Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E3F5/811B604C763111EA9715F860C4F9AE02/8bck5A2FxU9R1iHHL4lskXXJsRk.mft
File: 8bck5A2FxU9R1iHHL4lskXXJsRk.mft (raw, json)
Hash identifier: rnse4UCj7Iql+DDYdbleVKKiKhUd+F6pv1iRgAZPLfA=
Subject key identifier: 9C:91:89:6C:09:BA:BA:CF:6F:74:5C:B0:06:D9:0E:CB:D1:A9:A5:97
Authority key identifier: F1:B7:24:E4:0D:85:C5:4F:51:D6:21:C7:2F:89:6C:91:75:C9:B1:19
Certificate issuer: /CN=A914E3F5/serialNumber=F1B724E40D85C54F51D621C72F896C9175C9B119
Certificate serial: 09CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bck5A2FxU9R1iHHL4lskXXJsRk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E3F5/811B604C763111EA9715F860C4F9AE02/8bck5A2FxU9R1iHHL4lskXXJsRk.mft
Manifest number: 09C4
Signing time: Thu 30 Jan 2025 20:04:00 +0000
Manifest this update: Thu 30 Jan 2025 20:03:59 +0000
Manifest next update: Thu 06 Feb 2025 20:03:59 +0000
Files and hashes: 1: 8bck5A2FxU9R1iHHL4lskXXJsRk.crl (hash: lI1f44BGrkotbityz82qTmXmnzirACOQNLarzbRzh0I=)
2: 354725E6763311EABAE64466C4F9AE02.roa (hash: Cq3lv6Zk0IbD7VRfp29jZdbfC7fvyWbXvi/cd+0Sx0c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2507 (0x9cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E3F5/serialNumber=F1B724E40D85C54F51D621C72F896C9175C9B119
Validity
Not Before: Jan 30 20:03:59 2025 GMT
Not After : Feb 6 20:03:59 2025 GMT
Subject: CN=679bdb2f-af30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7b:ed:14:bc:1d:91:ba:a6:c7:57:83:8b:79:
8f:e9:47:a6:2a:35:f7:21:04:0c:85:33:64:03:90:
51:3b:56:70:3c:94:eb:8a:0d:f2:de:79:11:6d:4c:
bc:93:7a:6c:de:ef:2b:5c:e0:51:1b:7f:3f:d0:60:
08:b2:ff:57:29:ad:bd:d4:9d:61:5e:71:c6:96:7c:
8f:17:0b:d3:3f:65:d5:0a:78:65:20:dc:61:d7:65:
e9:49:11:bc:d6:ab:9d:0b:6f:48:1e:58:cf:59:fa:
88:dc:63:cd:d5:9e:29:a9:22:85:30:48:bd:44:81:
8e:05:17:a8:3a:e2:37:e4:2b:77:a1:c9:35:73:5b:
0a:f9:7a:f4:d5:af:f7:5f:4a:56:9d:ad:58:4e:31:
5f:9a:91:d5:a4:06:9a:8e:fd:5d:da:99:1e:d6:ac:
e9:56:7a:07:cc:4c:9a:bc:9a:96:69:8c:26:76:c7:
ec:62:c9:86:d6:71:fa:a7:15:a6:d6:15:af:ec:b1:
c6:bd:ff:62:d9:d2:b9:34:f4:44:39:26:7d:64:79:
fb:4b:c8:33:97:60:50:4f:84:c1:c7:ad:ea:ac:47:
9b:01:fc:85:21:19:ce:d2:6a:7e:77:e5:8f:32:40:
07:7c:21:5f:d6:21:89:a0:18:a4:5f:4a:1a:72:d5:
a3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:91:89:6C:09:BA:BA:CF:6F:74:5C:B0:06:D9:0E:CB:D1:A9:A5:97
X509v3 Authority Key Identifier:
