Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
File: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft (raw, json)
Hash identifier: yHl1WOnjW0IFwtLzEEjMqBFbInFDwOxmQWvbudC/7e8=
Subject key identifier: B2:BE:24:5A:0F:10:01:7A:86:57:81:7C:FE:40:A9:80:15:D1:FA:D1
Authority key identifier: C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA
Certificate issuer: /CN=A9169ADA/serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA
Certificate serial: 0E11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
Manifest number: 0DF3
Signing time: Fri 31 Jan 2025 17:49:47 +0000
Manifest this update: Fri 31 Jan 2025 17:49:46 +0000
Manifest next update: Fri 07 Feb 2025 17:49:46 +0000
Files and hashes: 1: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl (hash: 64ukKQBXMI8Ek9/wsgOh2eZZXUSfhgXfE/ixc3HLhqw=)
2: C16E8E16256511EA98F3D465C4F9AE02.roa (hash: K0BpqfADIAgpRrVb5VAxiR5k6a1N4eJk58+OYvAmefI=)
3: BBE075C6906911EF97FA0D58C4F9AE02.roa (hash: JffyrCPpCuKQ4JV9hKAHpBOYaMhGWQal4zN+8n2snKI=)
4: AF573166309511EABE9B5934C4F9AE02.roa (hash: wBVLudr4r1jyDPH+Ghnt4yYJmAXvAyl8ooTj+H1Y8oI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3601 (0xe11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169ADA/serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA
Validity
Not Before: Jan 31 17:49:46 2025 GMT
Not After : Feb 7 17:49:46 2025 GMT
Subject: CN=679d0d3b-b244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:35:8d:07:5c:82:d1:14:38:0d:60:20:e1:86:
14:a2:15:9c:4c:3c:80:13:1f:8e:33:6b:b6:1f:e9:
e1:76:82:f7:89:08:d5:f4:65:dc:5b:28:1a:73:a7:
46:19:b2:02:ed:2d:d2:f3:48:46:6a:98:c9:09:bf:
7e:3d:d5:e9:fb:5f:ea:a8:f0:61:99:ff:4f:09:78:
05:ff:dc:2b:4c:50:e4:a3:0b:90:63:65:12:c4:cd:
87:3f:33:2d:d9:af:76:e7:35:30:2d:e5:d9:8d:e2:
30:14:e9:61:a1:34:f5:bb:40:84:8b:36:fc:2e:4d:
8c:ae:43:23:e1:b3:03:96:6c:1b:22:df:bd:a3:8d:
4a:c0:5a:dd:22:f5:67:14:ec:6c:23:4b:ec:31:e2:
41:7c:03:e4:f4:64:2f:35:14:29:8e:ea:2f:c6:96:
af:7a:88:03:0d:88:38:ac:ed:22:b3:e8:28:f2:00:
37:e1:2e:be:67:c7:1a:d2:5e:a9:61:7b:86:95:d6:
94:17:34:ee:45:b8:4e:b6:9c:3d:de:58:7e:7f:80:
4f:29:15:40:bb:35:a4:a3:cf:6d:c0:f8:2d:65:14:
fc:51:21:b8:e5:ee:33:49:b5:60:d3:f5:9e:8d:b3:
4a:a3:d1:1e:2b:a4:05:03:e1:01:ca:55:02:d9:01:
02:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BE:24:5A:0F:10:01:7A:86:57:81:7C:FE:40:A9:80:15:D1:FA:D1
X509v3 Authority Key Identifier:
keyid:C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:bd:6a:1d:06:4f:5f:8f:a9:33:6a:9d:c7:e4:57:47:a3:04:
f6:48:d4:73:41:71:f7:52:00:90:f2:a9:8f:1e:0e:bc:7a:d2:
6b:e4:c9:9f:ed:13:a3:d2:6e:b1:51:5f:08:34:33:ac:3f:40:
f9:45:ce:ff:96:b0:6c:90:84:00:d9:92:01:e7:8f:ed:31:66:
fa:20:ff:3d:ce:1b:f3:ba:04:6b:48:14:2d:99:1a:9e:97:92:
06:2f:cb:dc:17:20:c3:35:bb:f3:b8:ec:53:81:dc:a9:47:53:
eb:87:b8:a9:03:5a:cc:48:41:c6:10:1f:fc:e2:a1:82:a1:1e:
41:fa:a7:5c:fb:33:ed:65:fc:11:32:62:81:ea:a7:5f:58:ff:
b7:f4:01:cf:fe:d6:8c:ee:2c:f9:d6:c4:b5:b7:b1:f9:20:d8:
ff:dc:c7:bc:9d:23:b8:c0:56:21:3d:05:e7:48:98:62:51:57:
6e:8d:48:ed:ec:b3:f2:50:36:ad:b6:3f:7a:84:07:99:12:52:
29:13:60:ef:ef:ac:a1:6e:90:1c:03:58:d1:f8:0d:b2:0a:15:
e7:6c:6d:cf:3e:4c:10:2f:16:2d:f6:d8:73:bd:54:97:55:a8:
f7:91:b8:fc:bc:c0:cc:02:9f:8d:d3:04:70:42:85:c4:42:bc:
95:4c:df:cd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjlBREExMTAvBgNVBAUTKEM0MTcxNUZFRjIwMDEzM0Q5MTIzMjUwRkJCNjUzMUU4
OEE0QTk5REEwHhcNMjUwMTMxMTc0OTQ2WhcNMjUwMjA3MTc0OTQ2WjAYMRYwFAYD
VQQDEw02NzlkMGQzYi1iMjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4jWNB1yC0RQ4DWAg4YYUohWcTDyAEx+OM2u2H+nhdoL3iQjV9GXcWygac6dG
GbIC7S3S80hGapjJCb9+PdXp+1/qqPBhmf9PCXgF/9wrTFDkowuQY2USxM2HPzMt
2a925zUwLeXZjeIwFOlhoTT1u0CEizb8Lk2MrkMj4bMDlmwbIt+9o41KwFrdIvVn
FOxsI0vsMeJBfAPk9GQvNRQpjuovxpaveogDDYg4rO0is+go8gA34S6+Z8ca0l6p
YXuGldaUFzTuRbhOtpw93lh+f4BPKRVAuzWko89twPgtZRT8USG45e4zSbVg0/We
jbNKo9EeK6QFA+EBylUC2QECfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLK+JFoP
EAF6hleBfP5AqYAV0frRMB8GA1UdIwQYMBaAFMQXFf7yABM9kSMlD7tlMeiKSpna
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUFEQS9GRjMyMDFDRUE2
QjIxMUU5OEQyQjE4NjBDNEY5QUUwMi94QmNWX3ZJQUV6MlJJeVVQdTJVeDZJcEtt
ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hCY1ZfdklBRXoyUkl5VVB1MlV4NklwS21kby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OUFEQS9GRjMyMDFDRUE2QjIxMUU5OEQyQjE4NjBDNEY5QUUwMi94QmNWX3ZJQUV6
MlJJeVVQdTJVeDZJcEttZG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAWvWodBk9fj6kzap3H5FdHowT2SNRzQXH3UgCQ8qmPHg68etJr5Mmf
7ROj0m6xUV8INDOsP0D5Rc7/lrBskIQA2ZIB54/tMWb6IP89zhvzugRrSBQtmRqe
l5IGL8vcFyDDNbvzuOxTgdypR1Prh7ipA1rMSEHGEB/84qGCoR5B+qdc+zPtZfwR
MmKB6qdfWP+39AHP/taM7iz51sS1t7H5INj/3Me8nSO4wFYhPQXnSJhiUVdujUjt
7LPyUDattj96hAeZElIpE2Dv76yhbpAcA1jR+A2yChXnbG3PPkwQLxYt9thzvVSX
Vaj3kbj8vMDMAp+N0wRwQoXEQryVTN/N
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:22:48 2025 by rpki-client