Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft
File: ixVECuImyZD8nlWRX-jJUJvLZnY.mft (raw, json)
Hash identifier: 4Yf7DAChQ6itLlRs3rYZZq+JR/pNTvuttAfSs+/Svgs=
Subject key identifier: 38:83:DE:CC:31:20:21:CB:EE:B6:AD:F5:29:3F:B0:BA:A6:E2:76:91
Authority key identifier: 8B:15:44:0A:E2:26:C9:90:FC:9E:55:91:5F:E8:C9:50:9B:CB:66:76
Certificate issuer: /CN=A915EA46/serialNumber=8B15440AE226C990FC9E55915FE8C9509BCB6676
Certificate serial: 34
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft
Manifest number: 31
Signing time: Fri 31 Jan 2025 06:44:32 +0000
Manifest this update: Fri 31 Jan 2025 06:44:31 +0000
Manifest next update: Fri 07 Feb 2025 06:44:31 +0000
Files and hashes: 1: ixVECuImyZD8nlWRX-jJUJvLZnY.crl (hash: hQE/SJJrdSid5HunyaXv1bdnNate9uL9B1MkukB1Rxk=)
2: 3A748F0E9C1211EF80DB437DC4F9AE02.roa (hash: kNpNFTcyc7YR9nCZJjdQr+QDyHg/gCpaRE2tLnVIVt8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EA46/serialNumber=8B15440AE226C990FC9E55915FE8C9509BCB6676
Validity
Not Before: Jan 31 06:44:31 2025 GMT
Not After : Feb 7 06:44:31 2025 GMT
Subject: CN=679c714f-7c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b1:28:05:72:26:2a:49:b1:4b:78:65:46:a8:
4b:f5:ec:dc:10:3c:6c:51:b3:e1:9a:49:2d:b6:a5:
f7:95:01:e6:0e:1d:89:2d:ac:47:74:ba:c0:3e:2e:
7d:c6:18:a5:4f:d2:4c:35:04:5e:be:41:f1:55:75:
34:0b:25:8d:84:d8:c5:c3:d2:a4:b2:f3:6d:c5:a7:
36:7a:32:2e:02:bd:f7:f6:69:1e:6d:95:09:2c:d5:
16:cf:9e:41:62:5d:25:ce:dd:4b:eb:c8:9b:e3:76:
3f:72:bc:ea:83:3c:0e:a7:72:4e:e7:84:9e:03:5f:
a1:c5:81:6f:69:e4:aa:f1:56:4b:64:5a:48:3c:29:
d7:36:f4:68:31:ba:b9:41:27:9f:4d:c6:b1:60:d5:
c2:88:d3:9a:e0:c7:f7:6a:88:55:da:5c:2c:81:f3:
a4:18:ac:d2:a3:a3:2b:60:f3:f8:05:d5:49:61:41:
b4:3b:88:ff:b5:12:4b:5a:ea:95:6c:8c:c8:87:47:
16:15:1e:c4:97:22:b6:26:36:b1:1a:99:27:03:b6:
98:29:f5:51:49:a2:df:45:23:14:45:48:50:e6:0e:
4d:fd:9e:6c:fa:5e:cc:e9:5e:e5:c3:5c:c9:3a:73:
08:c4:0e:43:f4:de:49:88:15:11:0a:c6:e6:70:cc:
3d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:83:DE:CC:31:20:21:CB:EE:B6:AD:F5:29:3F:B0:BA:A6:E2:76:91
X509v3 Authority Key Identifier:
keyid:8B:15:44:0A:E2:26:C9:90:FC:9E:55:91:5F:E8:C9:50:9B:CB:66:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:fe:25:92:d8:4c:92:37:2b:67:74:0b:4c:6f:1f:ac:5e:a7:
41:54:46:45:e6:86:4c:23:01:89:0a:8d:4f:7d:7e:da:82:48:
