Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft
File: MR39neQF4HHYMSH7kCX7TyAkAyw.mft (raw, json)
Hash identifier: riDeWsBu7CR4Pxd3lXc1GEJVsXqyY/IgcriWhl6IcTk=
Subject key identifier: 87:B9:F0:FF:17:92:17:F4:DF:E6:B0:86:AA:31:12:8A:94:88:4C:85
Authority key identifier: 31:1D:FD:9D:E4:05:E0:71:D8:31:21:FB:90:25:FB:4F:20:24:03:2C
Certificate issuer: /CN=A9147B3A/serialNumber=311DFD9DE405E071D83121FB9025FB4F2024032C
Certificate serial: 098D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft
Manifest number: 0987
Signing time: Thu 30 Jan 2025 20:10:22 +0000
Manifest this update: Thu 30 Jan 2025 20:10:22 +0000
Manifest next update: Thu 06 Feb 2025 20:10:22 +0000
Files and hashes: 1: MR39neQF4HHYMSH7kCX7TyAkAyw.crl (hash: AUyjuWNHdiuprVUydSdI8d32fDGp1RxNayQDqx6NXIQ=)
2: CD57B28C814211EA94DD3E2DC4F9AE02.roa (hash: cA7XN+BX0okwbajHtJeBaMsPf8wdB1bPHmCfQQAkqnk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2445 (0x98d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147B3A/serialNumber=311DFD9DE405E071D83121FB9025FB4F2024032C
Validity
Not Before: Jan 30 20:10:22 2025 GMT
Not After : Feb 6 20:10:22 2025 GMT
Subject: CN=679bdcae-b77d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2c:b7:f0:d8:d4:13:06:eb:0b:d8:62:98:5e:
85:7a:de:e2:a9:c3:29:28:46:88:4e:5c:05:27:78:
c1:98:99:53:44:e0:fe:a3:e6:bf:92:1a:f0:fe:02:
d1:19:41:5d:14:79:16:3f:e4:c0:9f:7f:0b:75:5d:
c8:b4:ce:1a:71:71:7a:29:97:5c:a1:a1:b6:30:db:
2e:19:7b:09:c0:3b:d8:17:dc:19:04:8b:52:c9:a1:
61:a7:29:1e:8a:f6:79:db:c0:50:d4:1b:d9:99:f6:
40:f9:97:3a:10:db:5f:11:c6:59:4a:aa:85:8b:e6:
cb:86:db:fe:0a:c8:88:3b:95:c7:7f:d2:84:12:d0:
40:07:33:d4:a5:b1:12:4f:ba:f1:14:df:13:44:e7:
e0:f2:83:2e:dd:fb:ac:65:f1:65:d0:57:36:ec:4e:
dc:e2:78:06:41:bb:25:f8:3a:2d:98:d0:84:6a:d6:
5f:78:b7:51:c7:e5:f2:80:a0:a6:27:cc:61:66:cf:
28:f0:18:72:1d:d8:78:35:b4:b1:d1:fc:6a:79:a3:
2a:e8:78:19:26:42:e2:86:c5:e0:f7:71:da:e9:d5:
03:a7:5e:4e:61:1a:f3:c8:9f:47:0b:05:4e:48:bb:
54:57:43:65:43:ec:aa:0c:e7:79:d3:2b:bf:35:ef:
6b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B9:F0:FF:17:92:17:F4:DF:E6:B0:86:AA:31:12:8A:94:88:4C:85
X509v3 Authority Key Identifier:
keyid:31:1D:FD:9D:E4:05:E0:71:D8:31:21:FB:90:25:FB:4F:20:24:03:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:fe:69:7a:fe:04:f7:17:fb:3a:32:1e:08:23:ee:e5:80:57:
b2:9c:47:92:b7:5b:1b:78:ae:21:03:ee:5a:b7:5c:27:54:99:
67:bc:c3:9a:86:62:80:c1:38:c1:61:be:51:e3:1d:09:ed:d6:
a0:83:84:00:83:ee:52:0f:24:b5:4c:e8:1d:4d:ab:f1:87:87:
4b:82:88:5e:4c:30:90:3f:67:ea:f1:21:26:ae:85:ca:77:37:
06:12:c3:0c:96:62:a9:06:54:70:f3:67:fb:be:09:b6:06:cc:
0d:53:0b:4c:47:b4:33:f0:96:f4:fe:f3:9d:18:95:9e:00:91:
46:88:7d:1e:65:f3:b1:3c:14:76:e1:32:d8:80:08:a8:02:bc:
02:63:6e:6b:6b:b1:d4:05:87:9d:22:76:be:89:df:9e:0d:25:
66:51:82:63:4d:8e:b7:7b:bb:6e:24:1d:c4:83:33:1e:ad:3d:
b3:4c:bf:00:f1:e4:c5:e0:64:44:39:04:be:7a:91:53:ae:56:
36:35:94:69:63:5b:ea:f7:bc:e9:28:e6:5b:65:fc:4c:3b:f0:
4d:f3:43:ef:18:8d:18:f9:f7:5b:bc:62:b4:fe:d1:d6:a2:53:
7a:cc:22:1a:e2:f0:4e:b9:c8:d6:6c:60:30:62:ca:14:a5:83:
e1:62:c4:f6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDdCM0ExMTAvBgNVBAUTKDMxMURGRDlERTQwNUUwNzFEODMxMjFGQjkwMjVGQjRG
MjAyNDAzMkMwHhcNMjUwMTMwMjAxMDIyWhcNMjUwMjA2MjAxMDIyWjAYMRYwFAYD
VQQDEw02NzliZGNhZS1iNzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxyy38NjUEwbrC9himF6Fet7iqcMpKEaITlwFJ3jBmJlTROD+o+a/khrw/gLR
GUFdFHkWP+TAn38LdV3ItM4acXF6KZdcoaG2MNsuGXsJwDvYF9wZBItSyaFhpyke
ivZ528BQ1BvZmfZA+Zc6ENtfEcZZSqqFi+bLhtv+CsiIO5XHf9KEEtBABzPUpbES
T7rxFN8TROfg8oMu3fusZfFl0Fc27E7c4ngGQbsl+DotmNCEatZfeLdRx+XygKCm
J8xhZs8o8BhyHdh4NbSx0fxqeaMq6HgZJkLihsXg93Ha6dUDp15OYRrzyJ9HCwVO
SLtUV0NlQ+yqDOd50yu/Ne9rLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIe58P8X
khf03+awhqoxEoqUiEyFMB8GA1UdIwQYMBaAFDEd/Z3kBeBx2DEh+5Al+08gJAMs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0IzQS81NTFCRjJCQzgx
NDAxMUVBQkIwRDcyMjhDNEY5QUUwMi9NUjM5bmVRRjRISFlNU0g3a0NYN1R5QWtB
eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01SMzluZVFGNEhIWU1TSDdrQ1g3VHlBa0F5dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
N0IzQS81NTFCRjJCQzgxNDAxMUVBQkIwRDcyMjhDNEY5QUUwMi9NUjM5bmVRRjRI
SFlNU0g3a0NYN1R5QWtBeXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAC/ml6/gT3F/s6Mh4II+7lgFeynEeSt1sbeK4hA+5at1wnVJlnvMOa
hmKAwTjBYb5R4x0J7dagg4QAg+5SDyS1TOgdTavxh4dLgoheTDCQP2fq8SEmroXK
dzcGEsMMlmKpBlRw82f7vgm2BswNUwtMR7Qz8Jb0/vOdGJWeAJFGiH0eZfOxPBR2
4TLYgAioArwCY25ra7HUBYedIna+id+eDSVmUYJjTY63e7tuJB3EgzMerT2zTL8A
8eTF4GREOQS+epFTrlY2NZRpY1vq97zpKOZbZfxMO/BN80PvGI0Y+fdbvGK0/tHW
olN6zCIa4vBOucjWbGAwYsoUpYPhYsT2
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:08:04 2025 by rpki-client