Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft
File: 8qiUEKVLBHj2ArcxIAUVHClcc3k.mft (raw, json)
Hash identifier: s6M3zS0pkz/Cmw4KYZZDVtJ8SyZxXdnibIeGbDFYbsc=
Subject key identifier: 19:8E:A0:0C:82:CA:DB:CE:9E:8E:58:D7:43:0D:BA:EE:10:6C:44:1A
Authority key identifier: F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79
Certificate issuer: /CN=A9175300/serialNumber=F2A89410A54B0478F602B7312005151C295C7379
Certificate serial: 0C72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft
Manifest number: 0C6B
Signing time: Fri 31 Jan 2025 18:09:40 +0000
Manifest this update: Fri 31 Jan 2025 18:09:39 +0000
Manifest next update: Fri 07 Feb 2025 18:09:39 +0000
Files and hashes: 1: 8qiUEKVLBHj2ArcxIAUVHClcc3k.crl (hash: TeisyyObmFSvCPgXoS/vsSD6H9fd6qXcNIzikfh2pNo=)
2: 68EB3B00F18E11E997528762C4F9AE02.roa (hash: ag4btEEr8nwGBlqow86nAvtb1JX6B7t93yhnFSFUrc4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3186 (0xc72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175300/serialNumber=F2A89410A54B0478F602B7312005151C295C7379
Validity
Not Before: Jan 31 18:09:39 2025 GMT
Not After : Feb 7 18:09:39 2025 GMT
Subject: CN=679d11e3-c96f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2f:d3:71:5b:c9:60:5b:11:7f:9b:c9:69:61:
3a:3c:d4:d3:db:62:3a:6e:c1:61:10:f7:22:07:39:
1f:50:57:07:3c:5c:47:d3:0c:55:ed:41:c4:4d:26:
2e:da:3c:f5:f4:ee:93:db:e5:58:d5:b8:61:c4:f1:
1b:58:a9:1a:e5:af:60:8b:36:fb:1c:fb:9f:3a:56:
df:35:d3:50:44:9f:85:73:c8:52:09:4d:45:9f:53:
25:ab:23:97:e0:90:dc:07:db:37:aa:1e:c4:d1:4b:
eb:b4:20:30:87:dd:f8:61:68:3c:63:3f:cc:c1:97:
4b:d8:5c:11:14:4f:67:4b:cb:1a:e5:8b:37:d9:68:
32:92:5e:6c:b8:ba:5b:19:e9:33:8c:1d:f2:e7:be:
b6:8a:f4:35:6f:b0:4d:af:a9:a9:33:09:79:e1:c1:
2d:c1:bb:92:86:86:7d:26:7e:73:17:76:8c:1d:2f:
b3:73:74:b6:2c:25:54:c8:4d:5c:62:df:34:9a:49:
56:6a:01:99:db:c4:3a:9e:29:f3:ae:86:30:24:be:
bc:56:f3:78:8e:62:a7:d6:5f:c2:8c:b0:67:43:77:
94:58:f5:6d:60:e9:ab:e6:7d:d2:28:4b:58:92:09:
9b:52:9a:78:7a:5d:85:90:0d:cf:38:09:10:81:98:
ed:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:8E:A0:0C:82:CA:DB:CE:9E:8E:58:D7:43:0D:BA:EE:10:6C:44:1A
X509v3 Authority Key Identifier:
keyid:F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:0c:0d:1d:ec:50:9e:a0:24:64:8a:43:51:c9:fb:50:26:67:
03:6d:fd:55:82:d9:be:5c:44:8b:c3:2e:fa:ea:53:eb:10:56:
72:3b:5f:89:30:3f:10:d0:8a:91:d4:35:d9:f8:bb:f7:d8:71:
44:87:d5:3a:a1:e9:84:79:c7:a0:f8:0e:bc:1a:6a:af:44:15:
e1:7b:c9:58:78:e6:8c:3c:c2:05:c5:ff:58:7f:34:82:63:5a:
ac:f1:24:b9:c5:1c:55:a5:b5:17:79:ec:38:d9:54:42:d2:da:
69:28:f2:c6:45:cf:bb:98:66:3e:20:79:31:64:0a:c7:de:f0:
01:01:ef:f1:6c:93:7f:0c:cd:fc:0a:a1:42:30:3b:9b:14:02:
f1:34:ea:35:66:d2:8f:58:66:ee:65:89:9f:dc:64:aa:28:3b:
6d:bf:b9:bc:24:e2:88:56:0b:a8:fc:37:bf:de:5f:92:7e:ea:
24:d6:a7:77:bb:dd:4c:1e:58:01:fb:41:50:4f:6f:a7:a3:22:
b7:2d:db:0a:86:99:f5:ed:4e:31:df:d5:22:01:6e:57:2d:b8:
42:e2:d0:0a:18:74:50:a1:3c:47:63:1e:38:10:c2:41:32:32:
bc:b6:34:05:dd:65:fb:33:b0:79:23:4e:22:be:11:23:51:bd:
ce:92:f9:f8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzUzMDAxMTAvBgNVBAUTKEYyQTg5NDEwQTU0QjA0NzhGNjAyQjczMTIwMDUxNTFD
Mjk1QzczNzkwHhcNMjUwMTMxMTgwOTM5WhcNMjUwMjA3MTgwOTM5WjAYMRYwFAYD
VQQDEw02NzlkMTFlMy1jOTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAry/TcVvJYFsRf5vJaWE6PNTT22I6bsFhEPciBzkfUFcHPFxH0wxV7UHETSYu
2jz19O6T2+VY1bhhxPEbWKka5a9gizb7HPufOlbfNdNQRJ+Fc8hSCU1Fn1MlqyOX
4JDcB9s3qh7E0UvrtCAwh934YWg8Yz/MwZdL2FwRFE9nS8sa5Ys32Wgykl5suLpb
GekzjB3y5762ivQ1b7BNr6mpMwl54cEtwbuShoZ9Jn5zF3aMHS+zc3S2LCVUyE1c
Yt80mklWagGZ28Q6ninzroYwJL68VvN4jmKn1l/CjLBnQ3eUWPVtYOmr5n3SKEtY
kgmbUpp4el2FkA3POAkQgZjtYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBmOoAyC
ytvOno5Y10MNuu4QbEQaMB8GA1UdIwQYMBaAFPKolBClSwR49gK3MSAFFRwpXHN5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTMwMC81RUZBRDc2NEYx
OEQxMUU5QUQ3NUI4NjBDNEY5QUUwMi84cWlVRUtWTEJIajJBcmN4SUFVVkhDbGNj
M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhxaVVFS1ZMQkhqMkFyY3hJQVVWSENsY2Mzay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTMwMC81RUZBRDc2NEYxOEQxMUU5QUQ3NUI4NjBDNEY5QUUwMi84cWlVRUtWTEJI
ajJBcmN4SUFVVkhDbGNjM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQByDA0d7FCeoCRkikNRyftQJmcDbf1Vgtm+XESLwy766lPrEFZyO1+J
MD8Q0IqR1DXZ+Lv32HFEh9U6oemEeceg+A68GmqvRBXhe8lYeOaMPMIFxf9YfzSC
Y1qs8SS5xRxVpbUXeew42VRC0tppKPLGRc+7mGY+IHkxZArH3vABAe/xbJN/DM38
CqFCMDubFALxNOo1ZtKPWGbuZYmf3GSqKDttv7m8JOKIVguo/De/3l+Sfuok1qd3
u91MHlgB+0FQT2+noyK3LdsKhpn17U4x39UiAW5XLbhC4tAKGHRQoTxHYx44EMJB
MjK8tjQF3WX7M7B5I04ivhEjUb3Okvn4
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:51:21 2025 by rpki-client