Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917368A/A5996EA6CD3B11EC9D262145C4F9AE02/cKH09V1h0yEhCBXRHZ1aIoGF49g.mft
File: cKH09V1h0yEhCBXRHZ1aIoGF49g.mft (raw, json)
Hash identifier: SgSXTeDpXMHY9cWHdVrXVIFQ45G6ucFDaIjrRWJq47Y=
Subject key identifier: D4:C0:F8:28:86:97:EC:20:A5:17:06:82:EA:AC:5A:B1:D8:6F:16:38
Authority key identifier: 70:A1:F4:F5:5D:61:D3:21:21:08:15:D1:1D:9D:5A:22:81:85:E3:D8
Certificate issuer: /CN=A917368A/serialNumber=70A1F4F55D61D321210815D11D9D5A228185E3D8
Certificate serial: 02E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKH09V1h0yEhCBXRHZ1aIoGF49g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917368A/A5996EA6CD3B11EC9D262145C4F9AE02/cKH09V1h0yEhCBXRHZ1aIoGF49g.mft
Manifest number: 02DE
Signing time: Fri 31 Jan 2025 01:26:35 +0000
Manifest this update: Fri 31 Jan 2025 01:26:35 +0000
Manifest next update: Fri 07 Feb 2025 01:26:35 +0000
Files and hashes: 1: cKH09V1h0yEhCBXRHZ1aIoGF49g.crl (hash: TN8neAI/efUeGP2KGH9LmE2YwlRj14zR4FKQhRGhhL4=)
2: EE0C8EC2CD4311EC8DA37755C4F9AE02.roa (hash: wp8vuIMIgu9u8/7IDWCkvLi4+gnieeCEzclE+crwT1E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 737 (0x2e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917368A/serialNumber=70A1F4F55D61D321210815D11D9D5A228185E3D8
Validity
Not Before: Jan 31 01:26:35 2025 GMT
Not After : Feb 7 01:26:35 2025 GMT
Subject: CN=679c26cb-9383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8b:02:52:be:36:da:ac:ad:71:64:e3:82:40:
8f:fe:01:7a:25:c6:10:da:5f:07:d6:43:fa:46:ef:
59:5d:bc:d1:ba:61:77:4f:de:5a:1e:40:73:93:cf:
1a:0b:52:0f:ce:99:70:55:be:0e:58:b6:5b:be:ea:
a3:af:d7:30:24:e6:78:cd:b0:09:e0:83:ee:10:e4:
a9:75:f6:59:5c:de:3b:4a:15:1a:3c:98:03:eb:9b:
e3:68:d0:f9:ea:db:be:fe:01:18:f7:fc:0e:f1:17:
72:b5:24:21:66:2d:a3:ac:2c:38:ff:57:de:49:32:
b6:28:bf:ba:ff:ff:9f:80:86:aa:7a:90:0d:01:ac:
15:92:82:49:cf:21:ba:bb:fa:11:34:99:5d:df:4b:
05:c9:d6:95:58:dd:88:d6:c5:ef:91:15:30:3c:be:
a5:34:db:db:9d:b9:84:9b:73:e3:09:22:d5:40:13:
73:84:14:5a:da:26:4c:92:82:0a:e3:da:dc:38:4c:
d5:a3:e6:77:bc:73:88:33:d6:cd:4d:ed:77:9f:fa:
11:88:54:6b:da:74:8d:26:c4:b4:8f:57:c7:c9:7f:
01:b5:85:2b:8f:f2:4f:83:56:26:75:e5:e2:73:1a:
dd:5b:7a:3b:0c:f0:40:71:a8:fe:6b:ae:82:74:35:
71:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C0:F8:28:86:97:EC:20:A5:17:06:82:EA:AC:5A:B1:D8:6F:16:38
X509v3 Authority Key Identifier:
keyid:70:A1:F4:F5:5D:61:D3:21:21:08:15:D1:1D:9D:5A:22:81:85:E3:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917368A/A5996EA6CD3B11EC9D262145C4F9AE02/cKH09V1h0yEhCBXRHZ1aIoGF49g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKH09V1h0yEhCBXRHZ1aIoGF49g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917368A/A5996EA6CD3B11EC9D262145C4F9AE02/cKH09V1h0yEhCBXRHZ1aIoGF49g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:9a:fb:f2:90:05:7d:68:48:6e:c6:0d:29:3d:4e:11:f9:12:
63:bd:d2:df:b0:4a:b9:2d:55:d9:26:e1:76:b3:ef:00:dc:4a:
33:d8:d3:bc:7c:b7:43:2e:22:3e:34:38:de:bd:08:34:05:07:
ed:56:25:91:a0:e0:cf:e5:a7:de:5d:bd:b9:29:cd:8b:90:1d:
62:e7:3a:fd:60:87:ef:59:94:78:ba:11:15:bb:9c:ce:9a:16:
b2:f6:c8:07:21:26:56:4d:a7:e3:d8:48:4a:27:7e:5e:8c:5a:
b0:25:d7:af:db:eb:3c:db:e1:3b:65:eb:0b:b7:c6:4d:fe:39:
fe:35:c7:1b:a3:0f:c4:3b:62:72:bb:66:1a:ed:b5:5c:b5:f4:
9b:3d:c4:59:08:c1:e9:8e:d3:e6:93:bb:02:03:00:9f:91:18:
d0:01:5c:23:e7:77:63:f5:d5:10:46:d0:ad:fc:c4:f1:43:8e:
f9:dc:7e:f7:60:84:ca:1e:d9:0b:f6:a8:74:b8:7e:0f:4b:08:
5b:9d:8a:0b:be:c4:56:5e:cb:40:22:19:28:35:4a:13:0b:1a:
ed:d7:c9:9f:b1:24:da:1b:e6:aa:1d:96:58:a0:d1:ea:be:b2:
cb:99:ef:d7:f3:1b:14:4a:55:eb:d8:92:7e:0c:f3:c6:57:d9:
10:56:02:a3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzM2OEExMTAvBgNVBAUTKDcwQTFGNEY1NUQ2MUQzMjEyMTA4MTVEMTFEOUQ1QTIy
ODE4NUUzRDgwHhcNMjUwMTMxMDEyNjM1WhcNMjUwMjA3MDEyNjM1WjAYMRYwFAYD
VQQDEw02NzljMjZjYi05MzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv4sCUr422qytcWTjgkCP/gF6JcYQ2l8H1kP6Ru9ZXbzRumF3T95aHkBzk88a
C1IPzplwVb4OWLZbvuqjr9cwJOZ4zbAJ4IPuEOSpdfZZXN47ShUaPJgD65vjaND5
6tu+/gEY9/wO8RdytSQhZi2jrCw4/1feSTK2KL+6//+fgIaqepANAawVkoJJzyG6
u/oRNJld30sFydaVWN2I1sXvkRUwPL6lNNvbnbmEm3PjCSLVQBNzhBRa2iZMkoIK
49rcOEzVo+Z3vHOIM9bNTe13n/oRiFRr2nSNJsS0j1fHyX8BtYUrj/JPg1YmdeXi
cxrdW3o7DPBAcaj+a66CdDVxFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTA+CiG
l+wgpRcGguqsWrHYbxY4MB8GA1UdIwQYMBaAFHCh9PVdYdMhIQgV0R2dWiKBhePY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzY4QS9BNTk5NkVBNkNE
M0IxMUVDOUQyNjIxNDVDNEY5QUUwMi9jS0gwOVYxaDB5RWhDQlhSSFoxYUlvR0Y0
OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NLSDA5VjFoMHlFaENCWFJIWjFhSW9HRjQ5Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MzY4QS9BNTk5NkVBNkNEM0IxMUVDOUQyNjIxNDVDNEY5QUUwMi9jS0gwOVYxaDB5
RWhDQlhSSFoxYUlvR0Y0OWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCZmvvykAV9aEhuxg0pPU4R+RJjvdLfsEq5LVXZJuF2s+8A3Eoz2NO8
fLdDLiI+NDjevQg0BQftViWRoODP5afeXb25Kc2LkB1i5zr9YIfvWZR4uhEVu5zO
mhay9sgHISZWTafj2EhKJ35ejFqwJdev2+s82+E7ZesLt8ZN/jn+Nccbow/EO2Jy
u2Ya7bVctfSbPcRZCMHpjtPmk7sCAwCfkRjQAVwj53dj9dUQRtCt/MTxQ4753H73
YITKHtkL9qh0uH4PSwhbnYoLvsRWXstAIhkoNUoTCxrt18mfsSTaG+aqHZZYoNHq
vrLLme/X8xsUSlXr2JJ+DPPGV9kQVgKj
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:31:33 2025 by rpki-client