d4:66:2d:21:34:b0:d1:c0:3f:dd:7a:b7:a8:c8:b0:0b:55:34:
31:0b:8e:1d:e0:89:90:3c:50:ff:13:93:3d:26:43:40:01:ba:
d7:42:ab:73:81:0d:6b:b3:8d:50:95:dc:18:40:76:48:3c:e2:
76:02:1b:26:28:9e:08:b9:c6:42:f7:2b:87:db:8e:64:81:6c:
7e:43:bf:de:ef:7e:79:5b:af:89:e2:e2:a6:82:05:99:6e:c8:
be:87:ba:53:06:09:f1:d1:8c:ae:cd:b6:5b:7e:ed:42:50:e0:
6f:4b:eb:b4:a0:df:5e:e1:6a:c3:4a:27:df:83:fa:ec:b9:83:
ac:9b:a8:9b:95:dc:a0:08:b0:65:a7:67:d8:e8:cc:ff:c1:42:
38:60:e4:0b:d1:f3:7d:89:09:1b:fe:1d:91:df:08:62:86:06:
73:ed:25:2c:e1:be:7b:0d:9d:90:ee:f2:82:c9:a9:fd:d2:71:
0e:7b:85:93:2b:22:46:a4:b2:72:4c:b6:82:2b:83:58:db:36:
ff:31:8b:1d:7e:cc:d1:e0:0f:56:f8:34:47:7f:ec:75:65:63:
af:8a:c0:bc
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
RUE0NjExMC8GA1UEBRMoOEIxNTQ0MEFFMjI2Qzk5MEZDOUU1NTkxNUZFOEM5NTA5
QkNCNjY3NjAeFw0yNTAxMzEwNjQ0MzFaFw0yNTAyMDcwNjQ0MzFaMBgxFjAUBgNV
BAMTDTY3OWM3MTRmLTdjOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDrsSgFciYqSbFLeGVGqEv17NwQPGxRs+GaSS22pfeVAeYOHYktrEd0usA+Ln3G
GKVP0kw1BF6+QfFVdTQLJY2E2MXD0qSy823FpzZ6Mi4Cvff2aR5tlQks1RbPnkFi
XSXO3UvryJvjdj9yvOqDPA6nck7nhJ4DX6HFgW9p5KrxVktkWkg8Kdc29GgxurlB
J59NxrFg1cKI05rgx/dqiFXaXCyB86QYrNKjoytg8/gF1UlhQbQ7iP+1Ekta6pVs
jMiHRxYVHsSXIrYmNrEamScDtpgp9VFJot9FIxRFSFDmDk39nmz6XszpXuXDXMk6
cwjEDkP03kmIFREKxuZwzD0xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOIPezDEg
Icvutq31KT+wuqbidpEwHwYDVR0jBBgwFoAUixVECuImyZD8nlWRX+jJUJvLZnYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFQTQ2L0Q0MzcxMTEyOUMx
MTExRUY5MkZCQTk3Q0M0RjlBRTAyL2l4VkVDdUlteVpEOG5sV1JYLWpKVUp2TFpu
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvaXhWRUN1SW15WkQ4bmxXUlgtakpVSnZMWm5ZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF
QTQ2L0Q0MzcxMTEyOUMxMTExRUY5MkZCQTk3Q0M0RjlBRTAyL2l4VkVDdUlteVpE
OG5sV1JYLWpKVUp2TFpuWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAEj+JZLYTJI3K2d0C0xvH6xep0FURkXmhkwjAYkKjU99ftqCSNRmLSE0
sNHAP916t6jIsAtVNDELjh3giZA8UP8Tkz0mQ0AButdCq3OBDWuzjVCV3BhAdkg8
4nYCGyYongi5xkL3K4fbjmSBbH5Dv97vfnlbr4ni4qaCBZluyL6HulMGCfHRjK7N
tlt+7UJQ4G9L67Sg317hasNKJ9+D+uy5g6ybqJuV3KAIsGWnZ9jozP/BQjhg5AvR
832JCRv+HZHfCGKGBnPtJSzhvnsNnZDu8oLJqf3ScQ57hZMrIkaksnJMtoIrg1jb
Nv8xix1+zNHgD1b4NEd/7HVlY6+KwLw=
-----END CERTIFICATE-----
Generated at Wed Apr 30 08:28:18 2025 by rpki-client