Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft
File: iAd3htZlI61ZmNY_aXr0LwOcKqk.mft (raw, json)
Hash identifier: kEo1bMlwSUsP5XcuZ5ju+Y8YUHScQvhNR/YulcLvil0=
Subject key identifier: C7:20:F0:4C:80:54:CE:CC:57:6D:1D:59:47:28:AC:1A:53:52:56:1D
Authority key identifier: 88:07:77:86:D6:65:23:AD:59:98:D6:3F:69:7A:F4:2F:03:9C:2A:A9
Certificate issuer: /CN=A914A4E2/serialNumber=88077786D66523AD5998D63F697AF42F039C2AA9
Certificate serial: 103E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAd3htZlI61ZmNY_aXr0LwOcKqk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft
Manifest number: 102E
Signing time: Fri 31 Jan 2025 17:23:16 +0000
Manifest this update: Fri 31 Jan 2025 17:23:15 +0000
Manifest next update: Fri 07 Feb 2025 17:23:15 +0000
Files and hashes: 1: iAd3htZlI61ZmNY_aXr0LwOcKqk.crl (hash: ePdqDVAY7/F7ZduC3vs7SgvLP3EE3sBj0Mm2dnmlc+M=)
2: 744CCD5834F911E98AB73628C4F9AE02.roa (hash: rk7zVOdamRthMzsKOlIOmnNeig9OCtcn4aZz/xI3jf4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4158 (0x103e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A4E2/serialNumber=88077786D66523AD5998D63F697AF42F039C2AA9
Validity
Not Before: Jan 31 17:23:15 2025 GMT
Not After : Feb 7 17:23:15 2025 GMT
Subject: CN=679d0704-4ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e8:5b:67:42:28:fd:dd:63:d9:2a:3e:a4:27:
86:1a:26:c7:da:c9:35:71:86:28:32:ea:8a:81:fc:
30:0e:a9:62:45:6b:a7:fd:75:c7:9a:4d:5c:58:72:
ed:59:5f:1d:56:e3:6f:fc:3f:bd:6c:4c:e5:af:e4:
b7:b7:ad:b3:a3:d5:e9:d4:43:35:73:f3:82:95:b9:
a0:1c:b7:e1:ba:64:ce:63:ca:a2:a1:03:6e:98:90:
ae:36:27:68:93:d4:34:be:46:8c:a6:e9:ed:9b:14:
95:81:77:bc:44:12:65:db:4b:a2:42:e4:14:0e:f5:
84:72:50:ac:fc:6f:eb:94:df:89:7c:88:e4:3e:4c:
72:4d:d7:94:f0:66:75:d0:12:9d:83:42:d1:6b:e5:
02:4f:62:15:66:d1:2d:d0:2b:f1:e6:20:f3:7c:35:
4e:38:1c:f7:c4:62:06:7f:ad:c4:b5:f1:b7:8e:3e:
f7:34:af:bc:7d:01:4e:d1:4a:84:d1:f8:b2:25:51:
09:f6:1a:ca:26:a1:3b:9e:21:b9:8c:17:68:18:c5:
54:bf:c9:0f:5a:8b:fc:36:c7:22:15:38:69:24:a1:
4d:f3:13:14:fc:32:92:ee:91:04:99:df:21:0b:6a:
2a:a2:2a:3b:fa:55:de:09:e3:2d:7a:d8:1a:f7:f0:
59:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:20:F0:4C:80:54:CE:CC:57:6D:1D:59:47:28:AC:1A:53:52:56:1D
X509v3 Authority Key Identifier:
keyid:88:07:77:86:D6:65:23:AD:59:98:D6:3F:69:7A:F4:2F:03:9C:2A:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAd3htZlI61ZmNY_aXr0LwOcKqk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:79:5d:70:a8:44:4f:fb:ef:f0:08:61:a6:f6:3f:be:8a:33:
28:98:02:3d:a3:6a:2d:b1:6d:78:7b:2b:3b:ea:ff:04:87:73:
5b:b8:ac:a2:9c:18:21:5b:9e:5b:0a:f4:0e:28:c9:44:c6:0e:
1a:01:39:ec:d6:ac:4f:13:2a:ae:77:3c:67:13:c8:6b:a4:53:
1a:53:a5:db:12:6b:f3:7c:13:3a:2d:e3:80:0a:5d:dd:22:6c:
b3:b4:51:ae:b8:cc:d1:18:a4:fb:20:1b:6f:65:e1:77:81:85:
03:84:82:9c:ae:d4:e5:32:03:c7:16:af:ae:95:7a:9b:a0:f2:
21:82:51:7a:d3:94:d4:51:03:dd:fb:6e:b0:db:00:86:73:1a:
1e:5c:4a:e2:49:2d:63:4d:3f:35:ca:c7:fd:05:9e:db:69:1d:
b3:2f:e8:52:b2:d4:5f:84:f0:8d:43:3f:81:3a:98:1b:3a:24:
ff:c4:91:47:bb:b7:d5:1f:00:ce:8f:1f:1c:50:28:fa:99:10:
b8:36:b8:fa:7b:96:7a:1d:c7:08:5b:51:98:d8:b0:84:32:d5:
a7:a6:46:df:fe:1b:e7:d8:48:65:94:2f:b9:2f:f8:63:e4:b0:
e1:8c:fd:b5:71:3c:59:d0:26:f6:87:fd:03:fc:99:b7:df:1b:
8c:e5:bb:95
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICED4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE0RTIxMTAvBgNVBAUTKDg4MDc3Nzg2RDY2NTIzQUQ1OTk4RDYzRjY5N0FGNDJG
MDM5QzJBQTkwHhcNMjUwMTMxMTcyMzE1WhcNMjUwMjA3MTcyMzE1WjAYMRYwFAYD
VQQDEw02NzlkMDcwNC00YWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu+hbZ0Io/d1j2So+pCeGGibH2sk1cYYoMuqKgfwwDqliRWun/XXHmk1cWHLt
WV8dVuNv/D+9bEzlr+S3t62zo9Xp1EM1c/OClbmgHLfhumTOY8qioQNumJCuNido
k9Q0vkaMpuntmxSVgXe8RBJl20uiQuQUDvWEclCs/G/rlN+JfIjkPkxyTdeU8GZ1
0BKdg0LRa+UCT2IVZtEt0Cvx5iDzfDVOOBz3xGIGf63EtfG3jj73NK+8fQFO0UqE
0fiyJVEJ9hrKJqE7niG5jBdoGMVUv8kPWov8NsciFThpJKFN8xMU/DKS7pEEmd8h
C2oqoio7+lXeCeMtetga9/BZywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMcg8EyA
VM7MV20dWUcorBpTUlYdMB8GA1UdIwQYMBaAFIgHd4bWZSOtWZjWP2l69C8DnCqp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTRFMi9CMjU2QjAzMDM0
RDgxMUU5OTI5ODc2NTZDNEY5QUUwMi9pQWQzaHRabEk2MVptTllfYVhyMEx3T2NL
cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lBZDNodFpsSTYxWm1OWV9hWHIwTHdPY0txay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QTRFMi9CMjU2QjAzMDM0RDgxMUU5OTI5ODc2NTZDNEY5QUUwMi9pQWQzaHRabEk2
MVptTllfYVhyMEx3T2NLcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQByeV1wqERP++/wCGGm9j++ijMomAI9o2otsW14eys76v8Eh3NbuKyi
nBghW55bCvQOKMlExg4aATns1qxPEyqudzxnE8hrpFMaU6XbEmvzfBM6LeOACl3d
ImyztFGuuMzRGKT7IBtvZeF3gYUDhIKcrtTlMgPHFq+ulXqboPIhglF605TUUQPd
+26w2wCGcxoeXEriSS1jTT81ysf9BZ7baR2zL+hSstRfhPCNQz+BOpgbOiT/xJFH
u7fVHwDOjx8cUCj6mRC4Nrj6e5Z6HccIW1GY2LCEMtWnpkbf/hvn2EhllC+5L/hj
5LDhjP21cTxZ0Cb2h/0D/Jm33xuM5buV
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:29:14 2025 by rpki-client