Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
File: 8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft (raw, json)
Hash identifier: wS1s5/Ix8/ZZWOLbNwWsK3eIBlh9atQJAPzxC8zoVk8=
Subject key identifier: 72:CE:60:71:CE:3B:E1:73:D2:08:71:7D:FB:D8:9D:23:EE:79:9B:1D
Authority key identifier: F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3
Certificate issuer: /CN=A915648D/serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3
Certificate serial: 0147
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
Manifest number: 0145
Signing time: Fri 31 Jan 2025 03:31:43 +0000
Manifest this update: Fri 31 Jan 2025 03:31:42 +0000
Manifest next update: Fri 07 Feb 2025 03:31:42 +0000
Files and hashes: 1: 8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl (hash: W42iMPdH4rs1WJ5X0E1g1k0bbTewcVaWKGGfgaEZPVE=)
2: C80572DEF70911ED9D4B561AC4F9AE02.roa (hash: uGKqx1ygUHWBkt6yQ6DRvhQVZZkNmLVdX986c5JBGJs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327 (0x147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915648D/serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3
Validity
Not Before: Jan 31 03:31:42 2025 GMT
Not After : Feb 7 03:31:42 2025 GMT
Subject: CN=679c441e-1d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:19:33:83:f0:0c:ce:76:8a:a2:0d:fb:39:c2:
25:d9:16:a6:35:56:64:65:e8:e7:ca:89:f2:e2:9d:
6e:d1:e7:47:fa:5f:4a:fd:05:50:d6:65:86:b0:17:
20:b5:f1:20:31:b6:e1:59:75:6e:de:24:14:52:83:
9d:1b:47:a9:eb:4a:57:e5:46:1f:6e:c1:94:51:aa:
38:09:c0:b3:94:ad:0a:05:d5:f0:64:9e:ba:4a:cf:
a3:46:98:4d:cb:79:b7:92:db:05:9a:a5:42:0f:23:
8d:ba:cb:f2:de:fb:0e:5c:71:ab:2f:a1:a7:2c:6c:
2f:4b:bc:86:e7:7b:4c:bb:f9:a8:e0:2c:2e:72:bf:
fe:e1:bf:46:c9:27:6f:25:d9:28:ab:48:e4:75:33:
34:28:f8:4c:f1:b3:9d:47:e4:4a:39:18:17:d3:88:
66:41:94:b4:42:9e:49:9b:dc:63:7e:28:a9:13:88:
af:28:56:e0:7b:52:4f:71:5b:69:65:07:1e:89:d1:
76:23:de:53:cf:80:81:a1:44:54:b5:3f:30:f2:4f:
fa:11:75:7d:4d:95:d8:04:19:10:cf:8c:36:54:1e:
eb:34:e0:0d:1a:b2:5c:cf:f1:f4:92:a1:77:06:08:
f3:40:a4:96:46:6e:89:2e:cd:8e:0f:1d:9c:98:37:
4d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CE:60:71:CE:3B:E1:73:D2:08:71:7D:FB:D8:9D:23:EE:79:9B:1D
X509v3 Authority Key Identifier:
keyid:F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:89:7d:9b:b7:6c:0d:fd:1b:ea:43:c9:dc:b1:0a:72:a2:6e:
40:7b:4e:73:ab:20:8c:5b:00:76:da:0a:2b:0a:a2:d0:61:c4:
9f:73:ac:6e:2d:d7:a2:ba:1d:28:69:7a:61:f6:7e:ce:fd:48:
bc:99:0e:18:ae:38:81:26:2a:7c:6b:4d:a1:01:37:31:6b:fa:
6a:8a:e8:ed:1b:fe:03:26:e1:ed:da:db:da:e8:bb:3d:ba:f3:
bd:cb:f1:90:35:4b:1b:a6:bb:e5:b4:3d:85:7c:3d:2e:16:13:
de:94:a4:e1:51:f0:4e:e5:37:b1:b4:d5:1b:79:b4:9d:84:4e:
d7:48:83:af:91:54:75:2c:b5:0f:cb:e9:41:2c:8b:cd:66:9e:
76:b3:c7:e4:10:7b:a8:20:e1:ed:2e:6d:89:5a:16:52:ed:68:
0f:bb:a4:81:63:aa:eb:1f:a3:0d:0a:f4:9f:88:5f:5c:4a:a7:
32:e1:e7:a3:8e:34:b4:53:e4:b9:d0:30:77:9d:88:d1:f4:c6:
59:b7:54:b7:bb:bf:eb:02:f7:ef:5d:af:20:71:2a:31:4e:89:
c8:a6:92:e9:4f:56:75:80:5f:ac:ef:6a:68:38:94:c3:55:f5:
e5:a6:d1:b1:0a:cb:af:24:ac:89:3f:cb:38:42:a8:34:35:dc:
eb:10:8f:6d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTY0OEQxMTAvBgNVBAUTKEYxN0I1MzIxQTU4RDc5RTIzMDUzMUM1QUEwRjBCMjRF
MUQ4MTIxQTMwHhcNMjUwMTMxMDMzMTQyWhcNMjUwMjA3MDMzMTQyWjAYMRYwFAYD
VQQDEw02NzljNDQxZS0xZDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuhkzg/AMznaKog37OcIl2RamNVZkZejnyony4p1u0edH+l9K/QVQ1mWGsBcg
tfEgMbbhWXVu3iQUUoOdG0ep60pX5UYfbsGUUao4CcCzlK0KBdXwZJ66Ss+jRphN
y3m3ktsFmqVCDyONusvy3vsOXHGrL6GnLGwvS7yG53tMu/mo4Cwucr/+4b9GySdv
Jdkoq0jkdTM0KPhM8bOdR+RKORgX04hmQZS0Qp5Jm9xjfiipE4ivKFbge1JPcVtp
ZQceidF2I95Tz4CBoURUtT8w8k/6EXV9TZXYBBkQz4w2VB7rNOANGrJcz/H0kqF3
BgjzQKSWRm6JLs2ODx2cmDdNNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHLOYHHO
O+Fz0ghxffvYnSPueZsdMB8GA1UdIwQYMBaAFPF7UyGljXniMFMcWqDwsk4dgSGj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjQ4RC9DM0VFRTJBOEVG
RTIxMUVEQTNDNkMxNDdDNEY5QUUwMi84WHRUSWFXTmVlSXdVeHhhb1BDeVRoMkJJ
YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhYdFRJYVdOZWVJd1V4eGFvUEN5VGgyQklhTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NjQ4RC9DM0VFRTJBOEVGRTIxMUVEQTNDNkMxNDdDNEY5QUUwMi84WHRUSWFXTmVl
SXdVeHhhb1BDeVRoMkJJYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCAiX2bt2wN/RvqQ8ncsQpyom5Ae05zqyCMWwB22gorCqLQYcSfc6xu
Ldeiuh0oaXph9n7O/Ui8mQ4YrjiBJip8a02hATcxa/pqiujtG/4DJuHt2tva6Ls9
uvO9y/GQNUsbprvltD2FfD0uFhPelKThUfBO5TextNUbebSdhE7XSIOvkVR1LLUP
y+lBLIvNZp52s8fkEHuoIOHtLm2JWhZS7WgPu6SBY6rrH6MNCvSfiF9cSqcy4eej
jjS0U+S50DB3nYjR9MZZt1S3u7/rAvfvXa8gcSoxTonIppLpT1Z1gF+s72poOJTD
VfXlptGxCsuvJKyJP8s4Qqg0NdzrEI9t
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:04:18 2025 by rpki-client