Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
File: T4QeODPgrG_hvu69ABI10VKOzno.mft (raw, json)
Hash identifier: uYt7e9+qObc66TZZGL9arnyIznRI6/eNteAOZlFUYlw=
Subject key identifier: 87:11:B5:AB:E4:4B:41:18:5A:D8:1E:A0:38:EB:10:E0:34:D7:5E:98
Authority key identifier: 4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A
Certificate issuer: /CN=A913AF6A/serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A
Certificate serial: C7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
Manifest number: C6
Signing time: Fri 31 Jan 2025 04:52:33 +0000
Manifest this update: Fri 31 Jan 2025 04:52:33 +0000
Manifest next update: Fri 07 Feb 2025 04:52:33 +0000
Files and hashes: 1: T4QeODPgrG_hvu69ABI10VKOzno.crl (hash: P8fjZmc9nLO6v2S+wyY9/W9l81PgczffYTBsFBlRKmw=)
2: 658B1AC8AE4711EE8C130419C4F9AE02.roa (hash: OPf1O5F2znXgxow/SuyykvjROqP8J2goN42jw3ahWbw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199 (0xc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AF6A/serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A
Validity
Not Before: Jan 31 04:52:33 2025 GMT
Not After : Feb 7 04:52:33 2025 GMT
Subject: CN=679c5711-c1c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:eb:00:cd:ec:08:65:d3:b0:64:e4:36:d6:c5:
36:8e:ae:18:c9:9b:a9:59:33:b7:47:6f:29:c7:f7:
6a:ab:21:02:0f:8a:66:ed:05:38:a2:11:2c:95:16:
5f:92:20:71:fc:85:54:39:5d:19:75:01:b3:a9:d9:
d3:24:11:ca:cc:3a:7e:f1:30:53:54:cf:e2:f6:22:
d0:1a:2c:cd:b7:2b:bd:9a:99:c4:e2:ea:2e:f5:e4:
06:f5:5e:df:e8:ef:42:7b:78:dd:f5:10:4a:93:9b:
16:93:68:38:b4:55:28:45:d4:e2:e4:4e:1a:3a:fa:
7e:31:c5:14:53:2c:de:25:72:da:d8:3e:7c:af:72:
31:35:dd:cb:5a:c7:11:5f:b3:84:10:03:7e:bb:1b:
e2:7f:b5:43:e0:99:27:dc:a1:3e:7b:8a:d6:d2:ac:
f6:a3:b8:e5:c4:21:8f:40:08:fe:bb:e3:33:67:54:
8c:20:19:8b:f8:a6:de:c3:49:89:3a:69:9c:17:f2:
77:31:f7:8c:fb:2e:5f:16:9a:2c:99:32:98:f2:a5:
ce:57:e2:4c:0a:65:7f:24:9d:c1:3f:45:1c:4f:fa:
b5:86:93:d3:6b:c6:22:3d:b0:64:70:7b:d3:33:f9:
1b:6a:b0:8d:bb:28:5b:45:1b:65:48:7f:ee:d1:91:
bf:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:11:B5:AB:E4:4B:41:18:5A:D8:1E:A0:38:EB:10:E0:34:D7:5E:98
X509v3 Authority Key Identifier:
keyid:4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c4:d3:f9:5d:e3:34:1e:86:cc:ab:28:0b:c4:b5:be:d4:19:
ab:4b:60:ae:65:c2:66:c0:0a:4e:4c:2b:d2:67:ce:01:3a:3f:
8f:ab:0d:88:58:b5:29:eb:32:42:8b:85:62:6c:e5:e2:a1:2b:
68:9a:cb:62:a1:39:de:3f:99:e2:67:86:dd:d5:6e:e1:15:8c:
cd:05:e0:c4:89:ef:21:4f:11:a8:40:bf:23:ed:e7:d4:c1:a3:
5e:c0:82:f9:86:54:e0:e6:6f:d0:fd:a3:f2:44:be:07:a2:2f:
91:38:4f:76:3f:96:76:55:af:84:eb:4e:f8:9d:06:e3:8c:ca:
ca:d0:9f:94:41:f4:16:7e:00:fb:34:6c:e2:03:7f:da:05:7f:
c7:f2:fd:2e:2e:da:0a:44:10:e2:b0:72:d5:ba:6e:69:82:86:
2c:e9:d2:08:7d:39:6b:b6:9b:fc:5f:2a:6b:e3:62:c3:80:f9:
57:fa:95:b1:7e:1f:dc:04:bf:fe:cf:bc:d9:b8:40:e0:7d:50:
e0:34:d7:81:c7:17:ad:4f:c1:55:2c:f2:1f:64:76:2a:b4:4b:
7d:96:c5:8c:22:af:ff:e4:89:66:6b:57:34:17:60:6e:e9:39:
28:eb:d5:d3:db:33:8c:ac:a0:09:6d:84:8a:1c:68:2d:69:21:
b5:3d:2f:c2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0FGNkExMTAvBgNVBAUTKDRGODQxRTM4MzNFMEFDNkZFMUJFRUVCRDAwMTIzNUQx
NTI4RUNFN0EwHhcNMjUwMTMxMDQ1MjMzWhcNMjUwMjA3MDQ1MjMzWjAYMRYwFAYD
VQQDEw02NzljNTcxMS1jMWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw+sAzewIZdOwZOQ21sU2jq4YyZupWTO3R28px/dqqyECD4pm7QU4ohEslRZf
kiBx/IVUOV0ZdQGzqdnTJBHKzDp+8TBTVM/i9iLQGizNtyu9mpnE4uou9eQG9V7f
6O9Ce3jd9RBKk5sWk2g4tFUoRdTi5E4aOvp+McUUUyzeJXLa2D58r3IxNd3LWscR
X7OEEAN+uxvif7VD4Jkn3KE+e4rW0qz2o7jlxCGPQAj+u+MzZ1SMIBmL+Kbew0mJ
OmmcF/J3MfeM+y5fFposmTKY8qXOV+JMCmV/JJ3BP0UcT/q1hpPTa8YiPbBkcHvT
M/kbarCNuyhbRRtlSH/u0ZG/0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIcRtavk
S0EYWtgeoDjrEOA0116YMB8GA1UdIwQYMBaAFE+EHjgz4Kxv4b7uvQASNdFSjs56
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUY2QS84MzdDRDM0NkFF
NDIxMUVFQkY2NERBNjlDNEY5QUUwMi9UNFFlT0RQZ3JHX2h2dTY5QUJJMTBWS096
bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1Q0UWVPRFBnckdfaHZ1NjlBQkkxMFZLT3puby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QUY2QS84MzdDRDM0NkFFNDIxMUVFQkY2NERBNjlDNEY5QUUwMi9UNFFlT0RQZ3JH
X2h2dTY5QUJJMTBWS096bm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAtxNP5XeM0HobMqygLxLW+1BmrS2CuZcJmwApOTCvSZ84BOj+Pqw2I
WLUp6zJCi4VibOXioStomstioTneP5niZ4bd1W7hFYzNBeDEie8hTxGoQL8j7efU
waNewIL5hlTg5m/Q/aPyRL4Hoi+ROE92P5Z2Va+E6074nQbjjMrK0J+UQfQWfgD7
NGziA3/aBX/H8v0uLtoKRBDisHLVum5pgoYs6dIIfTlrtpv8Xypr42LDgPlX+pWx
fh/cBL/+z7zZuEDgfVDgNNeBxxetT8FVLPIfZHYqtEt9lsWMIq//5Ilma1c0F2Bu
6Tko69XT2zOMrKAJbYSKHGgtaSG1PS/C
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:49:47 2025 by rpki-client