Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
File: 33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft (raw, json)
Hash identifier: ew6hq4xOSA6McM53HmXPMe4/IvGLq58lHKm9WCPFFNU=
Subject key identifier: DD:BE:5A:C5:5D:36:6E:14:46:3C:38:6E:0D:92:A0:2B:6D:EA:1B:A4
Authority key identifier: DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC
Certificate issuer: /CN=A9179F6E/serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC
Certificate serial: 040D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
Manifest number: 0409
Signing time: Fri 31 Jan 2025 00:30:37 +0000
Manifest this update: Fri 31 Jan 2025 00:30:37 +0000
Manifest next update: Fri 07 Feb 2025 00:30:37 +0000
Files and hashes: 1: 33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl (hash: 3zCaP1BtohjXsdLw05/qEwRr4mS/e668tmfPIY/RG8A=)
2: F5DED02A588511ECAC342433C4F9AE02.roa (hash: xHb5qsT7d30Z0+OLvEr0YMnNlt030IAKtfEq/tu+nEc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1037 (0x40d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179F6E/serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC
Validity
Not Before: Jan 31 00:30:37 2025 GMT
Not After : Feb 7 00:30:37 2025 GMT
Subject: CN=679c19ad-5e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:c6:b2:76:8f:e3:df:24:c0:ac:1f:4c:7a:a7:
88:c7:6b:c9:a4:06:34:f5:bd:df:80:09:2d:79:b2:
0f:b6:f2:c9:2f:0f:94:d0:ce:10:b9:76:8a:7a:57:
c1:4e:25:08:e9:06:d8:c3:e7:53:81:0a:d7:07:cb:
b9:f9:de:42:c7:60:fb:e6:b9:07:ee:58:2b:66:c9:
af:31:07:3a:bc:52:79:c1:08:c8:31:32:41:7a:ea:
2e:f4:98:a8:b4:37:5d:90:85:4f:bd:83:98:90:32:
c4:b8:0a:a3:e6:a3:d6:e6:48:f1:85:1d:67:84:d4:
d0:35:7c:db:99:23:5e:c5:03:1d:13:54:8f:7d:b0:
b6:26:cd:43:ea:89:5c:7c:0c:8f:fe:60:97:a0:0c:
27:f5:84:df:49:1a:c1:bc:1e:c5:6f:e7:f2:cd:56:
67:e8:c9:fa:6d:df:5b:f6:78:27:0a:ee:d6:3a:78:
d8:68:6f:bf:92:fc:69:05:15:8a:b0:8b:3c:86:ba:
1e:ac:f1:47:4a:57:31:00:ad:59:94:6d:16:2c:06:
36:6e:63:9b:bf:c0:d4:fd:e7:ce:09:8c:72:44:d6:
f3:e5:dc:91:06:ef:1b:0b:56:9f:5e:5d:2e:8f:a1:
d0:ae:d5:a8:2e:86:d4:56:d4:99:db:0e:d8:29:b0:
d6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BE:5A:C5:5D:36:6E:14:46:3C:38:6E:0D:92:A0:2B:6D:EA:1B:A4
X509v3 Authority Key Identifier:
keyid:DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:2d:d6:b1:04:e2:a0:b5:ea:9c:0a:3d:e3:cc:d5:8e:78:cf:
69:d5:05:98:ee:e6:0e:b8:75:1f:ca:06:c1:9a:bc:dd:e1:f6:
cb:cf:cb:63:20:26:bc:e4:5d:3d:7b:77:10:37:cd:ae:32:fc:
65:65:c9:6a:fc:4c:13:99:6f:bf:5f:f0:c1:39:a7:53:62:7a:
66:6a:99:59:55:99:20:cd:fa:7e:6a:d4:e3:95:70:19:41:d2:
7e:97:e2:34:21:db:c3:51:f8:a7:54:a6:c4:bc:3e:53:82:e0:
9f:2c:ca:91:4c:26:29:df:2d:8e:65:20:e0:40:0d:51:24:28:
f4:2f:c7:13:7d:99:0a:cd:a1:1c:23:95:d2:9e:5b:7a:42:c4:
2b:18:b5:d2:1b:18:da:fe:1a:6f:89:16:ac:ca:f4:da:01:23:
12:c3:b8:eb:c8:0d:ba:3d:34:85:ee:31:36:40:d5:7b:32:86:
e4:53:cd:bb:56:65:0e:82:c9:3e:af:71:76:b8:17:ab:4d:0e:
3f:51:a2:1a:de:ba:20:a8:30:dd:1d:32:a0:76:8e:5f:f1:07:
72:77:73:13:cb:ad:cc:48:fb:67:6a:fc:20:83:87:05:d5:78:
bd:8e:18:6a:30:04:e1:d6:6c:26:4d:ee:eb:b2:c2:fe:30:d0:
a0:0c:b9:72
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzlGNkUxMTAvBgNVBAUTKERGNzUyNkE4OEVBNzcwOTRBNjJGMTQzOUZGQjQyMDhG
NTAyRjRGRUMwHhcNMjUwMTMxMDAzMDM3WhcNMjUwMjA3MDAzMDM3WjAYMRYwFAYD
VQQDEw02NzljMTlhZC01ZTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA/Maydo/j3yTArB9MeqeIx2vJpAY09b3fgAktebIPtvLJLw+U0M4QuXaKelfB
TiUI6QbYw+dTgQrXB8u5+d5Cx2D75rkH7lgrZsmvMQc6vFJ5wQjIMTJBeuou9Jio
tDddkIVPvYOYkDLEuAqj5qPW5kjxhR1nhNTQNXzbmSNexQMdE1SPfbC2Js1D6olc
fAyP/mCXoAwn9YTfSRrBvB7Fb+fyzVZn6Mn6bd9b9ngnCu7WOnjYaG+/kvxpBRWK
sIs8hroerPFHSlcxAK1ZlG0WLAY2bmObv8DU/efOCYxyRNbz5dyRBu8bC1afXl0u
j6HQrtWoLobUVtSZ2w7YKbDWFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2+WsVd
Nm4URjw4bg2SoCtt6hukMB8GA1UdIwQYMBaAFN91JqiOp3CUpi8UOf+0II9QL0/s
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUY2RS8wNjM1ODYwNjU4
ODMxMUVDQkRCQjRFNkJDNEY5QUUwMi8zM1VtcUk2bmNKU21MeFE1XzdRZ2oxQXZU
LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzMzVW1xSTZuY0pTbUx4UTVfN1FnajFBdlQtdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OUY2RS8wNjM1ODYwNjU4ODMxMUVDQkRCQjRFNkJDNEY5QUUwMi8zM1VtcUk2bmNK
U21MeFE1XzdRZ2oxQXZULXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAILdaxBOKgteqcCj3jzNWOeM9p1QWY7uYOuHUfygbBmrzd4fbLz8tj
ICa85F09e3cQN82uMvxlZclq/EwTmW+/X/DBOadTYnpmaplZVZkgzfp+atTjlXAZ
QdJ+l+I0IdvDUfinVKbEvD5TguCfLMqRTCYp3y2OZSDgQA1RJCj0L8cTfZkKzaEc
I5XSnlt6QsQrGLXSGxja/hpviRasyvTaASMSw7jryA26PTSF7jE2QNV7MobkU827
VmUOgsk+r3F2uBerTQ4/UaIa3rogqDDdHTKgdo5f8Qdyd3MTy63MSPtnavwgg4cF
1Xi9jhhqMATh1mwmTe7rssL+MNCgDLly
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:37:22 2025 by rpki-client