Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft
File: m8Zs_4CainEhIAXdnCcEerQYyKc.mft (raw, json)
Hash identifier: E8HjzRWq2reippTZiQeIuYN+dQgR7cCFG7jjta0eEEs=
Subject key identifier: B5:9C:89:56:92:CF:A3:30:86:F4:E8:2B:5B:82:22:E9:CB:4F:3A:C7
Authority key identifier: 9B:C6:6C:FF:80:9A:8A:71:21:20:05:DD:9C:27:04:7A:B4:18:C8:A7
Certificate issuer: /CN=A9173780/serialNumber=9BC66CFF809A8A71212005DD9C27047AB418C8A7
Certificate serial: 09CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft
Manifest number: 09C2
Signing time: Thu 30 Jan 2025 20:04:16 +0000
Manifest this update: Thu 30 Jan 2025 20:04:16 +0000
Manifest next update: Thu 06 Feb 2025 20:04:16 +0000
Files and hashes: 1: m8Zs_4CainEhIAXdnCcEerQYyKc.crl (hash: iftA2mS6GeBklyN7MGN0rzjxf6TR5rKSruoOZfi05oQ=)
2: 8DA4D91477EF11EAB5508A28C4F9AE02.roa (hash: ET14uths/QUA4uUBVbff9R12DTawrriACnHopTjr8Ws=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2508 (0x9cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173780/serialNumber=9BC66CFF809A8A71212005DD9C27047AB418C8A7
Validity
Not Before: Jan 30 20:04:16 2025 GMT
Not After : Feb 6 20:04:16 2025 GMT
Subject: CN=679bdb40-8ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:86:ec:ae:e6:45:e9:46:48:22:d8:c3:6d:f3:
80:bf:fc:bf:45:34:76:2f:9b:ab:d7:c1:c9:d3:70:
7f:ae:6a:79:da:58:b7:c1:1e:7f:c5:65:7b:ef:96:
e8:00:ad:38:51:fd:4a:08:0d:bf:ca:b9:9f:32:ae:
47:35:b5:52:ff:4d:79:3f:ba:3b:a9:c0:8b:ea:ad:
f0:2a:8c:9e:e7:e6:6d:01:cf:c5:d5:3e:6a:41:71:
28:92:0d:98:fe:15:d1:72:1a:bc:b4:e6:d7:7d:64:
68:8e:ac:41:3e:dc:8c:fc:89:29:12:c9:7f:7b:6b:
c0:ec:f6:01:01:7c:b1:9a:4d:fd:49:24:b1:8a:19:
57:0d:a9:64:8c:3b:55:cb:fe:2b:65:f6:5d:21:36:
1c:c1:d8:e1:38:d5:e4:70:1d:0b:c4:8a:27:58:85:
dc:b6:dc:34:e0:bc:a9:9b:b7:ac:5d:6e:18:de:8d:
c9:91:98:b5:c4:79:6f:01:ab:14:b1:30:03:5f:c1:
4c:48:94:04:24:3f:9e:f5:b2:13:3b:26:7f:b6:b6:
e8:eb:6a:0b:7a:18:d9:ea:9b:9c:fa:fe:f0:e9:c1:
73:94:5f:4c:91:6e:46:03:40:34:06:71:e2:89:3e:
d8:78:68:3d:0b:a5:68:78:f2:75:f2:d1:ec:9e:2b:
80:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9C:89:56:92:CF:A3:30:86:F4:E8:2B:5B:82:22:E9:CB:4F:3A:C7
X509v3 Authority Key Identifier:
keyid:9B:C6:6C:FF:80:9A:8A:71:21:20:05:DD:9C:27:04:7A:B4:18:C8:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:28:63:c8:af:74:64:fe:41:ba:af:12:77:a8:e0:d2:56:4e:
