Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft
File: rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft (raw, json)
Hash identifier: epR7AR9lvXaOdEQsUF3P7/+kLHzEcsnasQ2tV3bdKTs=
Subject key identifier: A1:BD:32:A6:E1:3F:85:9E:2B:F0:F7:86:98:04:9D:33:FC:8C:D0:90
Authority key identifier: AD:F0:F5:AB:AF:FB:98:45:B5:5C:B3:61:A0:92:F5:6D:4E:40:05:DD
Certificate issuer: /CN=A9164E50/serialNumber=ADF0F5ABAFFB9845B55CB361A092F56D4E4005DD
Certificate serial: 062F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfD1q6_7mEW1XLNhoJL1bU5ABd0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft
Manifest number: 062A
Signing time: Thu 30 Jan 2025 22:37:06 +0000
Manifest this update: Thu 30 Jan 2025 22:37:05 +0000
Manifest next update: Thu 06 Feb 2025 22:37:05 +0000
Files and hashes: 1: rfD1q6_7mEW1XLNhoJL1bU5ABd0.crl (hash: NG5YqIw4S5ZBA5cJAPme3QK5DFd7pwngoyQ+lvEdL60=)
2: D18881E6807A11EBB44A0A58C4F9AE02.roa (hash: 9X7s4Zr8J67+2NJv1oqimpUYFSW3VJpeiZEh6uYKUO8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1583 (0x62f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164E50/serialNumber=ADF0F5ABAFFB9845B55CB361A092F56D4E4005DD
Validity
Not Before: Jan 30 22:37:05 2025 GMT
Not After : Feb 6 22:37:05 2025 GMT
Subject: CN=679bff12-5b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:05:4c:3f:f2:f3:a8:d4:43:65:29:ba:71:1b:
9b:fc:81:1f:6a:ef:81:b9:4d:9b:8d:df:bf:3a:4b:
bd:62:77:e8:22:c7:a0:41:e6:de:e6:35:93:7a:3b:
59:b2:e4:be:c7:9f:c3:5d:0a:3f:33:b1:a5:29:b2:
ef:79:e8:e1:ae:f8:a7:94:9f:c9:c5:e3:4f:be:a2:
6e:ac:6c:08:a4:71:04:ce:33:e5:18:bc:ab:97:0c:
ac:94:08:70:ef:52:03:54:01:a9:6b:04:83:50:69:
8f:b6:ef:30:95:56:37:6b:f9:9d:a2:11:df:56:27:
e3:42:5e:46:d5:3d:d0:71:a3:0e:0c:e6:4e:81:92:
15:f7:ee:d6:89:a1:7e:63:bb:38:b0:4e:1f:c4:22:
0c:d3:65:57:5f:17:b7:33:27:4c:c4:a4:5c:a6:98:
ac:97:1b:3f:15:e8:6a:22:19:23:21:24:5b:6e:89:
4d:e8:02:54:91:ff:5d:8c:57:74:2d:f7:92:05:ab:
3d:08:8d:a2:a8:73:c9:a1:c9:8b:31:a3:bf:74:be:
72:a2:17:97:61:76:53:53:b3:fb:f8:31:b5:45:5c:
cb:38:b2:4f:f3:2e:27:55:97:8b:ea:4c:b3:07:57:
65:68:62:be:8c:f5:1d:8c:6c:ba:9d:cb:24:e3:f0:
15:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BD:32:A6:E1:3F:85:9E:2B:F0:F7:86:98:04:9D:33:FC:8C:D0:90
X509v3 Authority Key Identifier:
keyid:AD:F0:F5:AB:AF:FB:98:45:B5:5C:B3:61:A0:92:F5:6D:4E:40:05:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfD1q6_7mEW1XLNhoJL1bU5ABd0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:88:cc:58:bf:56:2d:e1:c5:16:44:4d:e8:90:2b:6e:33:d6:
f1:f5:10:57:51:e4:f1:be:da:53:01:16:85:64:93:72:77:14:
6c:b3:50:20:e0:10:6d:87:15:ab:93:f3:60:14:0c:5f:f6:07:
19:1c:0b:69:cd:0a:ba:ce:7d:12:28:05:21:0e:e8:5a:4f:90:
12:d6:71:c1:0c:9b:4d:ca:d7:65:92:3f:53:8f:9e:a0:fd:65:
62:b2:a8:b2:5c:d8:e5:67:98:96:fe:6c:f7:ae:76:29:f5:95:
9d:94:f8:66:3c:e0:7f:fd:d0:6d:b2:3f:06:75:8b:d0:50:fa:
de:01:d8:31:fb:54:c1:16:36:59:b1:28:e1:8e:2d:26:20:40:
c6:1e:c7:17:3d:64:39:be:f6:5f:80:16:fb:d7:13:14:3e:45:
b8:dd:a7:db:87:a8:5a:22:94:65:58:04:e8:5a:5f:87:37:81:
c8:61:bd:72:e2:9d:c6:d6:ea:bd:93:e0:2b:dc:b6:3d:21:da:
63:8f:8e:10:ec:23:ea:76:f5:7a:49:a3:7c:e1:46:8a:5f:a1:
84:9e:f9:13:15:e9:56:02:bf:52:4e:94:64:d1:a4:c9:df:42:
21:ca:81:98:0c:e7:df:dd:a9:40:44:ff:7b:8b:6f:0a:07:39:
95:d9:1e:ab
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjRFNTAxMTAvBgNVBAUTKEFERjBGNUFCQUZGQjk4NDVCNTVDQjM2MUEwOTJGNTZE
NEU0MDA1REQwHhcNMjUwMTMwMjIzNzA1WhcNMjUwMjA2MjIzNzA1WjAYMRYwFAYD
VQQDEw02NzliZmYxMi01Yjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtAVMP/LzqNRDZSm6cRub/IEfau+BuU2bjd+/Oku9YnfoIsegQebe5jWTejtZ
suS+x5/DXQo/M7GlKbLveejhrvinlJ/JxeNPvqJurGwIpHEEzjPlGLyrlwyslAhw
71IDVAGpawSDUGmPtu8wlVY3a/mdohHfVifjQl5G1T3QcaMODOZOgZIV9+7WiaF+
Y7s4sE4fxCIM02VXXxe3MydMxKRcppislxs/FehqIhkjISRbbolN6AJUkf9djFd0
LfeSBas9CI2iqHPJocmLMaO/dL5yoheXYXZTU7P7+DG1RVzLOLJP8y4nVZeL6kyz
B1dlaGK+jPUdjGy6ncsk4/AVNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKG9Mqbh
P4WeK/D3hpgEnTP8jNCQMB8GA1UdIwQYMBaAFK3w9auv+5hFtVyzYaCS9W1OQAXd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEU1MC9BNDBBMjQyMDgw
NkQxMUVCQThCRjk5NzZDNEY5QUUwMi9yZkQxcTZfN21FVzFYTE5ob0pMMWJVNUFC
ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JmRDFxNl83bUVXMVhMTmhvSkwxYlU1QUJkMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NEU1MC9BNDBBMjQyMDgwNkQxMUVCQThCRjk5NzZDNEY5QUUwMi9yZkQxcTZfN21F
VzFYTE5ob0pMMWJVNUFCZDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQASiMxYv1Yt4cUWRE3okCtuM9bx9RBXUeTxvtpTARaFZJNydxRss1Ag
4BBthxWrk/NgFAxf9gcZHAtpzQq6zn0SKAUhDuhaT5AS1nHBDJtNytdlkj9Tj56g
/WVisqiyXNjlZ5iW/mz3rnYp9ZWdlPhmPOB//dBtsj8GdYvQUPreAdgx+1TBFjZZ
sSjhji0mIEDGHscXPWQ5vvZfgBb71xMUPkW43afbh6haIpRlWAToWl+HN4HIYb1y
4p3G1uq9k+Ar3LY9Idpjj44Q7CPqdvV6SaN84UaKX6GEnvkTFelWAr9STpRk0aTJ
30IhyoGYDOff3alARP97i28KBzmV2R6r
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:34:13 2025 by rpki-client