Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft
File: Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft (raw, json)
Hash identifier: jnOm6Jrv6OE+E5gb/jIzhzw2WvXZiobWeuHsfbe/6pg=
Subject key identifier: 23:EB:5E:2E:32:E2:99:F2:69:0B:E0:A5:BE:5E:25:22:B0:EB:E8:4D
Authority key identifier: 17:0E:9C:76:76:43:C3:C1:F6:05:79:40:86:48:A3:F0:DA:84:04:5A
Certificate issuer: /CN=A917EFB8/serialNumber=170E9C767643C3C1F60579408648A3F0DA84045A
Certificate serial: 3454
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft
Manifest number: 344E
Signing time: Fri 31 Jan 2025 14:51:11 +0000
Manifest this update: Fri 31 Jan 2025 14:51:10 +0000
Manifest next update: Fri 07 Feb 2025 14:51:10 +0000
Files and hashes: 1: Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl (hash: tj3LPDrQMWQBS8dLs9Ye3Fh7W2ImadhxPCLUk1huLi4=)
2: E68E0FD4077B11EB98CA5D1CC4F9AE02.roa (hash: uVTYtUHXjzvA/dK6fjacM7pKV07g+NehzxqIMydfuDY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13396 (0x3454)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EFB8/serialNumber=170E9C767643C3C1F60579408648A3F0DA84045A
Validity
Not Before: Jan 31 14:51:10 2025 GMT
Not After : Feb 7 14:51:10 2025 GMT
Subject: CN=679ce35e-a7b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:80:55:ac:cd:28:ad:03:28:f6:68:e8:3b:7f:
59:bf:31:ee:d0:38:a6:57:7e:32:5b:2d:b7:97:b1:
bd:c1:a5:c6:87:fc:60:91:6e:33:58:3d:dd:7c:18:
55:a6:c5:5c:19:bf:64:e9:27:18:21:51:e3:d9:c5:
bd:d1:05:8d:b5:52:2c:a5:5f:14:49:c7:46:fe:c1:
44:98:3c:6d:d1:fe:fa:9b:9b:71:3b:8c:ee:cc:c1:
c0:de:ad:61:68:4e:94:70:0b:9f:ec:68:2d:82:37:
2b:7a:b6:0a:bf:90:ec:fb:f8:c6:e3:63:bb:d9:53:
ae:35:68:01:21:41:85:1d:dc:a1:c6:02:85:ba:df:
78:f7:df:11:c8:6d:cc:54:a5:b8:06:ee:04:1b:22:
5f:d6:1b:57:fb:8a:93:c5:5b:a0:67:c8:24:5d:fd:
b3:42:70:f6:4a:a3:0f:9b:30:3b:9f:d8:f6:8c:2e:
88:ba:8b:64:0e:d8:83:44:2c:04:41:81:9b:c9:8d:
69:85:23:ae:09:c5:31:82:ec:03:78:03:24:61:67:
75:fe:09:41:78:a7:a0:c4:c7:95:15:97:16:d5:85:
f7:1a:56:88:0f:79:50:92:47:ba:86:49:c5:52:ef:
6c:25:b8:95:96:a8:aa:27:78:8a:1f:b3:c5:ae:16:
12:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EB:5E:2E:32:E2:99:F2:69:0B:E0:A5:BE:5E:25:22:B0:EB:E8:4D
X509v3 Authority Key Identifier:
keyid:17:0E:9C:76:76:43:C3:C1:F6:05:79:40:86:48:A3:F0:DA:84:04:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:3b:04:1b:aa:29:4b:d9:c7:f0:d5:c4:1a:16:fb:3b:bb:b6:
dc:e4:39:9b:97:f5:a4:1b:6e:9c:da:b5:f6:af:c0:4f:e6:fc:
a8:44:cb:27:d6:10:a3:9f:03:8b:14:99:78:3c:55:7a:96:3a:
e3:cc:2c:1e:c0:5e:9c:c5:26:8e:6e:fe:e0:aa:7a:13:9c:6a:
8e:02:e8:78:18:58:5e:1d:01:be:9b:55:c6:10:ff:69:f0:b0:
2d:05:de:17:82:48:35:c5:30:09:6b:52:39:34:7d:3b:2d:b7:
9f:54:f1:a4:ca:b2:2e:8b:d2:92:4a:1e:6f:17:16:62:be:ea:
74:a8:62:4d:b2:28:2c:32:24:50:f8:7e:22:08:7d:a6:68:ad:
e0:46:53:fa:f3:7c:95:ad:d7:b8:6c:c4:31:58:48:12:f9:dd:
30:ce:3a:76:93:ef:58:ad:80:cf:82:8d:1f:14:1e:cd:b4:b1:
89:8e:e5:a3:0a:d7:eb:c6:81:05:3d:36:16:77:6e:f9:76:d5:
b2:61:7b:84:38:2a:49:db:03:04:6e:8c:de:d7:13:6a:91:82:
b9:34:85:02:e6:32:8c:f9:4c:3b:0c:d5:82:14:bd:63:d2:42:
ec:ab:c2:eb:df:65:be:84:66:a2:68:be:d6:19:01:f3:29:a3:
df:17:bb:ff
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VGQjgxMTAvBgNVBAUTKDE3MEU5Qzc2NzY0M0MzQzFGNjA1Nzk0MDg2NDhBM0Yw
REE4NDA0NUEwHhcNMjUwMTMxMTQ1MTEwWhcNMjUwMjA3MTQ1MTEwWjAYMRYwFAYD
VQQDEw02NzljZTM1ZS1hN2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA24BVrM0orQMo9mjoO39ZvzHu0DimV34yWy23l7G9waXGh/xgkW4zWD3dfBhV
psVcGb9k6ScYIVHj2cW90QWNtVIspV8UScdG/sFEmDxt0f76m5txO4zuzMHA3q1h
aE6UcAuf7GgtgjcrerYKv5Ds+/jG42O72VOuNWgBIUGFHdyhxgKFut94998RyG3M
VKW4Bu4EGyJf1htX+4qTxVugZ8gkXf2zQnD2SqMPmzA7n9j2jC6IuotkDtiDRCwE
QYGbyY1phSOuCcUxguwDeAMkYWd1/glBeKegxMeVFZcW1YX3GlaID3lQkke6hknF
Uu9sJbiVlqiqJ3iKH7PFrhYSDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCPrXi4y
4pnyaQvgpb5eJSKw6+hNMB8GA1UdIwQYMBaAFBcOnHZ2Q8PB9gV5QIZIo/DahARa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUZCOC9EOTgwQTE3MjFE
OTUxMUUyOTIxNTBFN0UwOEIwMkNEMi9GdzZjZG5aRHc4SDJCWGxBaGtpajhOcUVC
Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Z3NmNkblpEdzhIMkJYbEFoa2lqOE5xRUJGby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RUZCOC9EOTgwQTE3MjFEOTUxMUUyOTIxNTBFN0UwOEIwMkNEMi9GdzZjZG5aRHc4
SDJCWGxBaGtpajhOcUVCRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQClOwQbqilL2cfw1cQaFvs7u7bc5Dmbl/WkG26c2rX2r8BP5vyoRMsn
1hCjnwOLFJl4PFV6ljrjzCwewF6cxSaObv7gqnoTnGqOAuh4GFheHQG+m1XGEP9p
8LAtBd4Xgkg1xTAJa1I5NH07LbefVPGkyrIui9KSSh5vFxZivup0qGJNsigsMiRQ
+H4iCH2maK3gRlP683yVrde4bMQxWEgS+d0wzjp2k+9YrYDPgo0fFB7NtLGJjuWj
CtfrxoEFPTYWd275dtWyYXuEOCpJ2wMEboze1xNqkYK5NIUC5jKM+Uw7DNWCFL1j
0kLsq8Lr32W+hGaiaL7WGQHzKaPfF7v/
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:30:42 2025 by rpki-client