Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft
File: gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft (raw, json)
Hash identifier: wYcvqfCIZ1wsKBiHlnw7KxY7YyA6wfP4uo60S7Gvyvg=
Subject key identifier: 34:C3:AC:FD:25:4F:A9:A4:DA:AF:83:A9:1B:74:0F:7B:8B:E4:CC:B3
Authority key identifier: 81:83:59:BC:A0:F6:73:B7:81:60:03:FB:B8:9B:65:37:A9:48:07:5B
Certificate issuer: /CN=A9160602/serialNumber=818359BCA0F673B7816003FBB89B6537A948075B
Certificate serial: 0170
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft
Manifest number: 016C
Signing time: Fri 31 Jan 2025 03:06:01 +0000
Manifest this update: Fri 31 Jan 2025 03:06:01 +0000
Manifest next update: Fri 07 Feb 2025 03:06:01 +0000
Files and hashes: 1: gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl (hash: jQE083gmUApGhKTwKbbkYElvypXNTeUuhY3Gjd6G+BI=)
2: 2DF8935CAFB411ED8D33ED1FC4F9AE02.roa (hash: vlOK1RJCHtSR0rcREKWIrzl7luUJenVcTiEDALCfBP0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 368 (0x170)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160602/serialNumber=818359BCA0F673B7816003FBB89B6537A948075B
Validity
Not Before: Jan 31 03:06:01 2025 GMT
Not After : Feb 7 03:06:01 2025 GMT
Subject: CN=679c3e19-4e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d7:55:c7:eb:96:ed:9e:f6:23:23:30:e3:1a:
ff:cb:83:4c:79:99:f3:c4:c9:01:21:6b:1e:32:03:
72:ff:de:51:7a:3c:a0:ea:97:fd:fd:3c:4b:3e:a9:
50:ec:83:5d:01:31:5b:da:e9:fe:37:93:21:5f:7b:
30:5a:8c:c7:44:29:bd:88:ef:9b:f9:a5:c9:04:5d:
fc:20:78:e9:c0:b2:f9:95:19:c7:60:70:0b:e6:4a:
a4:fd:f8:30:32:69:a0:9d:1b:2f:2e:7a:82:9f:fb:
82:17:80:c0:01:df:49:38:ba:7e:22:4a:2d:6a:2f:
45:11:ef:cd:b2:cc:63:7f:90:f2:c0:2c:f6:21:16:
af:66:a0:ca:f8:5e:97:03:e4:2e:14:a6:69:a3:e7:
3a:0c:06:bc:89:2f:ee:c7:4e:46:90:0b:f6:b7:e2:
39:92:6b:e4:37:0a:f8:ca:9b:1a:ad:bc:c8:05:62:
ec:f0:24:a3:74:8a:9e:b3:25:64:cf:9e:58:db:6e:
2a:a7:46:68:e6:62:6f:67:85:ab:bf:7a:2e:6b:32:
84:dd:d9:61:16:fd:c7:61:7b:c2:44:f1:05:80:e1:
07:ea:c2:5b:66:71:d5:c7:aa:93:28:6b:15:30:e3:
03:c8:e5:fe:b2:e9:86:35:c6:67:7e:ba:b2:09:23:
90:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C3:AC:FD:25:4F:A9:A4:DA:AF:83:A9:1B:74:0F:7B:8B:E4:CC:B3
X509v3 Authority Key Identifier:
keyid:81:83:59:BC:A0:F6:73:B7:81:60:03:FB:B8:9B:65:37:A9:48:07:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:1e:4b:76:02:a6:51:1c:34:aa:1a:41:75:5c:d9:49:da:c5:
ea:39:2c:61:a6:1d:6a:45:7e:5d:7d:f2:26:6b:d7:21:c0:19:
52:7a:8b:6f:0e:e9:7b:d1:ca:37:af:ef:a9:bc:65:64:ba:a2:
07:05:ce:46:5d:93:8c:3d:d9:23:f6:d7:22:0d:ec:58:52:bd:
f1:97:0b:b2:9f:83:7d:60:df:34:69:ef:6c:39:09:de:d3:b4:
79:06:08:a3:c5:7d:f1:8c:98:4d:56:fc:b8:50:30:97:16:9c:
b1:93:95:be:db:04:85:07:a3:66:f2:e2:4c:12:83:a6:93:aa:
fb:48:38:52:f8:f4:5b:36:00:c8:e5:3b:90:f9:a4:91:f3:2a:
0a:16:0b:e1:22:c8:7c:83:41:6f:60:01:f7:2a:c9:78:06:45:
a9:0e:8c:06:a9:f1:11:49:84:31:24:70:18:19:02:c8:f0:53:
6b:e8:94:de:f0:cb:7b:85:7b:00:c6:38:d5:ac:94:be:7c:8c:
0b:6f:14:ee:58:bf:fd:de:4b:49:be:2d:c5:6b:f5:33:a6:e7:
b8:a6:8f:a4:a1:8d:3a:3c:90:a7:be:2f:ec:62:79:d4:3d:99:
eb:27:69:97:cc:3d:1b:67:91:e4:47:d2:1f:df:86:73:fe:b3:
fd:76:b5:5d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjA2MDIxMTAvBgNVBAUTKDgxODM1OUJDQTBGNjczQjc4MTYwMDNGQkI4OUI2NTM3
QTk0ODA3NUIwHhcNMjUwMTMxMDMwNjAxWhcNMjUwMjA3MDMwNjAxWjAYMRYwFAYD
VQQDEw02NzljM2UxOS00ZTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuNdVx+uW7Z72IyMw4xr/y4NMeZnzxMkBIWseMgNy/95Rejyg6pf9/TxLPqlQ
7INdATFb2un+N5MhX3swWozHRCm9iO+b+aXJBF38IHjpwLL5lRnHYHAL5kqk/fgw
MmmgnRsvLnqCn/uCF4DAAd9JOLp+Ikotai9FEe/Nssxjf5DywCz2IRavZqDK+F6X
A+QuFKZpo+c6DAa8iS/ux05GkAv2t+I5kmvkNwr4ypsarbzIBWLs8CSjdIqesyVk
z55Y224qp0Zo5mJvZ4Wrv3ouazKE3dlhFv3HYXvCRPEFgOEH6sJbZnHVx6qTKGsV
MOMDyOX+sumGNcZnfrqyCSOQ7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTDrP0l
T6mk2q+DqRt0D3uL5MyzMB8GA1UdIwQYMBaAFIGDWbyg9nO3gWAD+7ibZTepSAdb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDYwMi9GQkNDODk3Q0FG
QjAxMUVEQjJGMjA0MUJDNEY5QUUwMi9nWU5adktEMmM3ZUJZQVA3dUp0bE42bElC
MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dZTlp2S0QyYzdlQllBUDd1SnRsTjZsSUIxcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MDYwMi9GQkNDODk3Q0FGQjAxMUVEQjJGMjA0MUJDNEY5QUUwMi9nWU5adktEMmM3
ZUJZQVA3dUp0bE42bElCMXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBwHkt2AqZRHDSqGkF1XNlJ2sXqOSxhph1qRX5dffIma9chwBlSeotv
Dul70co3r++pvGVkuqIHBc5GXZOMPdkj9tciDexYUr3xlwuyn4N9YN80ae9sOQne
07R5BgijxX3xjJhNVvy4UDCXFpyxk5W+2wSFB6Nm8uJMEoOmk6r7SDhS+PRbNgDI
5TuQ+aSR8yoKFgvhIsh8g0FvYAH3Ksl4BkWpDowGqfERSYQxJHAYGQLI8FNr6JTe
8Mt7hXsAxjjVrJS+fIwLbxTuWL/93ktJvi3Fa/Uzpue4po+koY06PJCnvi/sYnnU
PZnrJ2mXzD0bZ5HkR9If34Zz/rP9drVd
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:52:47 2025 by rpki-client