Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft
File: 7bQ_87hP5VlboMvE9ruHNxPkG7I.mft (raw, json)
Hash identifier: qSxSq84tvBL3K+QPyclAyfvnkz/0bO4okycY/vE82QA=
Subject key identifier: A8:A0:6D:C7:80:AB:C6:45:37:5B:24:B7:F6:91:CB:1B:0D:FD:F8:6A
Authority key identifier: ED:B4:3F:F3:B8:4F:E5:59:5B:A0:CB:C4:F6:BB:87:37:13:E4:1B:B2
Certificate issuer: /CN=A9167D85/serialNumber=EDB43FF3B84FE5595BA0CBC4F6BB873713E41BB2
Certificate serial: 0665
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft
Manifest number: 065E
Signing time: Thu 30 Jan 2025 22:25:41 +0000
Manifest this update: Thu 30 Jan 2025 22:25:40 +0000
Manifest next update: Thu 06 Feb 2025 22:25:40 +0000
Files and hashes: 1: 7bQ_87hP5VlboMvE9ruHNxPkG7I.crl (hash: Hpl1UOi+z4PkZl2WH4ygKiqqSGiu7FltfflTktfpK8A=)
2: 44E9156C730811EC89C1CE31C4F9AE02.roa (hash: 3P7zE+Wtx98FiHeFJ5MpJ+Mdyi0A3n8ttsX2hYFO/Pg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1637 (0x665)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167D85/serialNumber=EDB43FF3B84FE5595BA0CBC4F6BB873713E41BB2
Validity
Not Before: Jan 30 22:25:40 2025 GMT
Not After : Feb 6 22:25:40 2025 GMT
Subject: CN=679bfc64-17cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8f:31:31:4d:24:59:41:b5:7b:d8:a3:1e:7a:
a2:74:9f:00:92:11:eb:29:35:a1:e7:c4:e8:a7:c8:
b5:c5:99:06:19:1b:69:d9:69:95:01:c8:b5:30:45:
e7:0f:bd:3f:d0:2b:74:69:c6:1c:48:fb:a2:2a:c4:
fb:aa:0d:34:75:c4:84:4d:b5:4b:39:32:40:d4:ce:
d8:b9:11:a9:39:38:83:f8:0a:3d:d2:fd:b7:88:1d:
70:2e:68:70:f1:a6:27:f2:1f:b3:91:c7:2e:83:e7:
0f:eb:00:0a:1e:34:94:42:2e:3f:74:e3:19:0d:cb:
24:7b:c5:2e:8c:8d:bb:1b:4f:25:8a:c0:a6:97:02:
4a:36:81:05:af:6e:94:53:50:f0:77:af:c9:22:1a:
94:96:5d:da:9f:7f:7e:9d:c5:2e:ce:09:f7:0a:3f:
76:86:14:33:2e:90:81:66:6a:3d:7a:f4:0f:bd:d6:
13:e1:86:10:85:12:4d:2a:68:bf:fa:87:72:42:3a:
a2:7d:31:bc:3d:21:db:65:c6:79:6d:86:e9:14:4b:
af:a4:d1:5f:59:23:8a:0a:8a:44:5d:73:96:5d:c4:
32:73:fe:69:c1:a2:d2:24:4f:34:f5:84:a2:fd:20:
38:60:d5:9b:da:a8:a1:bb:85:3c:a3:98:8a:53:83:
26:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A0:6D:C7:80:AB:C6:45:37:5B:24:B7:F6:91:CB:1B:0D:FD:F8:6A
X509v3 Authority Key Identifier:
keyid:ED:B4:3F:F3:B8:4F:E5:59:5B:A0:CB:C4:F6:BB:87:37:13:E4:1B:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:d6:50:70:58:56:25:83:55:aa:29:27:7f:34:31:a0:79:19:
