Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft
File: sDUqu0PwqFVkm512GmVcP8YPbmM.mft (raw, json)
Hash identifier: EFhVwetj+fjiI/d5r9n0/7EVEUC+lhuoaarUJ6KwXEQ=
Subject key identifier: DA:CA:A7:7F:93:FB:F3:55:EC:AD:30:A5:21:56:16:5F:E7:C8:4C:1D
Authority key identifier: B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63
Certificate issuer: /CN=A9176DFC/serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63
Certificate serial: 0126
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft
Manifest number: 0123
Signing time: Fri 31 Jan 2025 03:50:04 +0000
Manifest this update: Fri 31 Jan 2025 03:50:03 +0000
Manifest next update: Fri 07 Feb 2025 03:50:03 +0000
Files and hashes: 1: sDUqu0PwqFVkm512GmVcP8YPbmM.crl (hash: Qc/pTEhPb3Q+xXgFObtKexk+WURJxWM13RFk5OHQ1so=)
2: 230A1090248C11EEA9EE1935C4F9AE02.roa (hash: GPm7lgmcPBXG9N85GnRJZzvPZx2wbvxxB75DoAT8PYs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294 (0x126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176DFC/serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63
Validity
Not Before: Jan 31 03:50:03 2025 GMT
Not After : Feb 7 03:50:03 2025 GMT
Subject: CN=679c486b-800e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:de:d7:a1:71:78:26:76:3b:82:36:44:6b:e8:
d0:23:47:09:5f:cf:57:b4:75:27:0b:fb:cd:c7:dc:
0c:72:47:af:2e:0d:74:71:82:0f:12:b9:07:c3:ae:
f4:6c:c3:0d:21:9c:9d:bb:93:65:99:fd:6f:6d:14:
13:88:f1:ed:f0:4d:98:53:01:47:dc:27:00:6e:cb:
73:b5:b3:52:69:78:4d:bc:08:af:50:69:50:4d:80:
73:25:78:ec:d2:29:25:bb:db:df:07:9a:9f:be:22:
3e:80:c8:29:3d:d8:1a:22:49:b5:5a:de:f2:fb:49:
2d:ec:18:64:e2:19:b5:a8:aa:35:04:19:eb:9c:9b:
19:6f:df:55:7c:9d:32:49:18:d2:1d:fb:26:45:ca:
a3:ce:ae:0e:79:47:fb:b6:25:7b:dd:17:41:0a:38:
61:2d:31:cf:7e:53:e9:ef:52:70:f2:35:4c:05:ee:
2d:e1:ec:da:57:19:82:e6:82:3c:13:5f:2c:34:ea:
e5:22:59:77:68:c0:11:cc:0a:ff:c1:53:1c:3c:76:
24:26:a8:c7:5b:6f:b8:76:9f:79:23:dc:78:7a:25:
28:e0:83:09:0c:6a:95:2b:99:e8:20:bf:65:99:22:
5f:df:b0:fb:a8:65:73:96:7a:0e:fa:b5:da:23:47:
18:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CA:A7:7F:93:FB:F3:55:EC:AD:30:A5:21:56:16:5F:E7:C8:4C:1D
X509v3 Authority Key Identifier:
keyid:B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:69:eb:7d:7d:2c:aa:e2:69:ae:29:09:86:19:ad:f8:e4:9e:
ab:fc:2e:0b:33:65:17:98:45:d2:8e:33:a3:63:83:b5:d8:c3:
3c:d8:6d:a1:86:5f:6c:66:e1:c1:b1:fc:91:78:fe:3d:66:d6:
f9:cb:05:c0:0b:26:e3:08:b8:b4:a4:0c:44:c5:e1:61:c8:eb:
cd:b4:8a:db:e4:f4:51:23:d6:d0:a3:2e:56:ae:5d:b4:0a:6b:
6e:9c:69:89:a4:cb:83:28:c1:b0:9b:86:2d:44:fe:11:c3:ab:
fb:3c:08:db:b4:bc:40:3e:ec:10:22:7b:9d:1b:36:ce:b3:3a:
27:2a:12:9b:5f:0c:43:f4:a9:ec:c7:89:91:ce:57:53:52:9d:
78:e4:a7:5c:4c:d5:18:41:a3:7a:a4:e8:31:d1:c4:cf:2e:e4:
60:a8:72:4d:15:01:ea:83:76:9c:e9:01:76:72:04:b6:9a:9d:
19:57:bc:eb:52:5d:3f:29:a8:b3:29:2d:52:57:77:3c:1a:56:
a4:80:a9:43:56:b6:74:28:0f:9d:65:a7:ff:7f:6d:76:60:48:
af:b5:41:96:4b:15:3d:f7:a0:10:ee:a1:d7:bb:82:52:8e:f9:
8a:4c:39:b0:a0:32:c9:23:23:a0:11:0b:18:ab:40:a6:bd:12:
0a:72:9b:1a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzZERkMxMTAvBgNVBAUTKEIwMzUyQUJCNDNGMEE4NTU2NDlCOUQ3NjFBNjU1QzNG
QzYwRjZFNjMwHhcNMjUwMTMxMDM1MDAzWhcNMjUwMjA3MDM1MDAzWjAYMRYwFAYD
VQQDEw02NzljNDg2Yi04MDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA397XoXF4JnY7gjZEa+jQI0cJX89XtHUnC/vNx9wMckevLg10cYIPErkHw670
bMMNIZydu5Nlmf1vbRQTiPHt8E2YUwFH3CcAbstztbNSaXhNvAivUGlQTYBzJXjs
0iklu9vfB5qfviI+gMgpPdgaIkm1Wt7y+0kt7Bhk4hm1qKo1BBnrnJsZb99VfJ0y
SRjSHfsmRcqjzq4OeUf7tiV73RdBCjhhLTHPflPp71Jw8jVMBe4t4ezaVxmC5oI8
E18sNOrlIll3aMARzAr/wVMcPHYkJqjHW2+4dp95I9x4eiUo4IMJDGqVK5noIL9l
mSJf37D7qGVzlnoO+rXaI0cYPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNrKp3+T
+/NV7K0wpSFWFl/nyEwdMB8GA1UdIwQYMBaAFLA1KrtD8KhVZJuddhplXD/GD25j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkRGQy9CRTQwQzEzNjI0
OEIxMUVFQTM0RjZGMzRDNEY5QUUwMi9zRFVxdTBQd3FGVmttNTEyR21WY1A4WVBi
bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NEVXF1MFB3cUZWa201MTJHbVZjUDhZUGJtTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NkRGQy9CRTQwQzEzNjI0OEIxMUVFQTM0RjZGMzRDNEY5QUUwMi9zRFVxdTBQd3FG
VmttNTEyR21WY1A4WVBibU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBOaet9fSyq4mmuKQmGGa345J6r/C4LM2UXmEXSjjOjY4O12MM82G2h
hl9sZuHBsfyReP49Ztb5ywXACybjCLi0pAxExeFhyOvNtIrb5PRRI9bQoy5Wrl20
CmtunGmJpMuDKMGwm4YtRP4Rw6v7PAjbtLxAPuwQInudGzbOszonKhKbXwxD9Kns
x4mRzldTUp145KdcTNUYQaN6pOgx0cTPLuRgqHJNFQHqg3ac6QF2cgS2mp0ZV7zr
Ul0/KaizKS1SV3c8GlakgKlDVrZ0KA+dZaf/f212YEivtUGWSxU996AQ7qHXu4JS
jvmKTDmwoDLJIyOgEQsYq0CmvRIKcpsa
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:35:39 2025 by rpki-client