Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft
File: sFVxc6AI1veMbl5rQPjcB5qN9l8.mft (raw, json)
Hash identifier: 7+ti5FsjSAaGcnh+zKe0oMUcTdi8ebiZ7V+YjhOUkjQ=
Subject key identifier: F8:45:77:1B:A1:29:F1:DD:54:CC:A0:4A:BB:12:83:41:87:31:D6:E7
Authority key identifier: B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F
Certificate issuer: /CN=A917DDD6/serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F
Certificate serial: 12E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft
Manifest number: 12DF
Signing time: Fri 31 Jan 2025 17:03:17 +0000
Manifest this update: Fri 31 Jan 2025 17:03:17 +0000
Manifest next update: Fri 07 Feb 2025 17:03:17 +0000
Files and hashes: 1: sFVxc6AI1veMbl5rQPjcB5qN9l8.crl (hash: 8wOxmylPJ4ap35oEQOeBer+J64HdhtdcPQGuPJNQO0k=)
2: B9629D3258D611ED86C99945C4F9AE02.roa (hash: t9IbQoMRsiWsCorQ3w0qnfUpx5CDVs1SA9baB681Ybk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4841 (0x12e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DDD6/serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F
Validity
Not Before: Jan 31 17:03:17 2025 GMT
Not After : Feb 7 17:03:17 2025 GMT
Subject: CN=679d0255-d6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9a:94:c8:d3:10:74:2d:a1:89:fe:62:fc:d9:
0f:be:7f:75:2b:d8:d3:b0:ac:9f:92:d8:d4:ab:cc:
e1:58:7a:39:d0:fa:61:59:71:89:9e:84:07:d6:2f:
ab:eb:4b:68:bf:c2:b2:f7:2e:38:a0:65:5a:14:5e:
3e:64:ac:0d:01:d2:8f:0b:59:47:88:f7:cf:be:49:
11:1b:82:5a:55:de:04:89:88:31:60:83:34:9e:e4:
60:9a:00:9c:0a:d6:e5:c0:08:1e:c5:f5:50:95:53:
11:27:a1:2b:58:dd:30:e0:fe:f2:ea:ee:30:0e:62:
8f:32:ac:79:1e:03:56:4c:d8:84:92:78:c9:dd:5c:
e4:c6:db:41:85:d9:0c:44:c6:3f:9c:08:c8:81:4b:
86:dd:e0:70:84:40:9b:6f:d9:86:ff:bb:2b:34:dd:
57:c0:61:45:f1:43:64:2a:40:4e:e0:e2:ab:ef:d7:
8d:74:82:0b:42:7e:4e:af:5a:96:94:f1:69:bb:49:
4e:31:8c:12:1b:a5:1f:6a:10:77:34:17:ff:40:61:
ce:bd:2f:6d:85:1b:c9:53:06:51:eb:72:de:bd:5a:
19:e7:a9:6b:cd:c6:f3:e8:d5:f4:8b:9a:e1:27:33:
bb:a8:cf:5d:4e:7e:5f:45:de:ee:99:a8:32:fa:3b:
62:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:45:77:1B:A1:29:F1:DD:54:CC:A0:4A:BB:12:83:41:87:31:D6:E7
X509v3 Authority Key Identifier:
keyid:B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:0d:1f:12:09:22:3d:63:c1:4d:31:3e:e2:8e:84:6b:6b:f2:
cf:92:b8:23:15:66:20:c4:b7:bc:af:2b:86:aa:3d:55:5a:01:
a3:39:ed:f4:b5:6e:6f:3e:70:a5:36:c8:58:ec:d7:0e:db:48:
f3:c1:11:58:c9:22:38:b4:1b:aa:da:6d:54:3a:b7:de:b0:6d:
a1:6e:e4:8c:21:13:36:99:ad:cb:aa:b3:ee:a2:f0:8a:cd:9a:
0d:51:30:18:e5:7b:8f:c8:59:26:3a:40:fe:c3:ae:b6:41:87:
05:c9:a5:1c:34:fd:53:6e:37:89:83:1b:5d:1c:94:d3:e5:9d:
0d:18:7c:9c:31:47:c7:b5:59:2d:bd:9d:1d:ec:7e:0d:9d:05:
39:64:cb:c1:d1:75:58:f6:a1:ba:42:25:df:ad:6c:b7:b7:d5:
1a:14:4b:2a:f0:05:a1:ed:ef:61:d0:d2:3d:67:82:b3:0a:16:
20:4f:14:c4:ce:95:50:9f:13:75:ab:4e:9a:67:40:de:45:ef:
ac:58:61:1e:0a:3e:a5:0c:8a:07:24:89:fe:58:27:a7:ac:1a:
44:ff:3e:6c:87:06:60:ac:69:65:8a:ce:ae:bf:90:b9:99:25:
48:ba:33:9a:7e:e8:01:f1:5c:f1:91:1c:2a:ae:5a:d4:cd:78:
1d:3f:f2:23
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0RERDYxMTAvBgNVBAUTKEIwNTU3MTczQTAwOEQ2Rjc4QzZFNUU2QjQwRjhEQzA3
OUE4REY2NUYwHhcNMjUwMTMxMTcwMzE3WhcNMjUwMjA3MTcwMzE3WjAYMRYwFAYD
VQQDEw02NzlkMDI1NS1kNmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxJqUyNMQdC2hif5i/NkPvn91K9jTsKyfktjUq8zhWHo50PphWXGJnoQH1i+r
60tov8Ky9y44oGVaFF4+ZKwNAdKPC1lHiPfPvkkRG4JaVd4EiYgxYIM0nuRgmgCc
CtblwAgexfVQlVMRJ6ErWN0w4P7y6u4wDmKPMqx5HgNWTNiEknjJ3VzkxttBhdkM
RMY/nAjIgUuG3eBwhECbb9mG/7srNN1XwGFF8UNkKkBO4OKr79eNdIILQn5Or1qW
lPFpu0lOMYwSG6UfahB3NBf/QGHOvS9thRvJUwZR63LevVoZ56lrzcbz6NX0i5rh
JzO7qM9dTn5fRd7umagy+jti9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhFdxuh
KfHdVMygSrsSg0GHMdbnMB8GA1UdIwQYMBaAFLBVcXOgCNb3jG5ea0D43AeajfZf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RERENi9FNTM0N0IxQ0FE
MjAxMUU4QkE5RDk1MUFDNEY5QUUwMi9zRlZ4YzZBSTF2ZU1ibDVyUVBqY0I1cU45
bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NGVnhjNkFJMXZlTWJsNXJRUGpjQjVxTjlsOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RERENi9FNTM0N0IxQ0FEMjAxMUU4QkE5RDk1MUFDNEY5QUUwMi9zRlZ4YzZBSTF2
ZU1ibDVyUVBqY0I1cU45bDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC8DR8SCSI9Y8FNMT7ijoRra/LPkrgjFWYgxLe8ryuGqj1VWgGjOe30
tW5vPnClNshY7NcO20jzwRFYySI4tBuq2m1UOrfesG2hbuSMIRM2ma3LqrPuovCK
zZoNUTAY5XuPyFkmOkD+w662QYcFyaUcNP1TbjeJgxtdHJTT5Z0NGHycMUfHtVkt
vZ0d7H4NnQU5ZMvB0XVY9qG6QiXfrWy3t9UaFEsq8AWh7e9h0NI9Z4KzChYgTxTE
zpVQnxN1q06aZ0DeRe+sWGEeCj6lDIoHJIn+WCenrBpE/z5shwZgrGllis6uv5C5
mSVIujOafugB8VzxkRwqrlrUzXgdP/Ij
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:31:34 2025 by rpki-client