Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft
File: XTwWiWSSv8hwyKALZou_6VlF-No.mft (raw, json)
Hash identifier: 7usCe9bLfIscxNIZpKS+E/UaZCKLbgNJC6p7FN/YoMA=
Subject key identifier: 4C:77:0D:F2:82:D8:12:85:70:10:C2:3C:01:3C:C5:79:C8:AA:05:8F
Authority key identifier: 5D:3C:16:89:64:92:BF:C8:70:C8:A0:0B:66:8B:BF:E9:59:45:F8:DA
Certificate issuer: /CN=A9136C7C/serialNumber=5D3C16896492BFC870C8A00B668BBFE95945F8DA
Certificate serial: FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft
Manifest number: F8
Signing time: Fri 31 Jan 2025 04:22:01 +0000
Manifest this update: Fri 31 Jan 2025 04:22:00 +0000
Manifest next update: Fri 07 Feb 2025 04:22:00 +0000
Files and hashes: 1: XTwWiWSSv8hwyKALZou_6VlF-No.crl (hash: bL81rLz8xLSkcB1weH+RIZKi0wxJjaqdWiGxvmkKdlE=)
2: DFE29CB669E511EE92E9E35AC4F9AE02.roa (hash: 4bTWH9M590F1oNYI+4009Dgzv1wi5Ma+iLsvHoitUUg=)
3: DF0BED1069E511EE92E9E35AC4F9AE02.roa (hash: KqPIH/H/B9T4h72HKj+O5mzRF+YoT4ryPu+BJg3Ag5E=)
4: 065143FAB71C11EF9C368D66C4F9AE02.roa (hash: +hrQ9Yj+lqvxfGOvfKuirvSWj50hDHN4Y7/dMeMO6sA=)
5: DF7C0A6E69E511EE92E9E35AC4F9AE02.roa (hash: iJRwMxkdNQLeeEVuslXyXtf9B8dgpFmmL7UpHuO43X0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255 (0xff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136C7C/serialNumber=5D3C16896492BFC870C8A00B668BBFE95945F8DA
Validity
Not Before: Jan 31 04:22:00 2025 GMT
Not After : Feb 7 04:22:00 2025 GMT
Subject: CN=679c4fe8-1b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d6:c4:00:75:6d:8d:21:6f:23:7f:53:bf:73:
83:c5:7a:19:94:58:05:2e:b3:4e:6a:6d:43:12:0d:
18:6c:d2:ca:9d:25:56:77:01:1c:6d:c0:43:51:58:
25:97:e2:6e:98:ec:30:fc:db:12:66:2a:a9:3f:89:
14:6d:9b:df:36:db:09:fb:3d:3a:7f:94:4a:7c:e9:
6d:dc:77:5f:e7:62:eb:b7:fd:67:fe:64:9d:5a:6a:
01:47:01:99:c8:c3:ab:28:c2:b9:ca:2c:d5:32:a2:
c0:97:ab:c1:a2:a0:7a:c7:92:f3:32:bd:a5:13:cb:
70:95:d5:61:33:a1:06:8c:0f:ed:34:61:80:88:31:
1b:af:b1:16:26:84:a0:fb:c8:01:e6:f2:ae:be:a8:
63:22:11:ca:86:6e:9c:3b:36:e6:e4:92:a1:80:81:
f4:d6:8a:a6:eb:70:bb:53:ee:65:c3:5f:e4:a0:7f:
cd:1c:2e:e8:23:c9:1e:2f:78:f5:4c:5e:cd:35:d7:
98:f6:3c:ca:b7:9e:c7:c4:a4:9f:9d:07:c2:be:5c:
c9:db:b1:50:0b:0f:20:96:6f:f9:9d:b7:e6:ca:4b:
5f:f1:5d:df:02:ff:4f:f7:f0:6c:d7:d6:4c:60:78:
54:a4:e2:65:e7:0e:dd:b2:4c:2b:94:6f:cf:50:07:
47:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:77:0D:F2:82:D8:12:85:70:10:C2:3C:01:3C:C5:79:C8:AA:05:8F
X509v3 Authority Key Identifier:
keyid:5D:3C:16:89:64:92:BF:C8:70:C8:A0:0B:66:8B:BF:E9:59:45:F8:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:7a:f8:24:18:e1:0e:90:31:14:39:e0:60:8f:13:7a:7e:d4:
8a:da:1c:0c:93:0d:c3:bf:c2:c6:0c:79:8f:bd:76:02:e6:64:
9f:11:77:af:32:fa:d8:72:a1:2f:fb:1c:a3:f8:a3:a0:e6:a4:
c2:3f:08:d8:72:89:8c:04:e2:4a:db:d2:50:56:8a:c5:d6:f2:
5e:3d:03:d5:34:29:26:17:ba:9f:24:ba:ca:03:9f:df:6c:32:
0f:db:e3:61:3f:81:fb:c9:5b:c0:bf:99:77:67:8b:f7:f1:5e:
c9:9a:30:cb:99:aa:04:56:4f:ba:44:f9:ac:db:50:68:30:44:
ea:42:0c:8c:d4:1e:56:30:0f:3f:e2:51:2f:29:8a:99:43:40:
21:70:ef:ca:ee:41:91:6c:d9:be:d8:a5:17:93:10:6f:c2:f3:
a8:cd:05:cb:b6:d6:50:08:35:53:7b:54:4a:2f:53:d7:48:33:
7a:a6:ae:b3:84:a0:36:72:bd:24:b7:72:d3:3c:21:49:54:0c:
0d:bd:f8:35:fe:65:22:ec:9c:4c:e6:a8:4e:fa:82:df:0b:5c:
5e:cf:5a:69:48:ab:2c:78:db:72:d1:3f:63:30:c4:a1:75:72:
fa:87:4b:09:ba:31:40:4e:b4:b5:25:13:c6:4a:4a:5e:51:67:
2a:fa:1e:4f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzZDN0MxMTAvBgNVBAUTKDVEM0MxNjg5NjQ5MkJGQzg3MEM4QTAwQjY2OEJCRkU5
NTk0NUY4REEwHhcNMjUwMTMxMDQyMjAwWhcNMjUwMjA3MDQyMjAwWjAYMRYwFAYD
VQQDEw02NzljNGZlOC0xYjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs9bEAHVtjSFvI39Tv3ODxXoZlFgFLrNOam1DEg0YbNLKnSVWdwEcbcBDUVgl
l+JumOww/NsSZiqpP4kUbZvfNtsJ+z06f5RKfOlt3Hdf52Lrt/1n/mSdWmoBRwGZ
yMOrKMK5yizVMqLAl6vBoqB6x5LzMr2lE8twldVhM6EGjA/tNGGAiDEbr7EWJoSg
+8gB5vKuvqhjIhHKhm6cOzbm5JKhgIH01oqm63C7U+5lw1/koH/NHC7oI8keL3j1
TF7NNdeY9jzKt57HxKSfnQfCvlzJ27FQCw8glm/5nbfmyktf8V3fAv9P9/Bs19ZM
YHhUpOJl5w7dskwrlG/PUAdHSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEx3DfKC
2BKFcBDCPAE8xXnIqgWPMB8GA1UdIwQYMBaAFF08Folkkr/IcMigC2aLv+lZRfja
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkM3Qy8yQjVDQUFFODY5
RTUxMUVFQkI2NjgyNDZDNEY5QUUwMi9YVHdXaVdTU3Y4aHd5S0FMWm91XzZWbEYt
Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hUd1dpV1NTdjhod3lLQUxab3VfNlZsRi1Oby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NkM3Qy8yQjVDQUFFODY5RTUxMUVFQkI2NjgyNDZDNEY5QUUwMi9YVHdXaVdTU3Y4
aHd5S0FMWm91XzZWbEYtTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBYevgkGOEOkDEUOeBgjxN6ftSK2hwMkw3Dv8LGDHmPvXYC5mSfEXev
MvrYcqEv+xyj+KOg5qTCPwjYcomMBOJK29JQVorF1vJePQPVNCkmF7qfJLrKA5/f
bDIP2+NhP4H7yVvAv5l3Z4v38V7JmjDLmaoEVk+6RPms21BoMETqQgyM1B5WMA8/
4lEvKYqZQ0AhcO/K7kGRbNm+2KUXkxBvwvOozQXLttZQCDVTe1RKL1PXSDN6pq6z
hKA2cr0kt3LTPCFJVAwNvfg1/mUi7JxM5qhO+oLfC1xez1ppSKsseNty0T9jMMSh
dXL6h0sJujFATrS1JRPGSkpeUWcq+h5P
-----END CERTIFICATE-----
Generated at Tue May 13 04:20:07 2025 by rpki-client