Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft
File: G2L9XgPTM3qi3E4VB5QUQEextjo.mft (raw, json)
Hash identifier: nigksLYPQpWS+rgnEY4+XyBbj2VBA5hUyKoIeG+OogM=
Subject key identifier: BA:99:DB:C7:23:E6:40:FC:55:88:DA:A0:83:AD:98:F4:54:82:C9:51
Authority key identifier: 1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A
Certificate issuer: /CN=A916C643/serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A
Certificate serial: 04C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft
Manifest number: 04B8
Signing time: Thu 30 Jan 2025 23:57:16 +0000
Manifest this update: Thu 30 Jan 2025 23:57:16 +0000
Manifest next update: Thu 06 Feb 2025 23:57:16 +0000
Files and hashes: 1: G2L9XgPTM3qi3E4VB5QUQEextjo.crl (hash: 16r8gea5WYEHMYjL6Zlwu8U0w94pjYO1BhuDHLS2AJY=)
2: 594A0BF2152E11EC94BCB264C4F9AE02.roa (hash: De+KbU1rQ+e7QR643NvX9xdd94W0D5EZXh2X3vA8FwY=)
3: 5A0804A4152E11EC94BCB264C4F9AE02.roa (hash: Xz85fL4HDodJp9813Pf30AvPpXYXiy5+u/nD3T6D6uI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1221 (0x4c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C643/serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A
Validity
Not Before: Jan 30 23:57:16 2025 GMT
Not After : Feb 6 23:57:16 2025 GMT
Subject: CN=679c11dc-06d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:97:1a:a6:c9:d8:d7:68:aa:9d:18:46:33:6a:
35:80:13:f9:7c:c2:ce:d8:a4:d1:92:63:d5:29:95:
45:b5:d0:8c:d8:e0:c5:45:ff:5c:7c:c1:c6:5c:b2:
bb:53:a9:09:fb:fc:03:cd:fb:e0:bb:f4:28:4c:fa:
71:f9:63:42:3d:14:3a:ad:f9:46:7b:ba:74:bf:03:
16:01:26:30:cf:10:19:6d:5f:e2:8f:c3:e6:ce:ce:
f9:bf:17:bf:ab:ec:09:4e:93:80:28:67:c8:41:70:
47:4c:5a:0e:67:7f:6d:69:32:58:bd:02:2c:0f:56:
39:e0:52:de:c9:73:3a:e2:ac:bb:96:4a:4a:db:02:
41:55:b3:ac:34:5b:8b:31:1f:59:0c:e0:a3:f7:d1:
2a:55:d5:fe:99:74:a6:e8:91:4b:af:30:69:27:f3:
d0:62:74:81:a9:6c:c9:cb:12:9a:02:b2:25:dd:46:
2c:af:8d:48:6f:23:42:30:e2:69:c8:f3:7a:9b:d2:
8d:a9:3b:60:79:67:d2:84:cd:11:26:46:86:18:f2:
ad:b2:b1:1f:7c:bd:09:d2:8d:7b:c7:34:4a:c6:9a:
7c:74:48:c7:42:12:9d:57:a3:7f:17:98:ce:48:b7:
2c:49:a8:da:37:a2:e9:34:27:e9:25:aa:e3:ee:2c:
6a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:99:DB:C7:23:E6:40:FC:55:88:DA:A0:83:AD:98:F4:54:82:C9:51
X509v3 Authority Key Identifier:
keyid:1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:75:82:44:fa:14:b6:cf:50:41:97:3d:2a:56:c4:91:a4:ce:
