Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
File: XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft (raw, json)
Hash identifier: /HFilPKLX7oIRs3qMWynh7tSfJptp4YD4Ag8Ha+ayA8=
Subject key identifier: CC:C7:97:0F:37:B2:1F:91:60:E6:B2:15:FA:0D:9C:2C:52:AE:BF:28
Authority key identifier: 5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0
Certificate issuer: /CN=A9142812/serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0
Certificate serial: 0632
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
Manifest number: 0628
Signing time: Thu 30 Jan 2025 22:37:54 +0000
Manifest this update: Thu 30 Jan 2025 22:37:54 +0000
Manifest next update: Thu 06 Feb 2025 22:37:54 +0000
Files and hashes: 1: XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl (hash: Wj1WOcQ8In9H8gJn/pVXOqVBXMJ2/+IdehRYwxQYwVw=)
2: 9ADBEC30DA6411EF95F32A7FC4F9AE02.roa (hash: ag70wfYgobotc0eBfgl6nwgFKbzwbxZlbSBpAf0e7ww=)
3: 9BE20420DA6411EF95F32A7FC4F9AE02.roa (hash: BsYkZFLIqWXVcL7BCbS3LDfkV0RrqTrFNxdoppvTHY4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1586 (0x632)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142812/serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0
Validity
Not Before: Jan 30 22:37:54 2025 GMT
Not After : Feb 6 22:37:54 2025 GMT
Subject: CN=679bff42-a398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:39:15:a9:7f:82:e0:f8:cd:3f:95:82:cf:fd:
0c:2c:b1:11:1c:0a:56:38:15:9d:94:ba:1b:74:0f:
ba:46:e2:ed:bc:b3:90:2d:5e:49:0f:66:0c:ae:e0:
0a:6b:46:2f:d9:77:cf:78:8f:0d:12:6a:ed:9b:d6:
d0:02:ca:fd:83:1b:a9:d4:19:a8:8a:b9:4b:46:5e:
01:4d:e2:48:f0:bf:96:c7:8f:d5:e7:e3:5b:b1:cc:
b1:4f:64:53:fb:78:44:61:3d:f3:5e:08:da:10:7e:
53:3c:fd:46:4d:cf:d6:a4:61:5e:56:0b:19:f3:2e:
67:4a:e4:47:76:3e:a9:92:c3:43:42:3d:56:10:f4:
e8:06:de:ca:1e:a8:d0:33:96:8e:5c:07:4f:37:f6:
4a:73:2e:ea:4e:dd:b1:43:33:cd:d1:e0:e0:86:bb:
34:05:f5:e2:4c:19:77:0a:7d:70:d4:ec:3c:8e:c2:
21:69:a4:a5:99:7a:32:ec:40:8e:67:8a:cf:56:2c:
ab:3c:e8:56:9d:c8:47:8d:12:09:62:6f:44:21:f6:
1d:59:c4:8c:03:51:21:8c:18:dd:22:56:61:7b:21:
cf:03:2c:b2:36:ac:d8:27:78:da:c6:b5:36:1b:be:
ff:93:d4:25:18:b5:36:cb:34:be:d8:d6:35:98:9e:
7b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C7:97:0F:37:B2:1F:91:60:E6:B2:15:FA:0D:9C:2C:52:AE:BF:28
X509v3 Authority Key Identifier:
keyid:5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:86:6a:0f:87:c4:e8:00:22:bf:f8:b8:48:61:ec:15:97:1f:
