Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft
File: t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft (raw, json)
Hash identifier: tl7gpfKM/PuKC4NW2jWzdRvjJRHOm+YZBK8i2mjvp5Q=
Subject key identifier: B1:24:75:DA:49:7A:F7:B1:E4:B6:4B:32:3C:7A:A5:7F:3F:4D:42:BA
Authority key identifier: B7:C9:79:5F:FF:7F:69:CF:33:B7:65:1C:6B:99:26:A7:30:D9:75:9C
Certificate issuer: /CN=A9142DB4/serialNumber=B7C9795FFF7F69CF33B7651C6B9926A730D9759C
Certificate serial: 0101
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft
Manifest number: FE
Signing time: Fri 31 Jan 2025 04:16:36 +0000
Manifest this update: Fri 31 Jan 2025 04:16:36 +0000
Manifest next update: Fri 07 Feb 2025 04:16:36 +0000
Files and hashes: 1: t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl (hash: xJ6QEKeB2M2ApUHnv5h0BchDZ09SG/bPCvG7UfepxVg=)
2: 9ADC9C8A5CE211EEBA4DBD15C4F9AE02.roa (hash: icEjBAvtyS7bBSn0NXrfM0VKf/GFl7OVPnJ58XOd/T8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257 (0x101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142DB4/serialNumber=B7C9795FFF7F69CF33B7651C6B9926A730D9759C
Validity
Not Before: Jan 31 04:16:36 2025 GMT
Not After : Feb 7 04:16:36 2025 GMT
Subject: CN=679c4ea4-308a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ef:4a:f3:c7:10:dc:31:cf:c2:8e:c1:66:3c:
04:3c:0b:17:be:3c:2b:e4:aa:77:b7:1d:ee:c7:11:
47:94:32:b8:98:3b:f1:51:34:5a:50:e0:f7:9e:3d:
b2:6c:a6:35:35:c9:9e:c1:c2:55:cb:9b:3b:79:80:
9e:ae:28:e0:8e:70:4c:f7:db:7b:31:fb:f9:56:b5:
72:50:ff:b1:ce:bc:52:a4:e7:dd:67:50:17:76:5e:
99:a8:3b:eb:f6:a8:6d:36:3b:07:f9:13:fd:a6:15:
3f:74:01:7c:99:1b:69:6f:71:63:85:5d:4d:ef:1c:
00:7a:a8:1c:98:a7:ea:db:70:e6:4c:66:eb:9f:bd:
cd:78:a6:d5:68:59:7c:2b:f8:82:3d:e4:51:42:e0:
3a:be:ef:6e:cf:93:cd:e8:6e:f7:ef:4e:1d:47:4d:
f5:4d:e0:9a:dd:fb:20:78:e7:12:0e:14:1d:0f:61:
dc:06:4c:33:c8:49:2d:bd:24:d7:2b:03:e1:84:f7:
38:dc:13:a6:ec:a9:46:78:02:53:0b:c2:1f:eb:16:
8c:64:5e:41:a6:2e:55:8b:c5:ac:19:34:a7:9b:9d:
44:e4:25:9d:b1:de:79:fe:55:6c:d7:22:d7:79:cd:
ac:73:0b:1d:fa:f6:9b:87:79:99:6a:fb:5b:63:e7:
74:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:24:75:DA:49:7A:F7:B1:E4:B6:4B:32:3C:7A:A5:7F:3F:4D:42:BA
X509v3 Authority Key Identifier:
keyid:B7:C9:79:5F:FF:7F:69:CF:33:B7:65:1C:6B:99:26:A7:30:D9:75:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e9:ae:c8:77:96:53:06:1e:f5:57:70:33:df:38:e3:01:ff:a4:
51:1c:d0:73:17:58:65:b3:38:5a:0f:00:17:ee:1b:bf:13:94:
9d:64:62:4b:f1:1c:67:9e:8e:f6:31:6f:56:87:d8:04:ac:4a:
69:27:4c:a4:bb:60:f2:48:d6:47:2e:6d:62:c1:09:4b:a1:df:
2a:91:85:3b:6f:67:80:1b:dd:51:7c:2e:2a:24:e6:0f:82:70:
13:d0:88:3b:78:57:06:6f:75:58:fd:74:51:0e:53:99:7a:58:
e1:27:9a:44:a7:0c:fd:bf:c1:69:34:64:43:1f:11:d6:9b:f7:
44:56:53:69:7d:20:7f:63:d1:72:e2:31:2a:fa:b7:2d:fe:0d:
9a:d6:ae:ac:2e:a4:26:84:e6:02:d9:1d:d1:a2:dd:07:97:0f:
8e:0b:8d:64:01:23:59:85:e4:07:ce:29:73:3b:01:3d:51:53:
f8:d4:ef:c6:af:8c:36:f1:2b:05:d7:c3:2e:ad:62:58:81:5e:
8d:23:a3:aa:49:f9:89:15:75:f7:23:fd:ba:aa:bc:9f:9a:d9:
3f:6d:14:73:15:92:42:e6:c8:84:a9:35:f9:17:04:4e:bf:02:
e0:28:42:66:22:2f:05:a1:3e:c6:1f:fe:ce:4f:fd:42:45:ff:
88:1e:c9:18
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDJEQjQxMTAvBgNVBAUTKEI3Qzk3OTVGRkY3RjY5Q0YzM0I3NjUxQzZCOTkyNkE3
MzBEOTc1OUMwHhcNMjUwMTMxMDQxNjM2WhcNMjUwMjA3MDQxNjM2WjAYMRYwFAYD
VQQDEw02NzljNGVhNC0zMDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtu9K88cQ3DHPwo7BZjwEPAsXvjwr5Kp3tx3uxxFHlDK4mDvxUTRaUOD3nj2y
bKY1NcmewcJVy5s7eYCerijgjnBM99t7Mfv5VrVyUP+xzrxSpOfdZ1AXdl6ZqDvr
9qhtNjsH+RP9phU/dAF8mRtpb3FjhV1N7xwAeqgcmKfq23DmTGbrn73NeKbVaFl8
K/iCPeRRQuA6vu9uz5PN6G73704dR031TeCa3fsgeOcSDhQdD2HcBkwzyEktvSTX
KwPhhPc43BOm7KlGeAJTC8If6xaMZF5Bpi5Vi8WsGTSnm51E5CWdsd55/lVs1yLX
ec2scwsd+vabh3mZavtbY+d0fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLEkddpJ
evex5LZLMjx6pX8/TUK6MB8GA1UdIwQYMBaAFLfJeV//f2nPM7dlHGuZJqcw2XWc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkRCNC8zQzA5QjNGQTVD
RTIxMUVFQUY0MkRFNjJDNEY5QUUwMi90OGw1WF85X2FjOHp0MlVjYTVrbXB6RFpk
WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Q4bDVYXzlfYWM4enQyVWNhNWttcHpEWmRady5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MkRCNC8zQzA5QjNGQTVDRTIxMUVFQUY0MkRFNjJDNEY5QUUwMi90OGw1WF85X2Fj
OHp0MlVjYTVrbXB6RFpkWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDprsh3llMGHvVXcDPfOOMB/6RRHNBzF1hlszhaDwAX7hu/E5SdZGJL
8Rxnno72MW9Wh9gErEppJ0yku2DySNZHLm1iwQlLod8qkYU7b2eAG91RfC4qJOYP
gnAT0Ig7eFcGb3VY/XRRDlOZeljhJ5pEpwz9v8FpNGRDHxHWm/dEVlNpfSB/Y9Fy
4jEq+rct/g2a1q6sLqQmhOYC2R3Rot0Hlw+OC41kASNZheQHzilzOwE9UVP41O/G
r4w28SsF18MurWJYgV6NI6OqSfmJFXX3I/26qryfmtk/bRRzFZJC5siEqTX5FwRO
vwLgKEJmIi8FoT7GH/7OT/1CRf+IHskY
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:56:58 2025 by rpki-client