Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft
File: R2wrlqUY81f22XaCqHHD5Iu54SM.mft (raw, json)
Hash identifier: hZxdSxjVnD+7JvvLqJ55t1Xk6Sh3vGAvu/nvjrTlQIQ=
Subject key identifier: 77:DD:4F:99:97:DA:F5:6B:68:36:B7:F1:97:A3:DA:FE:F3:16:63:22
Authority key identifier: 47:6C:2B:96:A5:18:F3:57:F6:D9:76:82:A8:71:C3:E4:8B:B9:E1:23
Certificate issuer: /CN=A917A442/serialNumber=476C2B96A518F357F6D97682A871C3E48BB9E123
Certificate serial: 0168
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft
Manifest number: 0163
Signing time: Fri 31 Jan 2025 03:15:39 +0000
Manifest this update: Fri 31 Jan 2025 03:15:39 +0000
Manifest next update: Fri 07 Feb 2025 03:15:39 +0000
Files and hashes: 1: R2wrlqUY81f22XaCqHHD5Iu54SM.crl (hash: 4UuhiGYnkBRzArXUgjtEwMEnv1ihxZwLoLnm5BoN12g=)
2: 65E02670C83E11ED9FAAFA22C4F9AE02.roa (hash: mECk45lJRrGYCsUl0s33tZDlg+g3kdID1LTdBe9R6+M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360 (0x168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A442/serialNumber=476C2B96A518F357F6D97682A871C3E48BB9E123
Validity
Not Before: Jan 31 03:15:39 2025 GMT
Not After : Feb 7 03:15:39 2025 GMT
Subject: CN=679c405b-e09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:de:88:9f:4e:a5:a0:a7:b6:11:42:24:7a:b5:
3a:41:0a:8d:17:60:43:6e:db:c4:5b:20:9b:f3:b4:
51:5e:c3:13:bb:2c:9d:8e:2c:b3:4d:67:a3:98:f7:
dc:ac:5d:eb:7b:56:26:98:b0:71:36:1f:b6:ea:75:
e3:6b:da:a1:55:74:a6:b4:9c:cd:f2:04:6d:7a:1e:
22:3b:3f:86:22:39:4d:d8:4b:e6:7d:55:d5:e0:51:
42:02:98:4f:50:78:c3:e9:ca:d8:2b:5a:1b:9a:32:
f8:77:4f:71:fa:c7:d6:f3:c0:ef:83:e1:15:65:ea:
88:9b:6a:7e:fe:3e:f2:a1:b8:f1:ae:75:7d:25:8e:
d9:dc:26:13:97:36:05:c2:96:ff:9f:a4:78:6b:42:
78:50:09:f7:b1:9c:0e:87:a2:ea:4d:33:2d:8e:72:
00:35:4c:fe:16:ae:cc:75:09:f7:ca:aa:47:41:07:
45:70:de:00:40:7c:d9:f5:08:06:50:1a:d8:00:e1:
eb:36:99:32:9c:5e:b7:aa:4d:23:e5:e5:c9:86:62:
29:a3:6b:62:4b:4a:b5:de:2d:2d:cf:7a:c9:57:57:
4a:96:cf:cd:f8:46:a4:1b:23:7e:db:5f:b7:07:43:
72:f6:3c:f6:c3:22:60:dd:36:ae:ec:a0:41:92:6b:
4a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DD:4F:99:97:DA:F5:6B:68:36:B7:F1:97:A3:DA:FE:F3:16:63:22
X509v3 Authority Key Identifier:
keyid:47:6C:2B:96:A5:18:F3:57:F6:D9:76:82:A8:71:C3:E4:8B:B9:E1:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:57:8e:75:90:a9:a6:be:0f:5c:e8:be:1e:83:ea:d2:b5:c2:
