Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft
File: 4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft (raw, json)
Hash identifier: bRwcnTbdBCaHMLKKHuDfd+Q6S0PTLkl/p7vgtPsr+QQ=
Subject key identifier: FC:36:BF:50:EA:9C:E3:3B:F0:79:13:83:63:53:2E:9B:41:90:B2:BD
Authority key identifier: E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07
Certificate issuer: /CN=A914CBF3/serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707
Certificate serial: 0BF7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft
Manifest number: 0BD6
Signing time: Fri 31 Jan 2025 18:43:10 +0000
Manifest this update: Fri 31 Jan 2025 18:43:09 +0000
Manifest next update: Fri 07 Feb 2025 18:43:09 +0000
Files and hashes: 1: 4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl (hash: +o4MhDoBDAwJuUo656rTNzyANSY0Pw8xqoIYzEFrFIA=)
2: 183DE570057A11EC822F230EC4F9AE02.roa (hash: bEfFzY9ERkUCouk5XoaucvDsVkrzcwabTIVAnbK3Eko=)
3: B32668C4D98C11EB905D7281C4F9AE02.roa (hash: +CpW1CaKQXu6MhTzl4JHCslaYOAYJXQr9xAkDiD0lq0=)
4: 140E693613BF11ECA64D821AC4F9AE02.roa (hash: BLN1lKtFOEI4I4kMREMJqKNdevJbMvO6FDfATzwYDjw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3063 (0xbf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CBF3/serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707
Validity
Not Before: Jan 31 18:43:09 2025 GMT
Not After : Feb 7 18:43:09 2025 GMT
Subject: CN=679d19be-f68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a7:ab:46:16:56:bc:a4:74:41:59:d9:77:6c:
9d:95:7d:cb:32:cd:94:ef:df:6c:2d:1e:d8:3e:97:
ec:bc:72:6f:e0:ea:52:69:8d:e4:4a:c1:8e:c7:b6:
a5:dc:6c:7b:24:f9:86:f1:6b:a6:22:19:61:e4:1d:
0d:95:6e:8d:70:8c:ac:f4:51:f1:43:0a:ac:60:5e:
c7:37:15:a9:dc:bc:fb:09:33:9c:6f:90:6a:0d:14:
58:e4:e0:f9:b7:69:7f:6c:52:3c:50:f7:3c:4f:c4:
74:9c:11:2a:bd:ba:a3:42:26:0e:6f:bb:aa:82:83:
c5:99:94:36:ce:43:e9:d6:85:62:79:06:57:90:78:
53:6d:84:c9:48:a7:a7:35:2c:0f:19:74:ca:36:b0:
7e:d7:fb:87:9a:15:67:e4:cb:e6:b4:9b:60:4d:a6:
22:92:3c:b5:6d:88:17:fa:52:b1:89:46:c5:04:8a:
4e:a8:19:93:b9:1e:2e:98:96:b8:db:fa:d5:4e:9b:
85:7a:02:e9:1e:69:e8:55:8a:4d:69:5a:4e:d7:39:
58:3a:68:23:83:6a:46:4d:de:89:1d:a9:09:bc:f3:
a6:4f:4a:19:5c:6d:f5:61:1d:c3:5f:96:ea:ed:6c:
83:88:d9:b5:51:2c:99:d2:7e:32:0f:5b:c6:a2:d5:
04:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:36:BF:50:EA:9C:E3:3B:F0:79:13:83:63:53:2E:9B:41:90:B2:BD
X509v3 Authority Key Identifier:
