Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
File: cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft (raw, json)
Hash identifier: 6iW/w6VNo4M1085SB9DBQlyajKGuLGOA5pQzf1L+8+k=
Subject key identifier: CF:77:27:17:E7:5E:70:D7:8A:73:B1:21:11:FD:58:FB:EC:94:FD:1B
Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F
Certificate issuer: /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
Certificate serial: 12DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
Manifest number: 128B
Signing time: Fri 31 Jan 2025 17:07:40 +0000
Manifest this update: Fri 31 Jan 2025 17:07:39 +0000
Manifest next update: Fri 07 Feb 2025 17:07:39 +0000
Files and hashes: 1: cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl (hash: FGwnigFg+ceGhxGOwHSKk1aBJwux1W6s/ZKrPClL4Uc=)
2: 3B38CB22BA7011EA80520A63C4F9AE02.roa (hash: RkoS7hrQ2QANNm5sx/5d46X4OvIfq/xZ9DC2wpSUEMo=)
3: 75522B0A002B11EA855CA925C4F9AE02.roa (hash: dlzvcYSMpJJECDfUD2ttn05KUyNlgHjyRd5FKOecZPA=)
4: 6E0B5938066711EFA1505F46C4F9AE02.roa (hash: o9qMusGN5GDjUkb5guKhyMehJeu6p5DVF2ITp61z0FM=)
5: 8C163A62FD4611EE8FAE061EC4F9AE02.roa (hash: SPUciNl7sWVHesGHpuLeYdUCLi+DEMRmn3hpjUZkkzo=)
6: EB429364CA3811EE99BEB838C4F9AE02.roa (hash: CxE2LzQTUSnICEBxSLSJi2DaFZfd5DCFRNbdjbleYco=)
7: DEF977A6E53611EB81682769C4F9AE02.roa (hash: hs6gBEHf+NcXloE+gZDvY1hGrieoi7+2YWZ5lbTwNRY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4829 (0x12dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
Validity
Not Before: Jan 31 17:07:39 2025 GMT
Not After : Feb 7 17:07:39 2025 GMT
Subject: CN=679d035b-0204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:74:45:60:22:22:3f:b1:69:b1:4b:d1:79:c3:
20:02:f8:d3:3b:f3:58:fe:cd:30:ce:9f:d7:f3:eb:
1f:25:ee:c9:82:9d:30:0c:74:3a:5b:9e:fd:ad:61:
e3:a0:94:30:58:92:6f:e0:c8:94:4d:68:a3:49:4e:
f6:40:7c:98:15:c0:04:33:2e:ea:a3:c7:10:69:d1:
e5:ed:64:2f:a7:c2:56:47:e8:3f:1f:76:a1:30:e2:
58:ce:41:98:74:bb:f5:54:0e:20:51:eb:0b:37:e7:
ad:0d:0e:68:ec:3e:2e:c1:62:b8:22:78:b4:c3:7d:
32:5c:2a:7c:f7:a9:97:82:12:bb:fd:6c:1c:07:c9:
2c:0e:6f:26:3a:96:4d:14:63:74:41:3b:a9:05:6a:
78:c4:59:61:b2:07:a0:22:8d:4e:28:24:10:e0:24:
86:35:be:7a:7c:8a:08:b9:60:a8:47:ff:7b:7e:72:
4a:fa:60:ed:f1:a3:0b:d9:b8:f0:0a:30:c3:b5:11:
d1:f5:4d:7d:4c:91:26:04:c3:ec:5d:db:49:4d:f3:
16:42:2b:86:d9:8c:82:27:74:f6:77:f3:ab:a8:cb:
d1:c1:c8:40:1d:66:3f:af:bf:1c:7b:10:b9:fb:50:
f0:bd:86:03:ff:24:81:9c:c4:cf:6f:d0:51:d9:78:
ff:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:77:27:17:E7:5E:70:D7:8A:73:B1:21:11:FD:58:FB:EC:94:FD:1B
