Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.mft
File: Sp1OqbVF6hBQTTa2X6owSfmezUY.mft (raw, json)
Hash identifier: hWr6ShkaQMO9Xu5pGmyXh4uXnhTkZ5WdIOmA+PrJ3I4=
Subject key identifier: F0:9D:DF:03:DA:4E:22:57:F3:09:40:5A:82:54:1B:2C:00:17:B1:2B
Authority key identifier: 4A:9D:4E:A9:B5:45:EA:10:50:4D:36:B6:5F:AA:30:49:F9:9E:CD:46
Certificate issuer: /CN=A915FAD2/serialNumber=4A9D4EA9B545EA10504D36B65FAA3049F99ECD46
Certificate serial: 0F83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sp1OqbVF6hBQTTa2X6owSfmezUY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.mft
Manifest number: 0F77
Signing time: Fri 31 Jan 2025 17:31:57 +0000
Manifest this update: Fri 31 Jan 2025 17:31:57 +0000
Manifest next update: Fri 07 Feb 2025 17:31:57 +0000
Files and hashes: 1: Sp1OqbVF6hBQTTa2X6owSfmezUY.crl (hash: nJpJU+vGh/LixvHb/xlIWrZfZkHKTLnlaOB4rY3n08w=)
2: D34588789F8A11ECB8E03812C4F9AE02.roa (hash: WPeDV8L3X0hykJxlwLabrBRbZ1a+b6BWMeh2+gJp+KQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3971 (0xf83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FAD2/serialNumber=4A9D4EA9B545EA10504D36B65FAA3049F99ECD46
Validity
Not Before: Jan 31 17:31:57 2025 GMT
Not After : Feb 7 17:31:57 2025 GMT
Subject: CN=679d090d-4ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:05:83:66:39:dc:4f:5d:8f:5f:eb:a4:27:e8:
6f:2c:55:90:5b:7a:31:ff:a5:1c:10:e3:88:b9:53:
14:60:01:86:1a:21:f9:0e:16:02:fe:a2:60:2e:79:
78:90:45:34:5f:d5:51:b1:99:b0:7e:59:34:a5:de:
d5:9c:7c:69:b1:c3:63:5c:23:65:3a:d7:9c:5a:81:
cd:53:03:74:4c:bb:76:6f:21:71:9f:ff:8a:1e:da:
7a:2a:e7:06:bc:df:b3:1f:2f:ea:c3:6a:8c:c5:1b:
c3:e4:bd:67:1f:61:f2:2d:f3:d8:05:42:35:fc:a7:
25:56:73:0b:a6:30:81:91:f9:bd:aa:72:a1:05:e8:
2d:cc:4c:f5:e7:1f:63:93:73:10:58:a4:40:42:0d:
3b:cb:03:d8:ad:6e:0b:40:c3:bf:e2:ff:66:8d:fa:
03:a0:f0:f7:65:ba:5f:b3:dc:d6:a7:8a:e1:3b:c7:
3d:ad:64:6b:1a:2b:41:dd:33:f6:e9:3e:89:36:11:
b5:38:b0:9d:3b:d3:36:d9:fb:83:3d:d1:c2:c9:d2:
f0:13:9a:40:8e:cb:7b:0e:3f:1e:1b:c1:58:86:63:
37:d1:4d:88:c9:76:de:50:f3:63:56:16:c6:a1:e4:
31:28:e6:c1:53:0b:5b:4d:f9:98:7f:41:f8:37:ac:
63:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9D:DF:03:DA:4E:22:57:F3:09:40:5A:82:54:1B:2C:00:17:B1:2B
X509v3 Authority Key Identifier:
keyid:4A:9D:4E:A9:B5:45:EA:10:50:4D:36:B6:5F:AA:30:49:F9:9E:CD:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sp1OqbVF6hBQTTa2X6owSfmezUY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:c3:32:6b:89:2c:e9:08:60:41:99:77:7d:75:9e:23:7f:96:
