Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft
File: GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft (raw, json)
Hash identifier: bJ6UbVryqz9fRJfcR6FtYb9moxsHCkFSFlWHhLWgh0Q=
Subject key identifier: F7:69:86:1D:AB:77:94:DE:9E:7F:DE:1B:FF:77:DF:36:E3:F9:53:66
Authority key identifier: 19:80:35:52:99:B6:C2:23:7B:42:35:00:0F:72:35:97:BF:EB:33:DA
Certificate issuer: /CN=A917B83F/serialNumber=1980355299B6C2237B4235000F723597BFEB33DA
Certificate serial: 14A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft
Manifest number: 149F
Signing time: Fri 31 Jan 2025 16:51:30 +0000
Manifest this update: Fri 31 Jan 2025 16:51:29 +0000
Manifest next update: Fri 07 Feb 2025 16:51:29 +0000
Files and hashes: 1: GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl (hash: ejfYUzXHT9jJAh5X8ngeFgfoqRcEDb6ugZfdy5YoI2s=)
2: 0964A56EF35511E8AC1ECA17C4F9AE02.roa (hash: ts6CuXT017m+Eo1tnvA5GQ371D5wqgoVWLN1l6w+WmY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5289 (0x14a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B83F/serialNumber=1980355299B6C2237B4235000F723597BFEB33DA
Validity
Not Before: Jan 31 16:51:29 2025 GMT
Not After : Feb 7 16:51:29 2025 GMT
Subject: CN=679cff91-571c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bc:98:72:8e:2f:df:e0:15:bd:b5:1c:a8:c0:
5d:1f:25:c1:c5:1a:ed:93:8c:aa:4e:69:7a:54:a7:
16:48:78:db:91:08:c4:b2:8e:b8:6f:a9:82:6f:0a:
6e:2d:79:e4:bb:a8:fa:83:be:46:a0:7c:ab:f0:9f:
f1:4f:97:0c:38:85:8b:3c:a4:4d:e0:c0:df:a1:c7:
1b:a6:ad:18:62:d8:6a:4f:0c:9e:d3:78:b7:cf:ca:
e6:ad:ff:ba:77:22:a4:a7:00:62:aa:e3:41:a5:c3:
54:1b:64:93:9c:6f:08:65:1a:a3:29:7d:ea:d8:71:
de:a8:0a:ed:29:07:80:09:00:a2:d9:b6:6d:dd:f2:
19:9d:f8:3d:4c:45:14:be:32:28:f2:8c:7b:f5:0e:
b7:48:10:7b:c2:c1:38:a3:44:e0:9c:19:d1:a5:90:
06:41:ca:08:29:7a:45:59:09:69:b5:cc:57:36:cf:
1b:ae:2a:d5:5a:41:1c:2e:97:1f:43:30:ed:35:0c:
62:35:a4:34:fe:ba:d8:27:a7:08:1c:12:7a:7a:a6:
5d:89:e2:0f:ff:dc:e2:18:b9:62:36:6b:fe:73:57:
fd:4a:17:41:37:4c:ed:b3:da:c5:2a:53:26:43:5f:
98:24:0a:e9:2f:dc:a0:4e:b4:9d:96:d5:5f:56:d3:
ea:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:69:86:1D:AB:77:94:DE:9E:7F:DE:1B:FF:77:DF:36:E3:F9:53:66
X509v3 Authority Key Identifier:
keyid:19:80:35:52:99:B6:C2:23:7B:42:35:00:0F:72:35:97:BF:EB:33:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:cb:03:c3:e4:b4:8e:fa:2b:2e:03:a8:fb:91:41:e2:ee:99:
2c:87:f0:de:04:1a:b4:29:39:de:30:b8:4b:11:7a:07:bb:46:
ce:38:91:f1:8c:8f:bd:ed:78:41:7c:34:91:5a:b9:57:ec:a4:
9b:74:46:b2:c9:2e:6f:96:7e:3b:06:31:62:2a:fe:16:05:b2:
c9:7d:39:29:e3:2d:a4:f4:d8:48:50:e7:40:70:70:9a:17:58:
2b:a2:d7:17:68:e8:c7:ce:dc:77:0d:15:bf:59:89:cf:f6:2b:
8a:2e:e8:c2:9e:de:4e:de:34:04:84:73:99:02:c9:9c:97:9a:
ec:03:cd:d8:0c:b2:89:8d:be:07:76:b3:54:33:89:cf:06:44:
5a:32:e7:36:56:0f:ba:21:47:8a:30:04:2c:14:98:d1:14:38:
87:55:44:3f:24:b6:76:ed:17:9e:2a:72:8d:5c:97:99:34:5f:
10:92:00:b9:43:94:07:e7:6e:22:5a:73:c4:70:9b:bb:04:2b:
8d:fe:15:26:d7:b0:93:51:4d:a3:d3:44:fa:03:a2:bb:20:56:
e8:85:d3:15:d9:41:c8:fd:fa:85:00:86:7b:68:2c:04:e5:9a:
c0:15:e5:46:d0:90:fc:66:f1:fe:ba:04:91:08:bb:00:46:df:
e1:a2:cf:cf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0I4M0YxMTAvBgNVBAUTKDE5ODAzNTUyOTlCNkMyMjM3QjQyMzUwMDBGNzIzNTk3
QkZFQjMzREEwHhcNMjUwMTMxMTY1MTI5WhcNMjUwMjA3MTY1MTI5WjAYMRYwFAYD
VQQDEw02NzljZmY5MS01NzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu7yYco4v3+AVvbUcqMBdHyXBxRrtk4yqTml6VKcWSHjbkQjEso64b6mCbwpu
LXnku6j6g75GoHyr8J/xT5cMOIWLPKRN4MDfoccbpq0YYthqTwye03i3z8rmrf+6
dyKkpwBiquNBpcNUG2STnG8IZRqjKX3q2HHeqArtKQeACQCi2bZt3fIZnfg9TEUU
vjIo8ox79Q63SBB7wsE4o0TgnBnRpZAGQcoIKXpFWQlptcxXNs8brirVWkEcLpcf
QzDtNQxiNaQ0/rrYJ6cIHBJ6eqZdieIP/9ziGLliNmv+c1f9ShdBN0zts9rFKlMm
Q1+YJArpL9ygTrSdltVfVtPqCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPdphh2r
d5Tenn/eG/933zbj+VNmMB8GA1UdIwQYMBaAFBmANVKZtsIje0I1AA9yNZe/6zPa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjgzRi8zREIzREJFQTU1
NEYxMUU4OUJDMkU4NTdDNEY5QUUwMi9HWUExVXBtMndpTjdRalVBRDNJMWw3X3JN
OW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dZQTFVcG0yd2lON1FqVUFEM0kxbDdfck05by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QjgzRi8zREIzREJFQTU1NEYxMUU4OUJDMkU4NTdDNEY5QUUwMi9HWUExVXBtMndp
TjdRalVBRDNJMWw3X3JNOW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQClywPD5LSO+isuA6j7kUHi7pksh/DeBBq0KTneMLhLEXoHu0bOOJHx
jI+97XhBfDSRWrlX7KSbdEayyS5vln47BjFiKv4WBbLJfTkp4y2k9NhIUOdAcHCa
F1grotcXaOjHztx3DRW/WYnP9iuKLujCnt5O3jQEhHOZAsmcl5rsA83YDLKJjb4H
drNUM4nPBkRaMuc2Vg+6IUeKMAQsFJjRFDiHVUQ/JLZ27ReeKnKNXJeZNF8QkgC5
Q5QH524iWnPEcJu7BCuN/hUm17CTUU2j00T6A6K7IFbohdMV2UHI/fqFAIZ7aCwE
5ZrAFeVG0JD8ZvH+ugSRCLsARt/hos/P
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:56:15 2025 by rpki-client