Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft
File: g2LSOGrBMH7vi7_YdPc45tqjVXI.mft (raw, json)
Hash identifier: wBMXaOC0yEXgTmik/o+lQniXQh5P6kqiHilQaAVTFbI=
Subject key identifier: 95:EF:FB:5F:D3:4D:60:01:94:78:C9:74:7A:7C:62:36:75:00:A6:F7
Authority key identifier: 83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72
Certificate issuer: /CN=A917C0F5/serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572
Certificate serial: 0CDF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft
Manifest number: 0CD9
Signing time: Fri 31 Jan 2025 18:04:00 +0000
Manifest this update: Fri 31 Jan 2025 18:04:00 +0000
Manifest next update: Fri 07 Feb 2025 18:04:00 +0000
Files and hashes: 1: g2LSOGrBMH7vi7_YdPc45tqjVXI.crl (hash: pbZsPTP7OftKrObZMI98vS4AiydxJtSZJGWUHe/2vlw=)
2: D11C8B12DB7111E981104A54C4F9AE02.roa (hash: he3bY6Is5h9acipgiTdJz3mt+8HdFzcITDRaeiCVzu8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3295 (0xcdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C0F5/serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572
Validity
Not Before: Jan 31 18:04:00 2025 GMT
Not After : Feb 7 18:04:00 2025 GMT
Subject: CN=679d1090-98af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3a:9f:97:b0:92:dc:1a:00:3b:2c:42:39:8c:
ce:ab:6b:e7:1a:c4:7a:46:43:64:08:d1:f9:fa:38:
24:b0:aa:49:1d:00:fd:13:15:a8:86:52:e5:4d:59:
08:11:44:b7:08:b8:ba:96:fe:41:ba:48:f7:29:99:
52:09:99:d9:44:35:c3:18:34:2d:a5:4e:c0:3b:78:
65:2e:d6:74:0b:aa:97:aa:bb:2d:26:bc:f8:f1:3a:
f7:ab:3e:7a:78:34:b8:13:5f:2b:3d:a3:04:9e:96:
f6:0c:d8:ba:b4:92:f3:be:8b:df:15:9d:d5:13:c3:
99:6c:70:e0:53:53:9a:3f:5e:a3:a4:d3:98:bd:18:
ee:6d:1c:54:80:38:3d:e4:d6:12:17:c3:f9:f0:a0:
ed:0b:6b:3e:49:d0:bf:aa:b0:83:00:a4:20:de:c3:
6e:94:67:b6:c2:18:63:a1:d9:bf:3b:bc:99:c7:cc:
f5:fe:52:ba:f9:26:c9:0d:61:bf:e2:a3:59:a7:09:
17:a6:a6:cb:7c:bf:49:7c:cb:43:e3:3a:b1:bb:9f:
b7:87:c4:89:14:95:49:3f:42:c3:f4:cc:73:fd:a6:
a3:90:ac:01:8e:e5:2a:53:43:27:20:a3:18:c2:0a:
62:bb:11:57:60:9b:7e:4a:eb:7c:26:b0:06:25:9d:
66:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EF:FB:5F:D3:4D:60:01:94:78:C9:74:7A:7C:62:36:75:00:A6:F7
X509v3 Authority Key Identifier:
keyid:83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ec:c9:32:4b:75:dc:b1:66:64:94:5b:44:91:cd:f6:53:ea:
c5:7a:5c:f9:4b:46:65:b3:50:5c:8c:e7:fd:bd:c1:70:e7:db:
59:de:b5:55:d3:72:c3:ee:7c:b3:33:92:90:f2:69:a2:71:a7:
74:9f:51:94:06:5a:7a:b5:e2:1c:93:7a:f1:57:b3:aa:e2:d0:
b8:ec:9d:43:60:95:37:88:d3:5f:c8:3d:a1:68:d0:ef:36:e8:
26:f1:bd:36:c4:fd:f8:6b:4c:af:5c:5f:2f:59:f1:e4:87:68:
91:6f:1d:c6:fe:ca:f4:af:91:86:50:ab:c2:bf:d3:b5:59:6d:
c2:61:4b:60:78:9e:82:5f:0f:ff:a2:93:82:86:b0:ae:fe:48:
d5:40:33:e4:de:44:93:68:62:ee:de:28:bb:65:3b:e3:fb:e5:
32:7a:3f:1f:c3:4a:db:59:71:d1:a0:b4:7b:10:32:25:72:21:
e9:d9:ab:42:0a:dc:45:78:d8:96:80:72:b1:f3:24:1d:ec:d8:
c9:9d:00:f1:d8:f0:ce:54:23:a3:26:60:7d:0d:b7:7f:2f:29:
d0:53:11:c8:4e:41:4e:90:e2:78:74:49:bf:af:40:a6:6a:63:
12:71:1f:33:36:f5:84:fe:8a:05:b2:5f:4e:f7:b0:59:8e:52:
0a:41:3b:e3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0MwRjUxMTAvBgNVBAUTKDgzNjJEMjM4NkFDMTMwN0VFRjhCQkZEODc0RjczOEU2
REFBMzU1NzIwHhcNMjUwMTMxMTgwNDAwWhcNMjUwMjA3MTgwNDAwWjAYMRYwFAYD
VQQDEw02NzlkMTA5MC05OGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArDqfl7CS3BoAOyxCOYzOq2vnGsR6RkNkCNH5+jgksKpJHQD9ExWohlLlTVkI
EUS3CLi6lv5Bukj3KZlSCZnZRDXDGDQtpU7AO3hlLtZ0C6qXqrstJrz48Tr3qz56
eDS4E18rPaMEnpb2DNi6tJLzvovfFZ3VE8OZbHDgU1OaP16jpNOYvRjubRxUgDg9
5NYSF8P58KDtC2s+SdC/qrCDAKQg3sNulGe2whhjodm/O7yZx8z1/lK6+SbJDWG/
4qNZpwkXpqbLfL9JfMtD4zqxu5+3h8SJFJVJP0LD9Mxz/aajkKwBjuUqU0MnIKMY
wgpiuxFXYJt+Sut8JrAGJZ1mmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJXv+1/T
TWABlHjJdHp8YjZ1AKb3MB8GA1UdIwQYMBaAFINi0jhqwTB+74u/2HT3OObao1Vy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzBGNS8xRUM0RTA5QURC
NzExMUU5QjYxMDUzNTNDNEY5QUUwMi9nMkxTT0dyQk1IN3ZpN19ZZFBjNDV0cWpW
WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2cyTFNPR3JCTUg3dmk3X1lkUGM0NXRxalZYSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QzBGNS8xRUM0RTA5QURCNzExMUU5QjYxMDUzNTNDNEY5QUUwMi9nMkxTT0dyQk1I
N3ZpN19ZZFBjNDV0cWpWWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAc7MkyS3XcsWZklFtEkc32U+rFelz5S0Zls1BcjOf9vcFw59tZ3rVV
03LD7nyzM5KQ8mmicad0n1GUBlp6teIck3rxV7Oq4tC47J1DYJU3iNNfyD2haNDv
Nugm8b02xP34a0yvXF8vWfHkh2iRbx3G/sr0r5GGUKvCv9O1WW3CYUtgeJ6CXw//
opOChrCu/kjVQDPk3kSTaGLu3ii7ZTvj++Uyej8fw0rbWXHRoLR7EDIlciHp2atC
CtxFeNiWgHKx8yQd7NjJnQDx2PDOVCOjJmB9Dbd/LynQUxHITkFOkOJ4dEm/r0Cm
amMScR8zNvWE/ooFsl9O97BZjlIKQTvj
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:07:42 2025 by rpki-client