Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft
File: CUyLxdrczZwvs89F0UZN7s86HGA.mft (raw, json)
Hash identifier: UOc8101T14vp3bRP2qfPDJqKHiJXGh8TsqoeeimYVvg=
Subject key identifier: 03:18:5D:FB:D1:4E:08:98:5F:62:5D:8B:A4:14:54:6A:48:3C:46:23
Authority key identifier: 09:4C:8B:C5:DA:DC:CD:9C:2F:B3:CF:45:D1:46:4D:EE:CF:3A:1C:60
Certificate issuer: /CN=A9164164/serialNumber=094C8BC5DADCCD9C2FB3CF45D1464DEECF3A1C60
Certificate serial: 2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUyLxdrczZwvs89F0UZN7s86HGA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft
Manifest number: 2A
Signing time: Fri 31 Jan 2025 06:47:06 +0000
Manifest this update: Fri 31 Jan 2025 06:47:06 +0000
Manifest next update: Fri 07 Feb 2025 06:47:06 +0000
Files and hashes: 1: CUyLxdrczZwvs89F0UZN7s86HGA.crl (hash: ACM/TrDHFmIfbMRHp8//RkZLA6pCey1SHr8DmsO6iIQ=)
2: F1B3D754A18211EFA2B7E923C4F9AE02.roa (hash: ZgB4/zOUlrbnr+66F7inM4U41pNR0yS6V1N2ZkRjXXY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164164/serialNumber=094C8BC5DADCCD9C2FB3CF45D1464DEECF3A1C60
Validity
Not Before: Jan 31 06:47:06 2025 GMT
Not After : Feb 7 06:47:06 2025 GMT
Subject: CN=679c71ea-e9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:98:f6:7f:9e:14:e7:08:0c:01:66:46:0b:95:
d4:42:5c:94:68:89:ec:fa:4d:da:8d:8e:85:9e:28:
dc:14:8f:04:2e:56:94:07:22:46:6a:b1:40:41:a5:
44:4d:6a:a3:82:f6:de:f9:56:f3:d2:eb:67:5f:bc:
ef:97:29:c1:f0:b9:7b:6c:97:96:e9:ca:05:37:84:
22:5a:03:a4:eb:1a:b0:0e:cf:d2:9b:8e:01:d5:7b:
bc:c9:08:eb:6c:a2:06:7a:a0:90:52:3d:bc:68:ea:
3b:34:b0:25:b6:31:ea:9d:ed:ae:68:8a:23:4a:04:
96:09:17:8c:2c:49:d4:14:e7:08:a3:e5:b3:21:bf:
0c:8f:e7:1c:e8:99:14:a0:1f:75:6f:75:1f:da:76:
67:e2:06:63:fa:2e:94:32:e9:b0:54:c9:a7:f2:6b:
c3:c2:27:5a:cc:ea:83:87:fd:d9:d8:47:45:16:ff:
b4:f9:60:11:41:11:7e:1f:66:1c:ff:69:96:82:4a:
07:dc:35:32:3c:96:eb:f0:14:ff:9f:d5:16:14:64:
c3:7b:18:74:83:89:56:23:38:b4:65:b2:c1:5e:90:
91:9e:5a:e6:3e:34:8f:d0:8e:80:b4:d3:8c:d2:9f:
fc:11:4f:32:2f:42:02:89:21:04:6b:4d:b9:3f:05:
f0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:18:5D:FB:D1:4E:08:98:5F:62:5D:8B:A4:14:54:6A:48:3C:46:23
X509v3 Authority Key Identifier:
keyid:09:4C:8B:C5:DA:DC:CD:9C:2F:B3:CF:45:D1:46:4D:EE:CF:3A:1C:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUyLxdrczZwvs89F0UZN7s86HGA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:05:9b:43:ab:c6:b4:2f:ae:92:46:3b:f0:b8:4f:00:9f:da:
80:72:2f:86:cf:98:7d:e0:b8:5b:00:63:dd:20:c9:59:d6:4c:
11:60:e2:ca:09:1f:e9:03:db:d4:6e:1b:dc:e0:68:40:f5:70:
ff:f0:a5:ad:a5:d2:95:fd:cb:6a:6e:56:b1:e0:a7:68:06:4a:
78:26:ff:d3:d2:47:03:19:02:44:f5:bd:61:3a:0f:0f:bb:38:
d3:59:de:cb:f5:4d:e5:92:a2:4d:2b:76:c2:72:bf:12:8c:b6:
0c:61:b6:00:0c:93:7a:49:b3:3c:d6:82:bb:26:5f:90:ec:bf:
a7:a7:2a:bf:05:c4:f3:ee:f7:9e:32:96:40:f9:bd:65:05:70:
b5:e2:6e:7b:db:46:68:fd:d4:78:9f:2f:7d:6d:a5:cf:d0:47:
94:6e:1f:c3:7b:52:b6:df:1c:bb:ab:57:87:97:b7:c7:03:99:
01:0b:ed:93:23:3d:eb:6a:91:97:4c:82:dc:57:91:34:d8:74:
53:c6:f5:8e:25:d4:e5:5b:84:8f:25:8d:ae:4f:58:72:00:16:
7d:10:b8:24:a9:86:8a:fd:3e:03:a6:d5:1e:ad:d8:2e:c2:cf:
5c:5a:58:ad:77:ce:ed:1d:c0:22:be:70:cd:19:b4:39:5c:8f:
09:71:be:df
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
NDE2NDExMC8GA1UEBRMoMDk0QzhCQzVEQURDQ0Q5QzJGQjNDRjQ1RDE0NjRERUVD
RjNBMUM2MDAeFw0yNTAxMzEwNjQ3MDZaFw0yNTAyMDcwNjQ3MDZaMBgxFjAUBgNV
BAMTDTY3OWM3MWVhLWU5YzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCYmPZ/nhTnCAwBZkYLldRCXJRoiez6TdqNjoWeKNwUjwQuVpQHIkZqsUBBpURN
aqOC9t75VvPS62dfvO+XKcHwuXtsl5bpygU3hCJaA6TrGrAOz9KbjgHVe7zJCOts
ogZ6oJBSPbxo6js0sCW2Meqd7a5oiiNKBJYJF4wsSdQU5wij5bMhvwyP5xzomRSg
H3VvdR/admfiBmP6LpQy6bBUyafya8PCJ1rM6oOH/dnYR0UW/7T5YBFBEX4fZhz/
aZaCSgfcNTI8luvwFP+f1RYUZMN7GHSDiVYjOLRlssFekJGeWuY+NI/QjoC004zS
n/wRTzIvQgKJIQRrTbk/BfD/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAxhd+9FO
CJhfYl2LpBRUakg8RiMwHwYDVR0jBBgwFoAUCUyLxdrczZwvs89F0UZN7s86HGAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0MTY0L0FFNzIyODlDQTE4
MjExRUY4RjRFMTYyM0M0RjlBRTAyL0NVeUx4ZHJjelp3dnM4OUYwVVpON3M4NkhH
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQ1V5THhkcmN6Wnd2czg5RjBVWk43czg2SEdBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0
MTY0L0FFNzIyODlDQTE4MjExRUY4RjRFMTYyM0M0RjlBRTAyL0NVeUx4ZHJjelp3
dnM4OUYwVVpON3M4NkhHQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAC0Fm0OrxrQvrpJGO/C4TwCf2oByL4bPmH3guFsAY90gyVnWTBFg4soJ
H+kD29RuG9zgaED1cP/wpa2l0pX9y2puVrHgp2gGSngm/9PSRwMZAkT1vWE6Dw+7
ONNZ3sv1TeWSok0rdsJyvxKMtgxhtgAMk3pJszzWgrsmX5Dsv6enKr8FxPPu954y
lkD5vWUFcLXibnvbRmj91HifL31tpc/QR5RuH8N7UrbfHLurV4eXt8cDmQEL7ZMj
PetqkZdMgtxXkTTYdFPG9Y4l1OVbhI8lja5PWHIAFn0QuCSphor9PgOm1R6t2C7C
z1xaWK13zu0dwCK+cM0ZtDlcjwlxvt8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:44:15 2025 by rpki-client