Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft
File: IiyUNfXVTN9jafhecaodhG7MXz4.mft (raw, json)
Hash identifier: jMevyD+3vpOlufXhN1Erohov3NeHex7e2UUin9HaSpw=
Subject key identifier: 0C:BE:D2:91:DE:5F:0C:1E:A7:3B:9A:9E:5B:AE:53:E0:3E:62:E0:7E
Authority key identifier: 22:2C:94:35:F5:D5:4C:DF:63:69:F8:5E:71:AA:1D:84:6E:CC:5F:3E
Certificate issuer: /CN=A9142E4E/serialNumber=222C9435F5D54CDF6369F85E71AA1D846ECC5F3E
Certificate serial: 0C09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft
Manifest number: 0C01
Signing time: Fri 31 Jan 2025 18:29:11 +0000
Manifest this update: Fri 31 Jan 2025 18:29:10 +0000
Manifest next update: Fri 07 Feb 2025 18:29:10 +0000
Files and hashes: 1: IiyUNfXVTN9jafhecaodhG7MXz4.crl (hash: ugGYjAhqEQOX7E95OjBhjaSrQyIVmBE3RAIXelaH8N4=)
2: 778B8788063711EA981E916CC4F9AE02.roa (hash: 98z7eq8qy5jy8+qW71SkmYvKbgUCe8/WSIk7jnhoIiE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3081 (0xc09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142E4E/serialNumber=222C9435F5D54CDF6369F85E71AA1D846ECC5F3E
Validity
Not Before: Jan 31 18:29:10 2025 GMT
Not After : Feb 7 18:29:10 2025 GMT
Subject: CN=679d1676-a701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c7:89:70:f4:ab:6e:f4:15:cd:d5:18:20:3f:
3c:df:e1:d0:91:51:ae:77:86:80:a3:ef:9d:20:d3:
83:bf:9c:fd:5e:2e:7a:b2:ba:9d:2f:c2:21:d2:44:
01:9d:a5:2c:fa:0b:15:c0:ba:4c:5b:6a:aa:80:79:
cd:76:40:b8:54:6a:9b:e4:40:b8:d5:46:68:e0:c9:
09:9b:c0:87:7a:c2:44:87:7a:e5:f6:31:a9:6b:b2:
07:1a:9c:5a:46:4d:85:25:cd:15:96:da:e9:94:0e:
e7:be:ee:74:18:69:b5:e7:ab:8f:fe:39:5e:9f:47:
6d:d2:75:3c:0a:75:83:a3:74:5a:9b:93:d3:dd:87:
14:a5:40:ee:5d:00:53:fd:b5:af:d1:ca:51:34:b6:
9a:fb:1a:79:18:15:65:d6:2e:5f:90:00:0e:4b:43:
93:1d:26:b2:5b:2e:53:8b:af:29:c1:67:2f:bf:4e:
41:65:3e:cb:52:3e:13:52:fb:07:84:99:d0:16:45:
de:e4:4d:af:17:1d:81:b2:16:6f:ac:35:51:87:9c:
08:73:a5:54:d0:cf:7e:fd:7c:21:da:02:36:46:4b:
14:50:ef:55:24:65:5a:af:34:62:5d:6c:71:18:13:
e9:19:38:02:a5:bd:69:18:55:63:bf:40:5f:2a:6e:
18:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BE:D2:91:DE:5F:0C:1E:A7:3B:9A:9E:5B:AE:53:E0:3E:62:E0:7E
X509v3 Authority Key Identifier:
keyid:22:2C:94:35:F5:D5:4C:DF:63:69:F8:5E:71:AA:1D:84:6E:CC:5F:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:99:26:fb:85:73:da:60:1b:4d:81:72:00:41:0f:02:57:67:
4c:0e:2a:4b:c7:9e:ff:40:f8:b6:00:63:92:43:bd:06:b7:57:
40:59:99:26:b1:7b:0e:8f:d0:14:23:94:3e:02:be:7a:54:1d:
53:1d:a9:1b:7c:00:49:5e:67:f1:00:23:43:bb:a3:fc:b8:71:
83:67:14:fb:70:66:3b:18:0d:9b:61:8c:7e:a8:78:ef:6f:83:
48:34:df:91:49:1f:e1:cb:f7:52:59:40:eb:ea:6f:d1:07:fa:
0d:ca:5a:2a:19:99:66:e9:6b:2a:2f:a8:33:08:80:1b:a1:30:
3b:f9:45:ac:cb:55:0c:92:9e:ed:f9:04:c9:96:c2:16:74:a1:
32:f5:7c:de:1d:91:bb:55:5b:b7:ac:fd:f6:2c:2b:74:fa:3f:
da:a8:22:2c:c2:83:11:c8:ba:84:df:1d:f7:6e:af:38:7e:43:
c3:cf:e8:4d:df:ba:89:d1:bf:8c:bf:89:e1:c7:91:9b:3d:eb:
73:c1:f4:3e:4a:c6:0d:ff:c8:a0:75:e0:b9:c3:3b:35:7b:f1:
a0:96:1d:32:70:3f:52:8d:eb:f9:9f:b9:42:a7:04:c8:cf:52:
00:a0:4b:56:b5:51:c9:e6:94:91:a0:bf:f9:d0:c8:79:6d:e2:
71:a9:5a:1c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDJFNEUxMTAvBgNVBAUTKDIyMkM5NDM1RjVENTRDREY2MzY5Rjg1RTcxQUExRDg0
NkVDQzVGM0UwHhcNMjUwMTMxMTgyOTEwWhcNMjUwMjA3MTgyOTEwWjAYMRYwFAYD
VQQDEw02NzlkMTY3Ni1hNzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0seJcPSrbvQVzdUYID883+HQkVGud4aAo++dINODv5z9Xi56srqdL8Ih0kQB
naUs+gsVwLpMW2qqgHnNdkC4VGqb5EC41UZo4MkJm8CHesJEh3rl9jGpa7IHGpxa
Rk2FJc0VltrplA7nvu50GGm156uP/jlen0dt0nU8CnWDo3Ram5PT3YcUpUDuXQBT
/bWv0cpRNLaa+xp5GBVl1i5fkAAOS0OTHSayWy5Ti68pwWcvv05BZT7LUj4TUvsH
hJnQFkXe5E2vFx2BshZvrDVRh5wIc6VU0M9+/Xwh2gI2RksUUO9VJGVarzRiXWxx
GBPpGTgCpb1pGFVjv0BfKm4YPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAy+0pHe
XwwepzuanluuU+A+YuB+MB8GA1UdIwQYMBaAFCIslDX11UzfY2n4XnGqHYRuzF8+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkU0RS9DMTczQ0RFODA2
MzYxMUVBQjI0OUI5NkJDNEY5QUUwMi9JaXlVTmZYVlROOWphZmhlY2FvZGhHN01Y
ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lpeVVOZlhWVE45amFmaGVjYW9kaEc3TVh6NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MkU0RS9DMTczQ0RFODA2MzYxMUVBQjI0OUI5NkJDNEY5QUUwMi9JaXlVTmZYVlRO
OWphZmhlY2FvZGhHN01YejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAzmSb7hXPaYBtNgXIAQQ8CV2dMDipLx57/QPi2AGOSQ70Gt1dAWZkm
sXsOj9AUI5Q+Ar56VB1THakbfABJXmfxACNDu6P8uHGDZxT7cGY7GA2bYYx+qHjv
b4NINN+RSR/hy/dSWUDr6m/RB/oNyloqGZlm6WsqL6gzCIAboTA7+UWsy1UMkp7t
+QTJlsIWdKEy9XzeHZG7VVu3rP32LCt0+j/aqCIswoMRyLqE3x33bq84fkPDz+hN
37qJ0b+Mv4nhx5GbPetzwfQ+SsYN/8igdeC5wzs1e/Gglh0ycD9Sjev5n7lCpwTI
z1IAoEtWtVHJ5pSRoL/50Mh5beJxqVoc
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:02 2025 by rpki-client