Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft
File: p3g41_VBxh2wadq85dg3CafCrg0.mft (raw, json)
Hash identifier: 374iPiVv3aAwmKXHsYBK0FBe6q+ylR6MfY5jv9xJuOg=
Subject key identifier: 27:28:03:BE:E1:3A:5E:22:F9:34:54:CA:2D:0E:0D:E7:DC:13:6A:40
Authority key identifier: A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D
Certificate issuer: /CN=A9157D65/serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D
Certificate serial: 0AE2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft
Manifest number: 0ADA
Signing time: Thu 30 Jan 2025 19:24:39 +0000
Manifest this update: Thu 30 Jan 2025 19:24:38 +0000
Manifest next update: Thu 06 Feb 2025 19:24:38 +0000
Files and hashes: 1: p3g41_VBxh2wadq85dg3CafCrg0.crl (hash: F10/qmGQwYedfAAgIcSSZ50JwUcXl0G7s65RFzhByTg=)
2: F84C1D9C406111EAA351F913C4F9AE02.roa (hash: 5LiWM6Uc0NAk4quWPQAO0eKUiNZCpnKkhzSAW+kUOSc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2786 (0xae2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D65/serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D
Validity
Not Before: Jan 30 19:24:38 2025 GMT
Not After : Feb 6 19:24:38 2025 GMT
Subject: CN=679bd1f7-a63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b9:9f:b3:b6:50:2f:f4:e3:73:ee:c8:c6:61:
e5:ef:b7:31:7f:26:85:da:d2:98:de:83:e1:3e:bc:
c9:a0:20:ab:a9:44:57:0f:c9:15:d2:30:5a:b8:88:
83:24:f2:16:ea:35:77:cb:4a:ac:ce:db:26:ea:f8:
72:18:12:f9:c1:b1:65:61:e3:e6:b6:65:c7:39:e9:
fd:c8:cc:b4:f9:58:a2:9d:57:65:aa:c8:bd:10:d1:
ca:18:fd:a1:5b:a3:37:27:67:df:06:73:ee:10:6f:
66:5f:9c:46:87:62:08:3b:5e:d3:61:c4:35:95:50:
c7:9b:74:b1:fc:c6:8d:ad:45:b2:05:00:2e:79:92:
7a:48:c7:0d:0e:7c:37:c1:c9:ca:2d:dc:4a:bd:89:
44:56:35:1b:3f:4c:4b:40:97:02:08:8b:db:33:40:
0a:af:fd:a4:71:b8:c7:50:88:69:45:a0:99:5d:96:
40:98:b7:46:f8:9b:5d:d3:c0:5b:85:59:5d:8c:03:
ea:54:9b:6d:8d:ce:5d:16:03:45:02:69:93:03:c2:
5b:5b:b0:62:67:86:af:1d:08:e5:f2:2b:fd:fc:de:
6c:87:9a:89:8f:82:d8:dc:2c:55:a4:a5:96:39:d4:
59:49:ea:ac:1b:a8:fb:f6:77:b8:f2:a0:92:b1:4d:
dc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:28:03:BE:E1:3A:5E:22:F9:34:54:CA:2D:0E:0D:E7:DC:13:6A:40
X509v3 Authority Key Identifier:
keyid:A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:31:8b:7c:26:9d:50:9b:0a:3d:72:4e:17:3d:66:b7:22:80:
51:c3:13:32:98:07:8a:e3:b2:bf:20:84:9e:78:ee:e2:bc:42:
dd:50:06:9f:48:1f:f5:ff:a5:86:a5:23:4a:1e:e0:9c:13:ce:
3a:9f:39:0e:b4:0e:f6:2a:d8:5a:29:a4:c8:2b:7e:93:cd:7c:
f6:1f:6b:e1:d3:3a:28:40:01:bf:7a:7e:ae:a8:17:48:0c:f1:
bd:49:89:8a:8d:08:64:da:95:a1:91:5f:a9:4e:02:c2:65:57:
b8:e0:8a:57:b5:83:41:e9:99:54:4e:bd:b7:cb:fd:3e:42:1b:
fc:b4:ab:92:70:44:5a:c5:4b:b5:d1:b4:ba:6d:90:e2:af:f2:
86:30:62:7c:4c:29:a2:74:f1:b8:a3:d4:fa:c7:c9:c1:b1:1c:
9f:1d:21:e0:94:0e:7d:ae:03:ab:93:37:33:03:2b:ab:97:b1:
ff:c5:fd:c4:c9:b8:b9:55:2c:e2:96:47:ad:dd:bc:4b:2c:7f:
52:ee:93:c0:26:ff:05:ac:5b:31:11:09:69:b0:68:96:0a:40:
0a:be:48:fc:4f:cc:64:55:82:6b:75:3c:9f:62:82:1e:77:59:
29:d7:ce:32:ba:22:75:a5:4b:3f:7d:e0:cf:4d:cb:d8:d2:9d:
3d:4e:37:24
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdENjUxMTAvBgNVBAUTKEE3NzgzOEQ3RjU0MUM2MURCMDY5REFCQ0U1RDgzNzA5
QTdDMkFFMEQwHhcNMjUwMTMwMTkyNDM4WhcNMjUwMjA2MTkyNDM4WjAYMRYwFAYD
VQQDEw02NzliZDFmNy1hNjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0Lmfs7ZQL/Tjc+7IxmHl77cxfyaF2tKY3oPhPrzJoCCrqURXD8kV0jBauIiD
JPIW6jV3y0qsztsm6vhyGBL5wbFlYePmtmXHOen9yMy0+ViinVdlqsi9ENHKGP2h
W6M3J2ffBnPuEG9mX5xGh2IIO17TYcQ1lVDHm3Sx/MaNrUWyBQAueZJ6SMcNDnw3
wcnKLdxKvYlEVjUbP0xLQJcCCIvbM0AKr/2kcbjHUIhpRaCZXZZAmLdG+Jtd08Bb
hVldjAPqVJttjc5dFgNFAmmTA8JbW7BiZ4avHQjl8iv9/N5sh5qJj4LY3CxVpKWW
OdRZSeqsG6j79ne48qCSsU3crQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCcoA77h
Ol4i+TRUyi0ODefcE2pAMB8GA1UdIwQYMBaAFKd4ONf1QcYdsGnavOXYNwmnwq4N
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2NS8xQTBEQTgyQTQw
NjExMUVBQTJCQ0U1MTJDNEY5QUUwMi9wM2c0MV9WQnhoMndhZHE4NWRnM0NhZkNy
ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3AzZzQxX1ZCeGgyd2FkcTg1ZGczQ2FmQ3JnMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
N0Q2NS8xQTBEQTgyQTQwNjExMUVBQTJCQ0U1MTJDNEY5QUUwMi9wM2c0MV9WQnho
MndhZHE4NWRnM0NhZkNyZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAzMYt8Jp1Qmwo9ck4XPWa3IoBRwxMymAeK47K/IISeeO7ivELdUAaf
SB/1/6WGpSNKHuCcE846nzkOtA72KthaKaTIK36TzXz2H2vh0zooQAG/en6uqBdI
DPG9SYmKjQhk2pWhkV+pTgLCZVe44IpXtYNB6ZlUTr23y/0+Qhv8tKuScERaxUu1
0bS6bZDir/KGMGJ8TCmidPG4o9T6x8nBsRyfHSHglA59rgOrkzczAyurl7H/xf3E
ybi5VSzilket3bxLLH9S7pPAJv8FrFsxEQlpsGiWCkAKvkj8T8xkVYJrdTyfYoIe
d1kp184yuiJ1pUs/feDPTcvY0p09Tjck
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:43:18 2025 by rpki-client