Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft
File: dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft (raw, json)
Hash identifier: wgEWE6MOXKBY1ZJ0cS1XCqXu/ml/o+jZHGyIAVZ3zks=
Subject key identifier: 26:9A:BD:EE:68:86:AF:B2:BE:D1:22:8E:FE:AE:CB:37:8B:C7:56:12
Authority key identifier: 74:A1:16:69:C4:3E:53:B0:F2:1D:4B:41:3F:92:D9:EA:91:31:55:03
Certificate issuer: /CN=A9178424/serialNumber=74A11669C43E53B0F21D4B413F92D9EA91315503
Certificate serial: 70
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft
Manifest number: 6E
Signing time: Fri 31 Jan 2025 05:54:59 +0000
Manifest this update: Fri 31 Jan 2025 05:54:59 +0000
Manifest next update: Fri 07 Feb 2025 05:54:59 +0000
Files and hashes: 1: dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl (hash: oB0H7gLBtDK2fC31/3FpSmZgOLuOMcoE16km5TJpoyU=)
2: D672BC9638E411EF8BF0C15EC4F9AE02.roa (hash: mPNOr/g01ocSR7SG8vAUHcTHz7gj62GKEpE8JvyEYfM=)
3: C7821E3038E311EF94CEFA33C4F9AE02.roa (hash: CYRhwTR2JfGYLXjzwYpN6txEE5fhtvaH0LDwpY9BCRI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178424/serialNumber=74A11669C43E53B0F21D4B413F92D9EA91315503
Validity
Not Before: Jan 31 05:54:59 2025 GMT
Not After : Feb 7 05:54:59 2025 GMT
Subject: CN=679c65b3-5098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:78:7c:b8:2a:c8:f1:a1:ab:c4:9f:6d:66:c8:
07:5b:27:30:99:76:f6:a3:38:ec:51:7a:b9:54:61:
f0:3d:a4:f6:9a:70:58:ef:bb:11:32:cb:99:4f:b4:
eb:7f:6f:14:49:c4:48:1e:57:21:a0:52:9d:e4:20:
24:b3:da:1d:da:d6:da:42:46:47:fb:4f:08:34:69:
47:c8:ff:dc:5a:1f:e7:36:7f:19:f8:63:85:84:4a:
f4:6c:7d:c6:71:a9:44:fd:47:a8:23:95:03:00:2a:
e4:d6:46:cf:99:da:b6:6d:d2:5a:ba:6a:92:fe:18:
c2:63:0f:0a:56:00:25:d6:9d:3b:f7:8f:ae:6a:c4:
ff:d4:39:1d:b5:b5:4c:8f:73:7c:8c:17:14:56:5f:
12:84:29:8a:78:dc:75:d0:d9:2b:1d:f3:f3:33:23:
05:d6:a6:7b:32:38:2d:f4:7e:ed:ce:72:3f:94:09:
3b:24:af:68:47:d1:85:ef:ec:92:8b:1a:95:29:5b:
9d:66:84:26:ad:27:fd:bf:53:d3:cb:34:b7:22:ec:
d8:c9:26:53:bb:64:78:c4:4e:d4:a9:8b:93:dd:4b:
01:c5:a0:00:6a:4c:19:f2:99:87:f1:58:b9:aa:98:
08:d9:f5:a9:d3:d5:ae:ed:43:0d:0f:c4:4a:94:8c:
ad:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9A:BD:EE:68:86:AF:B2:BE:D1:22:8E:FE:AE:CB:37:8B:C7:56:12
X509v3 Authority Key Identifier:
keyid:74:A1:16:69:C4:3E:53:B0:F2:1D:4B:41:3F:92:D9:EA:91:31:55:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:7c:45:7e:79:54:a2:4a:d1:22:2e:36:80:3a:9d:78:d2:45:
f0:11:b9:90:63:82:9d:e0:40:96:67:35:15:e7:db:82:2c:bd:
17:7f:33:88:d2:36:14:53:f4:d0:e6:2c:7c:1d:89:7c:e9:1c:
13:a0:0a:f6:5e:dc:82:f5:25:29:e6:ee:43:fe:f0:5e:08:a3:
f4:91:77:5c:74:e2:e7:0a:50:83:3b:35:b3:6e:08:65:2f:61:
d4:43:13:fa:3a:49:5b:0c:2d:63:ae:79:df:9b:cd:fb:9f:da:
2c:59:ad:83:4f:df:48:59:cd:5b:76:bf:ef:30:90:23:10:aa:
b1:90:12:c6:16:e3:b3:ab:40:87:14:c6:f6:46:19:b8:b8:aa:
67:78:8c:9a:b6:d0:7b:c3:c6:70:2a:a0:f9:59:4f:67:81:e0:
fe:f7:7d:b1:2d:02:51:85:ae:25:cb:c7:d9:69:43:1d:8d:55:
58:29:92:dc:ba:25:db:df:2e:61:db:83:7e:2e:5f:d7:b2:11:
5b:cf:28:9d:8b:6f:4b:ea:8b:27:2d:d2:04:2d:85:f5:ae:b0:
28:62:37:c1:4a:90:88:e5:20:c6:8f:6f:8f:b0:0d:0b:4c:b5:
f3:fc:d1:15:91:26:20:61:a7:fd:ad:9e:7c:12:2d:ac:ec:da:
26:a0:6e:7a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
ODQyNDExMC8GA1UEBRMoNzRBMTE2NjlDNDNFNTNCMEYyMUQ0QjQxM0Y5MkQ5RUE5
MTMxNTUwMzAeFw0yNTAxMzEwNTU0NTlaFw0yNTAyMDcwNTU0NTlaMBgxFjAUBgNV
BAMTDTY3OWM2NWIzLTUwOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCqeHy4KsjxoavEn21myAdbJzCZdvajOOxRerlUYfA9pPaacFjvuxEyy5lPtOt/
bxRJxEgeVyGgUp3kICSz2h3a1tpCRkf7Twg0aUfI/9xaH+c2fxn4Y4WESvRsfcZx
qUT9R6gjlQMAKuTWRs+Z2rZt0lq6apL+GMJjDwpWACXWnTv3j65qxP/UOR21tUyP
c3yMFxRWXxKEKYp43HXQ2Ssd8/MzIwXWpnsyOC30fu3Ocj+UCTskr2hH0YXv7JKL
GpUpW51mhCatJ/2/U9PLNLci7NjJJlO7ZHjETtSpi5PdSwHFoABqTBnymYfxWLmq
mAjZ9anT1a7tQw0PxEqUjK1FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJpq97miG
r7K+0SKO/q7LN4vHVhIwHwYDVR0jBBgwFoAUdKEWacQ+U7DyHUtBP5LZ6pExVQMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4NDI0Lzc5M0VBNkRBMzhF
MzExRUY5MTRCMkYzM0M0RjlBRTAyL2RLRVdhY1EtVTdEeUhVdEJQNUxaNnBFeFZR
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvZEtFV2FjUS1VN0R5SFV0QlA1TFo2cEV4VlFNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4
NDI0Lzc5M0VBNkRBMzhFMzExRUY5MTRCMkYzM0M0RjlBRTAyL2RLRVdhY1EtVTdE
eUhVdEJQNUxaNnBFeFZRTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAHF8RX55VKJK0SIuNoA6nXjSRfARuZBjgp3gQJZnNRXn24IsvRd/M4jS
NhRT9NDmLHwdiXzpHBOgCvZe3IL1JSnm7kP+8F4Io/SRd1x04ucKUIM7NbNuCGUv
YdRDE/o6SVsMLWOued+bzfuf2ixZrYNP30hZzVt2v+8wkCMQqrGQEsYW47OrQIcU
xvZGGbi4qmd4jJq20HvDxnAqoPlZT2eB4P73fbEtAlGFriXLx9lpQx2NVVgpkty6
JdvfLmHbg34uX9eyEVvPKJ2Lb0vqiyct0gQthfWusChiN8FKkIjlIMaPb4+wDQtM
tfP80RWRJiBhp/2tnnwSLazs2iagbno=
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:12:57 2025 by rpki-client