Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft
File: 0aHv0iQTWusJg56ovbjNxZnOZX8.mft (raw, json)
Hash identifier: RN/5UPwIO02KmwfjcozvQyF8N5WphcxQpBBS76mraQk=
Subject key identifier: 1A:6D:D2:A2:95:0A:62:CC:87:01:E0:2A:7D:10:EC:84:65:C0:FB:49
Authority key identifier: D1:A1:EF:D2:24:13:5A:EB:09:83:9E:A8:BD:B8:CD:C5:99:CE:65:7F
Certificate issuer: /CN=A917D9FC/serialNumber=D1A1EFD224135AEB09839EA8BDB8CDC599CE657F
Certificate serial: 044F
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0aHv0iQTWusJg56ovbjNxZnOZX8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft
Manifest number: 044B
Signing time: Fri 31 Jan 2025 16:34:04 +0000
Manifest this update: Fri 31 Jan 2025 16:34:03 +0000
Manifest next update: Fri 07 Feb 2025 16:34:03 +0000
Files and hashes: 1: 0aHv0iQTWusJg56ovbjNxZnOZX8.crl (hash: s4FFOp4HazZqhdhzjR6ZvRIrzmBFGzJ/iS+JwMaHhvE=)
2: AD94C92242BA11ECB1E8FF11C4F9AE02.roa (hash: pu6dJPh07UcYd+mIMy5+Y6mbrncfU/s+tKgupfIo1HM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1103 (0x44f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D9FC/serialNumber=D1A1EFD224135AEB09839EA8BDB8CDC599CE657F
Validity
Not Before: Jan 31 16:34:03 2025 GMT
Not After : Feb 7 16:34:03 2025 GMT
Subject: CN=679cfb7b-c9d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8e:b6:0d:9d:21:79:84:60:04:4d:83:60:81:
6c:1d:b0:a2:d6:9c:50:e9:d2:87:9b:66:22:69:a4:
86:8b:77:4d:84:e5:6e:e4:39:a2:2b:58:ce:81:e9:
ad:e9:7e:e4:ae:e9:c5:75:e1:56:e1:cf:eb:fe:85:
1f:46:bf:01:5b:bf:0b:9a:f9:bb:b8:b2:3b:f2:7c:
6a:35:44:bb:ec:22:20:f3:bd:4f:11:9e:bc:3d:fd:
f2:27:cb:fe:d9:46:e3:da:18:35:35:93:b6:80:d0:
7b:cf:bf:91:9a:ab:fc:8b:6a:e3:9e:9d:34:f7:06:
71:a2:5f:48:ee:fb:13:3d:b4:fb:59:91:7b:2f:b0:
c7:d0:21:ad:93:9d:da:0f:34:1a:06:f9:4d:bb:5b:
16:17:55:85:c9:98:30:5d:4d:c9:02:25:53:d8:5b:
13:80:f6:b0:3d:0d:bf:12:a1:39:4d:82:c1:78:2f:
1c:3f:7c:16:04:ee:d2:4d:97:69:2a:88:2c:8c:0d:
9e:8b:6e:ae:2d:51:5f:01:20:e2:4c:e7:16:f2:22:
d6:0f:ac:74:96:84:89:2b:97:1c:81:0f:6d:e3:42:
ba:4c:16:ad:19:69:3d:2c:bd:f1:a5:2e:cc:87:11:
73:14:fa:46:47:07:18:30:7b:fa:a8:c6:6d:00:0c:
06:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6D:D2:A2:95:0A:62:CC:87:01:E0:2A:7D:10:EC:84:65:C0:FB:49
X509v3 Authority Key Identifier:
keyid:D1:A1:EF:D2:24:13:5A:EB:09:83:9E:A8:BD:B8:CD:C5:99:CE:65:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0aHv0iQTWusJg56ovbjNxZnOZX8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:0a:0d:3e:ef:29:1c:a4:08:48:e7:a5:24:20:f0:96:9d:59:
c5:59:38:fa:60:4f:2d:3f:1b:ba:e3:b3:86:50:26:f8:cc:e9:
e1:16:d3:8c:9c:3b:ae:56:7c:78:bd:96:c5:7e:44:36:c9:1f:
b9:d1:ee:77:cc:0d:37:18:e9:5e:af:23:fd:e2:b7:d8:60:66:
90:d3:4d:33:f1:13:3a:3c:66:45:c2:50:80:5e:d9:e7:2f:0b:
65:ec:7a:00:3b:f6:ac:8c:e7:a2:d5:45:68:f9:a8:c1:db:28:
96:86:45:5d:a6:91:76:6c:62:7a:f8:9d:fb:3c:23:4e:7c:f8:
06:bc:95:58:82:58:a5:32:8f:ed:c7:2c:d1:6a:ff:18:37:d8:
fd:9b:0e:63:c5:fe:b2:ce:e2:f4:9e:d6:d2:f0:37:71:50:b5:
28:fc:39:63:68:3c:8f:ae:05:b4:dd:32:10:c0:94:8b:c7:57:
7d:0b:1b:bf:4d:c2:4f:dc:77:46:ae:70:10:42:b3:2a:a5:ab:
f4:2c:98:0b:a5:86:0f:66:f6:b0:64:6d:ad:8f:c0:c2:46:1a:
3b:01:11:2c:74:5b:38:e4:f4:5c:08:f8:cc:58:66:d5:72:d2:
a5:81:35:71:48:9c:8f:50:cc:e2:a0:40:79:e7:7b:7b:aa:5a:
1a:f9:61:dd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0Q5RkMxMTAvBgNVBAUTKEQxQTFFRkQyMjQxMzVBRUIwOTgzOUVBOEJEQjhDREM1
OTlDRTY1N0YwHhcNMjUwMTMxMTYzNDAzWhcNMjUwMjA3MTYzNDAzWjAYMRYwFAYD
VQQDEw02NzljZmI3Yi1jOWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv462DZ0heYRgBE2DYIFsHbCi1pxQ6dKHm2YiaaSGi3dNhOVu5DmiK1jOgemt
6X7krunFdeFW4c/r/oUfRr8BW78Lmvm7uLI78nxqNUS77CIg871PEZ68Pf3yJ8v+
2Ubj2hg1NZO2gNB7z7+Rmqv8i2rjnp009wZxol9I7vsTPbT7WZF7L7DH0CGtk53a
DzQaBvlNu1sWF1WFyZgwXU3JAiVT2FsTgPawPQ2/EqE5TYLBeC8cP3wWBO7STZdp
KogsjA2ei26uLVFfASDiTOcW8iLWD6x0loSJK5ccgQ9t40K6TBatGWk9LL3xpS7M
hxFzFPpGRwcYMHv6qMZtAAwGowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpt0qKV
CmLMhwHgKn0Q7IRlwPtJMB8GA1UdIwQYMBaAFNGh79IkE1rrCYOeqL24zcWZzmV/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDlGQy83QTMwMkQwMDQy
QjExMUVDOUYyNEEwNkVDNEY5QUUwMi8wYUh2MGlRVFd1c0pnNTZvdmJqTnhabk9a
WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzBhSHYwaVFUV3VzSmc1Nm92YmpOeFpuT1pYOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RDlGQy83QTMwMkQwMDQyQjExMUVDOUYyNEEwNkVDNEY5QUUwMi8wYUh2MGlRVFd1
c0pnNTZvdmJqTnhabk9aWDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBLCg0+7ykcpAhI56UkIPCWnVnFWTj6YE8tPxu647OGUCb4zOnhFtOM
nDuuVnx4vZbFfkQ2yR+50e53zA03GOleryP94rfYYGaQ000z8RM6PGZFwlCAXtnn
Lwtl7HoAO/asjOei1UVo+ajB2yiWhkVdppF2bGJ6+J37PCNOfPgGvJVYglilMo/t
xyzRav8YN9j9mw5jxf6yzuL0ntbS8DdxULUo/DljaDyPrgW03TIQwJSLx1d9Cxu/
TcJP3HdGrnAQQrMqpav0LJgLpYYPZvawZG2tj8DCRho7AREsdFs45PRcCPjMWGbV
ctKlgTVxSJyPUMzioEB553t7qloa+WHd
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:00:41 2025 by rpki-client