Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.mft
File: mmZSAdYWDzHXa50heh3_6tEsuoI.mft (raw, json)
Hash identifier: WVnc/iF29DnKB7kb6z6y7A/bfid9tKVC9kLXm78CrI8=
Subject key identifier: 91:A4:FF:BA:B2:F9:77:BF:1E:BD:74:C5:DB:80:F5:43:79:14:0B:57
Authority key identifier: 9A:66:52:01:D6:16:0F:31:D7:6B:9D:21:7A:1D:FF:EA:D1:2C:BA:82
Certificate issuer: /CN=A915180C/serialNumber=9A665201D6160F31D76B9D217A1DFFEAD12CBA82
Certificate serial: 1D94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mmZSAdYWDzHXa50heh3_6tEsuoI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.mft
Manifest number: 1D87
Signing time: Fri 31 Jan 2025 16:08:15 +0000
Manifest this update: Fri 31 Jan 2025 16:08:14 +0000
Manifest next update: Fri 07 Feb 2025 16:08:14 +0000
Files and hashes: 1: mmZSAdYWDzHXa50heh3_6tEsuoI.crl (hash: D+OzMW6rFDfuLPrS900K8hdnFkAsz3wv/JpshmZR3Oo=)
2: 5F313E6A99D611E6BB89D557C4F9AE02.roa (hash: quQxqNwWkulIRmJT2I6ZYZNStKYWsMI4R3sbyT8S9tA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7572 (0x1d94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915180C/serialNumber=9A665201D6160F31D76B9D217A1DFFEAD12CBA82
Validity
Not Before: Jan 31 16:08:14 2025 GMT
Not After : Feb 7 16:08:14 2025 GMT
Subject: CN=679cf56f-af37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e3:35:ab:e9:1d:0e:0a:da:95:a5:ea:59:fb:
e7:6c:d7:86:76:fe:32:be:43:7d:13:a8:cc:67:e2:
ef:a0:9d:db:76:ea:a3:d0:aa:b5:f4:bc:55:b1:39:
04:5b:c1:78:93:de:a7:36:f1:f5:90:7a:4e:e3:5b:
5e:01:f8:ca:df:50:ee:dc:db:dd:66:96:2d:bc:21:
ac:b8:85:48:e9:c8:e0:c0:cb:fe:8b:5c:bf:e0:03:
3c:c5:e2:5e:bc:46:8b:a3:71:64:4d:f6:50:ce:35:
72:c5:c0:b7:34:6f:2d:b9:1d:58:df:9e:04:c6:b2:
16:53:20:0a:9b:3f:8f:cb:43:33:5b:e6:5a:b4:6c:
cd:04:49:47:ff:52:cf:f3:1f:65:5b:c6:6a:86:9a:
21:1b:89:56:84:b0:eb:78:8a:8d:4f:1b:58:e0:a7:
5f:a6:80:80:25:51:34:a4:c5:ac:2f:df:54:77:3e:
df:5f:66:19:76:bc:96:41:eb:dd:82:78:7e:99:92:
15:01:5d:af:fa:56:15:a8:59:e4:ac:83:5f:da:44:
ff:a2:13:09:cb:55:e7:cb:39:38:be:41:60:8d:75:
62:73:ac:a9:d7:f3:ec:ff:de:f9:ff:1f:e9:28:c1:
80:a2:ca:30:65:f1:4b:f9:9a:a0:01:66:3e:12:fb:
af:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A4:FF:BA:B2:F9:77:BF:1E:BD:74:C5:DB:80:F5:43:79:14:0B:57
X509v3 Authority Key Identifier:
keyid:9A:66:52:01:D6:16:0F:31:D7:6B:9D:21:7A:1D:FF:EA:D1:2C:BA:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mmZSAdYWDzHXa50heh3_6tEsuoI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:6b:a2:0b:c0:7d:a8:5a:40:56:80:93:91:f1:47:16:a6:33:
9c:c1:0f:4e:44:72:96:6f:f8:2c:c5:3f:65:bb:72:1c:ea:1a:
39:82:9b:5c:84:d0:ea:53:2d:b8:d7:15:69:6d:c4:3b:50:25:
32:dc:43:62:ed:39:d6:10:07:44:68:2a:a2:cc:25:c9:47:66:
d2:5a:8e:27:9c:b3:80:06:29:eb:3f:ff:55:69:29:69:1a:e8:
ba:33:a3:f8:57:e9:a9:49:42:d7:c7:81:8e:f1:a7:3d:ae:33:
4f:a3:3b:cf:0b:46:95:d6:6c:f3:a6:d2:df:ee:2f:94:78:bf:
dd:68:a8:77:dd:0b:0f:7f:9f:88:54:46:95:05:e0:08:b6:ca:
24:17:80:82:46:b6:41:68:99:f4:05:d6:6a:68:0b:51:94:8b:
0f:3e:f4:5a:c7:53:81:e2:76:29:67:bc:59:1c:4a:93:d1:35:
a1:25:23:59:d1:fc:d5:b9:75:bb:83:6e:39:27:b5:a9:dd:49:
10:ef:d3:05:7c:cf:95:43:41:43:6e:09:33:9a:e7:63:e8:d8:
9e:a8:d7:e2:2c:92:a1:c2:bc:69:67:fd:c9:b4:96:fb:e5:a9:
82:44:fb:e2:1d:0e:fe:66:a1:76:ec:3b:4a:fd:0e:7b:73:67:
01:6c:c0:7b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTE4MEMxMTAvBgNVBAUTKDlBNjY1MjAxRDYxNjBGMzFENzZCOUQyMTdBMURGRkVB
RDEyQ0JBODIwHhcNMjUwMTMxMTYwODE0WhcNMjUwMjA3MTYwODE0WjAYMRYwFAYD
VQQDEw02NzljZjU2Zi1hZjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuuM1q+kdDgralaXqWfvnbNeGdv4yvkN9E6jMZ+LvoJ3bduqj0Kq19LxVsTkE
W8F4k96nNvH1kHpO41teAfjK31Du3NvdZpYtvCGsuIVI6cjgwMv+i1y/4AM8xeJe
vEaLo3FkTfZQzjVyxcC3NG8tuR1Y354ExrIWUyAKmz+Py0MzW+ZatGzNBElH/1LP
8x9lW8ZqhpohG4lWhLDreIqNTxtY4KdfpoCAJVE0pMWsL99Udz7fX2YZdryWQevd
gnh+mZIVAV2v+lYVqFnkrINf2kT/ohMJy1Xnyzk4vkFgjXVic6yp1/Ps/975/x/p
KMGAosowZfFL+ZqgAWY+Evuv3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJGk/7qy
+Xe/Hr10xduA9UN5FAtXMB8GA1UdIwQYMBaAFJpmUgHWFg8x12udIXod/+rRLLqC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTgwQy85QTdDRDNFQTk2
QjUxMUU2ODRGNzM0MTFDNEY5QUUwMi9tbVpTQWRZV0R6SFhhNTBoZWgzXzZ0RXN1
b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21tWlNBZFlXRHpIWGE1MGhlaDNfNnRFc3VvSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MTgwQy85QTdDRDNFQTk2QjUxMUU2ODRGNzM0MTFDNEY5QUUwMi9tbVpTQWRZV0R6
SFhhNTBoZWgzXzZ0RXN1b0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCHa6ILwH2oWkBWgJOR8UcWpjOcwQ9ORHKWb/gsxT9lu3Ic6ho5gptc
hNDqUy241xVpbcQ7UCUy3ENi7TnWEAdEaCqizCXJR2bSWo4nnLOABinrP/9VaSlp
Gui6M6P4V+mpSULXx4GO8ac9rjNPozvPC0aV1mzzptLf7i+UeL/daKh33QsPf5+I
VEaVBeAItsokF4CCRrZBaJn0BdZqaAtRlIsPPvRax1OB4nYpZ7xZHEqT0TWhJSNZ
0fzVuXW7g245J7Wp3UkQ79MFfM+VQ0FDbgkzmudj6NieqNfiLJKhwrxpZ/3JtJb7
5amCRPviHQ7+ZqF27DtK/Q57c2cBbMB7
-----END CERTIFICATE-----
Generated at Mon May 12 21:20:57 2025 by rpki-client