Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft
File: 0DLgYUkj9KWCM463Y2w5aErtUe0.mft (raw, json)
Hash identifier: RtmRl7CPGZoPQJVqoWdamavJOtg3Ulw4nMMfuEH8Ft8=
Subject key identifier: 1C:33:74:AD:FE:C0:86:FB:5F:15:7A:7A:64:1D:85:7F:DC:CB:1C:8D
Authority key identifier: D0:32:E0:61:49:23:F4:A5:82:33:8E:B7:63:6C:39:68:4A:ED:51:ED
Certificate issuer: /CN=A913559B/serialNumber=D032E0614923F4A582338EB7636C39684AED51ED
Certificate serial: 102F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft
Manifest number: 1024
Signing time: Fri 31 Jan 2025 17:23:50 +0000
Manifest this update: Fri 31 Jan 2025 17:23:50 +0000
Manifest next update: Fri 07 Feb 2025 17:23:50 +0000
Files and hashes: 1: 0DLgYUkj9KWCM463Y2w5aErtUe0.crl (hash: cyADUbZ31pJVFs0Q0dvW9mx7RoPPzdNpDGhRYgc1nlM=)
2: DBC08AD4457911E9BA84DA51C4F9AE02.roa (hash: 3uEvau4LmZq2DpE2z3DPriV9G2TAsCRZC5hyBAIi04A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4143 (0x102f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913559B/serialNumber=D032E0614923F4A582338EB7636C39684AED51ED
Validity
Not Before: Jan 31 17:23:50 2025 GMT
Not After : Feb 7 17:23:50 2025 GMT
Subject: CN=679d0726-a679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6f:91:df:18:c3:f1:22:b1:a9:fa:a8:98:87:
e0:3c:88:4a:9a:f5:82:3e:77:82:b4:d8:4f:40:26:
2e:cf:36:b5:1a:81:14:e6:a9:e7:71:7a:a4:b1:eb:
79:94:9a:e4:28:cc:79:18:c7:1b:03:2a:dc:11:0b:
98:92:6c:25:1f:c0:68:00:2f:a3:0a:4c:88:ff:24:
b3:d6:fe:d8:1c:ee:a3:05:04:8b:f3:41:e1:ec:d9:
d6:03:8d:47:b8:e5:46:c5:01:19:41:46:9e:c1:5b:
d7:0b:86:5f:e7:e2:7e:22:39:ce:1d:17:94:10:96:
8f:63:8e:39:66:2e:26:63:61:04:4e:d4:61:11:b8:
1a:89:dd:d4:4c:a3:38:51:c4:6c:fa:7d:95:05:83:
df:39:79:f2:d0:62:90:98:7a:41:d2:1f:a8:84:6f:
32:ed:d2:a8:ce:79:23:90:4f:78:83:9a:61:ed:58:
17:ea:b0:23:a8:28:a4:eb:52:32:e1:70:99:a5:f0:
d8:22:9c:c4:c2:26:52:6f:88:f4:d3:52:22:aa:45:
47:7a:00:85:96:f6:b1:44:97:bc:a3:39:c4:08:f4:
9d:18:21:a6:b9:58:8b:81:d0:5c:bc:47:92:04:65:
39:fd:e1:ac:cf:ea:00:ad:ca:18:3d:49:b3:a3:0a:
b3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:33:74:AD:FE:C0:86:FB:5F:15:7A:7A:64:1D:85:7F:DC:CB:1C:8D
X509v3 Authority Key Identifier:
keyid:D0:32:E0:61:49:23:F4:A5:82:33:8E:B7:63:6C:39:68:4A:ED:51:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:de:72:45:8c:d6:ec:f1:4c:40:c3:5f:7e:30:fe:46:ca:47:
81:a3:65:95:e1:0d:9e:7d:62:4c:b6:74:de:16:fe:c9:2f:0f:
37:54:d5:60:45:af:8f:47:81:f9:d5:10:fc:4c:c3:8b:fa:3a:
02:98:2e:60:7d:5b:0e:71:24:2f:13:a8:23:a0:e2:1b:6b:ee:
eb:cb:a3:45:16:ea:41:92:f8:86:1e:bb:27:4e:5b:2d:e6:e4:
d2:56:7b:b8:40:f7:89:96:24:13:f2:a5:5c:60:9f:4e:4e:d7:
e8:68:fd:3a:c6:d9:1f:18:62:95:c5:b3:36:a8:65:5a:2e:1e:
99:64:b9:be:56:f1:e0:1c:45:85:6f:f3:8d:de:73:b3:2b:3f:
74:47:73:49:89:ea:b4:28:50:1c:79:0e:be:f9:29:bd:24:02:
bd:68:78:df:0a:1e:3d:5e:de:c9:5f:e7:d7:88:75:9e:c9:58:
2b:a7:1d:24:57:8e:cd:5a:ed:ae:04:bb:c6:19:6a:9b:97:66:
e9:da:3c:8e:ee:a7:b1:99:96:54:a7:69:3c:fa:bf:da:f4:39:
9a:c6:20:b2:5c:fa:2f:27:62:58:74:5f:5a:e5:36:ac:3b:49:
92:ea:bf:cd:ae:5a:64:c3:a6:47:d9:c4:5d:35:c7:5a:73:71:
b8:f0:62:25
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzU1OUIxMTAvBgNVBAUTKEQwMzJFMDYxNDkyM0Y0QTU4MjMzOEVCNzYzNkMzOTY4
NEFFRDUxRUQwHhcNMjUwMTMxMTcyMzUwWhcNMjUwMjA3MTcyMzUwWjAYMRYwFAYD
VQQDEw02NzlkMDcyNi1hNjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy2+R3xjD8SKxqfqomIfgPIhKmvWCPneCtNhPQCYuzza1GoEU5qnncXqkset5
lJrkKMx5GMcbAyrcEQuYkmwlH8BoAC+jCkyI/ySz1v7YHO6jBQSL80Hh7NnWA41H
uOVGxQEZQUaewVvXC4Zf5+J+IjnOHReUEJaPY445Zi4mY2EETtRhEbgaid3UTKM4
UcRs+n2VBYPfOXny0GKQmHpB0h+ohG8y7dKoznkjkE94g5ph7VgX6rAjqCik61Iy
4XCZpfDYIpzEwiZSb4j001IiqkVHegCFlvaxRJe8oznECPSdGCGmuViLgdBcvEeS
BGU5/eGsz+oArcoYPUmzowqzbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwzdK3+
wIb7XxV6emQdhX/cyxyNMB8GA1UdIwQYMBaAFNAy4GFJI/SlgjOOt2NsOWhK7VHt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTU5Qi82QzFBMEVGQTM2
N0MxMUU5QjI3OEY5M0JDNEY5QUUwMi8wRExnWVVrajlLV0NNNDYzWTJ3NWFFcnRV
ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBETGdZVWtqOUtXQ000NjNZMnc1YUVydFVlMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NTU5Qi82QzFBMEVGQTM2N0MxMUU5QjI3OEY5M0JDNEY5QUUwMi8wRExnWVVrajlL
V0NNNDYzWTJ3NWFFcnRVZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCa3nJFjNbs8UxAw19+MP5GykeBo2WV4Q2efWJMtnTeFv7JLw83VNVg
Ra+PR4H51RD8TMOL+joCmC5gfVsOcSQvE6gjoOIba+7ry6NFFupBkviGHrsnTlst
5uTSVnu4QPeJliQT8qVcYJ9OTtfoaP06xtkfGGKVxbM2qGVaLh6ZZLm+VvHgHEWF
b/ON3nOzKz90R3NJieq0KFAceQ6++Sm9JAK9aHjfCh49Xt7JX+fXiHWeyVgrpx0k
V47NWu2uBLvGGWqbl2bp2jyO7qexmZZUp2k8+r/a9DmaxiCyXPovJ2JYdF9a5Tas
O0mS6r/Nrlpkw6ZH2cRdNcdac3G48GIl
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:52:18 2025 by rpki-client