Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft
File: Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft (raw, json)
Hash identifier: VPBkfwhtKDLSv1tjtClnLU7v9RjMSwcBt0ZpnRxgutM=
Subject key identifier: A5:E7:2E:A8:F4:16:A5:95:9C:79:1D:32:C8:31:91:80:24:A2:07:51
Authority key identifier: 33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94
Certificate issuer: /CN=A9171A59/serialNumber=333EC503014D0674AF1674199410F9B091B8FB94
Certificate serial: 0472
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft
Manifest number: 046E
Signing time: Fri 31 Jan 2025 00:10:19 +0000
Manifest this update: Fri 31 Jan 2025 00:10:18 +0000
Manifest next update: Fri 07 Feb 2025 00:10:18 +0000
Files and hashes: 1: Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl (hash: nja/lMcZjLB9HzsIrS0Y7+Gx5PZL1/7gxU7VBYG0KAI=)
2: ABD9CB4630C711ECA2491515C4F9AE02.roa (hash: e5DQN0gUt317ERWZVtRRumZ22rqenKdlnkwt5HATBok=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1138 (0x472)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171A59/serialNumber=333EC503014D0674AF1674199410F9B091B8FB94
Validity
Not Before: Jan 31 00:10:18 2025 GMT
Not After : Feb 7 00:10:18 2025 GMT
Subject: CN=679c14ea-d1af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:97:97:ec:17:31:dd:0c:36:ca:f0:1f:6b:25:
1c:dc:64:8b:45:04:01:be:31:2f:c9:0b:57:f5:f2:
23:0a:e6:54:e8:54:88:60:e8:ab:12:02:f9:4a:90:
7a:53:03:84:a3:e2:56:b5:37:61:88:8a:f1:73:d5:
73:6e:5a:d4:db:29:52:cd:0e:26:e7:0e:93:0e:5f:
32:a5:af:a2:25:67:72:c7:bb:7b:dc:67:ff:77:92:
3f:25:df:a8:b5:53:ed:ad:df:c7:b6:d1:50:e1:5c:
e6:6c:c7:b5:c0:0a:16:65:aa:c4:a6:48:78:1b:ec:
77:c2:8f:eb:76:1d:43:f1:63:2d:1b:79:51:c1:dd:
14:7b:55:12:b4:50:68:f0:dd:01:b6:c2:f2:f8:97:
9b:af:5f:68:d2:9d:8a:ca:6c:dd:28:eb:3e:8f:31:
4b:67:3e:cd:fe:c5:7c:af:e2:6a:11:2a:0b:99:92:
b2:07:97:34:d0:28:d0:71:fb:fd:ff:06:c7:41:fc:
3c:6d:df:68:cc:aa:fd:2b:68:e7:9a:1e:2b:9d:3e:
80:31:07:52:05:b8:91:53:68:39:5b:61:9b:b9:fc:
e3:0f:20:50:71:d7:59:c6:b0:55:cd:d1:68:7d:6c:
59:d9:62:43:4a:08:f3:d9:28:25:1b:23:11:34:39:
36:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E7:2E:A8:F4:16:A5:95:9C:79:1D:32:C8:31:91:80:24:A2:07:51
X509v3 Authority Key Identifier:
keyid:33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:5d:9b:fe:cc:3b:35:d6:70:ae:da:66:0a:32:a6:da:44:af:
bc:7d:4d:93:f4:f4:2e:4b:2c:93:5d:69:81:06:54:f5:92:d3:
fc:66:55:6c:3c:ca:67:be:56:61:d3:79:94:a0:92:54:da:5c:
b3:55:d6:7e:26:16:69:e4:ed:2f:bf:d7:24:fe:90:ef:16:5b:
c5:9b:53:28:4e:ac:74:7d:90:7b:ef:91:88:e9:17:45:ff:21:
3d:7b:97:8e:87:64:73:4e:23:af:29:f4:ec:53:60:d4:d3:8f:
49:80:45:b2:fc:8e:01:13:aa:8f:ec:18:85:9c:15:ce:78:4f:
3f:a1:92:f3:3c:52:2f:a7:0d:b7:90:c5:f8:8b:15:b6:90:3f:
c5:f2:30:52:26:c5:1a:9c:00:34:c0:a1:f2:17:85:42:da:c0:
84:53:bf:91:13:82:47:30:4d:94:2a:38:0c:c8:9b:e3:fa:ea:
5f:d4:23:6b:08:f1:14:2e:8a:c4:9b:8b:23:cb:1a:1c:57:ad:
17:a7:df:0f:51:59:43:c3:49:ff:8d:1b:85:7d:43:0c:bb:bf:
a3:f3:62:46:f2:97:6e:90:8d:58:09:ce:5e:49:3c:25:06:1b:
ad:6b:ac:c1:fa:34:ac:a2:a4:77:e9:71:cd:8a:93:6d:0d:55:
ff:f5:3d:ca
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzFBNTkxMTAvBgNVBAUTKDMzM0VDNTAzMDE0RDA2NzRBRjE2NzQxOTk0MTBGOUIw
OTFCOEZCOTQwHhcNMjUwMTMxMDAxMDE4WhcNMjUwMjA3MDAxMDE4WjAYMRYwFAYD
VQQDEw02NzljMTRlYS1kMWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuJeX7Bcx3Qw2yvAfayUc3GSLRQQBvjEvyQtX9fIjCuZU6FSIYOirEgL5SpB6
UwOEo+JWtTdhiIrxc9VzblrU2ylSzQ4m5w6TDl8ypa+iJWdyx7t73Gf/d5I/Jd+o
tVPtrd/HttFQ4VzmbMe1wAoWZarEpkh4G+x3wo/rdh1D8WMtG3lRwd0Ue1UStFBo
8N0BtsLy+Jebr19o0p2KymzdKOs+jzFLZz7N/sV8r+JqESoLmZKyB5c00CjQcfv9
/wbHQfw8bd9ozKr9K2jnmh4rnT6AMQdSBbiRU2g5W2GbufzjDyBQcddZxrBVzdFo
fWxZ2WJDSgjz2SglGyMRNDk2mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKXnLqj0
FqWVnHkdMsgxkYAkogdRMB8GA1UdIwQYMBaAFDM+xQMBTQZ0rxZ0GZQQ+bCRuPuU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUE1OS84QUI5MzNFQTMw
QzUxMUVDOEE2N0FBN0NDNEY5QUUwMi9NejdGQXdGTkJuU3ZGblFabEJENXNKRzQt
NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL016N0ZBd0ZOQm5TdkZuUVpsQkQ1c0pHNC01US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MUE1OS84QUI5MzNFQTMwQzUxMUVDOEE2N0FBN0NDNEY5QUUwMi9NejdGQXdGTkJu
U3ZGblFabEJENXNKRzQtNVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAcXZv+zDs11nCu2mYKMqbaRK+8fU2T9PQuSyyTXWmBBlT1ktP8ZlVs
PMpnvlZh03mUoJJU2lyzVdZ+JhZp5O0vv9ck/pDvFlvFm1MoTqx0fZB775GI6RdF
/yE9e5eOh2RzTiOvKfTsU2DU049JgEWy/I4BE6qP7BiFnBXOeE8/oZLzPFIvpw23
kMX4ixW2kD/F8jBSJsUanAA0wKHyF4VC2sCEU7+RE4JHME2UKjgMyJvj+upf1CNr
CPEULorEm4sjyxocV60Xp98PUVlDw0n/jRuFfUMMu7+j82JG8pdukI1YCc5eSTwl
Bhuta6zB+jSsoqR36XHNipNtDVX/9T3K
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:28:32 2025 by rpki-client