X509v3 Authority Key Identifier:
keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c2:0f:82:52:35:65:c2:17:fa:0d:46:db:a6:ab:4d:4d:e4:
f6:e2:26:27:8a:3d:ce:50:91:db:5b:eb:21:4f:e6:0f:45:95:
06:f1:80:a0:86:79:e1:16:9e:a5:da:85:44:3c:7b:2b:49:ef:
6d:6c:af:1e:98:de:3b:16:d1:0e:dc:c8:d2:40:9f:25:f7:76:
cc:ab:fd:bd:d5:33:28:37:20:43:ee:4a:8f:44:a1:91:29:9a:
e7:9c:be:f1:2a:63:44:b5:b1:6e:c6:81:19:ec:89:1a:79:58:
be:68:c3:0c:e6:18:62:87:8c:2e:f8:a8:b0:46:31:29:c8:61:
22:57:3a:68:a0:df:39:ff:b4:e3:eb:cb:34:a6:02:8e:9b:cf:
a5:b2:55:0a:41:d6:a2:7a:0f:2e:f4:00:03:0b:19:8a:9b:b3:
fb:cc:3c:1d:a5:68:94:7c:a9:ce:c3:db:a7:ec:67:ca:08:35:
d1:5c:c7:bb:c5:bc:6b:a0:06:45:19:1b:9b:8e:19:9a:cb:7f:
9f:d5:e3:7c:df:c6:2f:48:48:a0:e2:e2:e3:45:3d:f8:2a:e8:
85:dd:63:38:0d:08:af:23:c9:bd:b5:60:8f:64:0e:f3:ed:02:
8b:9f:3c:3e:4b:3c:60:04:ec:e1:f3:45:38:ee:68:e8:70:9c:
04:77:eb:c4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkE5ODMxMTAvBgNVBAUTKDcxNTY1RjJEN0I5MjRDRDcyQjQ1NUI2OEI2NjcxOTQw
MTBCQjFBOUYwHhcNMjUwMTMxMTcwNzM5WhcNMjUwMjA3MTcwNzM5WjAYMRYwFAYD
VQQDEw02NzlkMDM1Yi0wMjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzHRFYCIiP7FpsUvRecMgAvjTO/NY/s0wzp/X8+sfJe7Jgp0wDHQ6W579rWHj
oJQwWJJv4MiUTWijSU72QHyYFcAEMy7qo8cQadHl7WQvp8JWR+g/H3ahMOJYzkGY
dLv1VA4gUesLN+etDQ5o7D4uwWK4Ini0w30yXCp896mXghK7/WwcB8ksDm8mOpZN
FGN0QTupBWp4xFlhsgegIo1OKCQQ4CSGNb56fIoIuWCoR/97fnJK+mDt8aML2bjw
CjDDtRHR9U19TJEmBMPsXdtJTfMWQiuG2YyCJ3T2d/OrqMvRwchAHWY/r78cexC5
+1DwvYYD/ySBnMTPb9BR2Xj/eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM93Jxfn
XnDXinOxIRH9WPvslP0bMB8GA1UdIwQYMBaAFHFWXy17kkzXK0VbaLZnGUAQuxqf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8xNjczMEQyMENE
MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9jVlpmTFh1U1ROY3JSVnRvdG1jWlFCQzdH
cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NWWmZMWHVTVE5jclJWdG90bWNaUUJDN0dwOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QTk4My8xNjczMEQyMENEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9jVlpmTFh1U1RO
Y3JSVnRvdG1jWlFCQzdHcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBfwg+CUjVlwhf6DUbbpqtNTeT24iYnij3OUJHbW+shT+YPRZUG8YCg
hnnhFp6l2oVEPHsrSe9tbK8emN47FtEO3MjSQJ8l93bMq/291TMoNyBD7kqPRKGR
KZrnnL7xKmNEtbFuxoEZ7IkaeVi+aMMM5hhih4wu+KiwRjEpyGEiVzpooN85/7Tj
68s0pgKOm8+lslUKQdaieg8u9AADCxmKm7P7zDwdpWiUfKnOw9un7GfKCDXRXMe7
xbxroAZFGRubjhmay3+f1eN838YvSEig4uLjRT34KuiF3WM4DQivI8m9tWCPZA7z
7QKLnzw+SzxgBOzh80U47mjocJwEd+vE
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:28:29 2025 by rpki-client