Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft
File: tUMZgoesmRJSAHhil7k2l_jySK4.mft (raw, json)
Hash identifier: Gq43nzdcGdZE+8wX1PTSjMzZOodF21XvfJbBp5pCJY8=
Subject key identifier: 62:A6:6B:D9:B2:99:99:5A:5B:41:4B:27:F6:25:93:7D:F8:FE:83:18
Authority key identifier: B5:43:19:82:87:AC:99:12:52:00:78:62:97:B9:36:97:F8:F2:48:AE
Certificate issuer: /CN=A9142DBC/serialNumber=B543198287AC99125200786297B93697F8F248AE
Certificate serial: 0BFD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft
Manifest number: 0BF1
Signing time: Fri 31 Jan 2025 18:35:43 +0000
Manifest this update: Fri 31 Jan 2025 18:35:42 +0000
Manifest next update: Fri 07 Feb 2025 18:35:42 +0000
Files and hashes: 1: tUMZgoesmRJSAHhil7k2l_jySK4.crl (hash: HkhK40qTlcVqZzLecGnv3iT9CC67tWhaZSqH+vACGqc=)
2: DBE709060AA511EA86C8E31DC4F9AE02.roa (hash: zgjsHos2MHOxvntym+ulSXBT66zLuQ8zyiMRNeqJYvE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3069 (0xbfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142DBC/serialNumber=B543198287AC99125200786297B93697F8F248AE
Validity
Not Before: Jan 31 18:35:42 2025 GMT
Not After : Feb 7 18:35:42 2025 GMT
Subject: CN=679d17fe-b15c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:77:29:48:a6:c5:f8:80:31:ab:ea:45:ea:48:
67:01:f0:5f:af:c5:2d:52:6b:ca:b2:cf:9a:d6:a2:
1e:a0:57:98:81:c6:2d:f4:f7:e2:95:d4:ea:24:82:
fc:91:50:37:3a:89:45:6d:d9:bd:d0:6f:11:22:57:
46:56:a2:36:d7:5b:77:6b:1f:6a:51:40:5a:f5:a4:
ea:4c:bd:9d:eb:2f:85:58:d2:33:56:18:34:34:1d:
3f:63:87:ec:fb:0d:e0:6b:c6:f8:bc:a4:c4:53:18:
c5:fe:31:60:96:21:25:e5:df:91:79:0f:1e:2a:70:
73:77:bf:cf:7b:c6:f9:86:b4:7c:fc:70:47:f3:97:
30:3f:b5:39:da:f7:51:e3:b9:06:8f:c6:e9:c6:e4:
61:85:fb:6a:ad:66:d4:66:03:b8:b7:43:25:18:b3:
ea:56:e0:89:59:ab:94:ab:63:37:4f:44:59:3b:2e:
76:e9:e3:c0:5a:17:19:29:66:e1:e1:87:c0:56:3c:
a4:11:6f:4a:f5:02:18:19:a4:9d:af:53:d4:2c:32:
bc:f0:37:57:91:a1:86:a4:97:ac:ef:d6:69:ef:7c:
a7:87:16:a0:c3:47:1f:2c:45:4e:1c:05:43:6a:26:
ba:fd:11:e3:a5:1f:5f:cb:cf:54:d5:e9:a4:95:d3:
d8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A6:6B:D9:B2:99:99:5A:5B:41:4B:27:F6:25:93:7D:F8:FE:83:18
X509v3 Authority Key Identifier:
keyid:B5:43:19:82:87:AC:99:12:52:00:78:62:97:B9:36:97:F8:F2:48:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:bd:a7:bd:05:57:b2:f9:55:f6:19:70:88:37:a8:26:2a:8a:
22:3d:2f:7e:03:55:39:a4:a2:b3:2d:96:f5:67:73:ef:5c:39:
21:32:51:dc:4e:54:f9:99:f0:cb:c1:a7:78:8a:b1:07:a3:06:
98:1e:6a:b5:ad:9d:b3:39:cd:85:61:75:e7:92:4b:70:6a:08:
a8:2d:46:ad:39:e2:eb:28:99:1e:7b:37:54:eb:3e:a3:05:45:
1a:f1:87:9a:b1:c7:6d:9d:11:94:e8:25:4e:c9:f1:3b:fd:bc:
6b:76:f4:ee:e4:2e:cd:b8:e3:e1:1d:cc:9d:76:b4:00:93:ea:
bd:bb:58:e0:a8:fc:40:36:bb:c2:61:d9:f7:83:2a:8a:4b:eb:
54:34:cb:83:97:1f:d8:d5:ec:10:ef:97:d7:f7:7b:55:c1:eb:
75:32:8a:1f:78:11:20:e7:6c:51:1e:22:b7:e8:a4:d9:4d:de:
5b:70:ce:28:fd:58:4c:b3:4e:c9:42:ee:59:ef:ff:e4:28:39:
5b:1b:b1:42:0a:cc:6b:ad:36:bf:7c:3f:fb:c7:19:0b:c3:ea:
6d:6e:3a:e6:ea:01:d4:66:74:ef:ec:18:1a:a9:9c:c5:d7:a3:
ff:6c:85:44:03:62:7e:36:76:da:aa:f7:2d:15:4c:66:f9:f1:
59:14:cd:b0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDJEQkMxMTAvBgNVBAUTKEI1NDMxOTgyODdBQzk5MTI1MjAwNzg2Mjk3QjkzNjk3
RjhGMjQ4QUUwHhcNMjUwMTMxMTgzNTQyWhcNMjUwMjA3MTgzNTQyWjAYMRYwFAYD
VQQDEw02NzlkMTdmZS1iMTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr3cpSKbF+IAxq+pF6khnAfBfr8UtUmvKss+a1qIeoFeYgcYt9PfildTqJIL8
kVA3OolFbdm90G8RIldGVqI211t3ax9qUUBa9aTqTL2d6y+FWNIzVhg0NB0/Y4fs
+w3ga8b4vKTEUxjF/jFgliEl5d+ReQ8eKnBzd7/Pe8b5hrR8/HBH85cwP7U52vdR
47kGj8bpxuRhhftqrWbUZgO4t0MlGLPqVuCJWauUq2M3T0RZOy526ePAWhcZKWbh
4YfAVjykEW9K9QIYGaSdr1PULDK88DdXkaGGpJes79Zp73ynhxagw0cfLEVOHAVD
aia6/RHjpR9fy89U1emkldPY3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGKma9my
mZlaW0FLJ/Ylk334/oMYMB8GA1UdIwQYMBaAFLVDGYKHrJkSUgB4Ype5Npf48kiu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkRCQy82OUZBMjU2ODBB
QTQxMUVBOEM1QTgzMUJDNEY5QUUwMi90VU1aZ29lc21SSlNBSGhpbDdrMmxfanlT
SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RVTVpnb2VzbVJKU0FIaGlsN2sybF9qeVNLNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MkRCQy82OUZBMjU2ODBBQTQxMUVBOEM1QTgzMUJDNEY5QUUwMi90VU1aZ29lc21S
SlNBSGhpbDdrMmxfanlTSzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCpvae9BVey+VX2GXCIN6gmKooiPS9+A1U5pKKzLZb1Z3PvXDkhMlHc
TlT5mfDLwad4irEHowaYHmq1rZ2zOc2FYXXnkktwagioLUatOeLrKJkeezdU6z6j
BUUa8YeascdtnRGU6CVOyfE7/bxrdvTu5C7NuOPhHcyddrQAk+q9u1jgqPxANrvC
Ydn3gyqKS+tUNMuDlx/Y1ewQ75fX93tVwet1MoofeBEg52xRHiK36KTZTd5bcM4o
/VhMs07JQu5Z7//kKDlbG7FCCsxrrTa/fD/7xxkLw+ptbjrm6gHUZnTv7BgaqZzF
16P/bIVEA2J+NnbaqvctFUxm+fFZFM2w
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:19:57 2025 by rpki-client