e5:6a:8d:88:e4:e9:1f:f7:c3:2b:f2:f9:ed:63:7f:31:78:aa:
e9:9b:c6:8c:f8:37:98:9f:78:64:81:90:b9:6d:a4:df:70:a4:
9e:64:c1:25:a7:6d:51:ed:0e:43:9d:f7:31:c1:59:cd:d8:d8:
4a:d2:42:92:5e:ba:b1:47:ac:50:8a:82:a4:d3:fb:a3:46:cd:
35:08:fe:1c:e4:1c:d8:11:fd:e5:14:36:1e:0a:ef:9b:ee:9b:
37:7e:88:f3:25:5e:26:49:04:92:96:ef:5e:38:d1:8e:db:3d:
1c:14:98:99:8a:a4:55:64:9f:a2:8c:2a:1e:5c:67:d3:db:1e:
8e:47:86:bd:cb:70:9c:76:78:02:03:a3:96:af:29:ec:f9:e8:
58:44:ee:4f:f5:06:13:ed:49:bf:d3:56:41:fd:ef:fa:48:ba:
a4:ea:17:1b:0e:82:a9:cf:42:c8:5e:69:da:cb:6c:11:75:8c:
2a:d1:64:80:e5:99:da:fa:ac:9a:b6:c9:9a:23:b5:7f:e6:7e:
e1:56:44:2d:79:99:53:0c:51:69:d9:63:36:85:e6:a1:db:91:
dd:5b:57:64:bc:95:0a:db:5a:36:7d:b9:fa:c3:8a:e5:3a:5c:
c0:40:3d:fe
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjdEODUxMTAvBgNVBAUTKEVEQjQzRkYzQjg0RkU1NTk1QkEwQ0JDNEY2QkI4NzM3
MTNFNDFCQjIwHhcNMjUwMTMwMjIyNTQwWhcNMjUwMjA2MjIyNTQwWjAYMRYwFAYD
VQQDEw02NzliZmM2NC0xN2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAto8xMU0kWUG1e9ijHnqidJ8AkhHrKTWh58Top8i1xZkGGRtp2WmVAci1MEXn
D70/0Ct0acYcSPuiKsT7qg00dcSETbVLOTJA1M7YuRGpOTiD+Ao90v23iB1wLmhw
8aYn8h+zkccug+cP6wAKHjSUQi4/dOMZDcske8UujI27G08lisCmlwJKNoEFr26U
U1Dwd6/JIhqUll3an39+ncUuzgn3Cj92hhQzLpCBZmo9evQPvdYT4YYQhRJNKmi/
+odyQjqifTG8PSHbZcZ5bYbpFEuvpNFfWSOKCopEXXOWXcQyc/5pwaLSJE809YSi
/SA4YNWb2qihu4U8o5iKU4MmxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKigbceA
q8ZFN1skt/aRyxsN/fhqMB8GA1UdIwQYMBaAFO20P/O4T+VZW6DLxPa7hzcT5Buy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0Q4NS83MUE2RjdENDZD
NkMxMUVCQjlDNzlENENDNEY5QUUwMi83YlFfODdoUDVWbGJvTXZFOXJ1SE54UGtH
N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdiUV84N2hQNVZsYm9NdkU5cnVITnhQa0c3SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
N0Q4NS83MUE2RjdENDZDNkMxMUVCQjlDNzlENENDNEY5QUUwMi83YlFfODdoUDVW
bGJvTXZFOXJ1SE54UGtHN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCV1lBwWFYlg1WqKSd/NDGgeRnlao2I5Okf98Mr8vntY38xeKrpm8aM
+DeYn3hkgZC5baTfcKSeZMElp21R7Q5DnfcxwVnN2NhK0kKSXrqxR6xQioKk0/uj
Rs01CP4c5BzYEf3lFDYeCu+b7ps3fojzJV4mSQSSlu9eONGO2z0cFJiZiqRVZJ+i
jCoeXGfT2x6OR4a9y3CcdngCA6OWryns+ehYRO5P9QYT7Um/01ZB/e/6SLqk6hcb
DoKpz0LIXmnay2wRdYwq0WSA5Zna+qyatsmaI7V/5n7hVkQteZlTDFFp2WM2heah
25HdW1dkvJUK21o2fbn6w4rlOlzAQD3+
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:52:29 2025 by rpki-client