNEBRGcivlYaPhP2ZsceGHvFnD/zZbLRxNw4QUqjwkz
MXThCw4+05i4f/iE+XbofyuYRLIxkcO4EaO5jy8azDBeH/cDxHpeaGzQGoM9jGoU
QJQiL2n9Kk5bjpwY6gmgVSF3nqkFwPaz
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:44:50 2025 by rpki-client