Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft
File: jZIwmM1n9tG_JM--LD3KC2Zau4w.mft (raw, json)
Hash identifier: t8kKu3bmz2ngbR68TZ4KjqFWwESi8PnkjYgQrTeEPHM=
Subject key identifier: 8D:35:34:6E:4A:3B:40:32:CC:2D:88:82:2F:34:2B:2B:54:74:BA:C9
Authority key identifier: 8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C
Certificate issuer: /CN=A9148B17/serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C
Certificate serial: 0108
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft
Manifest number: 0100
Signing time: Fri 31 Jan 2025 04:21:34 +0000
Manifest this update: Fri 31 Jan 2025 04:21:33 +0000
Manifest next update: Fri 07 Feb 2025 04:21:33 +0000
Files and hashes: 1: jZIwmM1n9tG_JM--LD3KC2Zau4w.crl (hash: Fmyi5TGU/0n2qqVG/hSYiD3OsJUs1IjfHqGs0IwpfDE=)
2: 4495F306772E11EEB7DE544FC4F9AE02.roa (hash: ccDaM+xIQE3p2Y5zhdqiVD5sdxLAr7SXV+gu36JLnEc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 264 (0x108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148B17/serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C
Validity
Not Before: Jan 31 04:21:33 2025 GMT
Not After : Feb 7 04:21:33 2025 GMT
Subject: CN=679c4fcd-3f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f6:25:8d:44:8d:3d:f5:af:da:2c:f3:3e:a7:
aa:a8:b8:66:17:77:d3:48:83:fa:9f:84:72:12:a4:
f8:ad:02:fc:9d:c7:c4:9f:f3:39:83:cc:7a:4d:2b:
11:36:39:8c:41:24:66:da:fa:9d:ed:89:78:bb:d3:
35:24:98:c2:35:62:7e:85:15:45:e7:14:8a:4f:a3:
97:93:11:48:3f:a6:56:b7:b5:f3:37:93:54:24:05:
47:06:96:0b:00:48:f1:49:99:59:ec:08:09:9f:43:
6d:1f:85:72:12:05:d1:20:57:e1:1d:4f:df:9b:33:
d4:47:ad:0b:a8:b1:d4:c4:a2:85:6a:fc:05:7e:66:
f2:3a:40:34:23:22:ee:82:17:f7:e6:bd:36:92:93:
a7:2e:b2:5f:54:3b:53:52:94:62:27:36:bb:8f:06:
cd:db:ec:a0:e7:a9:3d:f4:72:f6:ee:f7:df:9f:30:
7d:4d:51:ba:0d:da:90:bb:82:94:ad:cf:43:93:a9:
ed:0f:e7:9c:dd:ea:29:55:e5:a6:71:b8:8c:dd:9e:
ba:26:a7:ef:3d:5a:35:84:46:c1:12:ea:d3:ee:93:
f9:e8:67:94:9b:df:18:7b:dc:cc:19:95:fa:1a:0b:
68:86:b7:f0:0f:21:ca:d1:54:10:05:41:b0:26:6f:
f4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:35:34:6E:4A:3B:40:32:CC:2D:88:82:2F:34:2B:2B:54:74:BA:C9
X509v3 Authority Key Identifier:
keyid:8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:fd:ae:2c:20:6e:5f:da:e3:69:8f:c5:5a:7c:02:68:92:b3:
a7:a3:f3:78:a2:36:3f:27:d7:f2:99:88:f0:9c:73:61:cf:cc:
09:90:5d:46:06:0d:63:09:ee:1d:c1:0f:5b:cb:80:50:65:1f:
cd:cc:ae:5a:89:1c:4f:52:6c:f7:0c:51:ba:a2:d5:7d:f9:8a:
53:e7:25:aa:65:5f:3d:ce:64:ae:a2:ec:b5:ec:dd:99:39:e9:
89:b9:0f:cd:32:2e:85:37:fc:a5:c4:72:db:8a:22:fd:b3:2e:
f8:44:eb:d1:1d:d6:1d:d5:f6:f5:cb:96:f6:c5:0d:69:bf:8c:
b0:a9:ad:30:58:63:4a:db:e5:0c:6a:7b:6d:e8:89:ea:82:fb:
3b:44:33:7f:a8:e2:d2:11:f1:04:ab:ff:59:8a:72:71:b2:d3:
3c:e5:07:46:84:3d:fd:7a:2c:95:2b:0c:db:15:bb:4d:2f:71:
fb:d1:5a:1d:a8:00:a4:f7:bf:8c:18:9d:eb:cb:42:56:ae:4f:
54:ca:66:06:e3:0d:81:f7:a2:05:db:66:ef:d1:ab:79:fe:c6:
7e:19:ed:6c:05:83:8d:e9:f4:7a:80:ba:35:2d:f1:42:9d:e2:
e2:54:13:2a:17:14:12:48:f7:67:2b:25:f3:58:37:af:6b:19:
07:db:31:dd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhCMTcxMTAvBgNVBAUTKDhEOTIzMDk4Q0Q2N0Y2RDFCRjI0Q0ZCRTJDM0RDQTBC
NjY1QUJCOEMwHhcNMjUwMTMxMDQyMTMzWhcNMjUwMjA3MDQyMTMzWjAYMRYwFAYD
VQQDEw02NzljNGZjZC0zZjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4PYljUSNPfWv2izzPqeqqLhmF3fTSIP6n4RyEqT4rQL8ncfEn/M5g8x6TSsR
NjmMQSRm2vqd7Yl4u9M1JJjCNWJ+hRVF5xSKT6OXkxFIP6ZWt7XzN5NUJAVHBpYL
AEjxSZlZ7AgJn0NtH4VyEgXRIFfhHU/fmzPUR60LqLHUxKKFavwFfmbyOkA0IyLu
ghf35r02kpOnLrJfVDtTUpRiJza7jwbN2+yg56k99HL27vffnzB9TVG6DdqQu4KU
rc9Dk6ntD+ec3eopVeWmcbiM3Z66JqfvPVo1hEbBEurT7pP56GeUm98Ye9zMGZX6
GgtohrfwDyHK0VQQBUGwJm/0OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI01NG5K
O0AyzC2Igi80KytUdLrJMB8GA1UdIwQYMBaAFI2SMJjNZ/bRvyTPviw9ygtmWruM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxNy9FQTRCMTY1RTY4
RUQxMUVFQjRCNUQzNjJDNEY5QUUwMi9qWkl3bU0xbjl0R19KTS0tTEQzS0MyWmF1
NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2paSXdtTTFuOXRHX0pNLS1MRDNLQzJaYXU0dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OEIxNy9FQTRCMTY1RTY4RUQxMUVFQjRCNUQzNjJDNEY5QUUwMi9qWkl3bU0xbjl0
R19KTS0tTEQzS0MyWmF1NHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAL/a4sIG5f2uNpj8VafAJokrOno/N4ojY/J9fymYjwnHNhz8wJkF1G
Bg1jCe4dwQ9by4BQZR/NzK5aiRxPUmz3DFG6otV9+YpT5yWqZV89zmSuouy17N2Z
OemJuQ/NMi6FN/ylxHLbiiL9sy74ROvRHdYd1fb1y5b2xQ1pv4ywqa0wWGNK2+UM
antt6Inqgvs7RDN/qOLSEfEEq/9ZinJxstM85QdGhD39eiyVKwzbFbtNL3H70Vod
qACk97+MGJ3ry0JWrk9UymYG4w2B96IF22bv0at5/sZ+Ge1sBYON6fR6gLo1LfFC
neLiVBMqFxQSSPdnKyXzWDevaxkH2zHd
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:34:49 2025 by rpki-client