21:48:09:63:de:32:da:dc:69:95:b0:1a:89:5d:31:05:90:c9:
c2:5d:62:08:5b:89:f2:3a:4b:07:80:43:15:72:e5:3f:92:36:
c0:f6:be:6b:74:ee:bc:a7:ad:bd:bf:92:9d:b7:d5:73:83:45:
8b:af:7d:89:70:2b:e8:48:dd:a3:d7:5c:73:d6:83:bd:e2:4a:
f1:81:6b:f8:69:e4:63:92:ec:ac:95:d7:e3:a0:3c:31:9e:8c:
3c:c2:82:d2:82:16:d1:28:96:f9:32:62:8b:3a:6c:9b:77:cf:
6c:83:10:ab:71:20:90:66:1b:d1:ea:ac:66:d8:0c:dc:f7:2b:
e3:67:52:20:f1:cf:0a:d8:15:30:04:67:c0:31:2c:96:69:72:
e4:da:fd:3a:40:11:26:e9:de:a0:79:09:09:09:24:19:df:d1:
d6:23:e1:6a:72:32:ab:d5:64:ba:fe:ae:23:8c:90:95:d1:7a:
47:a9:83:52:ee:e3:0c:c0:68:d6:85:59:d5:bd:a1:08:bc:92:
89:c6:a2:01:8f:de:c0:9f:b4:f5:89:e1:42:40:c5:e7:f7:c3:
6c:22:5a:69:10:40:80:f8:98:ec:b7:17:b9:af:85:11:6f:31:
07:bc:21:de
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzM3ODAxMTAvBgNVBAUTKDlCQzY2Q0ZGODA5QThBNzEyMTIwMDVERDlDMjcwNDdB
QjQxOEM4QTcwHhcNMjUwMTMwMjAwNDE2WhcNMjUwMjA2MjAwNDE2WjAYMRYwFAYD
VQQDEw02NzliZGI0MC04ZWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsobsruZF6UZIItjDbfOAv/y/RTR2L5ur18HJ03B/rmp52li3wR5/xWV775bo
AK04Uf1KCA2/yrmfMq5HNbVS/015P7o7qcCL6q3wKoye5+ZtAc/F1T5qQXEokg2Y
/hXRchq8tObXfWRojqxBPtyM/IkpEsl/e2vA7PYBAXyxmk39SSSxihlXDalkjDtV
y/4rZfZdITYcwdjhONXkcB0LxIonWIXcttw04Lypm7esXW4Y3o3JkZi1xHlvAasU
sTADX8FMSJQEJD+e9bITOyZ/trbo62oLehjZ6puc+v7w6cFzlF9MkW5GA0A0BnHi
iT7YeGg9C6VoePJ18tHsniuAvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLWciVaS
z6MwhvToK1uCIunLTzrHMB8GA1UdIwQYMBaAFJvGbP+AmopxISAF3ZwnBHq0GMin
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mzc4MC84RUI2MkRGQTc3
RUQxMUVBQUE0Q0M0MjJDNEY5QUUwMi9tOFpzXzRDYWluRWhJQVhkbkNjRWVyUVl5
S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL204WnNfNENhaW5FaElBWGRuQ2NFZXJRWXlLYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
Mzc4MC84RUI2MkRGQTc3RUQxMUVBQUE0Q0M0MjJDNEY5QUUwMi9tOFpzXzRDYWlu
RWhJQVhkbkNjRWVyUVl5S2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAFKGPIr3Rk/kG6rxJ3qODSVk4hSAlj3jLa3GmVsBqJXTEFkMnCXWII
W4nyOksHgEMVcuU/kjbA9r5rdO68p629v5Kdt9Vzg0WLr32JcCvoSN2j11xz1oO9
4krxgWv4aeRjkuysldfjoDwxnow8woLSghbRKJb5MmKLOmybd89sgxCrcSCQZhvR
6qxm2Azc9yvjZ1Ig8c8K2BUwBGfAMSyWaXLk2v06QBEm6d6geQkJCSQZ39HWI+Fq
cjKr1WS6/q4jjJCV0XpHqYNS7uMMwGjWhVnVvaEIvJKJxqIBj97An7T1ieFCQMXn
98NsIlppEECA+Jjstxe5r4URbzEHvCHe
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:09:49 2025 by rpki-client