Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft
File: cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft (raw, json)
Hash identifier: iWGmKn6REeYVySBj54BF24NqDsZemYCwbXEQzYpL1iI=
Subject key identifier: C5:59:5B:DD:9B:E0:FC:6F:C6:65:46:99:5E:22:0F:27:D4:62:53:7D
Authority key identifier: 72:03:8A:88:A6:1D:25:C4:F4:06:50:25:FC:26:B8:CE:3B:8A:7A:02
Certificate issuer: /CN=A9169411/serialNumber=72038A88A61D25C4F4065025FC26B8CE3B8A7A02
Certificate serial: 022F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft
Manifest number: 0227
Signing time: Fri 31 Jan 2025 02:07:18 +0000
Manifest this update: Fri 31 Jan 2025 02:07:18 +0000
Manifest next update: Fri 07 Feb 2025 02:07:18 +0000
Files and hashes: 1: cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl (hash: VCwSqtIkwqlGHVWqmNCBu07RF8MPVVEP07shYfPG6iE=)
2: DD976958C2A611EFBB1B9264C4F9AE02.roa (hash: afDoQTBXFlKBM9yUFVyCep64AS8jLGn8fXLF8BGp1Hk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 559 (0x22f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169411/serialNumber=72038A88A61D25C4F4065025FC26B8CE3B8A7A02
Validity
Not Before: Jan 31 02:07:18 2025 GMT
Not After : Feb 7 02:07:18 2025 GMT
Subject: CN=679c3056-989b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a9:fc:0d:ce:6d:3a:b1:16:ee:40:ea:10:c2:
b4:ca:e9:48:f5:ed:e3:0e:99:74:42:01:8a:54:e0:
c4:72:23:23:b7:be:01:82:b1:c4:de:ac:b8:c8:56:
bf:01:be:a2:03:3d:d5:ff:20:12:86:98:db:ed:90:
58:9c:2a:b9:bc:6f:49:5d:fb:2d:7d:0e:0d:74:65:
4f:53:0f:c9:97:0a:0e:40:08:91:ce:33:04:e7:1d:
e8:70:8a:b9:ba:8b:04:05:f7:92:d1:d0:e1:77:02:
9c:02:31:b7:ce:13:1e:a5:b4:dc:9f:75:7c:9a:2c:
19:4b:1f:17:7b:ee:85:58:dc:d8:d4:af:27:88:99:
85:af:c9:41:8a:62:2f:81:08:2d:9c:af:85:50:d1:
51:8c:d5:ec:4e:64:24:f4:46:d8:1c:be:45:48:73:
eb:a3:40:62:fd:70:31:2d:ec:de:41:1b:9f:11:2c:
9e:70:66:66:c7:a9:0e:ff:49:8c:cc:bb:b4:83:e6:
b0:96:24:b0:d3:c7:d7:73:24:d2:3b:b6:20:0f:9c:
49:ac:ea:47:f4:99:c4:f0:20:fe:32:9b:28:50:d7:
f5:d1:cf:81:49:50:02:02:58:10:f7:72:2e:3d:9a:
32:a5:1c:94:10:be:81:07:1b:a7:92:6e:9f:bf:06:
1b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:59:5B:DD:9B:E0:FC:6F:C6:65:46:99:5E:22:0F:27:D4:62:53:7D
X509v3 Authority Key Identifier:
keyid:72:03:8A:88:A6:1D:25:C4:F4:06:50:25:FC:26:B8:CE:3B:8A:7A:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:62:9c:a0:cb:65:3e:75:0c:29:e6:6e:72:b8:ca:d2:3c:c6:
77:62:55:5a:fb:ad:df:b3:f9:66:78:be:00:d9:1b:d5:51:38:
9b:6c:76:32:fb:f0:e1:3b:df:cb:4e:af:86:ac:e7:91:ba:3b:
48:7b:d2:6b:b4:c4:06:80:fd:df:ed:eb:2e:0e:ad:3e:f4:44:
6f:3d:f4:2f:ca:b5:88:9a:34:cf:cd:55:31:4e:6d:f4:1f:27:
fa:01:51:f5:7f:d1:97:ed:f6:5e:95:55:fa:56:c1:f9:32:93:
d5:fd:6f:53:a8:20:a4:2a:89:91:b1:fa:87:7a:21:b0:fa:9f:
92:b3:5d:ba:be:49:a5:ad:6b:34:58:1b:ca:d2:39:0d:de:68:
6c:06:b7:e0:52:40:b2:68:c5:d0:f6:f0:c0:70:fd:88:2b:c0:
41:5b:16:a9:5d:45:05:6c:62:43:d0:c4:48:49:80:56:39:c1:
f1:a5:21:cf:3f:68:8c:26:7d:6b:d6:0d:43:a9:9e:ee:25:5d:
c5:16:e6:78:84:33:d1:82:cc:20:19:a9:bd:a3:ff:4c:f7:0e:
2b:77:46:a3:e5:1a:9b:5a:f9:11:11:02:19:1e:ea:6f:1a:34:
3f:55:a2:07:a5:27:e7:62:e5:6c:fc:4e:13:68:ec:bb:da:45:
b5:70:19:af
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njk0MTExMTAvBgNVBAUTKDcyMDM4QTg4QTYxRDI1QzRGNDA2NTAyNUZDMjZCOENF
M0I4QTdBMDIwHhcNMjUwMTMxMDIwNzE4WhcNMjUwMjA3MDIwNzE4WjAYMRYwFAYD
VQQDEw02NzljMzA1Ni05ODliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0an8Dc5tOrEW7kDqEMK0yulI9e3jDpl0QgGKVODEciMjt74BgrHE3qy4yFa/
Ab6iAz3V/yAShpjb7ZBYnCq5vG9JXfstfQ4NdGVPUw/JlwoOQAiRzjME5x3ocIq5
uosEBfeS0dDhdwKcAjG3zhMepbTcn3V8miwZSx8Xe+6FWNzY1K8niJmFr8lBimIv
gQgtnK+FUNFRjNXsTmQk9EbYHL5FSHPro0Bi/XAxLezeQRufESyecGZmx6kO/0mM
zLu0g+awliSw08fXcyTSO7YgD5xJrOpH9JnE8CD+MpsoUNf10c+BSVACAlgQ93Iu
PZoypRyUEL6BBxunkm6fvwYbvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMVZW92b
4PxvxmVGmV4iDyfUYlN9MB8GA1UdIwQYMBaAFHIDioimHSXE9AZQJfwmuM47inoC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTQxMS85MTg1M0EwNjE4
QkYxMUVEQUREQzkyM0FDNEY5QUUwMi9jZ09LaUtZZEpjVDBCbEFsX0NhNHpqdUtl
Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NnT0tpS1lkSmNUMEJsQWxfQ2E0emp1S2VnSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OTQxMS85MTg1M0EwNjE4QkYxMUVEQUREQzkyM0FDNEY5QUUwMi9jZ09LaUtZZEpj
VDBCbEFsX0NhNHpqdUtlZ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAWYpygy2U+dQwp5m5yuMrSPMZ3YlVa+63fs/lmeL4A2RvVUTibbHYy
+/DhO9/LTq+GrOeRujtIe9JrtMQGgP3f7esuDq0+9ERvPfQvyrWImjTPzVUxTm30
Hyf6AVH1f9GX7fZelVX6VsH5MpPV/W9TqCCkKomRsfqHeiGw+p+Ss126vkmlrWs0
WBvK0jkN3mhsBrfgUkCyaMXQ9vDAcP2IK8BBWxapXUUFbGJD0MRISYBWOcHxpSHP
P2iMJn1r1g1DqZ7uJV3FFuZ4hDPRgswgGam9o/9M9w4rd0aj5RqbWvkREQIZHupv
GjQ/VaIHpSfnYuVs/E4TaOy72kW1cBmv
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:42:24 2025 by rpki-client