Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft
File: n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft (raw, json)
Hash identifier: Afa99I7lZ8MjwHlOPxWD0Ze015iFscawmQsSYsZLh6Y=
Subject key identifier: EE:04:C7:02:61:68:C1:D7:34:2B:54:6E:FA:AC:F7:5F:91:9E:ED:BC
Authority key identifier: 9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB
Certificate issuer: /CN=A917D958/serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB
Certificate serial: 25
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft
Manifest number: 22
Signing time: Fri 31 Jan 2025 06:58:02 +0000
Manifest this update: Fri 31 Jan 2025 06:58:01 +0000
Manifest next update: Fri 07 Feb 2025 06:58:01 +0000
Files and hashes: 1: n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl (hash: APFPOh7ab8wV9yOzjRm1QTxBlB06uyYtE8gzR0Z7bw8=)
2: 0AC8BB74B5E211EFBEF4BC5AC4F9AE02.roa (hash: oV9dv3enUEk5QI7ZEWYNcHlwdjoeFV6bdPfVFfihoSE=)
3: 0A581522B5E211EFBEF4BC5AC4F9AE02.roa (hash: PxzOBVWe5yWGLa4iNAyNqYyPaQ/eMXGqSREN7aFVLso=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D958/serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB
Validity
Not Before: Jan 31 06:58:01 2025 GMT
Not After : Feb 7 06:58:01 2025 GMT
Subject: CN=679c747a-4ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b3:1a:e0:16:a6:31:1f:62:07:b6:a1:09:f8:
f4:8d:1a:8a:09:96:d9:06:4c:27:f1:2b:b6:c7:2a:
c5:f3:99:5c:28:5f:75:f5:e7:5f:18:a0:aa:6d:e8:
f7:7d:0a:74:29:bc:42:ee:5a:9e:77:ff:09:8e:e7:
3b:96:89:11:b1:ce:d0:fc:54:e9:ca:6e:ab:d7:e6:
32:d3:e9:8f:34:80:35:33:5b:c4:1c:b0:18:7f:1f:
10:cc:cc:be:80:a5:ed:e9:77:33:7d:f5:06:b6:93:
ac:66:3c:9c:5b:d2:fc:3e:77:d4:96:d7:8f:89:b0:
33:b2:45:ea:02:22:f0:b0:af:76:1b:14:20:8b:ce:
33:1a:c0:21:83:0c:1a:10:e6:3a:aa:53:c0:16:03:
6e:7a:97:07:05:9e:03:0e:10:4b:07:5f:dc:35:43:
5c:a3:e2:2a:85:05:92:d2:4a:13:c2:10:c2:11:ce:
a5:cc:43:70:62:a5:19:64:6f:e1:53:88:df:4f:63:
a5:21:9b:c6:87:f4:3e:2e:d7:4a:bf:78:b6:47:89:
10:50:12:a4:fa:e7:7e:55:9d:55:0b:ef:a0:14:4c:
8e:e2:2c:ff:5d:e7:8d:fe:c2:91:a0:96:23:16:d4:
ba:a2:89:c8:64:b2:f4:dd:37:20:8a:81:26:6b:98:
8e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:04:C7:02:61:68:C1:D7:34:2B:54:6E:FA:AC:F7:5F:91:9E:ED:BC
X509v3 Authority Key Identifier:
keyid:9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:0e:80:d6:0a:df:b1:64:af:7f:be:91:73:92:dc:13:27:13:
5e:2c:96:f3:ba:84:c7:04:bf:ff:13:6a:f8:46:4f:41:e0:60:
f0:1b:04:55:fe:75:5e:9a:1e:99:b9:37:6c:3f:59:b5:92:d6:
54:8b:c6:58:66:3f:66:4b:fc:3b:12:76:66:a8:a5:81:30:ce:
7a:d2:e0:b9:47:22:80:2d:f5:95:e2:19:9e:8c:89:30:fd:73:
19:9e:54:da:8f:37:57:22:75:76:5c:42:67:61:7d:f0:8c:ea:
4f:98:cd:3a:13:b6:d4:87:cd:56:aa:69:40:a2:fa:0e:8a:81:
32:d6:da:3d:df:85:93:2b:1e:ed:f3:98:0c:26:21:50:ef:b6:
31:b8:9d:9e:5d:66:ba:67:f2:32:fb:72:91:00:0a:f4:be:94:
cd:0b:4f:f7:9d:50:86:2d:7e:87:fd:40:df:28:98:34:6b:d2:
0e:fa:fc:f8:7d:78:c1:4b:8e:ba:1e:54:51:a2:c4:8d:62:cc:
2b:8a:36:5c:b2:e1:d6:03:de:69:ab:ef:9f:28:f9:50:24:77:
8d:63:eb:47:64:78:92:e2:02:db:e7:ec:9d:18:c1:94:38:9b:
d8:29:e5:61:a1:fe:8a:92:3d:d2:97:79:a8:8e:4b:e5:33:cb:
57:46:7e:5a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
RDk1ODExMC8GA1UEBRMoOUY0OTA2QzBENENDOTY0NUQ5QkZEOTMzNjRBMjNBNUEz
M0VGNThEQjAeFw0yNTAxMzEwNjU4MDFaFw0yNTAyMDcwNjU4MDFaMBgxFjAUBgNV
BAMTDTY3OWM3NDdhLTRjYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCysxrgFqYxH2IHtqEJ+PSNGooJltkGTCfxK7bHKsXzmVwoX3X1518YoKpt6Pd9
CnQpvELuWp53/wmO5zuWiRGxztD8VOnKbqvX5jLT6Y80gDUzW8QcsBh/HxDMzL6A
pe3pdzN99Qa2k6xmPJxb0vw+d9SW14+JsDOyReoCIvCwr3YbFCCLzjMawCGDDBoQ
5jqqU8AWA256lwcFngMOEEsHX9w1Q1yj4iqFBZLSShPCEMIRzqXMQ3BipRlkb+FT
iN9PY6Uhm8aH9D4u10q/eLZHiRBQEqT6535VnVUL76AUTI7iLP9d543+wpGgliMW
1LqiichksvTdNyCKgSZrmI5XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7gTHAmFo
wdc0K1Ru+qz3X5Ge7bwwHwYDVR0jBBgwFoAUn0kGwNTMlkXZv9kzZKI6WjPvWNsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdEOTU4LzY3MkRCMDQ4QjM5
QjExRUY4MEY2NDM1RUM0RjlBRTAyL24wa0d3TlRNbGtYWnY5a3paS0k2V2pQdldO
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvbjBrR3dOVE1sa1hadjlrelpLSTZXalB2V05zLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE
OTU4LzY3MkRCMDQ4QjM5QjExRUY4MEY2NDM1RUM0RjlBRTAyL24wa0d3TlRNbGtY
WnY5a3paS0k2V2pQdldOcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAH0OgNYK37Fkr3++kXOS3BMnE14slvO6hMcEv/8TavhGT0HgYPAbBFX+
dV6aHpm5N2w/WbWS1lSLxlhmP2ZL/DsSdmaopYEwznrS4LlHIoAt9ZXiGZ6MiTD9
cxmeVNqPN1cidXZcQmdhffCM6k+YzToTttSHzVaqaUCi+g6KgTLW2j3fhZMrHu3z
mAwmIVDvtjG4nZ5dZrpn8jL7cpEACvS+lM0LT/edUIYtfof9QN8omDRr0g76/Ph9
eMFLjroeVFGixI1izCuKNlyy4dYD3mmr758o+VAkd41j60dkeJLiAtvn7J0YwZQ4
m9gp5WGh/oqSPdKXeaiOS+Uzy1dGflo=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:24:54 2025 by rpki-client