Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft
File: 25LUPJBhJQWzr0bpZKaMyfXzsq8.mft (raw, json)
Hash identifier: gYuIJc9n5m/LA77FjMB+nlBMPqjGNVuEn47+SXWrvAM=
Subject key identifier: 04:97:0F:97:8D:33:08:AF:CA:27:E4:47:8E:7C:8A:FA:3E:08:AA:1B
Authority key identifier: DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF
Certificate issuer: /CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF
Certificate serial: 02E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft
Manifest number: 02D6
Signing time: Fri 31 Jan 2025 01:31:55 +0000
Manifest this update: Fri 31 Jan 2025 01:31:55 +0000
Manifest next update: Fri 07 Feb 2025 01:31:55 +0000
Files and hashes: 1: 25LUPJBhJQWzr0bpZKaMyfXzsq8.crl (hash: XVMEvecT9dn651MDc7vAKSQVxC0amC/y+4JZ5SmxnLM=)
2: 28722BE0BE0411EF99CA5361C4F9AE02.roa (hash: lxcCZnc0kKJjD5J2pbZ3y9DLUar2+O8Pvm8kq5NVP+Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 745 (0x2e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF
Validity
Not Before: Jan 31 01:31:55 2025 GMT
Not After : Feb 7 01:31:55 2025 GMT
Subject: CN=679c280b-b09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:93:6a:8d:57:5b:23:5a:d0:ad:51:57:d0:e9:
c6:13:d4:4a:43:6b:9c:da:4e:1b:da:f6:73:df:38:
a9:9d:bd:e4:26:1b:eb:74:61:65:8f:1e:e2:87:01:
52:25:fc:a3:ed:4d:d4:00:c6:3e:19:93:21:4b:b3:
19:14:a3:78:ef:27:0c:49:ba:5e:68:04:da:31:07:
2e:df:5d:64:b0:df:7f:18:e4:7b:dc:6c:76:1c:8a:
04:3e:83:00:88:13:7e:92:39:e8:20:df:f5:63:6d:
74:c5:25:c5:70:62:12:eb:2b:59:03:48:79:9e:5a:
b6:c6:c9:e8:8e:51:c2:1b:de:ed:7d:3d:4d:d9:18:
7e:80:2c:4b:b5:ee:d3:23:a8:f0:9d:21:20:3f:4d:
43:78:0b:d9:25:84:82:86:88:70:a0:9c:91:c7:86:
b6:24:6a:23:f3:70:64:94:b9:90:f5:74:c0:4d:ba:
34:91:fc:d2:bd:90:bd:d3:cf:87:25:6d:3b:cc:5e:
89:ba:47:d7:e4:ce:fc:65:b6:b1:dc:60:b2:3a:09:
8f:dd:aa:7d:a6:e6:fc:9b:d9:f7:41:a1:8a:79:9e:
af:47:32:a9:07:48:e4:61:ec:ec:f6:c3:0b:34:0b:
42:49:b5:d7:7b:fe:55:a2:6e:f0:f7:bd:6f:d5:b4:
6c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:97:0F:97:8D:33:08:AF:CA:27:E4:47:8E:7C:8A:FA:3E:08:AA:1B
X509v3 Authority Key Identifier:
keyid:DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:cb:53:cd:92:7b:f4:b9:51:dd:43:29:1d:5e:67:08:34:14:
18:6b:c5:d4:be:4f:c6:96:42:76:8b:4f:f7:4f:3d:43:09:01:
78:bf:80:68:64:eb:87:2b:60:22:2d:ec:a0:c5:99:41:f8:3a:
d2:c2:95:e0:b6:09:08:b0:d2:ee:b7:bf:5d:f7:74:dd:7a:1f:
af:94:67:b8:de:97:8c:67:29:2d:2e:82:31:c2:29:3d:c1:aa:
48:af:da:ac:da:f0:e1:96:cd:f3:fd:88:50:f3:e0:39:a6:92:
1e:6d:00:20:de:9b:ee:65:da:90:e8:41:b7:86:b1:ba:87:24:
88:11:ac:43:59:e1:1d:a8:ef:9d:9d:53:71:67:48:cb:08:70:
ea:16:b8:08:12:46:63:4c:9e:bf:df:11:4e:bc:b3:59:d4:61:
af:f6:21:85:76:42:80:0e:eb:d5:0e:64:64:ed:2d:e3:c7:d9:
db:e9:bd:87:52:bf:06:5c:05:1f:09:f9:82:3e:f8:32:85:45:
f1:c7:85:96:fb:09:0c:8b:be:bd:25:c0:c6:94:bd:5e:6c:35:
59:89:09:d5:7b:be:ec:1a:50:36:76:bc:26:eb:13:05:f7:0f:
2e:a3:70:96:ca:d0:a3:d7:b5:8b:d5:e0:03:94:d9:c7:6c:4a:
90:a4:08:f9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODIxM0IxMTAvBgNVBAUTKERCOTJENDNDOTA2MTI1MDVCM0FGNDZFOTY0QTY4Q0M5
RjVGM0IyQUYwHhcNMjUwMTMxMDEzMTU1WhcNMjUwMjA3MDEzMTU1WjAYMRYwFAYD
VQQDEw02NzljMjgwYi1iMDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv5NqjVdbI1rQrVFX0OnGE9RKQ2uc2k4b2vZz3zipnb3kJhvrdGFljx7ihwFS
Jfyj7U3UAMY+GZMhS7MZFKN47ycMSbpeaATaMQcu311ksN9/GOR73Gx2HIoEPoMA
iBN+kjnoIN/1Y210xSXFcGIS6ytZA0h5nlq2xsnojlHCG97tfT1N2Rh+gCxLte7T
I6jwnSEgP01DeAvZJYSChohwoJyRx4a2JGoj83BklLmQ9XTATbo0kfzSvZC908+H
JW07zF6JukfX5M78Zbax3GCyOgmP3ap9pub8m9n3QaGKeZ6vRzKpB0jkYezs9sML
NAtCSbXXe/5Vom7w971v1bRs1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFASXD5eN
MwivyifkR458ivo+CKobMB8GA1UdIwQYMBaAFNuS1DyQYSUFs69G6WSmjMn187Kv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjEzQi8wNzA3NkZBMEQ5
QzkxMUVDQkUwMDdGNkFDNEY5QUUwMi8yNUxVUEpCaEpRV3pyMGJwWkthTXlmWHpz
cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzI1TFVQSkJoSlFXenIwYnBaS2FNeWZYenNxOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MjEzQi8wNzA3NkZBMEQ5QzkxMUVDQkUwMDdGNkFDNEY5QUUwMi8yNUxVUEpCaEpR
V3pyMGJwWkthTXlmWHpzcTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBmy1PNknv0uVHdQykdXmcINBQYa8XUvk/GlkJ2i0/3Tz1DCQF4v4Bo
ZOuHK2AiLeygxZlB+DrSwpXgtgkIsNLut79d93Tdeh+vlGe43peMZyktLoIxwik9
wapIr9qs2vDhls3z/YhQ8+A5ppIebQAg3pvuZdqQ6EG3hrG6hySIEaxDWeEdqO+d
nVNxZ0jLCHDqFrgIEkZjTJ6/3xFOvLNZ1GGv9iGFdkKADuvVDmRk7S3jx9nb6b2H
Ur8GXAUfCfmCPvgyhUXxx4WW+wkMi769JcDGlL1ebDVZiQnVe77sGlA2drwm6xMF
9w8uo3CWytCj17WL1eADlNnHbEqQpAj5
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:30:52 2025 by rpki-client