Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.mft
File: 08nS13n2aEMJcSuzDPoZkpDhuNY.mft (raw, json)
Hash identifier: Vrdf4IujbhmeXW3+7copsu+YpMcB9Yr5S3Upq7WP8Ec=
Subject key identifier: 77:35:B4:F1:80:C3:77:FE:9A:97:C2:E7:8E:CD:65:28:AE:F5:C3:AA
Authority key identifier: D3:C9:D2:D7:79:F6:68:43:09:71:2B:B3:0C:FA:19:92:90:E1:B8:D6
Certificate issuer: /CN=A915DE8F/serialNumber=D3C9D2D779F6684309712BB30CFA199290E1B8D6
Certificate serial: 2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08nS13n2aEMJcSuzDPoZkpDhuNY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.mft
Manifest number: 2C
Signing time: Fri 31 Jan 2025 06:46:48 +0000
Manifest this update: Fri 31 Jan 2025 06:46:48 +0000
Manifest next update: Fri 07 Feb 2025 06:46:48 +0000
Files and hashes: 1: 08nS13n2aEMJcSuzDPoZkpDhuNY.crl (hash: 8uH/O/u39N7/v9c2irbTYWPfDZe+4YEQt1ldNzR8W2I=)
2: 6DEFE6D8A14611EF93AB8E21C4F9AE02.roa (hash: rRMGtINr2UhdhF+qj8NjJEBcNErv93/+Ql2sANUuRRs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915DE8F/serialNumber=D3C9D2D779F6684309712BB30CFA199290E1B8D6
Validity
Not Before: Jan 31 06:46:48 2025 GMT
Not After : Feb 7 06:46:48 2025 GMT
Subject: CN=679c71d8-ea90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b2:72:e0:fa:fa:e6:0c:8d:a3:e3:5e:60:55:
f3:1d:fa:5e:74:78:d4:a2:38:1a:76:03:f5:7a:7e:
79:9e:6b:5a:85:5a:90:c9:ee:bb:a1:be:63:34:3e:
40:d1:29:c1:f6:7c:71:82:35:11:88:d1:b4:88:b7:
bb:88:5b:b6:5c:b0:3e:5e:17:4f:1f:f1:f2:bf:67:
42:6c:76:19:b0:58:99:ba:eb:fa:e9:bf:f1:05:2b:
9d:0e:43:6f:dd:78:fb:e1:c6:e5:21:4d:ae:5f:f9:
55:e5:18:f5:9c:45:d4:69:f7:6e:d8:81:b5:4f:1a:
a9:3b:d7:81:6b:42:14:12:5d:c6:55:70:38:a1:d1:
a4:00:be:f8:a8:18:b3:2b:f9:3c:26:c8:da:09:1c:
6c:27:ea:2e:cb:11:fa:23:41:dd:44:ba:aa:bc:c5:
77:9f:4e:5a:74:c8:09:c8:d7:91:48:aa:b9:80:6a:
61:71:7c:68:b0:20:90:19:4c:29:80:15:28:57:47:
4e:ba:af:da:19:0d:99:23:28:c2:f0:f9:60:9c:34:
f2:70:be:6c:5d:33:67:a1:28:2c:0f:f5:1e:cc:55:
26:a1:9b:0f:79:00:d9:40:d8:b0:76:a7:88:a3:29:
43:bc:c1:f6:9f:70:a1:2e:c1:32:dd:14:81:23:e0:
07:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:35:B4:F1:80:C3:77:FE:9A:97:C2:E7:8E:CD:65:28:AE:F5:C3:AA
X509v3 Authority Key Identifier:
keyid:D3:C9:D2:D7:79:F6:68:43:09:71:2B:B3:0C:FA:19:92:90:E1:B8:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08nS13n2aEMJcSuzDPoZkpDhuNY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:68:f7:d7:c2:97:4e:13:49:ac:7a:b0:65:98:a3:c8:cd:fe:
0e:d2:f3:cc:06:d5:33:49:a2:27:03:44:bf:96:9c:e6:3f:7a:
79:f4:96:f4:53:ea:6d:c2:9a:af:8d:96:57:b6:8b:fd:9e:40:
cc:9d:bc:64:34:af:bd:c0:3b:bf:f8:34:0d:d9:7e:ce:7e:51:
36:5e:68:1b:12:bf:ee:6a:03:46:ed:d7:1d:90:f3:a9:c8:d7:
98:cd:e1:5a:e0:82:59:b0:eb:ba:0f:13:7a:e2:75:e2:20:cd:
91:6a:46:a1:ee:d4:aa:53:05:92:0b:6a:03:bf:91:72:5e:bc:
60:61:9d:a7:8d:c3:4e:fd:f3:b4:bb:b8:d8:63:39:2b:a4:32:
47:cd:a6:26:2c:37:c9:81:b5:b6:5d:0c:1f:2f:49:28:38:c1:
73:c4:41:42:84:e6:92:be:41:a9:51:79:96:ed:7c:92:db:8c:
4e:84:ce:54:f1:7e:4b:06:eb:bb:59:35:0b:7c:53:96:38:dc:
73:c2:be:cf:43:79:51:ae:83:80:a9:7a:42:71:af:e2:40:35:
53:6c:25:b6:2c:f9:2b:8d:8c:28:44:09:dc:d4:10:f7:03:1c:
61:e7:5b:83:6f:30:58:fa:7a:ba:e3:30:65:33:b5:e7:f1:1b:
77:40:a8:23
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
REU4RjExMC8GA1UEBRMoRDNDOUQyRDc3OUY2Njg0MzA5NzEyQkIzMENGQTE5OTI5
MEUxQjhENjAeFw0yNTAxMzEwNjQ2NDhaFw0yNTAyMDcwNjQ2NDhaMBgxFjAUBgNV
BAMTDTY3OWM3MWQ4LWVhOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDCsnLg+vrmDI2j415gVfMd+l50eNSiOBp2A/V6fnmea1qFWpDJ7ruhvmM0PkDR
KcH2fHGCNRGI0bSIt7uIW7ZcsD5eF08f8fK/Z0JsdhmwWJm66/rpv/EFK50OQ2/d
ePvhxuUhTa5f+VXlGPWcRdRp927YgbVPGqk714FrQhQSXcZVcDih0aQAvvioGLMr
+TwmyNoJHGwn6i7LEfojQd1Euqq8xXefTlp0yAnI15FIqrmAamFxfGiwIJAZTCmA
FShXR066r9oZDZkjKMLw+WCcNPJwvmxdM2ehKCwP9R7MVSahmw95ANlA2LB2p4ij
KUO8wfafcKEuwTLdFIEj4AeTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdzW08YDD
d/6al8Lnjs1lKK71w6owHwYDVR0jBBgwFoAU08nS13n2aEMJcSuzDPoZkpDhuNYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVERThGLzBCNTQzQjBBQTE0
NjExRUZBMTJBNkUxRkM0RjlBRTAyLzA4blMxM24yYUVNSmNTdXpEUG9aa3BEaHVO
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMDhuUzEzbjJhRU1KY1N1ekRQb1prcERodU5ZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVE
RThGLzBCNTQzQjBBQTE0NjExRUZBMTJBNkUxRkM0RjlBRTAyLzA4blMxM24yYUVN
SmNTdXpEUG9aa3BEaHVOWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAL1o99fCl04TSax6sGWYo8jN/g7S88wG1TNJoicDRL+WnOY/enn0lvRT
6m3Cmq+Nlle2i/2eQMydvGQ0r73AO7/4NA3Zfs5+UTZeaBsSv+5qA0bt1x2Q86nI
15jN4Vrgglmw67oPE3rideIgzZFqRqHu1KpTBZILagO/kXJevGBhnaeNw07987S7
uNhjOSukMkfNpiYsN8mBtbZdDB8vSSg4wXPEQUKE5pK+QalReZbtfJLbjE6EzlTx
fksG67tZNQt8U5Y43HPCvs9DeVGug4CpekJxr+JANVNsJbYs+SuNjChECdzUEPcD
HGHnW4NvMFj6errjMGUztefxG3dAqCM=
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:50:58 2025 by rpki-client