keyid:E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:bd:85:90:a9:f4:c9:74:f0:11:ef:a2:43:ef:ac:f9:52:6b:
c4:b6:06:f7:4f:d8:9b:38:f1:89:37:65:1a:b5:f9:80:96:de:
75:f9:4c:ad:68:89:b7:ec:f6:72:35:03:56:ee:2c:e0:78:c0:
1b:d7:f4:32:b3:4f:a5:1b:51:67:2c:48:d8:dd:3e:96:70:3c:
db:49:86:94:1a:95:6c:09:54:fe:44:f0:ae:0c:6f:6e:6e:e2:
a7:ec:75:02:fd:8c:6d:8d:a2:78:51:d8:92:f8:b4:7e:35:e9:
fd:5a:76:04:a2:cc:70:02:b7:25:d6:fe:76:6f:3f:1a:e3:da:
ca:a2:33:20:61:56:b4:16:1f:e4:c8:9e:45:c0:d4:e5:34:36:
0e:f1:6d:02:08:2d:d0:2a:2a:94:37:e3:10:dd:88:0f:33:c8:
1f:a9:e6:e6:a8:05:4d:46:3c:2c:e8:70:67:8a:ff:32:17:68:
58:d9:56:79:a5:75:f4:28:13:fe:52:75:24:00:18:60:e2:1b:
c5:79:c4:01:5e:0e:ee:0a:87:27:f5:36:7c:43:5b:2e:5a:63:
4b:08:3f:8d:13:f6:9d:bc:86:d5:ad:19:62:1d:00:68:9e:f6:
9b:05:95:ff:8b:08:3a:7d:d4:62:95:3e:3f:56:37:dd:e7:b9:
62:ea:df:3a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NENCRjMxMTAvBgNVBAUTKEUyNDQ5RTMxMjIyMDEzMUUyRTc2QzQyQzdDQ0M2REQx
OTM1MTA3MDcwHhcNMjUwMTMxMTg0MzA5WhcNMjUwMjA3MTg0MzA5WjAYMRYwFAYD
VQQDEw02NzlkMTliZS1mNjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq6erRhZWvKR0QVnZd2ydlX3LMs2U799sLR7YPpfsvHJv4OpSaY3kSsGOx7al
3Gx7JPmG8WumIhlh5B0NlW6NcIys9FHxQwqsYF7HNxWp3Lz7CTOcb5BqDRRY5OD5
t2l/bFI8UPc8T8R0nBEqvbqjQiYOb7uqgoPFmZQ2zkPp1oVieQZXkHhTbYTJSKen
NSwPGXTKNrB+1/uHmhVn5MvmtJtgTaYikjy1bYgX+lKxiUbFBIpOqBmTuR4umJa4
2/rVTpuFegLpHmnoVYpNaVpO1zlYOmgjg2pGTd6JHakJvPOmT0oZXG31YR3DX5bq
7WyDiNm1USyZ0n4yD1vGotUE2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPw2v1Dq
nOM78HkTg2NTLptBkLK9MB8GA1UdIwQYMBaAFOJEnjEiIBMeLnbELHzMbdGTUQcH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0JGMy8xQkM2RUIyMDEx
RTcxMUVBQjkwM0FBNzlDNEY5QUUwMi80a1NlTVNJZ0V4NHVkc1FzZk14dDBaTlJC
d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRrU2VNU0lnRXg0dWRzUXNmTXh0MFpOUkJ3Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Q0JGMy8xQkM2RUIyMDExRTcxMUVBQjkwM0FBNzlDNEY5QUUwMi80a1NlTVNJZ0V4
NHVkc1FzZk14dDBaTlJCd2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA7vYWQqfTJdPAR76JD76z5UmvEtgb3T9ibOPGJN2UatfmAlt51+Uyt
aIm37PZyNQNW7izgeMAb1/Qys0+lG1FnLEjY3T6WcDzbSYaUGpVsCVT+RPCuDG9u
buKn7HUC/YxtjaJ4UdiS+LR+Nen9WnYEosxwArcl1v52bz8a49rKojMgYVa0Fh/k
yJ5FwNTlNDYO8W0CCC3QKiqUN+MQ3YgPM8gfqebmqAVNRjws6HBniv8yF2hY2VZ5
pXX0KBP+UnUkABhg4hvFecQBXg7uCocn9TZ8Q1suWmNLCD+NE/advIbVrRliHQBo
nvabBZX/iwg6fdRilT4/Vjfd57li6t86
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:19:36 2025 by rpki-client