Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft
File: snrsU_-6svW1vAy0fAhwbVBTMhA.mft (raw, json)
Hash identifier: jjGqugKnVU9eeny7XodDqNHn9wlvUui0NbX+pDhp6X8=
Subject key identifier: DA:CF:6E:04:BE:E3:FB:47:F5:42:84:DC:9B:98:AD:82:89:C1:71:B2
Authority key identifier: B2:7A:EC:53:FF:BA:B2:F5:B5:BC:0C:B4:7C:08:70:6D:50:53:32:10
Certificate issuer: /CN=A914A7D6/serialNumber=B27AEC53FFBAB2F5B5BC0CB47C08706D50533210
Certificate serial: 04A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft
Manifest number: 04A2
Signing time: Fri 31 Jan 2025 00:00:23 +0000
Manifest this update: Fri 31 Jan 2025 00:00:22 +0000
Manifest next update: Fri 07 Feb 2025 00:00:22 +0000
Files and hashes: 1: snrsU_-6svW1vAy0fAhwbVBTMhA.crl (hash: C0l3esMjMf/xAY/poY5z+wsBB4SRhxmH8BXPIZNJtZY=)
2: 793A891A1EA111ECA967444FC4F9AE02.roa (hash: TuwY0bH/I8eBppDazNaeZzaGUKdY+8ax5yn8wmQ1iv4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1193 (0x4a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A7D6/serialNumber=B27AEC53FFBAB2F5B5BC0CB47C08706D50533210
Validity
Not Before: Jan 31 00:00:22 2025 GMT
Not After : Feb 7 00:00:22 2025 GMT
Subject: CN=679c1296-ad88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3a:83:d5:be:4d:9f:b2:85:fa:01:1b:0d:5f:
86:10:f7:75:96:2a:27:01:c1:f1:d7:a1:ab:ee:23:
b6:06:2d:df:e4:6e:26:c4:b3:87:5f:ae:4b:91:1e:
79:13:99:69:2b:f7:f2:47:41:6a:3b:34:bd:6a:de:
9e:70:de:9a:f0:b9:b3:79:07:73:27:4c:cf:dc:5b:
7a:a5:ca:03:93:29:20:1e:d0:d4:56:c8:8b:24:50:
b4:c6:58:d9:50:ba:44:8e:40:54:5f:d6:84:1b:67:
ac:a8:e6:c2:21:b0:06:46:39:e2:43:a5:0a:b3:e3:
ee:60:95:3c:5d:2f:df:4d:a6:2e:31:90:c7:99:43:
f9:26:27:19:eb:70:d1:4e:3f:5d:1f:33:49:e4:ff:
56:e7:d0:01:f7:e4:6c:b3:b8:ba:f4:57:04:6b:dc:
c6:fc:41:bd:3e:d0:8e:24:55:ba:01:76:1c:b8:e7:
63:6e:ea:d0:57:34:8a:1d:f1:01:ec:a7:20:cb:71:
19:99:22:aa:a1:d8:29:ff:55:3d:e4:51:60:49:a2:
bc:5c:70:21:d4:c3:6d:9d:11:a8:b3:f6:61:e0:8a:
c1:82:e5:26:79:ba:0e:89:e1:47:1d:0d:86:fa:f2:
50:80:71:90:c8:76:71:b3:ad:7a:e6:ff:61:f1:67:
d3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CF:6E:04:BE:E3:FB:47:F5:42:84:DC:9B:98:AD:82:89:C1:71:B2
X509v3 Authority Key Identifier:
keyid:B2:7A:EC:53:FF:BA:B2:F5:B5:BC:0C:B4:7C:08:70:6D:50:53:32:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:01:de:df:75:e8:7b:64:67:e9:9e:60:7f:ee:61:be:19:61:
2a:e3:11:a3:c6:79:2b:68:30:88:0c:91:5c:11:3a:f6:fd:d4:
6e:33:07:f6:4d:93:bc:c7:47:5b:2a:c6:b5:e4:18:ec:d3:66:
e3:96:f9:c1:72:81:16:7e:07:b2:9c:93:4a:cb:3d:98:64:59:
9c:28:e8:90:8d:c4:18:72:4b:62:fe:14:43:54:75:e7:34:7d:
4f:57:db:88:30:6b:e3:9a:49:d4:bb:be:b3:a9:cc:05:9b:ec:
67:8f:10:98:e8:e9:79:8a:4e:ff:74:49:93:08:79:03:e7:ee:
d9:6c:e5:94:a3:99:f9:b6:ef:c8:48:80:b0:a1:d4:24:b5:e4:
c2:16:8f:d9:86:62:d3:ee:bd:74:33:c8:e9:00:82:16:8e:c0:
ae:8c:02:ce:9d:1b:20:6f:0c:f5:df:75:d2:d9:43:01:3a:dd:
ae:c5:94:60:c1:06:c3:02:79:69:4c:07:ab:4a:e0:fc:fc:dc:
93:5e:cf:75:f5:a4:cf:af:da:67:14:22:3c:92:fd:74:62:0d:
4b:9f:38:b3:6f:26:34:a8:31:2a:f2:69:53:80:c1:2e:7a:95:
30:10:5b:64:0b:78:c6:1c:d2:01:ef:61:69:ce:a7:1d:6b:ae:
d1:4e:f2:05
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE3RDYxMTAvBgNVBAUTKEIyN0FFQzUzRkZCQUIyRjVCNUJDMENCNDdDMDg3MDZE
NTA1MzMyMTAwHhcNMjUwMTMxMDAwMDIyWhcNMjUwMjA3MDAwMDIyWjAYMRYwFAYD
VQQDEw02NzljMTI5Ni1hZDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoDqD1b5Nn7KF+gEbDV+GEPd1lionAcHx16Gr7iO2Bi3f5G4mxLOHX65LkR55
E5lpK/fyR0FqOzS9at6ecN6a8LmzeQdzJ0zP3Ft6pcoDkykgHtDUVsiLJFC0xljZ
ULpEjkBUX9aEG2esqObCIbAGRjniQ6UKs+PuYJU8XS/fTaYuMZDHmUP5JicZ63DR
Tj9dHzNJ5P9W59AB9+Rss7i69FcEa9zG/EG9PtCOJFW6AXYcuOdjburQVzSKHfEB
7Kcgy3EZmSKqodgp/1U95FFgSaK8XHAh1MNtnRGos/Zh4IrBguUmeboOieFHHQ2G
+vJQgHGQyHZxs6165v9h8WfTCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNrPbgS+
4/tH9UKE3JuYrYKJwXGyMB8GA1UdIwQYMBaAFLJ67FP/urL1tbwMtHwIcG1QUzIQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTdENi9ERDhFNTcyNDFF
OUQxMUVDOUMyQjlGNEFDNEY5QUUwMi9zbnJzVV8tNnN2VzF2QXkwZkFod2JWQlRN
aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NucnNVXy02c3ZXMXZBeTBmQWh3YlZCVE1oQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QTdENi9ERDhFNTcyNDFFOUQxMUVDOUMyQjlGNEFDNEY5QUUwMi9zbnJzVV8tNnN2
VzF2QXkwZkFod2JWQlRNaEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBDAd7fdeh7ZGfpnmB/7mG+GWEq4xGjxnkraDCIDJFcETr2/dRuMwf2
TZO8x0dbKsa15Bjs02bjlvnBcoEWfgeynJNKyz2YZFmcKOiQjcQYckti/hRDVHXn
NH1PV9uIMGvjmknUu76zqcwFm+xnjxCY6Ol5ik7/dEmTCHkD5+7ZbOWUo5n5tu/I
SICwodQkteTCFo/ZhmLT7r10M8jpAIIWjsCujALOnRsgbwz133XS2UMBOt2uxZRg
wQbDAnlpTAerSuD8/NyTXs919aTPr9pnFCI8kv10Yg1LnzizbyY0qDEq8mlTgMEu
epUwEFtkC3jGHNIB72Fpzqcda67RTvIF
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:34:11 2025 by rpki-client