Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
File: -AoX4Y4_OhL3UjNnLorGf4DlL98.mft (raw, json)
Hash identifier: dJWOY6kWbp7VbP6gmRa2u/jTK/oYVDMB7qaYlNkzuQo=
Subject key identifier: 46:FA:89:E1:8E:0F:17:E0:E6:8E:64:43:EC:96:A1:55:58:EB:DA:4A
Authority key identifier: F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF
Certificate issuer: /CN=A916423B/serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF
Certificate serial: 0133
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
Manifest number: 0131
Signing time: Fri 31 Jan 2025 03:40:51 +0000
Manifest this update: Fri 31 Jan 2025 03:40:50 +0000
Manifest next update: Fri 07 Feb 2025 03:40:50 +0000
Files and hashes: 1: -AoX4Y4_OhL3UjNnLorGf4DlL98.crl (hash: 08vLMa/no4+rwN9EwRZr/Y8HUg9KgyRdJOJ+mS5XDgw=)
2: 593888C40AB811EE97CC7A32C4F9AE02.roa (hash: YBTJyFDQVecrTFPkPy4W2Dd55PMCXx4820zaNKR8/1Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 307 (0x133)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916423B/serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF
Validity
Not Before: Jan 31 03:40:50 2025 GMT
Not After : Feb 7 03:40:50 2025 GMT
Subject: CN=679c4643-3485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:59:ae:40:f3:48:fc:fc:89:0c:07:1a:5a:c1:
be:cd:5b:9d:d6:f3:98:71:ec:3f:54:67:c8:d4:ea:
e5:08:d1:25:83:5f:15:b1:d8:4e:42:17:96:48:34:
11:81:a4:13:d9:83:cd:7d:89:02:de:65:e9:97:8c:
30:d4:64:fd:d8:dd:0b:42:78:31:ef:e8:40:2e:b6:
02:1b:15:1c:0c:77:52:d3:c6:ee:38:07:e7:43:09:
71:7a:93:a9:bc:cf:e3:49:42:d5:5d:0c:a5:27:c2:
c7:66:62:9a:f7:32:02:ed:ff:bd:49:f0:67:fd:4e:
67:15:55:83:19:7a:05:81:4b:5a:bd:2b:ac:84:b7:
fb:f9:0c:aa:3b:4f:05:2d:07:39:eb:56:87:9e:4d:
fe:0d:f4:b1:39:48:75:52:07:80:8e:48:76:68:80:
fb:23:f9:33:2f:c3:3f:b6:94:f1:51:43:db:31:47:
a2:2b:08:55:70:61:dd:43:b9:57:a5:a7:24:de:d8:
ce:9b:33:d8:14:08:bf:1a:ff:bb:34:e7:0e:8e:48:
90:77:e0:a1:5c:36:b5:f0:f2:9c:16:5e:79:59:6d:
ce:2d:39:e4:11:65:57:1e:df:52:92:2f:e4:09:1c:
44:a9:52:af:ac:6e:7e:5e:13:f6:fa:92:60:d1:da:
f4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FA:89:E1:8E:0F:17:E0:E6:8E:64:43:EC:96:A1:55:58:EB:DA:4A
X509v3 Authority Key Identifier:
keyid:F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:5e:a7:b1:e5:36:30:d5:9d:8a:14:c1:7d:76:15:f8:3b:1d:
fc:52:8b:33:e2:2b:15:8d:19:71:e7:e5:6e:83:ec:8a:b1:d8:
16:bc:0d:17:82:d6:78:19:b4:49:8e:78:36:d9:1a:31:84:30:
c5:70:3b:8f:c4:4a:55:7e:c6:a7:c8:6c:30:cc:51:5e:e9:d3:
6d:d4:45:1c:bc:a8:c6:a5:17:1f:42:c8:cb:2a:ab:39:87:e7:
ff:15:a8:f9:0c:04:ea:fa:fb:66:7c:ec:5a:d1:1d:df:6d:5d:
2a:2a:f9:5d:76:c0:dc:ed:7c:63:9c:b9:52:32:01:e2:53:2f:
79:c2:f3:da:aa:86:3d:63:d2:52:06:b0:b5:b5:cc:fd:73:5b:
7e:4e:b2:b1:a0:4a:4d:24:dc:94:49:0d:fe:ac:26:9b:88:79:
89:59:1b:b0:4a:1f:31:17:f7:17:6b:77:26:29:c3:81:ae:f2:
da:58:e4:53:35:f7:f3:f8:18:ae:72:0e:69:a1:89:59:f3:19:
5d:64:2d:bc:26:20:fc:4e:ad:b7:20:50:e3:f9:c6:38:b3:a0:
60:aa:bb:8b:85:c4:ff:b8:d6:69:ff:2d:b4:16:0d:36:18:d6:
6b:a2:cf:96:eb:06:22:82:7d:2e:e1:de:6a:67:63:21:9d:87:
96:78:70:f4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjQyM0IxMTAvBgNVBAUTKEY4MEExN0UxOEUzRjNBMTJGNzUyMzM2NzJFOEFDNjdG
ODBFNTJGREYwHhcNMjUwMTMxMDM0MDUwWhcNMjUwMjA3MDM0MDUwWjAYMRYwFAYD
VQQDEw02NzljNDY0My0zNDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsVmuQPNI/PyJDAcaWsG+zVud1vOYcew/VGfI1OrlCNElg18VsdhOQheWSDQR
gaQT2YPNfYkC3mXpl4ww1GT92N0LQngx7+hALrYCGxUcDHdS08buOAfnQwlxepOp
vM/jSULVXQylJ8LHZmKa9zIC7f+9SfBn/U5nFVWDGXoFgUtavSushLf7+QyqO08F
LQc561aHnk3+DfSxOUh1UgeAjkh2aID7I/kzL8M/tpTxUUPbMUeiKwhVcGHdQ7lX
pack3tjOmzPYFAi/Gv+7NOcOjkiQd+ChXDa18PKcFl55WW3OLTnkEWVXHt9Ski/k
CRxEqVKvrG5+XhP2+pJg0dr0cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEb6ieGO
Dxfg5o5kQ+yWoVVY69pKMB8GA1UdIwQYMBaAFPgKF+GOPzoS91IzZy6Kxn+A5S/f
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDIzQi9EQzQ5QTVGQTBB
QjIxMUVFODBCMzU1MzdDNEY5QUUwMi8tQW9YNFk0X09oTDNVak5uTG9yR2Y0RGxM
OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1Bb1g0WTRfT2hMM1VqTm5Mb3JHZjREbEw5OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NDIzQi9EQzQ5QTVGQTBBQjIxMUVFODBCMzU1MzdDNEY5QUUwMi8tQW9YNFk0X09o
TDNVak5uTG9yR2Y0RGxMOTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB+Xqex5TYw1Z2KFMF9dhX4Ox38Uosz4isVjRlx5+Vug+yKsdgWvA0X
gtZ4GbRJjng22RoxhDDFcDuPxEpVfsanyGwwzFFe6dNt1EUcvKjGpRcfQsjLKqs5
h+f/Faj5DATq+vtmfOxa0R3fbV0qKvlddsDc7XxjnLlSMgHiUy95wvPaqoY9Y9JS
BrC1tcz9c1t+TrKxoEpNJNyUSQ3+rCabiHmJWRuwSh8xF/cXa3cmKcOBrvLaWORT
Nffz+Biucg5poYlZ8xldZC28JiD8Tq23IFDj+cY4s6BgqruLhcT/uNZp/y20Fg02
GNZros+W6wYign0u4d5qZ2MhnYeWeHD0
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:09:30 2025 by rpki-client