Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
File: aRgc9FH4s_7GT8gpi1ItSIylyeY.mft (raw, json)
Hash identifier: lpVnMvFNolUfj3NG3qQtX3FfgEo5vnoxCUOFjcqTRGs=
Subject key identifier: D0:FB:A4:0C:97:B2:07:D5:05:68:4E:80:04:DC:E7:B9:15:E8:5F:52
Authority key identifier: 69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6
Certificate issuer: /CN=A916DE3D/serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6
Certificate serial: 09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
Manifest number: 06
Signing time: Fri 31 Jan 2025 07:17:11 +0000
Manifest this update: Fri 31 Jan 2025 07:17:11 +0000
Manifest next update: Fri 07 Feb 2025 07:17:11 +0000
Files and hashes: 1: aRgc9FH4s_7GT8gpi1ItSIylyeY.crl (hash: HrDYIgi5lKrgVD+8nLUM8mHGqPq4uMQjmk6Rh9+sopY=)
2: 1AFE08CCDE7411EFAA938A81C4F9AE02.roa (hash: waYeK92qwyHGSAX1nW8boG4DXcoGCzFffwVkSMPud5U=)
3: CE559B0EDE6711EF92801954C4F9AE02.roa (hash: YpR5PhMbO5nDKwm5xXkgtlg2UI/m34uM8lb4Slbobm8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DE3D/serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6
Validity
Not Before: Jan 31 07:17:11 2025 GMT
Not After : Feb 7 07:17:11 2025 GMT
Subject: CN=679c78f7-2e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f1:56:79:1c:db:22:6c:ab:d9:64:47:39:c0:
08:51:33:bd:4c:d4:e3:a5:09:11:fd:07:b6:a7:1a:
6d:7f:00:04:08:95:9a:f4:91:4d:7a:25:23:af:11:
74:42:d9:c9:c8:3d:6b:de:b0:69:fb:6c:95:ab:e1:
25:de:d1:7b:3b:39:70:69:db:10:c7:00:6e:56:c5:
1c:63:57:40:49:34:63:1b:52:ef:97:aa:8a:6b:10:
91:46:2c:ca:c6:c1:cc:c6:34:4f:a3:ac:fc:45:ab:
cd:30:24:20:5e:0f:a8:c8:ca:4f:2e:7e:5b:cd:65:
ac:f6:9c:6a:48:06:6a:00:96:47:b2:f2:01:20:ff:
ad:82:a6:16:63:0f:69:b4:7c:4b:33:4c:d9:8a:23:
cc:48:56:05:3a:d9:33:ea:0a:cc:3c:78:d1:41:f6:
fb:97:37:74:3e:7b:82:02:1f:b5:44:ae:1f:36:13:
a1:7f:71:57:b7:80:f4:8d:98:72:92:00:47:fc:4b:
99:92:0e:2c:d7:7d:af:1c:83:89:86:1a:e2:d6:3a:
52:c7:11:b3:1a:6b:25:eb:42:ce:a8:e0:70:5a:44:
61:13:96:b1:0c:2b:c3:a9:00:fd:e2:3f:c4:75:84:
07:d1:01:17:43:91:f2:72:63:e5:cb:32:dc:91:44:
12:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FB:A4:0C:97:B2:07:D5:05:68:4E:80:04:DC:E7:B9:15:E8:5F:52
X509v3 Authority Key Identifier:
keyid:69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:bc:11:8f:76:83:82:9a:bc:ed:b8:de:50:75:88:e9:96:9f:
3f:5c:97:1d:4f:42:61:ab:1b:a1:ec:7d:31:86:1f:6e:d0:25:
64:5e:28:63:bd:91:b2:c2:b1:4a:c9:6d:a3:a1:13:02:bd:c3:
90:e1:50:4a:f3:4e:52:47:7d:4e:90:e3:8c:7f:ea:cb:08:f1:
2f:5a:d0:2d:69:91:bd:4d:a6:f4:31:21:28:a8:be:a0:0b:db:
36:8c:a8:13:ea:52:9e:92:15:d2:da:b5:ae:b2:87:46:1d:cd:
79:d9:82:86:ec:62:b0:5b:1e:18:de:fe:d0:3d:41:cf:36:9d:
bf:8f:24:93:4e:6f:ba:13:a8:fc:03:bc:65:6f:af:22:1a:9e:
a1:08:04:14:81:7c:c2:87:76:9a:9c:d1:ae:d1:41:2c:5c:95:
3c:32:65:fe:9b:ee:3c:58:84:f9:8c:f6:0b:48:ab:ea:9e:41:
16:b2:46:43:ed:5e:ab:c7:fc:a1:91:1e:af:cc:97:1f:f3:11:
3d:d2:5b:c2:3d:8d:7d:3c:4a:00:57:1b:48:54:45:e7:30:46:
52:51:2a:de:a7:f4:53:3a:80:30:7c:11:3b:5f:bc:5b:ce:77:
9e:f5:29:53:9c:56:cf:26:c0:69:a4:fe:05:c3:85:9c:d4:be:
55:fe:db:75
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
REUzRDExMC8GA1UEBRMoNjkxODFDRjQ1MUY4QjNGRUM2NEZDODI5OEI1MjJENDg4
Q0E1QzlFNjAeFw0yNTAxMzEwNzE3MTFaFw0yNTAyMDcwNzE3MTFaMBgxFjAUBgNV
BAMTDTY3OWM3OGY3LTJlN2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDS8VZ5HNsibKvZZEc5wAhRM71M1OOlCRH9B7anGm1/AAQIlZr0kU16JSOvEXRC
2cnIPWvesGn7bJWr4SXe0Xs7OXBp2xDHAG5WxRxjV0BJNGMbUu+XqoprEJFGLMrG
wczGNE+jrPxFq80wJCBeD6jIyk8uflvNZaz2nGpIBmoAlkey8gEg/62CphZjD2m0
fEszTNmKI8xIVgU62TPqCsw8eNFB9vuXN3Q+e4ICH7VErh82E6F/cVe3gPSNmHKS
AEf8S5mSDizXfa8cg4mGGuLWOlLHEbMaayXrQs6o4HBaRGETlrEMK8OpAP3iP8R1
hAfRARdDkfJyY+XLMtyRRBJfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0PukDJey
B9UFaE6ABNznuRXoX1IwHwYDVR0jBBgwFoAUaRgc9FH4s/7GT8gpi1ItSIylyeYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZERTNEL0ZEMUU0NTUwREU2
NTExRUY4MjQzRUUzMEM0RjlBRTAyL2FSZ2M5Rkg0c183R1Q4Z3BpMUl0U0l5bHll
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYVJnYzlGSDRzXzdHVDhncGkxSXRTSXlseWVZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZE
RTNEL0ZEMUU0NTUwREU2NTExRUY4MjQzRUUzMEM0RjlBRTAyL2FSZ2M5Rkg0c183
R1Q4Z3BpMUl0U0l5bHllWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBABa8EY92g4KavO243lB1iOmWnz9clx1PQmGrG6HsfTGGH27QJWReKGO9
kbLCsUrJbaOhEwK9w5DhUErzTlJHfU6Q44x/6ssI8S9a0C1pkb1NpvQxISiovqAL
2zaMqBPqUp6SFdLata6yh0YdzXnZgobsYrBbHhje/tA9Qc82nb+PJJNOb7oTqPwD
vGVvryIanqEIBBSBfMKHdpqc0a7RQSxclTwyZf6b7jxYhPmM9gtIq+qeQRayRkPt
XqvH/KGRHq/Mlx/zET3SW8I9jX08SgBXG0hURecwRlJRKt6n9FM6gDB8ETtfvFvO
d571KVOcVs8mwGmk/gXDhZzUvlX+23U=
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:11:59 2025 by rpki-client