Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft
File: MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft (raw, json)
Hash identifier: bJ1EPwnTocbp0XqqeiKL33JLh3/CbZtm7cIZpdoHEjo=
Subject key identifier: D3:A0:DC:27:39:FD:E3:C7:BB:9B:A1:ED:DC:BA:CA:BD:31:79:CA:C8
Authority key identifier: 32:15:C5:51:6A:FB:54:D8:E6:12:D1:EC:3D:51:82:D3:21:E5:31:71
Certificate issuer: /CN=A9180127/serialNumber=3215C5516AFB54D8E612D1EC3D5182D321E53171
Certificate serial: 0100
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft
Manifest number: FE
Signing time: Fri 31 Jan 2025 04:14:09 +0000
Manifest this update: Fri 31 Jan 2025 04:14:08 +0000
Manifest next update: Fri 07 Feb 2025 04:14:08 +0000
Files and hashes: 1: MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl (hash: A21uoMQmhWjQBtHhe7f/10S9RZZnZIa2C7Lh91sQgnU=)
2: 0404E7B2672911EE9967640AC4F9AE02.roa (hash: 5vjFNwdorZQHn2sdj7sTYCMmbYEOY9pH8kC5XApbLFw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256 (0x100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180127/serialNumber=3215C5516AFB54D8E612D1EC3D5182D321E53171
Validity
Not Before: Jan 31 04:14:08 2025 GMT
Not After : Feb 7 04:14:08 2025 GMT
Subject: CN=679c4e11-4d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4a:70:69:f2:8e:01:95:83:1f:d5:96:ee:f1:
ed:fb:d9:4e:df:24:ff:d2:22:a2:37:48:2b:1d:7c:
ad:65:b6:5e:e2:73:10:7d:a7:c1:8c:ee:eb:12:31:
f8:04:35:61:e7:58:72:71:f6:df:55:21:5a:c1:06:
40:b5:7b:97:96:0a:b1:87:43:9d:22:ed:b6:67:2f:
7c:21:a5:3e:fb:5a:54:e2:00:01:50:12:e1:e0:e1:
78:e3:3d:85:e9:24:1d:d5:3e:c5:a3:56:d8:73:7c:
f1:66:c1:34:91:6d:b7:2e:70:7c:4f:a9:7d:b5:82:
51:ec:76:fd:e3:53:9f:0e:d2:65:92:c1:d3:39:03:
18:f1:f1:10:5e:51:84:e6:0d:6f:e6:46:a5:91:da:
fc:5f:17:84:cb:b2:81:d1:8b:d2:3a:23:c3:23:5a:
be:ff:4a:df:fc:cd:ae:7c:a7:38:78:3a:4c:8b:f9:
3d:b1:9e:53:57:47:a1:e8:12:a0:43:bf:87:d1:b6:
53:5b:55:a1:bc:19:e5:2f:07:e8:f5:30:a4:f9:81:
ff:d9:6e:76:ed:fd:3e:9a:2d:62:49:dc:24:c5:31:
35:a7:00:c6:36:0a:58:1a:ab:2c:89:f9:ad:ac:3d:
29:39:5f:e3:49:8a:4b:c3:29:b6:d9:c2:cd:57:df:
7b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A0:DC:27:39:FD:E3:C7:BB:9B:A1:ED:DC:BA:CA:BD:31:79:CA:C8
X509v3 Authority Key Identifier:
keyid:32:15:C5:51:6A:FB:54:D8:E6:12:D1:EC:3D:51:82:D3:21:E5:31:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:3c:8e:1b:cc:48:6d:ba:be:92:dc:9d:50:e9:69:f6:6c:34:
99:51:f9:a1:4f:78:a7:dc:8e:43:e2:9b:99:8f:b9:b8:f5:4a:
aa:78:48:26:27:dc:a4:86:e7:21:b9:5f:1f:62:6e:d8:05:57:
1c:19:5f:0d:43:9a:17:33:e8:d9:6c:d7:6e:83:fc:a8:b5:4a:
d0:0e:e9:1b:2b:29:76:f0:c5:28:08:04:a0:78:f6:40:e3:98:
54:9c:0e:73:21:07:b0:c4:f8:25:6a:af:bc:00:b7:a0:4f:31:
bb:8f:bc:07:41:e3:a2:08:19:bb:a3:3b:c4:cf:5c:80:3c:ad:
94:36:b7:9f:a9:ae:06:69:a5:f7:d9:f8:cc:46:e2:e8:b7:26:
b6:cf:26:bb:48:18:03:d3:bd:a3:15:93:6f:f9:ab:96:ce:ec:
cd:c6:1d:c1:2e:a6:8d:30:fc:ad:68:d2:26:44:8d:00:f3:56:
e9:84:b5:cb:e0:55:72:e6:bd:54:1f:40:8b:b3:2c:fe:e6:71:
a4:b0:41:fa:05:b4:fa:52:13:22:80:0b:0f:3b:a4:a5:08:3f:
4b:4b:33:04:a9:14:ae:98:d7:ea:40:da:c6:df:e0:81:45:02:
00:33:22:9e:c5:e0:cf:a4:c2:14:cc:9d:c6:3b:d7:e2:99:03:
5c:25:af:e0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODAxMjcxMTAvBgNVBAUTKDMyMTVDNTUxNkFGQjU0RDhFNjEyRDFFQzNENTE4MkQz
MjFFNTMxNzEwHhcNMjUwMTMxMDQxNDA4WhcNMjUwMjA3MDQxNDA4WjAYMRYwFAYD
VQQDEw02NzljNGUxMS00ZDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2UpwafKOAZWDH9WW7vHt+9lO3yT/0iKiN0grHXytZbZe4nMQfafBjO7rEjH4
BDVh51hycfbfVSFawQZAtXuXlgqxh0OdIu22Zy98IaU++1pU4gABUBLh4OF44z2F
6SQd1T7Fo1bYc3zxZsE0kW23LnB8T6l9tYJR7Hb941OfDtJlksHTOQMY8fEQXlGE
5g1v5kalkdr8XxeEy7KB0YvSOiPDI1q+/0rf/M2ufKc4eDpMi/k9sZ5TV0eh6BKg
Q7+H0bZTW1WhvBnlLwfo9TCk+YH/2W527f0+mi1iSdwkxTE1pwDGNgpYGqssifmt
rD0pOV/jSYpLwym22cLNV997CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNOg3Cc5
/ePHu5uh7dy6yr0xecrIMB8GA1UdIwQYMBaAFDIVxVFq+1TY5hLR7D1RgtMh5TFx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDEyNy8xNkFGMUQyMDVC
N0YxMUVFQkUzMjBFMzVDNEY5QUUwMi9NaFhGVVdyN1ZOam1FdEhzUFZHQzB5SGxN
WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01oWEZVV3I3Vk5qbUV0SHNQVkdDMHlIbE1YRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDEyNy8xNkFGMUQyMDVCN0YxMUVFQkUzMjBFMzVDNEY5QUUwMi9NaFhGVVdyN1ZO
am1FdEhzUFZHQzB5SGxNWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBmPI4bzEhtur6S3J1Q6Wn2bDSZUfmhT3in3I5D4puZj7m49UqqeEgm
J9ykhuchuV8fYm7YBVccGV8NQ5oXM+jZbNdug/yotUrQDukbKyl28MUoCASgePZA
45hUnA5zIQewxPglaq+8ALegTzG7j7wHQeOiCBm7ozvEz1yAPK2UNrefqa4GaaX3
2fjMRuLotya2zya7SBgD072jFZNv+auWzuzNxh3BLqaNMPytaNImRI0A81bphLXL
4FVy5r1UH0CLsyz+5nGksEH6BbT6UhMigAsPO6SlCD9LSzMEqRSumNfqQNrG3+CB
RQIAMyKexeDPpMIUzJ3GO9fimQNcJa/g
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:01:29 2025 by rpki-client