Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft
File: -ty5VaOsFGWZfQjySL-GxDNE-3g.mft (raw, json)
Hash identifier: yT7iccfmF80gHL0oI5JokTvIHyFPcb4TzwEcDWQNQzs=
Subject key identifier: 38:DF:7B:C7:3C:6A:77:DB:A4:B5:8E:F3:0B:DC:31:65:9C:3B:21:FC
Authority key identifier: FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78
Certificate issuer: /CN=A9148F32/serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78
Certificate serial: 0581
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft
Manifest number: 057C
Signing time: Thu 30 Jan 2025 23:18:34 +0000
Manifest this update: Thu 30 Jan 2025 23:18:34 +0000
Manifest next update: Thu 06 Feb 2025 23:18:34 +0000
Files and hashes: 1: -ty5VaOsFGWZfQjySL-GxDNE-3g.crl (hash: nZ4d6mKudoOZ8bfnT+GTHS6SphQu386jdHhZ66rOolw=)
2: 4D470362C55811EB981FA987C4F9AE02.roa (hash: RVfGnSNi7Gc2NDwMnGvANcouUDMPNtTfLB5zmPwCbz8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1409 (0x581)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148F32/serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78
Validity
Not Before: Jan 30 23:18:34 2025 GMT
Not After : Feb 6 23:18:34 2025 GMT
Subject: CN=679c08ca-0792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2a:65:ce:09:0a:fa:a4:0f:15:5d:5a:f9:15:
77:b0:9a:36:0c:32:fc:81:83:65:79:05:92:f7:1e:
c1:bc:53:cd:6b:e1:f8:85:57:f2:8b:9a:77:69:3d:
46:ea:27:bf:a0:55:a3:06:32:4b:e6:f0:df:d0:50:
01:76:20:78:6e:e9:a1:bf:6e:18:76:32:39:99:32:
9d:a9:77:e0:3d:22:38:95:ad:d0:e9:fe:0c:69:69:
60:96:6c:74:72:30:ce:88:c1:10:17:62:70:f7:8f:
f8:8f:62:b5:2b:cb:72:9c:e0:08:e7:ea:6f:5e:b5:
f6:03:3e:46:b3:12:78:b6:9f:fb:12:85:cb:7c:44:
23:d9:2e:91:3c:9b:ce:0f:3d:2a:7a:1b:71:c5:dd:
d5:20:90:44:ce:39:21:86:49:97:a6:63:13:4d:34:
22:f0:be:ce:98:89:8c:eb:f4:dd:c5:25:f3:8a:40:
32:91:68:2c:dd:dc:37:d7:9b:ec:e6:44:ea:1d:43:
e8:9a:b7:70:e6:06:f2:39:0e:ce:12:b7:12:97:7e:
37:58:5c:a0:f5:6a:56:fc:f8:07:1c:6c:75:f0:38:
22:66:31:2d:58:8f:19:81:ba:15:cf:8b:2a:aa:2c:
67:c9:4d:27:18:9b:83:9d:48:57:92:a6:4d:53:3b:
23:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DF:7B:C7:3C:6A:77:DB:A4:B5:8E:F3:0B:DC:31:65:9C:3B:21:FC
X509v3 Authority Key Identifier:
keyid:FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:0c:eb:49:a5:81:a4:a3:60:1d:3a:78:87:0e:84:88:f5:92:
01:12:d9:62:0b:42:69:52:ba:5f:20:0e:55:c5:2a:db:01:be:
da:3d:a0:ce:ac:67:28:f5:e5:8f:92:a3:cf:c9:f5:6c:63:71:
e9:ba:bc:7e:b9:31:c6:fd:86:17:66:6d:4d:92:a3:12:7a:e9:
f2:58:46:65:34:28:bf:81:66:e0:f5:0e:05:bd:a1:3e:3f:d1:
cd:da:93:c7:d1:4a:bf:4b:f6:d3:8d:2e:da:71:f3:79:6c:3b:
7e:54:9e:40:95:6d:cb:99:66:77:9f:2a:74:7a:14:46:f4:34:
22:a1:75:d9:f5:ea:92:04:7a:fe:ce:d6:c1:63:f9:b1:43:17:
92:a7:45:74:26:e2:f4:76:49:a1:fb:bb:69:86:c3:e8:08:34:
97:0f:52:aa:a2:ed:8c:69:cf:c8:a9:69:a9:8c:db:d1:ef:5e:
ad:66:ce:46:07:ee:fb:21:61:3d:02:59:b6:b3:c9:6f:60:ad:
93:5c:82:43:83:23:9a:7d:4a:48:39:26:87:a0:79:b3:f6:47:
6c:e4:c9:f6:4d:65:3e:da:e4:ba:e1:0e:62:29:a4:f0:bd:c1:
7b:24:6b:92:f6:32:3d:91:32:ce:88:d9:88:51:59:5d:73:74:
33:43:76:f6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhGMzIxMTAvBgNVBAUTKEZBRENCOTU1QTNBQzE0NjU5OTdEMDhGMjQ4QkY4NkM0
MzM0NEZCNzgwHhcNMjUwMTMwMjMxODM0WhcNMjUwMjA2MjMxODM0WjAYMRYwFAYD
VQQDEw02NzljMDhjYS0wNzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzyplzgkK+qQPFV1a+RV3sJo2DDL8gYNleQWS9x7BvFPNa+H4hVfyi5p3aT1G
6ie/oFWjBjJL5vDf0FABdiB4bumhv24YdjI5mTKdqXfgPSI4la3Q6f4MaWlglmx0
cjDOiMEQF2Jw94/4j2K1K8tynOAI5+pvXrX2Az5GsxJ4tp/7EoXLfEQj2S6RPJvO
Dz0qehtxxd3VIJBEzjkhhkmXpmMTTTQi8L7OmImM6/TdxSXzikAykWgs3dw315vs
5kTqHUPomrdw5gbyOQ7OErcSl343WFyg9WpW/PgHHGx18DgiZjEtWI8ZgboVz4sq
qixnyU0nGJuDnUhXkqZNUzsjXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDjfe8c8
anfbpLWO8wvcMWWcOyH8MB8GA1UdIwQYMBaAFPrcuVWjrBRlmX0I8ki/hsQzRPt4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEYzMi9FMDY0NzVDRUM1
NTUxMUVCOUFFNTlFODZDNEY5QUUwMi8tdHk1VmFPc0ZHV1pmUWp5U0wtR3hETkUt
M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy10eTVWYU9zRkdXWmZRanlTTC1HeERORS0zZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OEYzMi9FMDY0NzVDRUM1NTUxMUVCOUFFNTlFODZDNEY5QUUwMi8tdHk1VmFPc0ZH
V1pmUWp5U0wtR3hETkUtM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC+DOtJpYGko2AdOniHDoSI9ZIBEtliC0JpUrpfIA5VxSrbAb7aPaDO
rGco9eWPkqPPyfVsY3Hpurx+uTHG/YYXZm1NkqMSeunyWEZlNCi/gWbg9Q4FvaE+
P9HN2pPH0Uq/S/bTjS7acfN5bDt+VJ5AlW3LmWZ3nyp0ehRG9DQioXXZ9eqSBHr+
ztbBY/mxQxeSp0V0JuL0dkmh+7tphsPoCDSXD1Kqou2Mac/IqWmpjNvR716tZs5G
B+77IWE9Alm2s8lvYK2TXIJDgyOafUpIOSaHoHmz9kds5Mn2TWU+2uS64Q5iKaTw
vcF7JGuS9jI9kTLOiNmIUVldc3QzQ3b2
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:57:21 2025 by rpki-client