0e:8e:53:e3:f4:90:a9:c1:d2:79:85:37:f7:9d:9b:19:31:f4:
c5:a7:7a:1f:65:77:63:14:e4:0c:f1:a7:12:e5:18:27:34:9f:
96:9c:e9:77:d5:39:5c:5a:40:2d:85:0d:bc:ad:9b:bf:09:ff:
56:fb:fa:81:5e:81:60:0e:35:f0:fe:7d:fe:b8:27:06:b8:8b:
f6:b6:67:77:0a:d2:3f:23:cc:ba:24:0f:f1:4d:1c:3e:7b:0f:
d4:a7:0d:e4:ad:1a:40:91:74:03:ae:82:44:18:5a:d2:f7:27:
1d:bc:fa:96:c2:02:e3:4d:6b:6d:84:f4:cd:a3:fc:1a:83:cd:
96:73:49:10:d1:7c:ef:80:4d:77:f7:ea:35:eb:1c:93:99:e6:
f8:3c:fd:0f:f3:70:24:50:80:42:55:c0:27:ab:33:cb:d9:58:
8f:fd:32:76:ec:09:57:16:b9:a1:ba:2a:4f:1c:19:c8:ee:3f:
5c:a6:33:a8:77:8b:c4:56:f6:54:ec:d0:33:76:96:3b:3c:22:
e3:a4:aa:26:40:0b:e3:7f:cb:45:b8:ff:cf:8d:65:b9:7c:0a:
0a:5a:bc:d9:31:61:53:14:d8:8b:a8:f7:34:34:8a:7f:dc:43:
fa:42:a0:1e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM2NDMxMTAvBgNVBAUTKDFCNjJGRDVFMDNEMzMzN0FBMkRDNEUxNTA3OTQxNDQw
NDdCMUI2M0EwHhcNMjUwMTMwMjM1NzE2WhcNMjUwMjA2MjM1NzE2WjAYMRYwFAYD
VQQDEw02NzljMTFkYy0wNmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyZcapsnY12iqnRhGM2o1gBP5fMLO2KTRkmPVKZVFtdCM2ODFRf9cfMHGXLK7
U6kJ+/wDzfvgu/QoTPpx+WNCPRQ6rflGe7p0vwMWASYwzxAZbV/ij8Pmzs75vxe/
q+wJTpOAKGfIQXBHTFoOZ39taTJYvQIsD1Y54FLeyXM64qy7lkpK2wJBVbOsNFuL
MR9ZDOCj99EqVdX+mXSm6JFLrzBpJ/PQYnSBqWzJyxKaArIl3UYsr41IbyNCMOJp
yPN6m9KNqTtgeWfShM0RJkaGGPKtsrEffL0J0o17xzRKxpp8dEjHQhKdV6N/F5jO
SLcsSajaN6LpNCfpJarj7ixqswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqZ28cj
5kD8VYjaoIOtmPRUgslRMB8GA1UdIwQYMBaAFBti/V4D0zN6otxOFQeUFEBHsbY6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzY0My9BNUQ4ODRDNDE1
MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQVE0zcWkzRTRWQjVRVVFFZXh0
am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0cyTDlYZ1BUTTNxaTNFNFZCNVFVUUVleHRqby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QzY0My9BNUQ4ODRDNDE1MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQVE0z
cWkzRTRWQjVRVVFFZXh0am8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAMdYJE+hS2z1BBlz0qVsSRpM4OjlPj9JCpwdJ5hTf3nZsZMfTFp3of
ZXdjFOQM8acS5RgnNJ+WnOl31TlcWkAthQ28rZu/Cf9W+/qBXoFgDjXw/n3+uCcG
uIv2tmd3CtI/I8y6JA/xTRw+ew/Upw3krRpAkXQDroJEGFrS9ycdvPqWwgLjTWtt
hPTNo/wag82Wc0kQ0XzvgE139+o16xyTmeb4PP0P83AkUIBCVcAnqzPL2ViP/TJ2
7AlXFrmhuipPHBnI7j9cpjOod4vEVvZU7NAzdpY7PCLjpKomQAvjf8tFuP/PjWW5
fAoKWrzZMWFTFNiLqPc0NIp/3EP6QqAe
-----END CERTIFICATE-----
Generated at Fri Apr 25 17:03:15 2025 by rpki-client