
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft
File: -o32EYRRvVM4cqyjdiK_c77RlEE.mft (raw, json)
Hash identifier: btZ7iL5TFL/lClKd2YKfVm4HsPKxGLHR7aiO47eBELI=
Subject key identifier: 00:D4:4D:23:A0:4F:5F:E6:ED:6F:9A:0A:2E:4A:45:2E:80:03:CF:C8
Authority key identifier: FA:8D:F6:11:84:51:BD:53:38:72:AC:A3:76:22:BF:73:BE:D1:94:41
Certificate issuer: /CN=A9135450/serialNumber=FA8DF6118451BD533872ACA37622BF73BED19441
Certificate serial: 0222
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft
Manifest number: 021F
Signing time: Fri 31 Jan 2025 02:07:11 +0000
Manifest this update: Fri 31 Jan 2025 02:07:10 +0000
Manifest next update: Fri 07 Feb 2025 02:07:10 +0000
Files and hashes: 1: -o32EYRRvVM4cqyjdiK_c77RlEE.crl (hash: RgZWxVGS55Zje7PH1/eDathZYYSZdNC7q2T7YJOhByQ=)
2: CA57150418B311EDB72D3165C4F9AE02.roa (hash: WFDjDT7W6+N2rDzG8WkRgFqhswGIShiXVMiFtccQ1zc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 546 (0x222)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135450/serialNumber=FA8DF6118451BD533872ACA37622BF73BED19441
Validity
Not Before: Jan 31 02:07:10 2025 GMT
Not After : Feb 7 02:07:10 2025 GMT
Subject: CN=679c304f-91d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a7:86:8c:f1:4e:f7:cb:ee:10:24:28:7d:91:
0c:2c:2e:00:df:81:71:90:f4:5c:29:67:5d:ba:c4:
ee:41:8f:c3:35:97:f3:73:5f:05:e2:5f:df:56:3f:
9b:8a:71:77:21:ab:4f:2c:8d:e5:f0:e1:41:7e:a7:
e0:66:d3:f7:0f:98:a6:35:b3:4f:7c:b7:ba:a8:a0:
ef:ed:f9:1f:47:03:19:fe:c6:4a:1a:e3:b5:6e:31:
31:f5:63:ba:68:a4:09:45:e2:b8:ca:5a:e1:73:25:
dc:d4:f1:73:b2:e9:1a:ca:29:f5:32:1d:90:99:1b:
39:b1:2b:0f:04:cc:89:bc:90:56:e2:4d:ef:a7:ff:
21:58:ab:ee:15:60:ad:06:75:e0:64:75:f9:c2:3c:
f1:91:51:c2:cf:7c:85:e7:7b:4b:27:d3:e0:68:55:
a0:8c:e5:32:a6:e4:ed:92:3d:2c:f9:19:dc:c8:df:
ef:a0:b2:a4:07:c8:67:df:06:cc:81:9d:84:f4:d8:
c1:3c:7f:b2:9a:46:f8:32:ae:c8:81:59:6e:11:bf:
de:65:0b:d5:42:9b:7d:a3:37:1d:4b:86:26:b5:0c:
24:cc:6a:3b:d1:8f:a7:b2:bd:1f:af:39:7e:2c:8f:
68:6a:73:29:e0:b4:9f:ec:3b:20:a3:dc:2f:fb:0d:
d3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D4:4D:23:A0:4F:5F:E6:ED:6F:9A:0A:2E:4A:45:2E:80:03:CF:C8
X509v3 Authority Key Identifier:
keyid:FA:8D:F6:11:84:51:BD:53:38:72:AC:A3:76:22:BF:73:BE:D1:94:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a6:13:34:fd:6c:a9:0d:c4:6a:27:c4:c3:92:39:a9:ad:f5:
62:f8:39:22:37:40:3c:c4:ff:78:09:d6:83:c6:ac:a9:d8:2d:
f1:1d:92:f5:dd:1a:2f:d2:26:a6:08:fe:01:fb:31:2d:4c:e1:
46:23:8e:d8:49:60:a3:ce:15:0c:2b:b8:af:77:13:2a:07:9d:
30:12:65:44:a9:e2:a4:02:9e:99:df:97:0f:38:94:4a:6d:6f:
46:11:fb:91:07:73:4f:08:86:e1:7d:ef:f0:b7:05:27:79:ea:
56:a1:02:a5:64:92:77:a7:d2:61:6e:4e:41:81:f0:27:13:43:
d8:ec:ac:72:f9:ba:1f:3d:d9:ff:a0:d3:fd:3b:1c:cf:8e:de:
36:bd:5d:f6:a0:30:23:a2:ca:67:1d:98:53:89:07:99:af:41:
77:37:db:94:54:20:1c:da:d0:60:a6:0e:b2:25:c9:00:87:f9:
8b:90:f9:ef:8d:21:d4:61:62:d6:6c:e2:4a:de:ed:43:7a:b2:
59:02:e0:39:f2:6d:36:89:c3:fb:d0:65:e7:f7:83:f5:65:89:
e9:2f:2a:2f:79:c8:12:22:af:d4:69:c7:16:f9:36:a8:7a:ff:
f6:84:4d:06:61:5d:0a:2a:83:c0:dd:60:57:96:4f:91:5e:ee:
6d:58:01:e0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzU0NTAxMTAvBgNVBAUTKEZBOERGNjExODQ1MUJENTMzODcyQUNBMzc2MjJCRjcz
QkVEMTk0NDEwHhcNMjUwMTMxMDIwNzEwWhcNMjUwMjA3MDIwNzEwWjAYMRYwFAYD
VQQDEw02NzljMzA0Zi05MWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqaeGjPFO98vuECQofZEMLC4A34FxkPRcKWddusTuQY/DNZfzc18F4l/fVj+b
inF3IatPLI3l8OFBfqfgZtP3D5imNbNPfLe6qKDv7fkfRwMZ/sZKGuO1bjEx9WO6
aKQJReK4ylrhcyXc1PFzsukayin1Mh2QmRs5sSsPBMyJvJBW4k3vp/8hWKvuFWCt
BnXgZHX5wjzxkVHCz3yF53tLJ9PgaFWgjOUypuTtkj0s+RncyN/voLKkB8hn3wbM
gZ2E9NjBPH+ymkb4Mq7IgVluEb/eZQvVQpt9ozcdS4YmtQwkzGo70Y+nsr0frzl+
LI9oanMp4LSf7Dsgo9wv+w3TTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADUTSOg
T1/m7W+aCi5KRS6AA8/IMB8GA1UdIwQYMBaAFPqN9hGEUb1TOHKso3Yiv3O+0ZRB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTQ1MC84NDNEQzY5NjE4
QjExMUVEQkVDNUZFNjNDNEY5QUUwMi8tbzMyRVlSUnZWTTRjcXlqZGlLX2M3N1Js
RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1vMzJFWVJSdlZNNGNxeWpkaUtfYzc3UmxFRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NTQ1MC84NDNEQzY5NjE4QjExMUVEQkVDNUZFNjNDNEY5QUUwMi8tbzMyRVlSUnZW
TTRjcXlqZGlLX2M3N1JsRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA7phM0/WypDcRqJ8TDkjmprfVi+DkiN0A8xP94CdaDxqyp2C3xHZL1
3Rov0iamCP4B+zEtTOFGI47YSWCjzhUMK7ivdxMqB50wEmVEqeKkAp6Z35cPOJRK
bW9GEfuRB3NPCIbhfe/wtwUneepWoQKlZJJ3p9Jhbk5BgfAnE0PY7Kxy+bofPdn/
oNP9OxzPjt42vV32oDAjospnHZhTiQeZr0F3N9uUVCAc2tBgpg6yJckAh/mLkPnv
jSHUYWLWbOJK3u1DerJZAuA58m02icP70GXn94P1ZYnpLyovecgSIq/UaccW+Tao
ev/2hE0GYV0KKoPA3WBXlk+RXu5tWAHg
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:32:17 2025 by rpki-client