Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft
File: SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft (raw, json)
Hash identifier: norpP2+gemxxc7kEAN0lbr/FSIt36RsrrYTrVe+MjUw=
Subject key identifier: D7:BB:5E:44:F2:75:91:F1:08:FF:FE:ED:84:7B:28:9B:73:72:61:02
Authority key identifier: 48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35
Certificate issuer: /CN=A9143848/serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135
Certificate serial: 013C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft
Manifest number: 012D
Signing time: Fri 31 Jan 2025 03:52:57 +0000
Manifest this update: Fri 31 Jan 2025 03:52:56 +0000
Manifest next update: Fri 07 Feb 2025 03:52:56 +0000
Files and hashes: 1: SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl (hash: BxKY+6RdP75BIcz72Nrckkb14LFJSnsUbE2npHD60Ds=)
2: 0BC8ADDC2C9E11EE81999C3BC4F9AE02.roa (hash: 1UWFJDrBQYlRda7OvOZMs2uhE2kwiz1cgZhClLagiDU=)
3: 2B68155C2C9D11EEB080623AC4F9AE02.roa (hash: c9nvOfU2KLrLRWXC99EhP9jGlFTmmacQblUfMAlz5U8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 316 (0x13c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143848/serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135
Validity
Not Before: Jan 31 03:52:56 2025 GMT
Not After : Feb 7 03:52:56 2025 GMT
Subject: CN=679c4918-a843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:02:17:0e:55:b6:3f:03:7b:4a:95:94:fb:ab:
e7:34:df:33:d6:c2:dc:c6:fc:64:67:a1:ea:8b:26:
c6:23:49:f1:67:c4:da:21:f7:f8:6b:7d:45:87:85:
13:9e:e7:d5:e3:66:d5:19:fe:36:95:1c:ab:8a:fa:
f4:11:73:2d:20:7e:6c:d2:7c:6f:b8:9c:01:43:f2:
24:73:5e:d5:28:d6:ac:d0:8e:71:d8:f2:70:0d:60:
6f:2b:ca:de:ca:1e:c7:0f:99:ac:eb:9f:dd:f6:dd:
c9:b2:55:a3:17:46:ed:95:6a:99:94:87:9a:d3:2f:
0d:55:00:a2:ed:07:b8:5c:72:64:c0:d8:8e:d1:e0:
a0:9a:32:01:6b:8c:92:5e:42:34:5b:22:77:8b:0d:
19:9a:7d:61:0a:1f:a3:0b:e2:4a:2d:34:45:58:9d:
15:9f:99:ca:fe:3a:b9:fe:bf:82:64:02:4c:a2:c5:
1b:05:ca:b0:04:04:16:aa:81:9e:e9:8b:8e:06:54:
be:aa:72:1f:74:1b:84:91:1f:a4:d7:34:66:54:b8:
cf:1e:fb:66:46:e4:99:57:70:44:1d:9d:be:e0:e8:
e1:7d:72:3b:49:30:d5:8d:65:aa:52:4d:d4:42:6d:
47:c7:e4:4a:4e:3f:bc:e5:b0:3e:b2:41:93:69:97:
17:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:BB:5E:44:F2:75:91:F1:08:FF:FE:ED:84:7B:28:9B:73:72:61:02
X509v3 Authority Key Identifier:
keyid:48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:0f:c9:70:10:c8:4b:c9:59:ec:ef:c7:59:e7:62:d4:2c:e5:
22:76:b0:b9:6b:be:8c:f1:89:ab:09:6c:f0:38:6b:8f:28:57:
ca:31:57:2d:03:47:49:38:9c:24:b5:a1:8f:42:d7:86:65:07:
c5:8c:c3:fd:d6:be:5e:b1:27:7e:0e:e9:5a:db:67:84:04:bb:
63:4d:ef:91:10:13:69:47:be:e0:3c:6d:bb:30:a4:1a:0a:13:
10:6e:cb:ac:b2:7a:85:05:58:26:69:d0:43:2c:bd:f6:2f:8a:
8a:8d:b9:25:e5:27:4d:69:5d:4c:18:a0:16:49:e7:be:c6:8a:
2b:21:38:7c:12:d4:97:e0:3d:5d:c7:13:61:7c:a9:7f:0f:25:
40:9c:16:37:2d:00:00:a4:0f:21:63:51:95:d2:98:8c:c8:dd:
6f:4f:b0:66:3e:99:3d:9c:17:19:eb:3f:38:50:92:66:3e:6c:
ab:6e:41:da:0e:29:a1:99:65:2c:8b:da:20:db:be:81:ed:1a:
47:3e:d6:90:6e:0a:1c:a4:1d:5c:24:db:d1:d0:63:89:0a:48:
e3:0a:3f:db:94:3d:24:2f:f8:3f:f5:2b:2a:31:da:e8:39:05:
eb:58:da:8a:9a:4f:78:00:00:a4:90:14:bf:e0:a3:ba:c7:cc:
cf:43:94:12
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDM4NDgxMTAvBgNVBAUTKDQ4MkQzRTcwMEVFNUYxQTRBREE3NTE2RjJFNTY3ODM0
RTcxMEQxMzUwHhcNMjUwMTMxMDM1MjU2WhcNMjUwMjA3MDM1MjU2WjAYMRYwFAYD
VQQDEw02NzljNDkxOC1hODQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAugIXDlW2PwN7SpWU+6vnNN8z1sLcxvxkZ6HqiybGI0nxZ8TaIff4a31Fh4UT
nufV42bVGf42lRyrivr0EXMtIH5s0nxvuJwBQ/Ikc17VKNas0I5x2PJwDWBvK8re
yh7HD5ms65/d9t3JslWjF0btlWqZlIea0y8NVQCi7Qe4XHJkwNiO0eCgmjIBa4yS
XkI0WyJ3iw0Zmn1hCh+jC+JKLTRFWJ0Vn5nK/jq5/r+CZAJMosUbBcqwBAQWqoGe
6YuOBlS+qnIfdBuEkR+k1zRmVLjPHvtmRuSZV3BEHZ2+4OjhfXI7STDVjWWqUk3U
Qm1Hx+RKTj+85bA+skGTaZcXDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNe7XkTy
dZHxCP/+7YR7KJtzcmECMB8GA1UdIwQYMBaAFEgtPnAO5fGkradRby5WeDTnENE1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mzg0OC8xNjE4REI3NDJC
QjYxMUVFQkI3RDUyNkFDNEY5QUUwMi9TQzAtY0E3bDhhU3RwMUZ2TGxaNE5PY1Ew
VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NDMC1jQTdsOGFTdHAxRnZMbFo0Tk9jUTBUVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Mzg0OC8xNjE4REI3NDJCQjYxMUVFQkI3RDUyNkFDNEY5QUUwMi9TQzAtY0E3bDhh
U3RwMUZ2TGxaNE5PY1EwVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBID8lwEMhLyVns78dZ52LULOUidrC5a76M8YmrCWzwOGuPKFfKMVct
A0dJOJwktaGPQteGZQfFjMP91r5esSd+Dula22eEBLtjTe+REBNpR77gPG27MKQa
ChMQbsussnqFBVgmadBDLL32L4qKjbkl5SdNaV1MGKAWSee+xoorITh8EtSX4D1d
xxNhfKl/DyVAnBY3LQAApA8hY1GV0piMyN1vT7BmPpk9nBcZ6z84UJJmPmyrbkHa
DimhmWUsi9og276B7RpHPtaQbgocpB1cJNvR0GOJCkjjCj/blD0kL/g/9SsqMdro
OQXrWNqKmk94AACkkBS/4KO6x8zPQ5QS
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:25 2025 by rpki-client