Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.mft
File: nhuiMnN6PQDX-qC03Dg02arwbfg.mft (raw, json)
Hash identifier: qhTrtRibnXl4GIUcutAOY/xK7l2uQTCYxLe4oK/1F1A=
Subject key identifier: 82:44:E1:42:92:33:B4:A2:22:7E:D4:E3:95:D3:DD:EF:79:13:18:37
Authority key identifier: 9E:1B:A2:32:73:7A:3D:00:D7:FA:A0:B4:DC:38:34:D9:AA:F0:6D:F8
Certificate issuer: /CN=A9178297/serialNumber=9E1BA232737A3D00D7FAA0B4DC3834D9AAF06DF8
Certificate serial: 0620
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhuiMnN6PQDX-qC03Dg02arwbfg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.mft
Manifest number: 0617
Signing time: Thu 30 Jan 2025 22:44:15 +0000
Manifest this update: Thu 30 Jan 2025 22:44:15 +0000
Manifest next update: Thu 06 Feb 2025 22:44:15 +0000
Files and hashes: 1: nhuiMnN6PQDX-qC03Dg02arwbfg.crl (hash: hVPiKxobJ1q4jW6fqs7g7H7kOhUm5r/MxTll5MC+4fg=)
2: DB883A6E87B511EB91F5691BC4F9AE02.roa (hash: w9bicawnJRvGW+6sHovOqUiuGd+C1wZ78lKb1ct2C6A=)
3: DC0002F687B511EB91F5691BC4F9AE02.roa (hash: Dm24k5oSXxU308cuhimaoVSKUy3VoBNJ3O4FrVg4PHw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1568 (0x620)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178297/serialNumber=9E1BA232737A3D00D7FAA0B4DC3834D9AAF06DF8
Validity
Not Before: Jan 30 22:44:15 2025 GMT
Not After : Feb 6 22:44:15 2025 GMT
Subject: CN=679c00bf-f494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:df:b9:d6:ae:83:64:fc:23:b3:bb:33:ef:d1:
88:5b:59:64:6c:47:dc:c1:98:ed:49:58:1a:71:6e:
50:26:05:a0:bc:ac:73:28:09:b9:5e:3a:a0:a8:88:
94:3a:52:46:66:a7:16:a0:b1:b7:62:c0:3a:31:68:
cd:53:05:6d:a7:4c:55:f7:20:f4:a6:58:45:f8:00:
c5:ad:5a:ef:dd:20:31:31:cb:1f:f7:d0:e4:c3:9e:
b8:bc:53:2c:51:b9:f1:f9:ab:76:52:c3:18:df:fa:
7b:50:f2:0f:fd:10:cf:dc:ee:d2:b3:d8:4e:5d:46:
5a:2a:e0:ae:95:49:e7:cb:08:29:d1:4e:a6:01:86:
ab:34:f6:d3:d1:52:5d:30:ea:1a:e6:32:52:f7:80:
23:5f:ae:51:63:7c:f6:55:ac:45:d7:03:84:8c:02:
92:e6:2c:7a:62:95:22:7d:b3:f0:4c:18:2d:82:a7:
cf:3b:10:a7:de:10:3d:a4:ac:9b:e3:37:0f:ff:f1:
a8:15:e7:b2:43:15:16:01:96:71:8f:c4:26:82:b8:
e5:b9:58:80:ef:23:57:d4:19:64:1d:53:23:e2:22:
7c:34:11:f6:9c:f6:16:b9:e5:86:57:58:7f:61:03:
80:d1:27:c9:48:97:d7:d8:9b:27:ef:70:94:f4:69:
fb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:44:E1:42:92:33:B4:A2:22:7E:D4:E3:95:D3:DD:EF:79:13:18:37
X509v3 Authority Key Identifier:
keyid:9E:1B:A2:32:73:7A:3D:00:D7:FA:A0:B4:DC:38:34:D9:AA:F0:6D:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhuiMnN6PQDX-qC03Dg02arwbfg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:e9:70:20:cd:09:02:fb:fc:a0:3a:28:6a:3b:58:43:01:3b:
84:b7:95:46:e2:09:c3:6a:91:d6:92:a7:65:ce:79:53:38:1a:
c9:86:8a:7f:81:4d:8a:f7:68:98:f8:a3:79:f9:92:db:2e:c4:
0f:de:b1:39:53:8b:53:7f:28:4b:44:03:03:b6:55:aa:43:f2:
63:c0:b8:d7:af:eb:d5:23:ab:b4:87:a2:5b:02:4a:c1:07:81:
a8:30:bb:2b:63:9e:54:29:95:e0:f8:57:e6:fd:75:a7:69:27:
80:d0:ff:c4:ef:fa:0a:85:98:dd:fe:30:9b:da:a4:bf:6b:0d:
21:8c:26:27:99:4b:66:21:b5:f5:d6:97:ee:4c:6d:5e:13:4f:
73:6d:c4:c5:f8:c7:b6:7b:02:2b:fc:2c:af:44:c5:5c:94:51:
cc:26:ab:24:be:3e:13:1f:01:ee:3e:7c:4f:9d:9d:23:40:bf:
59:a7:2c:94:52:14:71:84:5a:1d:c3:b2:93:53:cb:1c:e5:3b:
ff:cf:84:7d:ad:0b:3c:24:2c:6a:15:e8:76:11:a7:ec:a7:ac:
05:3f:80:42:f5:88:ec:b1:49:0d:2a:7b:8f:80:e3:5b:a3:2d:
f2:53:d6:ba:fd:ec:6e:62:0c:2f:7c:59:9f:cb:66:61:dc:1f:
48:48:26:1a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzgyOTcxMTAvBgNVBAUTKDlFMUJBMjMyNzM3QTNEMDBEN0ZBQTBCNERDMzgzNEQ5
QUFGMDZERjgwHhcNMjUwMTMwMjI0NDE1WhcNMjUwMjA2MjI0NDE1WjAYMRYwFAYD
VQQDEw02NzljMDBiZi1mNDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx9+51q6DZPwjs7sz79GIW1lkbEfcwZjtSVgacW5QJgWgvKxzKAm5XjqgqIiU
OlJGZqcWoLG3YsA6MWjNUwVtp0xV9yD0plhF+ADFrVrv3SAxMcsf99Dkw564vFMs
Ubnx+at2UsMY3/p7UPIP/RDP3O7Ss9hOXUZaKuCulUnnywgp0U6mAYarNPbT0VJd
MOoa5jJS94AjX65RY3z2VaxF1wOEjAKS5ix6YpUifbPwTBgtgqfPOxCn3hA9pKyb
4zcP//GoFeeyQxUWAZZxj8QmgrjluViA7yNX1BlkHVMj4iJ8NBH2nPYWueWGV1h/
YQOA0SfJSJfX2Jsn73CU9Gn7owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJE4UKS
M7SiIn7U45XT3e95Exg3MB8GA1UdIwQYMBaAFJ4bojJzej0A1/qgtNw4NNmq8G34
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODI5Ny80QjFGNzQ4NDg3
QjQxMUVCOEVGMzMyMUFDNEY5QUUwMi9uaHVpTW5ONlBRRFgtcUMwM0RnMDJhcndi
ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25odWlNbk42UFFEWC1xQzAzRGcwMmFyd2JmZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
ODI5Ny80QjFGNzQ4NDg3QjQxMUVCOEVGMzMyMUFDNEY5QUUwMi9uaHVpTW5ONlBR
RFgtcUMwM0RnMDJhcndiZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCF6XAgzQkC+/ygOihqO1hDATuEt5VG4gnDapHWkqdlznlTOBrJhop/
gU2K92iY+KN5+ZLbLsQP3rE5U4tTfyhLRAMDtlWqQ/JjwLjXr+vVI6u0h6JbAkrB
B4GoMLsrY55UKZXg+Ffm/XWnaSeA0P/E7/oKhZjd/jCb2qS/aw0hjCYnmUtmIbX1
1pfuTG1eE09zbcTF+Me2ewIr/CyvRMVclFHMJqskvj4THwHuPnxPnZ0jQL9ZpyyU
UhRxhFodw7KTU8sc5Tv/z4R9rQs8JCxqFeh2Eafsp6wFP4BC9YjssUkNKnuPgONb
oy3yU9a6/exuYgwvfFmfy2Zh3B9ISCYa
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:30 2025 by rpki-client