Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft
File: m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft (raw, json)
Hash identifier: 79js+RqEF6eYYZ8EvuN9Gl8XXCXOftygxfpfOOqIBTA=
Subject key identifier: B5:9A:FE:AF:53:C5:CC:E7:2C:9C:C7:AD:53:5F:26:6B:7F:FC:61:55
Authority key identifier: 9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4
Certificate issuer: /CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4
Certificate serial: 2664
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft
Manifest number: 25EA
Signing time: Fri 31 Jan 2025 15:45:01 +0000
Manifest this update: Fri 31 Jan 2025 15:45:00 +0000
Manifest next update: Fri 07 Feb 2025 15:45:00 +0000
Files and hashes: 1: m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl (hash: /XKUmY6ci1Mye16ffMJe19qaJetd/erxdWFqTXAhsRU=)
2: 99C38DDE95C311EF8BAA846AC4F9AE02.roa (hash: DTSCNfC+ZQO725wLkDaJCLTqEP7IAx/7xDezw0K1KMY=)
3: 949FF22A0F8211EE9C28226AC4F9AE02.roa (hash: B3hRYF0bO26k9gxz4EV9GoirQCVy5mfb+aHOF6vK71Q=)
4: 8FC6588099D711EFB8A4757AC4F9AE02.roa (hash: BPf4Uoq0Qj7b7XBxVShWOvIfidFoB1L16kpmSz0j9Ew=)
5: 00BA1DE2BF7611EF909DC53AC4F9AE02.roa (hash: 6TOnQWh6Rh+leK78qFxhx/YmmJcw0Ed9TDfHGSQYc/s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9828 (0x2664)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4
Validity
Not Before: Jan 31 15:45:00 2025 GMT
Not After : Feb 7 15:45:00 2025 GMT
Subject: CN=679ceffc-c5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bd:3f:0e:00:07:db:42:f2:54:26:76:87:6a:
ee:23:1b:31:a6:71:f2:11:37:51:e6:46:d9:3d:fb:
e5:0f:0e:f8:30:30:74:5b:c7:44:c5:8e:af:a0:72:
81:a8:01:b4:e7:98:83:53:d7:5a:25:98:94:e3:14:
4d:cc:a6:f9:49:74:2e:db:87:2c:52:f4:0a:72:e5:
16:8e:3c:13:7e:8d:09:dc:53:27:60:74:9d:79:c3:
a0:d6:e6:24:15:e5:05:15:02:4f:97:59:29:22:4e:
0c:83:16:7c:08:bb:d7:2c:69:30:61:80:ea:68:96:
88:1c:fc:e8:48:cd:77:c8:d0:9a:c3:ae:3d:02:50:
9f:fe:6c:c5:26:6a:8f:01:6c:9f:58:db:08:34:e8:
16:33:1a:87:dd:db:a8:98:0b:1b:c8:83:19:46:3e:
35:df:49:63:46:5f:64:ad:98:a9:05:10:ba:ae:d8:
a8:e4:55:e3:68:c2:b4:89:2c:d7:82:21:ce:5e:90:
a1:e1:eb:e6:93:c6:9b:3b:9f:9f:65:02:aa:46:5f:
eb:1b:4a:44:c9:06:6a:1b:d9:52:cd:75:b6:c4:49:
61:74:63:80:c9:fb:7a:cf:9b:1e:1d:c3:68:3a:27:
77:81:c0:11:29:dd:f8:bc:1e:a8:6a:7e:17:d7:73:
95:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9A:FE:AF:53:C5:CC:E7:2C:9C:C7:AD:53:5F:26:6B:7F:FC:61:55
X509v3 Authority Key Identifier:
keyid:9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:9b:76:f5:2b:e3:38:8a:4f:95:73:cd:93:fa:e2:13:e4:c4:
37:64:ef:2a:38:c8:50:33:5a:56:1e:af:7d:14:88:41:4b:8f:
bd:31:5a:8b:28:c8:8f:f0:37:dc:ed:6d:69:7a:16:32:ce:25:
d7:3b:d6:e7:00:b4:58:39:42:96:7f:9d:7d:9f:53:f1:59:bf:
68:f5:dc:b2:cc:21:7b:f4:8b:09:ed:d7:a2:3d:26:c8:28:cd:
53:69:a7:5e:51:52:2f:ef:e6:9f:70:9a:0e:0b:75:a9:24:b5:
30:fe:07:26:3e:9c:4b:59:3a:d1:86:1b:a0:f0:29:59:96:12:
54:a0:10:46:5c:69:2f:e6:83:af:b2:7e:2c:38:b7:ef:bc:4a:
29:e5:6d:a5:3d:e4:d6:27:c7:8f:44:51:d3:85:cc:b2:fb:81:
b9:66:32:10:6e:1b:eb:1e:fb:25:c1:fc:f5:d9:a1:46:23:fe:
6b:fd:7b:a4:d1:c1:3e:9e:ac:77:1c:e7:6b:b9:1b:bc:6f:8c:
89:f1:af:63:c7:67:ec:18:8c:d1:3c:e2:0b:fd:e3:45:9d:20:
a2:e7:09:e1:97:ec:bc:00:d0:8e:45:33:36:4b:da:13:85:26:
d4:89:36:e3:92:81:e6:b1:84:07:c7:96:b6:fa:02:cc:45:cf:
89:f2:6c:82
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICJmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDNEQjAxMTAvBgNVBAUTKDlCQzc2NTFBQzRCQUJGOEM0NDc4NTM0RkFEQTYxMEFD
REE3NDZCRDQwHhcNMjUwMTMxMTU0NTAwWhcNMjUwMjA3MTU0NTAwWjAYMRYwFAYD
VQQDEw02NzljZWZmYy1jNWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoL0/DgAH20LyVCZ2h2ruIxsxpnHyETdR5kbZPfvlDw74MDB0W8dExY6voHKB
qAG055iDU9daJZiU4xRNzKb5SXQu24csUvQKcuUWjjwTfo0J3FMnYHSdecOg1uYk
FeUFFQJPl1kpIk4MgxZ8CLvXLGkwYYDqaJaIHPzoSM13yNCaw649AlCf/mzFJmqP
AWyfWNsINOgWMxqH3duomAsbyIMZRj4130ljRl9krZipBRC6rtio5FXjaMK0iSzX
giHOXpCh4evmk8abO5+fZQKqRl/rG0pEyQZqG9lSzXW2xElhdGOAyft6z5seHcNo
Oid3gcARKd34vB6oan4X13OVMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLWa/q9T
xcznLJzHrVNfJmt//GFVMB8GA1UdIwQYMBaAFJvHZRrEur+MRHhTT62mEKzadGvU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0RCMC9CODk1QUY3NDA1
MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0eEVlRk5QcmFZUXJOcDBh
OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL204ZGxHc1M2djR4RWVGTlByYVlRck5wMGE5US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
M0RCMC9CODk1QUY3NDA1MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0
eEVlRk5QcmFZUXJOcDBhOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCUm3b1K+M4ik+Vc82T+uIT5MQ3ZO8qOMhQM1pWHq99FIhBS4+9MVqL
KMiP8Dfc7W1pehYyziXXO9bnALRYOUKWf519n1PxWb9o9dyyzCF79IsJ7deiPSbI
KM1TaadeUVIv7+afcJoOC3WpJLUw/gcmPpxLWTrRhhug8ClZlhJUoBBGXGkv5oOv
sn4sOLfvvEop5W2lPeTWJ8ePRFHThcyy+4G5ZjIQbhvrHvslwfz12aFGI/5r/Xuk
0cE+nqx3HOdruRu8b4yJ8a9jx2fsGIzRPOIL/eNFnSCi5wnhl+y8ANCORTM2S9oT
hSbUiTbjkoHmsYQHx5a2+gLMRc+J8myC
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:22:22 2025 by rpki-client