21:9e:53:7d:06:44:f4:d5:d7:ab:7b:66:d0:6f:9e:51:96:d9:
a0:ac:9a:b0:48:1b:44:14:f0:43:ea:27:c2:c5:95:b5:93:a8:
6c:07:07:9e:06:ec:be:e9:4c:4a:ff:5c:0b:af:fa:c1:26:f3:
e0:c4:40:f6:f9:6d:c1:ed:df:fb:4e:44:4d:b7:dc:51:58:4d:
99:c3:59:c1:e6:8a:df:77:64:f8:ac:08:0d:31:07:3f:d6:52:
4d:f9:99:0c:3f:a3:9e:30:f8:ae:48:f7:89:f4:7e:05:e1:c4:
d8:63:dd:be:f4:62:ce:ea:97:64:29:cd:78:a6:de:f7:1a:24:
2e:6c:e2:31:66:96:29:13:b4:e8:78:1b:a5:72:fd:30:25:74:
34:f8:03:1f:8c:97:36:15:2d:5f:b1:4a:77:d9:30:75:4b:a4:
57:01:73:60:88:9b:8b:b2:b8:7f:5e:68:64:0d:af:5d:02:0d:
db:3f:83:e6:25:f1:55:b3:e2:e1:99:84:08:15:7a:79:53:76:
69:76:86:f8:e8:93:86:50:04:c8:f3:5d:e1:9a:56:10:d0:4c:
68:17:8a:d1:3f:39:83:02:ee:f7:73:1c:b1:87:6e:d8:3d:f7:
fd:9d:3e:4e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICD4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUZBRDIxMTAvBgNVBAUTKDRBOUQ0RUE5QjU0NUVBMTA1MDREMzZCNjVGQUEzMDQ5
Rjk5RUNENDYwHhcNMjUwMTMxMTczMTU3WhcNMjUwMjA3MTczMTU3WjAYMRYwFAYD
VQQDEw02NzlkMDkwZC00YWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzwWDZjncT12PX+ukJ+hvLFWQW3ox/6UcEOOIuVMUYAGGGiH5DhYC/qJgLnl4
kEU0X9VRsZmwflk0pd7VnHxpscNjXCNlOtecWoHNUwN0TLt2byFxn/+KHtp6KucG
vN+zHy/qw2qMxRvD5L1nH2HyLfPYBUI1/KclVnMLpjCBkfm9qnKhBegtzEz15x9j
k3MQWKRAQg07ywPYrW4LQMO/4v9mjfoDoPD3Zbpfs9zWp4rhO8c9rWRrGitB3TP2
6T6JNhG1OLCdO9M22fuDPdHCydLwE5pAjst7Dj8eG8FYhmM30U2IyXbeUPNjVhbG
oeQxKObBUwtbTfmYf0H4N6xjxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPCd3wPa
TiJX8wlAWoJUGywAF7ErMB8GA1UdIwQYMBaAFEqdTqm1ReoQUE02tl+qMEn5ns1G
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkFEMi84MzRBQzQ3ODU5
QkYxMUU5ODlCOTNCNjNDNEY5QUUwMi9TcDFPcWJWRjZoQlFUVGEyWDZvd1NmbWV6
VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NwMU9xYlZGNmhCUVRUYTJYNm93U2ZtZXpVWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RkFEMi84MzRBQzQ3ODU5QkYxMUU5ODlCOTNCNjNDNEY5QUUwMi9TcDFPcWJWRjZo
QlFUVGEyWDZvd1NmbWV6VVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBZwzJriSzpCGBBmXd9dZ4jf5YhnlN9BkT01dere2bQb55RltmgrJqw
SBtEFPBD6ifCxZW1k6hsBweeBuy+6UxK/1wLr/rBJvPgxED2+W3B7d/7TkRNt9xR
WE2Zw1nB5orfd2T4rAgNMQc/1lJN+ZkMP6OeMPiuSPeJ9H4F4cTYY92+9GLO6pdk
Kc14pt73GiQubOIxZpYpE7ToeBulcv0wJXQ0+AMfjJc2FS1fsUp32TB1S6RXAXNg
iJuLsrh/XmhkDa9dAg3bP4PmJfFVs+LhmYQIFXp5U3Zpdob46JOGUATI813hmlYQ
0ExoF4rRPzmDAu73cxyxh27YPff9nT5O
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:31:38 2025 by rpki-client