Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft
File: Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft (raw, json)
Hash identifier: MC9GJy6ynz3XwqgdGirBTZoN+0j8SSAhSVENYINnqBk=
Subject key identifier: 05:1D:3C:DC:E8:68:09:F8:C1:C4:6D:8D:DD:07:16:FE:67:72:C2:7E
Authority key identifier: 56:AF:1C:D0:B4:E0:7D:00:0C:64:AB:01:6C:33:F7:86:A0:DD:90:FA
Certificate issuer: /CN=A914F22A/serialNumber=56AF1CD0B4E07D000C64AB016C33F786A0DD90FA
Certificate serial: 1337
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft
Manifest number: 1330
Signing time: Fri 31 Jan 2025 17:00:34 +0000
Manifest this update: Fri 31 Jan 2025 17:00:33 +0000
Manifest next update: Fri 07 Feb 2025 17:00:33 +0000
Files and hashes: 1: Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl (hash: fjgly8dHCPeASzEp+th6fulM9px+DueoREfcSmQlOSE=)
2: 8B2E3BA270BD11ED970C535FC4F9AE02.roa (hash: zF4nygNChVvUs9Ge82/WKpjyi9YwONpMsx8hvCjTDOY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4919 (0x1337)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F22A/serialNumber=56AF1CD0B4E07D000C64AB016C33F786A0DD90FA
Validity
Not Before: Jan 31 17:00:33 2025 GMT
Not After : Feb 7 17:00:33 2025 GMT
Subject: CN=679d01b2-eec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:38:b9:e3:80:3b:6b:45:c5:44:85:1f:10:f2:
b1:1f:99:ff:09:28:b0:27:49:2d:fb:3b:39:ea:1c:
c0:d2:85:62:08:fd:a1:1e:e0:8e:6b:d1:32:31:ff:
91:01:7a:e9:22:d7:c3:75:c3:3b:07:f8:b5:1b:6f:
70:e9:26:93:9c:e4:fc:c7:90:c6:1a:b5:40:e6:59:
f7:db:f7:27:62:a9:13:9a:8e:54:cc:c8:56:d5:f1:
b8:30:aa:77:59:aa:9e:71:92:c4:b8:1f:d4:f2:82:
24:d5:f3:25:a0:98:f7:be:94:fb:94:68:8a:bc:ba:
3a:33:62:5d:75:3b:6a:4a:c6:79:c8:e5:45:aa:f9:
21:3d:60:49:05:e8:0e:33:9c:ce:72:21:10:d8:bf:
da:1a:b1:b0:6f:61:02:15:f4:a0:2e:5d:16:f7:ac:
34:46:63:c5:65:5c:2c:d7:63:b1:57:ca:7c:fc:52:
a1:f9:13:74:6c:17:2f:59:64:65:3f:33:59:a2:83:
33:f5:2c:44:c5:f3:db:6b:d6:11:f9:64:86:4b:5c:
58:a4:8b:10:5f:87:9e:ce:25:af:46:86:54:ff:3d:
73:6a:1f:5e:35:67:06:e3:12:02:69:ac:9c:55:c0:
dd:7d:df:cc:b5:d8:22:53:7f:dd:61:c7:5b:a7:0a:
4f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1D:3C:DC:E8:68:09:F8:C1:C4:6D:8D:DD:07:16:FE:67:72:C2:7E
X509v3 Authority Key Identifier:
keyid:56:AF:1C:D0:B4:E0:7D:00:0C:64:AB:01:6C:33:F7:86:A0:DD:90:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:84:a9:dd:00:fb:c5:d4:68:5d:20:b9:31:a7:1a:02:0d:1d:
75:1a:8f:71:7a:57:fe:a1:c3:2f:b4:11:d4:28:90:f3:5d:cf:
9e:4c:a8:aa:35:eb:33:d8:c9:2f:11:f4:e7:e3:bd:61:f3:46:
81:b2:73:67:f5:9a:b9:be:b7:cf:34:39:97:45:33:cd:10:6d:
f9:82:ba:9d:14:52:31:bc:18:2c:d9:0a:48:1d:dd:79:89:48:
47:91:17:43:9e:1c:5c:97:ac:6e:6f:72:08:99:2f:cc:17:5f:
5d:fc:01:b3:0d:d1:26:33:3a:26:42:c5:11:5b:cd:0f:ff:aa:
5b:0e:a7:25:d0:cb:9d:05:bf:a9:f4:11:79:8a:5a:be:2e:82:
76:d3:40:44:e5:f2:4e:3d:76:80:7c:64:6a:dc:47:bf:11:09:
3b:ae:4e:41:99:6a:5f:42:c8:32:e5:b0:a1:2e:68:44:dd:46:
b7:25:78:da:70:40:19:7f:23:13:c5:51:6d:81:94:1e:37:ce:
4e:a2:20:4b:2d:f1:8e:35:84:18:3c:9a:cd:c3:b7:dd:71:da:
2f:b1:35:aa:dd:93:2c:5b:b5:82:c7:ac:4c:ca:85:59:b7:89:
80:4d:c0:89:a6:0c:ab:e2:21:8b:56:0d:db:2b:c5:f2:b8:24:
c6:6e:5c:1a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEYyMkExMTAvBgNVBAUTKDU2QUYxQ0QwQjRFMDdEMDAwQzY0QUIwMTZDMzNGNzg2
QTBERDkwRkEwHhcNMjUwMTMxMTcwMDMzWhcNMjUwMjA3MTcwMDMzWjAYMRYwFAYD
VQQDEw02NzlkMDFiMi1lZWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxTi544A7a0XFRIUfEPKxH5n/CSiwJ0kt+zs56hzA0oViCP2hHuCOa9EyMf+R
AXrpItfDdcM7B/i1G29w6SaTnOT8x5DGGrVA5ln32/cnYqkTmo5UzMhW1fG4MKp3
WaqecZLEuB/U8oIk1fMloJj3vpT7lGiKvLo6M2JddTtqSsZ5yOVFqvkhPWBJBegO
M5zOciEQ2L/aGrGwb2ECFfSgLl0W96w0RmPFZVws12OxV8p8/FKh+RN0bBcvWWRl
PzNZooMz9SxExfPba9YR+WSGS1xYpIsQX4eeziWvRoZU/z1zah9eNWcG4xICaayc
VcDdfd/MtdgiU3/dYcdbpwpPPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAUdPNzo
aAn4wcRtjd0HFv5ncsJ+MB8GA1UdIwQYMBaAFFavHNC04H0ADGSrAWwz94ag3ZD6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjIyQS83RUVDMUU0QzlD
RDAxMUU4QjE2MTJCN0RDNEY5QUUwMi9WcThjMExUZ2ZRQU1aS3NCYkRQM2hxRGRr
UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZxOGMwTFRnZlFBTVpLc0JiRFAzaHFEZGtQby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RjIyQS83RUVDMUU0QzlDRDAxMUU4QjE2MTJCN0RDNEY5QUUwMi9WcThjMExUZ2ZR
QU1aS3NCYkRQM2hxRGRrUG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB7hKndAPvF1GhdILkxpxoCDR11Go9xelf+ocMvtBHUKJDzXc+eTKiq
Nesz2MkvEfTn471h80aBsnNn9Zq5vrfPNDmXRTPNEG35grqdFFIxvBgs2QpIHd15
iUhHkRdDnhxcl6xub3IImS/MF19d/AGzDdEmMzomQsURW80P/6pbDqcl0MudBb+p
9BF5ilq+LoJ200BE5fJOPXaAfGRq3Ee/EQk7rk5BmWpfQsgy5bChLmhE3Ua3JXja
cEAZfyMTxVFtgZQeN85OoiBLLfGONYQYPJrNw7fdcdovsTWq3ZMsW7WCx6xMyoVZ
t4mATcCJpgyr4iGLVg3bK8XyuCTGblwa
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:46 2025 by rpki-client