Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
File: rYW34Ys6FvU-kpOKM07Guz64tjA.mft (raw, json)
Hash identifier: K0iAHK1kq4snxcImRsY4rFR2W1IbfJeUMk/bU4pE+Gg=
Subject key identifier: 15:09:B9:9D:7A:79:37:23:74:04:1C:AD:F9:99:20:2A:88:EE:F7:FB
Authority key identifier: AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30
Certificate issuer: /CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
Certificate serial: 0133
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
Manifest number: 012A
Signing time: Fri 31 Jan 2025 03:46:00 +0000
Manifest this update: Fri 31 Jan 2025 03:45:59 +0000
Manifest next update: Fri 07 Feb 2025 03:45:59 +0000
Files and hashes: 1: rYW34Ys6FvU-kpOKM07Guz64tjA.crl (hash: GunhyNQcgIfiR0AmX9rlKUesBZhX57rIGiO9IGe3FP4=)
2: A9321C0A1B2A11EE84F40B3AC4F9AE02.roa (hash: pUYwtk7H4SErO0RmecDKwte6PxJGNXwb2vfQgoNABbY=)
3: A8C501F61B2A11EE84F40B3AC4F9AE02.roa (hash: qxnwJg8IFQzglpT6JsIB6JuKL16Bl6FnMy8IuEKj94o=)
4: B97D647C1A8811EEB5AE963CC4F9AE02.roa (hash: ZeCYlYIZOe18L8obkQDh8oWchb2x2gc6pA83/iYindw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 307 (0x133)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
Validity
Not Before: Jan 31 03:45:59 2025 GMT
Not After : Feb 7 03:45:59 2025 GMT
Subject: CN=679c4777-bb09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:58:56:3b:2c:d7:32:63:45:bf:d6:59:7c:d2:
6e:13:18:2b:e6:65:18:5b:6f:25:9d:7d:65:60:1b:
b5:b4:b2:f8:fb:22:02:7e:9d:99:a6:7c:ae:0c:6d:
da:49:e5:1d:de:06:d0:6f:86:d6:88:ff:5f:9e:85:
0c:21:99:1b:d1:5a:e0:21:37:91:78:4d:b5:3b:04:
9e:58:f1:45:a6:fa:9a:57:60:ba:97:ea:98:c1:a7:
6a:24:b1:a8:00:4b:d9:b8:da:7b:ce:08:2e:98:ab:
8d:20:30:e4:93:35:7f:f7:52:0e:48:af:2e:3f:9c:
f7:e9:79:cd:8b:67:c0:7d:9e:f6:60:81:d3:38:c8:
cc:d2:ef:37:9e:f9:eb:6b:9f:15:5b:ce:87:68:c3:
86:82:84:0f:6e:1a:0e:eb:e5:6a:a2:73:f8:3d:25:
35:c2:17:e1:fd:70:72:46:a8:d5:ac:b2:20:9c:b1:
fb:7c:2e:70:4a:5f:e6:d2:a5:be:9a:72:43:a0:70:
64:46:d5:1f:4c:06:46:b1:5a:1b:cc:50:21:e7:30:
4c:65:74:2e:0f:95:d0:0b:b4:0f:0b:ec:46:80:41:
03:bb:07:52:e7:8c:b7:93:bf:01:42:9c:27:d9:f3:
45:54:2a:2b:9f:33:10:48:d7:f7:47:f6:63:53:f4:
48:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:09:B9:9D:7A:79:37:23:74:04:1C:AD:F9:99:20:2A:88:EE:F7:FB
X509v3 Authority Key Identifier:
keyid:AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:aa:27:2c:e3:ff:f5:d9:32:bf:e0:59:eb:41:13:46:4c:d9:
ab:89:5a:05:58:0a:4c:e9:2e:db:7d:0b:f6:bb:f8:3c:c1:a6:
df:fd:b4:56:62:23:4a:d7:82:44:86:39:00:db:a7:af:15:48:
89:b6:40:d7:c0:51:5c:b3:d2:71:e4:d0:38:10:a6:b2:1c:11:
79:e1:84:a7:b5:43:b2:f8:a2:d9:4b:9e:0d:27:02:21:6d:07:
1c:8e:0c:17:cd:ed:c5:5f:94:f4:36:fa:a2:4f:e1:45:0b:90:
97:08:8c:62:d3:d7:63:0d:0a:19:ea:76:b8:79:c6:33:f5:bf:
4d:33:6f:b6:0e:99:03:a7:aa:87:61:a7:ee:13:d8:71:f6:b5:
e1:71:02:3e:c7:3f:90:94:f7:af:5d:76:1e:36:79:7c:f1:cc:
a7:06:c7:25:15:9d:9d:54:5d:f6:8a:91:b4:60:d0:eb:9d:bc:
a9:1d:e8:ab:9c:9a:09:39:e8:f0:23:1a:0d:5d:12:4f:74:c8:
30:df:d9:04:de:84:eb:b5:be:cd:77:4e:e5:e9:94:fa:3b:d9:
eb:f6:34:2c:ce:f2:34:44:8a:9d:65:cb:ed:a6:85:93:d3:c1:
3f:da:52:b6:17:57:e8:37:32:59:e2:5c:41:56:aa:db:30:67:
d2:f9:45:13
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0ZCQjIxMTAvBgNVBAUTKEFEODVCN0UxOEIzQTE2RjUzRTkyOTM4QTMzNEVDNkJC
M0VCOEI2MzAwHhcNMjUwMTMxMDM0NTU5WhcNMjUwMjA3MDM0NTU5WjAYMRYwFAYD
VQQDEw02NzljNDc3Ny1iYjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtFhWOyzXMmNFv9ZZfNJuExgr5mUYW28lnX1lYBu1tLL4+yICfp2ZpnyuDG3a
SeUd3gbQb4bWiP9fnoUMIZkb0VrgITeReE21OwSeWPFFpvqaV2C6l+qYwadqJLGo
AEvZuNp7zggumKuNIDDkkzV/91IOSK8uP5z36XnNi2fAfZ72YIHTOMjM0u83nvnr
a58VW86HaMOGgoQPbhoO6+VqonP4PSU1whfh/XByRqjVrLIgnLH7fC5wSl/m0qW+
mnJDoHBkRtUfTAZGsVobzFAh5zBMZXQuD5XQC7QPC+xGgEEDuwdS54y3k78BQpwn
2fNFVCornzMQSNf3R/ZjU/RI9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBUJuZ16
eTcjdAQcrfmZICqI7vf7MB8GA1UdIwQYMBaAFK2Ft+GLOhb1PpKTijNOxrs+uLYw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkJCMi8wRTI3MDU0NDFB
ODYxMUVFQTBBQTg3MTZDNEY5QUUwMi9yWVczNFlzNkZ2VS1rcE9LTTA3R3V6NjR0
akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JZVzM0WXM2RnZVLWtwT0tNMDdHdXo2NHRqQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RkJCMi8wRTI3MDU0NDFBODYxMUVFQTBBQTg3MTZDNEY5QUUwMi9yWVczNFlzNkZ2
VS1rcE9LTTA3R3V6NjR0akEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDFqics4//12TK/4FnrQRNGTNmriVoFWApM6S7bfQv2u/g8wabf/bRW
YiNK14JEhjkA26evFUiJtkDXwFFcs9Jx5NA4EKayHBF54YSntUOy+KLZS54NJwIh
bQccjgwXze3FX5T0NvqiT+FFC5CXCIxi09djDQoZ6na4ecYz9b9NM2+2DpkDp6qH
YafuE9hx9rXhcQI+xz+QlPevXXYeNnl88cynBsclFZ2dVF32ipG0YNDrnbypHeir
nJoJOejwIxoNXRJPdMgw39kE3oTrtb7Nd07l6ZT6O9nr9jQszvI0RIqdZcvtpoWT
08E/2lK2F1foNzJZ4lxBVqrbMGfS+UUT
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:28:30 2025 by rpki-client