Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.mft
File: S3IqOmeTvzLJvPUuTncuCm86Yxk.mft (raw, json)
Hash identifier: mTvoBoJJLPDNjgaYQQAP5j0fW7/x98s+wYf4pm+7BKk=
Subject key identifier: 3B:DC:2F:F0:50:F8:F8:1E:06:4B:10:6F:15:2D:12:91:70:2C:39:85
Authority key identifier: 4B:72:2A:3A:67:93:BF:32:C9:BC:F5:2E:4E:77:2E:0A:6F:3A:63:19
Certificate issuer: /CN=A917A67E/serialNumber=4B722A3A6793BF32C9BCF52E4E772E0A6F3A6319
Certificate serial: 0129
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3IqOmeTvzLJvPUuTncuCm86Yxk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.mft
Manifest number: 0127
Signing time: Fri 31 Jan 2025 03:46:37 +0000
Manifest this update: Fri 31 Jan 2025 03:46:37 +0000
Manifest next update: Fri 07 Feb 2025 03:46:37 +0000
Files and hashes: 1: S3IqOmeTvzLJvPUuTncuCm86Yxk.crl (hash: LVjxWcclYkjFBUzLRm8QGozLU4HI9MgYxwdXs6Ux8ik=)
2: E3901F981BD711EEB9597921C4F9AE02.roa (hash: kDd0UyJiiGuqaONxiGP/252EeTqmNnyGZ50AdfF+Vyo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297 (0x129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A67E/serialNumber=4B722A3A6793BF32C9BCF52E4E772E0A6F3A6319
Validity
Not Before: Jan 31 03:46:37 2025 GMT
Not After : Feb 7 03:46:37 2025 GMT
Subject: CN=679c479d-24a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bb:03:a8:ed:bb:eb:f4:5a:ee:ed:75:db:bd:
54:e7:06:35:12:82:ac:41:d6:ef:43:4a:fe:5f:13:
2e:08:1c:8b:54:54:37:a3:d0:42:d4:be:54:1c:81:
05:91:b5:a7:e4:0c:b5:78:9c:16:9a:f8:9f:fb:a6:
01:05:67:9e:90:d5:aa:47:58:e4:54:90:d1:27:be:
54:2d:9a:bb:8c:97:a9:a3:d7:a0:ef:db:2f:7c:91:
70:09:b6:d7:18:78:9b:fb:e7:67:38:41:3f:42:ef:
b9:9c:b4:d8:15:ef:ea:72:aa:7e:70:8e:4e:d2:98:
9d:92:79:94:4b:c7:51:08:1f:c5:29:22:2c:35:fb:
0c:3e:5a:38:79:1b:af:57:f9:bb:f7:d6:c9:2e:f0:
70:6f:ca:6d:af:ed:b2:44:29:82:94:bc:80:a5:40:
ca:fb:91:e7:b1:2c:d6:45:80:1b:36:23:5a:92:14:
d7:1b:99:1f:35:c8:eb:93:d4:c5:37:87:55:81:9b:
ff:66:37:8b:db:b1:1b:79:03:ed:d5:b1:a3:eb:e9:
0f:64:1b:ee:85:97:11:cb:8f:19:00:cf:25:1c:0d:
75:08:03:48:15:d6:4a:42:8b:30:2b:3c:f2:8b:d1:
b3:2a:85:ed:92:ab:d3:b4:29:10:87:54:97:9f:23:
81:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DC:2F:F0:50:F8:F8:1E:06:4B:10:6F:15:2D:12:91:70:2C:39:85
X509v3 Authority Key Identifier:
keyid:4B:72:2A:3A:67:93:BF:32:C9:BC:F5:2E:4E:77:2E:0A:6F:3A:63:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3IqOmeTvzLJvPUuTncuCm86Yxk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:9d:49:8f:72:07:6b:58:e7:72:80:8c:aa:8b:97:50:ab:29:
c5:16:fd:60:6e:0b:0d:d4:b4:cf:d4:6e:8a:dc:c6:34:73:f2:
fd:36:a0:8b:1d:c0:77:61:f5:ce:54:e4:42:25:33:1a:7e:89:
94:3a:32:2d:45:d3:01:88:dc:a4:42:68:f2:3a:29:4a:45:6b:
36:18:05:2b:0d:0d:ae:4d:c8:cc:63:3c:99:d1:4e:84:72:cb:
e4:38:31:e2:5f:cb:e5:0d:e3:cd:86:64:91:81:5b:4f:77:f2:
0d:c5:b9:a7:4b:d6:44:b0:ea:26:ff:ec:b3:9b:a4:7c:b8:85:
1d:e1:95:40:61:99:0d:30:91:56:98:98:7a:3b:17:6a:7b:96:
92:2e:7f:83:47:60:71:2c:53:5b:31:ea:ef:d5:ae:43:40:06:
d5:f5:3d:12:56:12:b9:97:22:19:96:68:7f:46:d5:a7:96:9a:
a8:23:24:ab:d8:60:43:3d:ea:e3:86:73:f3:af:58:26:08:5b:
cf:43:8d:14:5e:f0:8b:97:83:2d:95:51:f0:06:f9:9d:b9:62:
df:3b:6c:0f:8e:4d:68:84:77:7f:90:8c:fa:b7:40:55:7c:ca:
20:42:54:1b:5d:37:55:8d:66:f0:d2:a4:6b:c4:2f:56:82:8f:
48:f3:88:1e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0E2N0UxMTAvBgNVBAUTKDRCNzIyQTNBNjc5M0JGMzJDOUJDRjUyRTRFNzcyRTBB
NkYzQTYzMTkwHhcNMjUwMTMxMDM0NjM3WhcNMjUwMjA3MDM0NjM3WjAYMRYwFAYD
VQQDEw02NzljNDc5ZC0yNGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoLsDqO276/Ra7u11271U5wY1EoKsQdbvQ0r+XxMuCByLVFQ3o9BC1L5UHIEF
kbWn5Ay1eJwWmvif+6YBBWeekNWqR1jkVJDRJ75ULZq7jJepo9eg79svfJFwCbbX
GHib++dnOEE/Qu+5nLTYFe/qcqp+cI5O0pidknmUS8dRCB/FKSIsNfsMPlo4eRuv
V/m799bJLvBwb8ptr+2yRCmClLyApUDK+5HnsSzWRYAbNiNakhTXG5kfNcjrk9TF
N4dVgZv/ZjeL27EbeQPt1bGj6+kPZBvuhZcRy48ZAM8lHA11CANIFdZKQoswKzzy
i9GzKoXtkqvTtCkQh1SXnyOBCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDvcL/BQ
+PgeBksQbxUtEpFwLDmFMB8GA1UdIwQYMBaAFEtyKjpnk78yybz1Lk53LgpvOmMZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTY3RS82N0I0Q0I4NDFC
RDMxMUVFOTY1RkVGMzhDNEY5QUUwMi9TM0lxT21lVHZ6TEp2UFV1VG5jdUNtODZZ
eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1MzSXFPbWVUdnpMSnZQVXVUbmN1Q204Nll4ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QTY3RS82N0I0Q0I4NDFCRDMxMUVFOTY1RkVGMzhDNEY5QUUwMi9TM0lxT21lVHZ6
TEp2UFV1VG5jdUNtODZZeGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAVnUmPcgdrWOdygIyqi5dQqynFFv1gbgsN1LTP1G6K3MY0c/L9NqCL
HcB3YfXOVORCJTMafomUOjItRdMBiNykQmjyOilKRWs2GAUrDQ2uTcjMYzyZ0U6E
csvkODHiX8vlDePNhmSRgVtPd/INxbmnS9ZEsOom/+yzm6R8uIUd4ZVAYZkNMJFW
mJh6Oxdqe5aSLn+DR2BxLFNbMerv1a5DQAbV9T0SVhK5lyIZlmh/RtWnlpqoIySr
2GBDPerjhnPzr1gmCFvPQ40UXvCLl4MtlVHwBvmduWLfO2wPjk1ohHd/kIz6t0BV
fMogQlQbXTdVjWbw0qRrxC9Wgo9I84ge
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:57:54 2025 by rpki-client