f6:11:fa:98:08:73:8e:18:82:da:81:aa:0b:80:54:a0:e8:d1:
f2:ba:69:94:8a:b2:3f:18:30:b2:52:59:8d:d8:0c:94:22:9b:
e4:73:2e:5c:fd:4f:56:1d:e2:a1:23:79:e2:37:e9:ac:b7:8b:
cc:a7:52:13:31:84:aa:18:5f:85:08:09:5d:ee:ec:5f:a4:38:
74:53:83:30:00:aa:41:df:1d:d0:ec:a9:07:76:98:f3:7d:93:
78:e3:0a:98:43:43:0c:ff:c8:25:7e:60:94:3d:56:8e:86:79:
a2:b3:b8:8a:b8:a0:86:07:52:7b:68:a1:e6:00:ae:3c:24:52:
46:5e:9b:8b:f6:6e:e4:96:71:0e:c6:8a:40:c6:66:59:60:ca:
5a:ad:f5:2a:5b:e1:4d:bd:62:e4:64:96:7b:78:75:3d:b1:f9:
ec:48:7f:31:a3:b8:7d:52:c9:f6:71:91:2c:4c:dc:61:b6:13:
20:58:b4:96:38:d1:5e:6f:6c:ab:58:db:da:69:d5:26:d1:fb:
d5:99:57:89:b5:bb:78:4b:a5:61:53:cb:31:a5:ef:e3:ad:07:
54:0a:4e:61:2f:00:f5:e9:b8:85:dc:37:43:03:58:e8:2d:fb:
d0:ed:3a:68
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDI4MTIxMTAvBgNVBAUTKDVDNDVBRDAwMEJCRDUwQTcwRjkzQTVDQjcwQjY2Njgw
QTUyOEVEQzAwHhcNMjUwMTMwMjIzNzU0WhcNMjUwMjA2MjIzNzU0WjAYMRYwFAYD
VQQDEw02NzliZmY0Mi1hMzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAozkVqX+C4PjNP5WCz/0MLLERHApWOBWdlLobdA+6RuLtvLOQLV5JD2YMruAK
a0Yv2XfPeI8NEmrtm9bQAsr9gxup1BmoirlLRl4BTeJI8L+Wx4/V5+NbscyxT2RT
+3hEYT3zXgjaEH5TPP1GTc/WpGFeVgsZ8y5nSuRHdj6pksNDQj1WEPToBt7KHqjQ
M5aOXAdPN/ZKcy7qTt2xQzPN0eDghrs0BfXiTBl3Cn1w1Ow8jsIhaaSlmXoy7ECO
Z4rPViyrPOhWnchHjRIJYm9EIfYdWcSMA1EhjBjdIlZheyHPAyyyNqzYJ3jaxrU2
G77/k9QlGLU2yzS+2NY1mJ574wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMzHlw83
sh+RYOayFfoNnCxSrr8oMB8GA1UdIwQYMBaAFFxFrQALvVCnD5Oly3C2ZoClKO3A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjgxMi9DMUU1REQxRTgw
N0IxMUVCQTgzQUMwMURDNEY5QUUwMi9YRVd0QUF1OVVLY1BrNlhMY0xabWdLVW83
Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hFV3RBQXU5VUtjUGs2WExjTFptZ0tVbzdjQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjgxMi9DMUU1REQxRTgwN0IxMUVCQTgzQUMwMURDNEY5QUUwMi9YRVd0QUF1OVVL
Y1BrNlhMY0xabWdLVW83Y0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA0hmoPh8ToACK/+LhIYewVlx/2EfqYCHOOGILagaoLgFSg6NHyummU
irI/GDCyUlmN2AyUIpvkcy5c/U9WHeKhI3niN+mst4vMp1ITMYSqGF+FCAld7uxf
pDh0U4MwAKpB3x3Q7KkHdpjzfZN44wqYQ0MM/8glfmCUPVaOhnmis7iKuKCGB1J7
aKHmAK48JFJGXpuL9m7klnEOxopAxmZZYMparfUqW+FNvWLkZJZ7eHU9sfnsSH8x
o7h9Usn2cZEsTNxhthMgWLSWONFeb2yrWNvaadUm0fvVmVeJtbt4S6VhU8sxpe/j
rQdUCk5hLwD16biF3DdDA1joLfvQ7Tpo
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:44:00 2025 by rpki-client