da:36:32:1d:91:67:da:71:d7:a7:de:a2:b6:6a:d4:72:11:27:
50:76:2e:b8:39:e5:97:26:78:5e:cf:f4:5d:f3:f3:e0:c9:2e:
8b:21:d5:5a:04:c6:87:7e:09:a1:4c:0d:a6:62:61:ac:d1:41:
e9:9d:15:b4:b1:62:8f:40:58:2d:b8:bb:02:79:49:86:d0:73:
96:c5:99:01:10:8f:90:b9:df:14:23:00:6a:94:a3:44:f4:51:
b7:a5:57:a5:bb:3b:10:f1:e1:56:59:ae:6d:86:26:6d:1a:3b:
40:87:0a:92:96:e4:21:c1:fb:3c:b1:db:4b:23:5a:04:86:e8:
ad:f5:dd:5b:62:ec:a4:e8:0e:23:80:e4:eb:a4:e6:19:54:23:
a5:5d:17:f9:11:e5:f3:04:40:af:2c:2e:8b:9d:2b:cc:de:b5:
48:b5:6a:0c:cc:a2:8b:07:a9:6e:ff:e1:b3:7e:15:5d:d4:b5:
d8:ac:14:d0:5b:48:88:ef:7c:ec:a8:53:58:84:c9:22:9b:1f:
84:30:cd:4a:2b:19:91:43:ea:11:d8:54:f6:dd:9e:b8:6f:5b:
42:93:0a:ef:f2:9b:9b:cd:98:cc:f5:4a:4a:84:62:51:27:93:
65:09:b6:b8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0E0NDIxMTAvBgNVBAUTKDQ3NkMyQjk2QTUxOEYzNTdGNkQ5NzY4MkE4NzFDM0U0
OEJCOUUxMjMwHhcNMjUwMTMxMDMxNTM5WhcNMjUwMjA3MDMxNTM5WjAYMRYwFAYD
VQQDEw02NzljNDA1Yi1lMDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs96In06loKe2EUIkerU6QQqNF2BDbtvEWyCb87RRXsMTuyydjiyzTWejmPfc
rF3re1YmmLBxNh+26nXja9qhVXSmtJzN8gRteh4iOz+GIjlN2EvmfVXV4FFCAphP
UHjD6crYK1obmjL4d09x+sfW88Dvg+EVZeqIm2p+/j7yobjxrnV9JY7Z3CYTlzYF
wpb/n6R4a0J4UAn3sZwOh6LqTTMtjnIANUz+Fq7MdQn3yqpHQQdFcN4AQHzZ9QgG
UBrYAOHrNpkynF63qk0j5eXJhmIpo2tiS0q13i0tz3rJV1dKls/N+EakGyN+21+3
B0Ny9jz2wyJg3Tau7KBBkmtKwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHfdT5mX
2vVraDa38Zej2v7zFmMiMB8GA1UdIwQYMBaAFEdsK5alGPNX9tl2gqhxw+SLueEj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ0Mi9FMEU3REI1NkM4
MzkxMUVEQUM3MkIxMUNDNEY5QUUwMi9SMndybHFVWTgxZjIyWGFDcUhIRDVJdTU0
U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Iyd3JscVVZODFmMjJYYUNxSEhENUl1NTRTTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QTQ0Mi9FMEU3REI1NkM4MzkxMUVEQUM3MkIxMUNDNEY5QUUwMi9SMndybHFVWTgx
ZjIyWGFDcUhIRDVJdTU0U00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAoV451kKmmvg9c6L4eg+rStcLaNjIdkWfacden3qK2atRyESdQdi64
OeWXJnhez/Rd8/PgyS6LIdVaBMaHfgmhTA2mYmGs0UHpnRW0sWKPQFgtuLsCeUmG
0HOWxZkBEI+Qud8UIwBqlKNE9FG3pVeluzsQ8eFWWa5thiZtGjtAhwqSluQhwfs8
sdtLI1oEhuit9d1bYuyk6A4jgOTrpOYZVCOlXRf5EeXzBECvLC6LnSvM3rVItWoM
zKKLB6lu/+GzfhVd1LXYrBTQW0iI73zsqFNYhMkimx+EMM1KKxmRQ+oR2FT23Z64
b1tCkwrv8pubzZjM9UpKhGJRJ5NlCba4
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:41:38 2025 by rpki-client