Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft
File: X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft (raw, json)
Hash identifier: gma/SGaBKOriTuwDuaDS2FvKj8omBAPzTYoIil7mGCM=
Subject key identifier: 62:2E:1A:3F:56:BD:17:C4:49:18:C1:60:60:34:1C:43:08:1C:0B:43
Authority key identifier: 5F:6C:8F:A3:A6:58:74:02:31:B2:C4:B1:34:81:BE:11:50:0A:DC:76
Certificate issuer: /CN=A9156255/serialNumber=5F6C8FA3A658740231B2C4B13481BE11500ADC76
Certificate serial: 01B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft
Manifest number: 01AD
Signing time: Fri 31 Jan 2025 02:27:18 +0000
Manifest this update: Fri 31 Jan 2025 02:27:18 +0000
Manifest next update: Fri 07 Feb 2025 02:27:18 +0000
Files and hashes: 1: X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl (hash: uePpkM3xtWAKc7zr5TdDwlwKSMs/3PDzzqn3w0JtotE=)
2: 5637146C507611EDB59D9E2EC4F9AE02.roa (hash: EH2CgKpJsudgq4d5ghs/SJTUKeHCisdiJwkRQRkot80=)
3: D1FCB742514711ED92E3885EC4F9AE02.roa (hash: Js88dwnU0hyC4RLKD1NQ44jyQxJzu0X07dqPCT3Ukh0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435 (0x1b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156255/serialNumber=5F6C8FA3A658740231B2C4B13481BE11500ADC76
Validity
Not Before: Jan 31 02:27:18 2025 GMT
Not After : Feb 7 02:27:18 2025 GMT
Subject: CN=679c3506-b53b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d3:ac:ca:46:90:26:c7:dc:21:33:87:e0:62:
2c:90:0b:4f:75:0d:d4:18:25:50:9a:a0:d1:09:28:
f7:e9:f3:fe:19:f8:1e:e2:99:f4:10:70:b5:b4:da:
49:fd:81:c8:9e:02:18:60:9d:65:b2:5d:06:ac:20:
15:df:a0:d9:f1:0f:e3:9e:fd:18:7d:0a:8d:33:6d:
ab:33:f7:eb:77:1d:78:40:fb:78:47:1f:62:c1:bd:
d6:37:6b:5d:55:0e:16:14:62:f9:d7:c4:83:5f:f9:
37:04:c9:c3:1d:7c:b9:94:84:27:18:a4:ef:79:1b:
ee:15:89:63:1b:53:d8:bc:a9:37:89:6f:f9:fc:8e:
dc:0f:72:3f:93:95:cf:53:25:37:35:d3:96:a4:db:
6c:63:e2:2a:75:27:96:79:63:9f:7c:23:07:f0:bf:
d7:b0:58:06:7b:d4:1c:73:60:63:57:4f:3e:e2:18:
1a:ab:37:09:ae:be:30:56:d9:f8:5a:ac:82:2d:68:
32:7c:29:63:95:6d:06:59:eb:c7:70:96:ca:ae:a4:
52:af:7a:9b:93:ab:63:d6:9a:c7:76:ff:4d:06:c6:
f0:3a:ac:1e:c2:6c:ce:e6:b1:ba:79:6c:b5:23:77:
2a:63:11:53:1a:d6:09:bc:b7:89:38:3d:63:89:0d:
74:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2E:1A:3F:56:BD:17:C4:49:18:C1:60:60:34:1C:43:08:1C:0B:43
X509v3 Authority Key Identifier:
keyid:5F:6C:8F:A3:A6:58:74:02:31:B2:C4:B1:34:81:BE:11:50:0A:DC:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:25:76:50:86:e8:31:54:82:8c:b9:a9:99:67:9a:df:64:d3:
6a:0b:50:0e:e2:4a:93:5f:0f:87:29:46:c1:63:87:b8:e1:d7:
b7:13:50:87:60:c5:12:05:25:74:57:4a:ec:fb:0a:20:6b:d3:
6a:8c:10:1c:79:b7:4e:3e:63:2f:62:64:a2:98:c4:35:16:60:
d3:35:ee:d8:a7:6d:79:14:f5:04:94:e5:95:39:cb:0b:e8:97:
fe:84:9c:db:fb:3b:1e:ab:7c:39:1b:db:bf:f5:55:e6:24:a5:
f6:a7:29:ee:54:4a:24:1c:90:32:b4:7d:3c:9e:ca:b6:2b:ea:
4b:5e:08:2c:c6:4f:95:bc:ed:98:39:75:c7:86:c4:96:96:8e:
d7:3e:fd:da:ca:65:9c:2d:68:8d:4b:50:1d:78:1b:d5:57:a0:
f4:10:0a:11:48:53:20:8e:e5:f0:35:18:15:ff:44:fa:fd:89:
df:fe:57:ec:79:ce:87:d4:38:ca:56:17:14:9b:23:87:67:4d:
ab:fd:37:76:14:c1:ac:42:d5:a3:1f:67:3a:79:6b:b1:80:04:
60:72:cc:bc:d0:83:a8:6c:a6:6f:de:ae:09:2e:8a:6b:66:26:
55:11:ce:65:cf:67:3f:11:49:d9:bd:fa:80:e3:76:03:2c:68:
3e:22:e3:7e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTYyNTUxMTAvBgNVBAUTKDVGNkM4RkEzQTY1ODc0MDIzMUIyQzRCMTM0ODFCRTEx
NTAwQURDNzYwHhcNMjUwMTMxMDIyNzE4WhcNMjUwMjA3MDIyNzE4WjAYMRYwFAYD
VQQDEw02NzljMzUwNi1iNTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1dOsykaQJsfcITOH4GIskAtPdQ3UGCVQmqDRCSj36fP+Gfge4pn0EHC1tNpJ
/YHIngIYYJ1lsl0GrCAV36DZ8Q/jnv0YfQqNM22rM/frdx14QPt4Rx9iwb3WN2td
VQ4WFGL518SDX/k3BMnDHXy5lIQnGKTveRvuFYljG1PYvKk3iW/5/I7cD3I/k5XP
UyU3NdOWpNtsY+IqdSeWeWOffCMH8L/XsFgGe9Qcc2BjV08+4hgaqzcJrr4wVtn4
WqyCLWgyfCljlW0GWevHcJbKrqRSr3qbk6tj1prHdv9NBsbwOqwewmzO5rG6eWy1
I3cqYxFTGtYJvLeJOD1jiQ10fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGIuGj9W
vRfESRjBYGA0HEMIHAtDMB8GA1UdIwQYMBaAFF9sj6OmWHQCMbLEsTSBvhFQCtx2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjI1NS85MTYyMDg0QzUw
NzMxMUVEOUI4QzE0MkRDNEY5QUUwMi9YMnlQbzZaWWRBSXhzc1N4TklHLUVWQUsz
SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1gyeVBvNlpZZEFJeHNzU3hOSUctRVZBSzNIWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NjI1NS85MTYyMDg0QzUwNzMxMUVEOUI4QzE0MkRDNEY5QUUwMi9YMnlQbzZaWWRB
SXhzc1N4TklHLUVWQUszSFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAbJXZQhugxVIKMuamZZ5rfZNNqC1AO4kqTXw+HKUbBY4e44de3E1CH
YMUSBSV0V0rs+woga9NqjBAcebdOPmMvYmSimMQ1FmDTNe7Yp215FPUElOWVOcsL
6Jf+hJzb+zseq3w5G9u/9VXmJKX2pynuVEokHJAytH08nsq2K+pLXggsxk+VvO2Y
OXXHhsSWlo7XPv3aymWcLWiNS1AdeBvVV6D0EAoRSFMgjuXwNRgV/0T6/Ynf/lfs
ec6H1DjKVhcUmyOHZ02r/Td2FMGsQtWjH2c6eWuxgARgcsy80IOobKZv3q4JLopr
ZiZVEc5lz2c/EUnZvfqA43YDLGg+IuN+
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:52:12 2025 by rpki-client