keyid:F1:B7:24:E4:0D:85:C5:4F:51:D6:21:C7:2F:89:6C:91:75:C9:B1:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E3F5/811B604C763111EA9715F860C4F9AE02/8bck5A2FxU9R1iHHL4lskXXJsRk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bck5A2FxU9R1iHHL4lskXXJsRk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3F5/811B604C763111EA9715F860C4F9AE02/8bck5A2FxU9R1iHHL4lskXXJsRk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:d4:2e:b5:6b:d8:59:08:54:d6:1b:cf:4d:87:46:84:22:f2:
f7:66:e8:d6:c9:40:bc:d8:c6:b4:9a:f6:98:c2:60:9d:98:03:
72:b0:cf:52:a6:11:bb:b4:d7:0c:1a:ac:04:52:01:4e:c1:41:
4e:3f:15:25:d0:7a:78:48:f5:7c:38:02:af:48:3b:5b:b3:d3:
c9:a2:12:66:c0:f6:36:60:46:00:66:ae:39:6f:9e:b5:dd:da:
59:c0:d9:67:8d:c0:bb:42:07:24:25:48:e0:d2:40:0d:96:a1:
c8:1c:15:20:25:b5:96:ee:32:51:91:76:21:fe:19:d1:4f:13:
57:37:ea:b0:fc:a7:e4:41:95:cd:cb:04:d7:70:26:e9:ff:69:
fc:e8:ab:e6:c4:b1:20:49:21:cb:22:ae:77:cd:ce:8f:ca:bf:
93:b4:40:5d:ff:b0:7b:d2:16:71:93:68:0f:11:1e:ee:5c:37:
65:77:68:6d:8a:3a:36:1e:17:65:49:27:45:17:95:6a:09:39:
57:43:77:8e:63:82:28:d6:c9:e0:69:93:54:5c:51:a9:64:22:
0f:57:77:d7:12:f9:0a:0b:ea:aa:dc:3f:3c:cc:a7:f6:1d:d0:
b3:b1:70:1c:80:9b:4c:01:97:5b:b8:ac:05:2c:9b:f9:78:b3:
03:81:31:04
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEUzRjUxMTAvBgNVBAUTKEYxQjcyNEU0MEQ4NUM1NEY1MUQ2MjFDNzJGODk2Qzkx
NzVDOUIxMTkwHhcNMjUwMTMwMjAwMzU5WhcNMjUwMjA2MjAwMzU5WjAYMRYwFAYD
VQQDEw02NzliZGIyZi1hZjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuHvtFLwdkbqmx1eDi3mP6UemKjX3IQQMhTNkA5BRO1ZwPJTrig3y3nkRbUy8
k3ps3u8rXOBRG38/0GAIsv9XKa291J1hXnHGlnyPFwvTP2XVCnhlINxh12XpSRG8
1qudC29IHljPWfqI3GPN1Z4pqSKFMEi9RIGOBReoOuI35Ct3ock1c1sK+Xr01a/3
X0pWna1YTjFfmpHVpAaajv1d2pke1qzpVnoHzEyavJqWaYwmdsfsYsmG1nH6pxWm
1hWv7LHGvf9i2dK5NPREOSZ9ZHn7S8gzl2BQT4TBx63qrEebAfyFIRnO0mp+d+WP
MkAHfCFf1iGJoBikX0oactWjSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJyRiWwJ
urrPb3RcsAbZDsvRqaWXMB8GA1UdIwQYMBaAFPG3JOQNhcVPUdYhxy+JbJF1ybEZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTNGNS84MTFCNjA0Qzc2
MzExMUVBOTcxNUY4NjBDNEY5QUUwMi84YmNrNUEyRnhVOVIxaUhITDRsc2tYWEpz
UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhiY2s1QTJGeFU5UjFpSEhMNGxza1hYSnNSay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTNGNS84MTFCNjA0Qzc2MzExMUVBOTcxNUY4NjBDNEY5QUUwMi84YmNrNUEyRnhV
OVIxaUhITDRsc2tYWEpzUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAR1C61a9hZCFTWG89Nh0aEIvL3ZujWyUC82Ma0mvaYwmCdmANysM9S
phG7tNcMGqwEUgFOwUFOPxUl0Hp4SPV8OAKvSDtbs9PJohJmwPY2YEYAZq45b561
3dpZwNlnjcC7QgckJUjg0kANlqHIHBUgJbWW7jJRkXYh/hnRTxNXN+qw/KfkQZXN
ywTXcCbp/2n86KvmxLEgSSHLIq53zc6Pyr+TtEBd/7B70hZxk2gPER7uXDdld2ht
ijo2HhdlSSdFF5VqCTlXQ3eOY4Io1sngaZNUXFGpZCIPV3fXEvkKC+qq3D88zKf2
HdCzsXAcgJtMAZdbuKwFLJv5eLMDgTEE
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:41:15 2025 by rpki-client