Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft
File: dh_-bfalw4-a60XlQCWIzddef9w.mft (raw, json)
Hash identifier: g2TfHeZa5yjNuHVuvsj23EO3t6wPfBqyhnLg8tuPGYY=
Subject key identifier: C9:AC:27:9F:92:33:CA:92:78:C3:A5:11:6F:17:5A:C7:63:C5:C2:27
Authority key identifier: 76:1F:FE:6D:F6:A5:C3:8F:9A:EB:45:E5:40:25:88:CD:D7:5E:7F:DC
Certificate issuer: /CN=A9179CA1/serialNumber=761FFE6DF6A5C38F9AEB45E5402588CDD75E7FDC
Certificate serial: 0769
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dh_-bfalw4-a60XlQCWIzddef9w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft
Manifest number: 0764
Signing time: Thu 30 Jan 2025 21:24:40 +0000
Manifest this update: Thu 30 Jan 2025 21:24:39 +0000
Manifest next update: Thu 06 Feb 2025 21:24:39 +0000
Files and hashes: 1: dh_-bfalw4-a60XlQCWIzddef9w.crl (hash: 0jLNHseDibr08VhhD30tOn9EyBH1ZkFP0Ur1H6qsNqI=)
2: 7816A67E045611EB86495B26C4F9AE02.roa (hash: 0iyvzLFIUAJQiOyEvH+MRt0xVeTfFziku8Yy3Ho4c+k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1897 (0x769)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179CA1/serialNumber=761FFE6DF6A5C38F9AEB45E5402588CDD75E7FDC
Validity
Not Before: Jan 30 21:24:39 2025 GMT
Not After : Feb 6 21:24:39 2025 GMT
Subject: CN=679bee18-5ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7e:51:da:2c:68:4f:ab:41:f9:41:d2:8b:c0:
b6:e1:b0:6e:ab:cc:4a:e3:03:03:7e:75:b0:c2:18:
3f:7b:30:6f:5b:56:14:66:e5:14:93:18:97:e7:e7:
39:44:d1:9b:34:a8:30:3c:4a:e0:4d:ae:bd:ac:d4:
91:ae:30:87:41:00:c4:41:09:c8:9b:c5:c8:3a:83:
0a:2b:83:7d:e9:8a:3e:38:ae:d2:6c:cf:a8:77:0f:
e9:02:62:94:2c:30:4e:d2:cb:5e:30:00:a0:80:a5:
69:07:a7:31:1e:e3:b7:79:8d:a6:47:16:76:1a:a3:
70:81:72:46:e1:7d:c2:b1:9f:5a:aa:45:c1:4d:32:
fd:7b:8f:40:05:18:3c:a7:d6:61:59:ea:6c:2d:7b:
a0:22:06:a8:47:60:ec:f5:8d:4f:12:0d:6b:02:8f:
40:84:d9:4f:cc:9d:e3:27:b2:1a:65:5f:89:04:ba:
9f:53:48:7a:f8:11:62:79:78:6f:8f:b7:6a:6a:ab:
63:77:1b:ec:31:25:14:8f:4b:cd:38:81:db:f8:d8:
dd:30:87:8b:18:ae:9d:fd:61:ce:26:d6:5e:8d:3a:
99:bf:cc:4b:bc:a0:78:b2:1f:0c:51:ea:20:d9:99:
89:98:41:ab:96:a6:c1:c1:57:f7:ac:ad:a4:c3:e5:
eb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AC:27:9F:92:33:CA:92:78:C3:A5:11:6F:17:5A:C7:63:C5:C2:27
X509v3 Authority Key Identifier:
keyid:76:1F:FE:6D:F6:A5:C3:8F:9A:EB:45:E5:40:25:88:CD:D7:5E:7F:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dh_-bfalw4-a60XlQCWIzddef9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ad:10:5a:a0:dd:a2:2e:78:a2:da:19:f7:10:57:69:05:c4:
cc:a7:10:06:c5:69:16:89:1d:4a:91:d4:8a:95:8b:13:d8:19:
a9:6a:27:7a:32:ee:09:09:4e:70:9e:ae:cd:9e:e1:3b:a8:a9:
f1:98:3e:70:b2:21:df:b5:d4:43:96:0d:b3:5d:bb:99:cd:a0:
89:46:51:78:70:39:0f:72:20:0d:ba:a1:72:3b:05:06:4c:97:
73:69:75:57:af:ea:97:ec:81:55:7c:1c:1a:bf:67:49:e0:f9:
05:05:fb:14:67:01:6d:19:f9:9e:12:f1:fb:62:79:88:eb:cb:
66:11:e0:49:af:ef:97:18:12:0b:7e:db:f6:fc:5d:a8:67:62:
9e:f1:ea:51:dc:8b:72:0f:7e:4c:d0:f0:2e:e0:6a:a5:40:26:
16:fa:36:c0:7e:08:19:07:cc:17:8a:95:f0:cb:49:4c:09:e8:
28:f4:97:46:90:7a:6a:a5:14:f7:23:fa:98:a4:c3:9f:f2:f3:
f9:da:34:2e:8a:ed:bf:cb:39:09:b2:fc:4e:29:5a:e3:e6:29:
70:7f:96:77:b1:a7:03:b0:19:a4:9b:b7:77:ce:44:a1:27:eb:
97:ce:5b:50:80:06:c3:42:1a:60:9c:81:f7:1e:32:e8:ff:9e:
85:73:78:bf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzlDQTExMTAvBgNVBAUTKDc2MUZGRTZERjZBNUMzOEY5QUVCNDVFNTQwMjU4OENE
RDc1RTdGREMwHhcNMjUwMTMwMjEyNDM5WhcNMjUwMjA2MjEyNDM5WjAYMRYwFAYD
VQQDEw02NzliZWUxOC01ZWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtX5R2ixoT6tB+UHSi8C24bBuq8xK4wMDfnWwwhg/ezBvW1YUZuUUkxiX5+c5
RNGbNKgwPErgTa69rNSRrjCHQQDEQQnIm8XIOoMKK4N96Yo+OK7SbM+odw/pAmKU
LDBO0steMACggKVpB6cxHuO3eY2mRxZ2GqNwgXJG4X3CsZ9aqkXBTTL9e49ABRg8
p9ZhWepsLXugIgaoR2Ds9Y1PEg1rAo9AhNlPzJ3jJ7IaZV+JBLqfU0h6+BFieXhv
j7dqaqtjdxvsMSUUj0vNOIHb+NjdMIeLGK6d/WHOJtZejTqZv8xLvKB4sh8MUeog
2ZmJmEGrlqbBwVf3rK2kw+XrVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmsJ5+S
M8qSeMOlEW8XWsdjxcInMB8GA1UdIwQYMBaAFHYf/m32pcOPmutF5UAliM3XXn/c
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUNBMS84MDYzNTRBRTA0
NTUxMUVCODkxQThCMjVDNEY5QUUwMi9kaF8tYmZhbHc0LWE2MFhsUUNXSXpkZGVm
OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RoXy1iZmFsdzQtYTYwWGxRQ1dJemRkZWY5dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OUNBMS84MDYzNTRBRTA0NTUxMUVCODkxQThCMjVDNEY5QUUwMi9kaF8tYmZhbHc0
LWE2MFhsUUNXSXpkZGVmOXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCMrRBaoN2iLnii2hn3EFdpBcTMpxAGxWkWiR1KkdSKlYsT2Bmpaid6
Mu4JCU5wnq7NnuE7qKnxmD5wsiHftdRDlg2zXbuZzaCJRlF4cDkPciANuqFyOwUG
TJdzaXVXr+qX7IFVfBwav2dJ4PkFBfsUZwFtGfmeEvH7YnmI68tmEeBJr++XGBIL
ftv2/F2oZ2Ke8epR3ItyD35M0PAu4GqlQCYW+jbAfggZB8wXipXwy0lMCego9JdG
kHpqpRT3I/qYpMOf8vP52jQuiu2/yzkJsvxOKVrj5ilwf5Z3sacDsBmkm7d3zkSh
J+uXzltQgAbDQhpgnIH3HjLo/56Fc3i/
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:33:56 2025 by rpki-client