Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft
File: 8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft (raw, json)
Hash identifier: kwu94I40xfUvx4o38hFnjPNHMaDYdUUMWDHh3GG1ijg=
Subject key identifier: E0:15:3C:6E:E2:FD:B4:D1:14:DC:04:9C:E4:78:E4:81:C8:5E:E2:71
Authority key identifier: F1:BA:94:3C:30:36:C6:9B:44:A7:59:70:A4:4D:92:90:56:89:A9:0F
Certificate issuer: /CN=A9159ECD/serialNumber=F1BA943C3036C69B44A75970A44D92905689A90F
Certificate serial: 04EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft
Manifest number: 04E8
Signing time: Thu 30 Jan 2025 23:48:10 +0000
Manifest this update: Thu 30 Jan 2025 23:48:09 +0000
Manifest next update: Thu 06 Feb 2025 23:48:09 +0000
Files and hashes: 1: 8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl (hash: klKMd/j2B7K1AjGk3Fxw6cOHwEBTh4BGAKtoojxe2sM=)
2: C309F5BA017011ECB98B2F33C4F9AE02.roa (hash: 1O85FlOv6K/BR4VQkIQz2NJTXgw1sgnDeAobu9ShuqI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1263 (0x4ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159ECD/serialNumber=F1BA943C3036C69B44A75970A44D92905689A90F
Validity
Not Before: Jan 30 23:48:09 2025 GMT
Not After : Feb 6 23:48:09 2025 GMT
Subject: CN=679c0fba-2f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7d:8c:c6:17:5d:d8:81:bf:fb:14:2a:a4:06:
40:c2:fa:1d:59:1b:a2:07:46:b8:85:a5:e9:2a:a1:
0b:3b:ab:06:21:66:50:63:6c:9a:f4:51:9b:19:48:
5a:fd:79:12:a6:b6:0c:a3:03:0d:c2:2e:af:d6:83:
c8:76:30:06:47:ee:e3:b4:e3:60:06:da:8b:01:7b:
4d:05:30:7d:b9:08:45:f3:c2:16:bc:95:de:28:9b:
de:a4:eb:53:43:07:e4:d4:48:d4:5b:43:32:8b:c6:
fe:77:0c:9a:44:b2:22:2a:68:c0:81:a0:73:f2:d2:
22:de:00:5c:63:12:df:f0:7c:76:a7:15:69:22:92:
cd:9c:95:89:6d:83:e2:40:4d:c5:5a:71:7f:b1:e1:
18:9d:ac:9b:dc:e0:32:dc:2d:af:fd:35:47:63:d3:
96:7d:ab:53:ed:4f:0f:07:f4:29:3c:05:ef:24:35:
42:8b:2d:74:24:da:03:05:d5:64:53:e4:43:e1:94:
e2:fa:27:12:44:bb:7e:7b:01:0e:7c:b9:2f:b3:1f:
ef:03:b7:d6:06:46:06:8a:61:d1:9b:ac:8b:cf:58:
7f:78:13:df:5a:71:3f:1f:f7:9e:0e:3c:69:dc:3c:
46:df:c5:19:20:b5:5b:bd:35:3c:b0:79:b6:6b:c9:
ba:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:15:3C:6E:E2:FD:B4:D1:14:DC:04:9C:E4:78:E4:81:C8:5E:E2:71
X509v3 Authority Key Identifier:
keyid:F1:BA:94:3C:30:36:C6:9B:44:A7:59:70:A4:4D:92:90:56:89:A9:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:fb:61:68:e0:ee:1c:ed:1c:97:00:73:3c:32:58:c1:2e:e6:
c4:1e:75:07:9d:37:3a:8a:4c:da:f1:80:7d:d9:d5:65:09:cc:
f2:be:f3:e7:cd:96:0b:9b:12:04:7a:02:09:5f:6b:c6:c4:f7:
55:a1:89:38:41:e8:8a:ae:ac:9b:62:41:a5:48:d9:04:b4:64:
e0:8a:8c:b4:80:7c:7a:3b:88:ef:48:b1:2b:e7:34:5b:0b:34:
69:b2:e1:8a:d6:19:32:5f:77:b6:98:80:79:61:4f:6e:94:b8:
bf:32:37:25:6a:19:50:30:b9:1f:7c:b6:73:57:24:e6:7d:ee:
46:0b:37:de:bb:47:f1:b3:7e:6d:9b:e9:2f:f3:c1:ab:5e:ea:
0a:6c:36:27:e5:70:dd:65:8c:aa:2b:c8:4d:9e:0e:23:91:6d:
09:c8:e9:7a:d1:59:68:a2:09:6d:89:bf:1f:f4:43:04:2f:3d:
04:ef:31:03:b3:3b:05:9a:fd:4b:d2:e1:3f:fe:ab:df:98:5d:
7e:09:55:7c:96:71:e1:83:7a:23:ec:44:a1:d3:8f:6c:c6:37:
94:8a:c2:8a:c1:0d:9c:73:ee:ef:27:9b:92:64:bb:bb:26:16:
a0:c2:52:72:01:43:a0:3f:69:07:aa:7f:8c:7e:c4:dc:2d:be:
c9:10:22:d1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTlFQ0QxMTAvBgNVBAUTKEYxQkE5NDNDMzAzNkM2OUI0NEE3NTk3MEE0NEQ5Mjkw
NTY4OUE5MEYwHhcNMjUwMTMwMjM0ODA5WhcNMjUwMjA2MjM0ODA5WjAYMRYwFAYD
VQQDEw02NzljMGZiYS0yZjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq32Mxhdd2IG/+xQqpAZAwvodWRuiB0a4haXpKqELO6sGIWZQY2ya9FGbGUha
/XkSprYMowMNwi6v1oPIdjAGR+7jtONgBtqLAXtNBTB9uQhF88IWvJXeKJvepOtT
Qwfk1EjUW0Myi8b+dwyaRLIiKmjAgaBz8tIi3gBcYxLf8Hx2pxVpIpLNnJWJbYPi
QE3FWnF/seEYnayb3OAy3C2v/TVHY9OWfatT7U8PB/QpPAXvJDVCiy10JNoDBdVk
U+RD4ZTi+icSRLt+ewEOfLkvsx/vA7fWBkYGimHRm6yLz1h/eBPfWnE/H/eeDjxp
3DxG38UZILVbvTU8sHm2a8m6LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOAVPG7i
/bTRFNwEnOR45IHIXuJxMB8GA1UdIwQYMBaAFPG6lDwwNsabRKdZcKRNkpBWiakP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUVDRC83QUM1MTU0QzAx
NkExMUVDQjJCMDBDMzdDNEY5QUUwMi84YnFVUERBMnhwdEVwMWx3cEUyU2tGYUpx
UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhicVVQREEyeHB0RXAxbHdwRTJTa0ZhSnFROC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
OUVDRC83QUM1MTU0QzAxNkExMUVDQjJCMDBDMzdDNEY5QUUwMi84YnFVUERBMnhw
dEVwMWx3cEUyU2tGYUpxUTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBQ+2Fo4O4c7RyXAHM8MljBLubEHnUHnTc6ikza8YB92dVlCczyvvPn
zZYLmxIEegIJX2vGxPdVoYk4QeiKrqybYkGlSNkEtGTgioy0gHx6O4jvSLEr5zRb
CzRpsuGK1hkyX3e2mIB5YU9ulLi/MjclahlQMLkffLZzVyTmfe5GCzfeu0fxs35t
m+kv88GrXuoKbDYn5XDdZYyqK8hNng4jkW0JyOl60Vloogltib8f9EMELz0E7zED
szsFmv1L0uE//qvfmF1+CVV8lnHhg3oj7ESh049sxjeUisKKwQ2cc+7vJ5uSZLu7
JhagwlJyAUOgP2kHqn+MfsTcLb7JECLR
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:26:38 2025 by rpki-client