Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
File: kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft (raw, json)
Hash identifier: G/kvpHWYIJwcGFzQvzYzQuywakPPEGQQ2T3N62pi+98=
Subject key identifier: AB:C4:9B:AB:3B:E3:26:37:0C:3C:AB:86:C7:DB:79:C7:F8:EC:F8:10
Authority key identifier: 90:7B:03:8A:DE:C7:C3:FA:9C:64:93:0E:64:19:B2:FB:BA:B9:C8:1C
Certificate issuer: /CN=A913A7A6/serialNumber=907B038ADEC7C3FA9C64930E6419B2FBBAB9C81C
Certificate serial: 09D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
Manifest number: 09D2
Signing time: Thu 30 Jan 2025 20:01:45 +0000
Manifest this update: Thu 30 Jan 2025 20:01:44 +0000
Manifest next update: Thu 06 Feb 2025 20:01:44 +0000
Files and hashes: 1: kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl (hash: DX7oUatXv/TADdD9l73baHd6PGRRdWCygEpx7p9F6Rg=)
2: D4AECB7A701611EF824F7281C4F9AE02.roa (hash: 05sTqgo+Z4rvsk50BgwNBJM+KFLlXu8LZA40jZLQRSk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2521 (0x9d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A7A6/serialNumber=907B038ADEC7C3FA9C64930E6419B2FBBAB9C81C
Validity
Not Before: Jan 30 20:01:44 2025 GMT
Not After : Feb 6 20:01:44 2025 GMT
Subject: CN=679bdaa9-d2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a3:00:4c:3b:e5:0d:4d:cb:80:01:69:af:cd:
46:b4:82:09:ac:d1:ee:af:db:e5:90:e8:59:fe:8f:
45:81:57:4a:66:cc:72:64:3c:00:1a:95:50:8b:85:
24:7c:45:e9:02:5d:74:cc:45:67:a4:31:e5:53:78:
be:74:b7:8f:37:21:2f:1b:04:e5:20:ce:c1:34:e3:
09:8b:9c:23:15:3c:98:1d:58:3b:5b:d8:66:d0:d1:
d6:46:b8:c1:61:d0:47:ed:cd:3c:20:c2:94:53:ab:
7d:4f:aa:31:7f:63:8b:ad:4b:e3:6f:e4:de:b0:89:
b0:e7:8e:9d:84:69:2f:2f:4b:21:ba:35:d0:0d:06:
83:80:ca:e1:23:41:31:6e:6b:4f:a1:02:c5:30:79:
0c:cb:73:08:65:d9:0e:65:35:ab:3b:74:7f:22:60:
19:7b:06:0a:f1:d4:26:7a:f2:12:13:7d:e9:96:71:
43:60:3d:d8:d0:ec:4a:b4:70:fd:4a:50:d5:69:53:
a5:05:cf:de:97:91:21:73:d4:d3:af:b2:bf:c3:c1:
56:09:03:6b:6c:35:68:8d:85:61:3c:69:20:c5:03:
1a:16:b1:65:3b:fb:77:4d:34:b6:c8:9c:4c:8a:5b:
47:03:55:38:f4:6c:dc:ef:be:62:f2:64:21:dc:9d:
cf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C4:9B:AB:3B:E3:26:37:0C:3C:AB:86:C7:DB:79:C7:F8:EC:F8:10
X509v3 Authority Key Identifier:
keyid:90:7B:03:8A:DE:C7:C3:FA:9C:64:93:0E:64:19:B2:FB:BA:B9:C8:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:28:db:c6:19:8e:db:19:b7:47:37:42:17:7b:b7:67:5a:c5:
f3:36:a7:84:36:0d:01:cd:7e:8a:e4:4b:ad:2f:3c:86:80:1d:
4f:10:9b:36:1d:99:be:2b:02:93:f5:0f:0d:6f:b0:8d:f4:73:
8d:b0:3f:9e:40:95:3b:48:d9:7b:1b:5b:74:a3:e7:9e:71:dd:
0b:ed:4e:03:13:b5:95:25:a7:0f:4e:68:88:71:81:eb:d9:2e:
76:20:af:39:7d:af:fe:e4:dd:0e:bb:fd:b9:95:e4:2f:24:71:
95:1d:1f:3b:e2:86:c7:fc:55:ee:03:29:98:52:77:9a:0c:3f:
14:90:cb:39:f0:73:71:ca:e5:69:43:32:28:fd:26:20:57:61:
da:fd:c8:10:70:fb:83:0a:ca:02:8e:44:bb:d0:f7:db:d9:29:
02:62:ad:dd:ca:20:be:44:e8:ab:2b:16:9e:98:1c:6a:37:08:
d3:ec:8a:2b:04:1c:ea:43:3c:76:98:b3:06:ec:44:b6:fa:6c:
d2:5a:39:16:74:f5:21:ab:bf:1d:ca:34:d5:b7:d8:30:7d:02:
8f:93:9b:6e:c5:fd:26:2c:ca:b1:6d:7e:ff:e6:59:82:88:05:
74:dc:20:3e:b8:c8:b7:2f:2d:aa:a8:16:23:fe:cb:9a:41:ce:
c5:d5:31:34
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0E3QTYxMTAvBgNVBAUTKDkwN0IwMzhBREVDN0MzRkE5QzY0OTMwRTY0MTlCMkZC
QkFCOUM4MUMwHhcNMjUwMTMwMjAwMTQ0WhcNMjUwMjA2MjAwMTQ0WjAYMRYwFAYD
VQQDEw02NzliZGFhOS1kMmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuKMATDvlDU3LgAFpr81GtIIJrNHur9vlkOhZ/o9FgVdKZsxyZDwAGpVQi4Uk
fEXpAl10zEVnpDHlU3i+dLePNyEvGwTlIM7BNOMJi5wjFTyYHVg7W9hm0NHWRrjB
YdBH7c08IMKUU6t9T6oxf2OLrUvjb+TesImw546dhGkvL0shujXQDQaDgMrhI0Ex
bmtPoQLFMHkMy3MIZdkOZTWrO3R/ImAZewYK8dQmevISE33plnFDYD3Y0OxKtHD9
SlDVaVOlBc/el5Ehc9TTr7K/w8FWCQNrbDVojYVhPGkgxQMaFrFlO/t3TTS2yJxM
iltHA1U49Gzc775i8mQh3J3PkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKvEm6s7
4yY3DDyrhsfbecf47PgQMB8GA1UdIwQYMBaAFJB7A4rex8P6nGSTDmQZsvu6ucgc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTdBNi80REI5NDQzQTcz
QjYxMUVBOUI4QzFGNUNDNEY5QUUwMi9rSHNEaXQ3SHdfcWNaSk1PWkJteS03cTV5
QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tIc0RpdDdId19xY1pKTU9aQm15LTdxNXlCdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QTdBNi80REI5NDQzQTczQjYxMUVBOUI4QzFGNUNDNEY5QUUwMi9rSHNEaXQ3SHdf
cWNaSk1PWkJteS03cTV5QncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAHKNvGGY7bGbdHN0IXe7dnWsXzNqeENg0BzX6K5EutLzyGgB1PEJs2
HZm+KwKT9Q8Nb7CN9HONsD+eQJU7SNl7G1t0o+eecd0L7U4DE7WVJacPTmiIcYHr
2S52IK85fa/+5N0Ou/25leQvJHGVHR874obH/FXuAymYUneaDD8UkMs58HNxyuVp
QzIo/SYgV2Ha/cgQcPuDCsoCjkS70Pfb2SkCYq3dyiC+ROirKxaemBxqNwjT7Ior
BBzqQzx2mLMG7ES2+mzSWjkWdPUhq78dyjTVt9gwfQKPk5tuxf0mLMqxbX7/5lmC
iAV03CA+uMi3Ly2qqBYj/suaQc7F1TE0
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:20 2025 by rpki-client