Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
File: rLLFTvC2TcIQCkhqe49ZMkute0k.mft (raw, json)
Hash identifier: wvLCXCIvgfmR6jfhxCmvGP+E8EHp8BCLrMxl96RYF/I=
Subject key identifier: 8D:73:3A:45:B2:E7:02:9D:66:6B:1C:E1:0F:54:C3:8C:AC:39:9E:16
Authority key identifier: AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49
Certificate issuer: /CN=A9185673/serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
Certificate serial: 011D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
Manifest number: 011B
Signing time: Fri 31 Jan 2025 03:56:33 +0000
Manifest this update: Fri 31 Jan 2025 03:56:33 +0000
Manifest next update: Fri 07 Feb 2025 03:56:33 +0000
Files and hashes: 1: rLLFTvC2TcIQCkhqe49ZMkute0k.crl (hash: ndFdaGnVDE2V08nBeBIlALDWW2e/JEZM25hKjK3cpiQ=)
2: C4D5BB009B5411EFBBEFF384C4F9AE02.roa (hash: uCME1nI1G2tg6HGgZkpUoMU0QH2pLpOuIsCEhG/KhIQ=)
3: B76A1A109B5411EF9756FD79C4F9AE02.roa (hash: S6jwI0TNB7LkuUao3PaiL3XeL9O4azeJDi9r1sukrRg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 285 (0x11d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185673/serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
Validity
Not Before: Jan 31 03:56:33 2025 GMT
Not After : Feb 7 03:56:33 2025 GMT
Subject: CN=679c49f1-63ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a9:09:d5:02:03:59:65:b3:46:45:67:d6:3c:
39:a4:4d:46:68:ba:44:17:71:bd:a2:cc:05:ac:4f:
4b:f9:fc:c0:fe:5c:d3:c8:03:a5:72:b7:24:ee:c5:
05:18:4d:85:35:13:9a:bf:1e:2e:cd:82:ea:71:e6:
18:5d:cd:9a:58:6a:e1:3a:98:d0:fb:ef:fd:f8:81:
3c:63:e3:5a:7d:a4:3b:b1:0a:89:42:f0:55:34:7b:
72:3b:af:22:a1:7f:35:ba:d2:2c:0b:68:94:98:5e:
e1:31:84:78:39:65:67:03:ee:d8:43:96:e0:c9:40:
38:d4:5a:ad:94:0e:1d:7a:72:22:d8:70:81:e3:e4:
50:75:41:95:a1:6f:8a:95:6c:36:23:0c:2e:93:64:
41:d2:39:68:55:1c:05:9e:9e:8b:fe:03:39:9a:2f:
0c:f5:52:5d:c5:8d:49:b7:77:ed:36:c3:b4:dc:16:
86:a9:c5:42:10:c6:a0:19:42:29:13:6b:8b:0b:cd:
75:93:ba:67:55:6c:ac:1b:9b:8c:74:eb:2d:5f:51:
9c:9f:40:2a:f0:8c:a5:6d:d9:3e:47:13:f1:4f:a3:
90:91:6c:86:66:88:13:b3:98:48:4d:1f:ca:82:b2:
b9:a8:45:62:1d:ad:a4:99:07:88:7a:13:96:7f:7e:
e7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:73:3A:45:B2:E7:02:9D:66:6B:1C:E1:0F:54:C3:8C:AC:39:9E:16
X509v3 Authority Key Identifier:
keyid:AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:17:c9:ac:07:31:25:06:bc:f0:37:11:1a:b6:89:62:e4:ba:
0a:d8:48:54:7f:9f:18:fb:49:bc:84:e8:78:5d:e3:97:87:ec:
49:66:23:e5:73:8a:7c:8c:3c:a9:fd:25:0a:60:0f:e3:80:74:
87:ec:23:cd:f4:ef:ef:ac:8f:da:50:41:d0:52:e4:48:51:25:
6f:02:a8:db:bb:9e:74:5a:71:36:f4:62:ad:b7:d4:3c:7e:13:
67:aa:15:6a:d5:b3:b9:08:3d:99:82:63:e7:54:1c:ca:cb:15:
94:ee:da:96:14:5f:2c:46:11:ff:a6:fb:6e:e5:b8:7e:6b:8e:
50:7b:f4:a4:b0:92:7b:e7:9e:e9:cf:16:1b:4d:62:4b:7f:49:
95:3d:aa:a7:e4:6e:7a:20:98:98:b6:34:5e:6d:b5:ab:fc:92:
76:97:11:8b:02:6a:dd:3d:3e:80:f0:6d:c6:b2:c5:6a:6d:7e:
8d:e1:9b:0f:8d:65:c7:c4:19:5c:31:60:f4:ef:28:ac:b4:bb:
0b:5c:48:8c:4c:fb:a1:e3:2f:82:dd:fe:b0:c6:85:cb:a5:d6:
11:e0:9f:2c:ec:3c:ee:0b:5e:ba:9c:03:76:6c:a2:31:df:90:
71:1b:91:af:8f:0e:8e:3f:d4:43:d5:ba:fd:06:99:d0:bd:67:
8c:86:aa:02
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODU2NzMxMTAvBgNVBAUTKEFDQjJDNTRFRjBCNjREQzIxMDBBNDg2QTdCOEY1OTMy
NEJBRDdCNDkwHhcNMjUwMTMxMDM1NjMzWhcNMjUwMjA3MDM1NjMzWjAYMRYwFAYD
VQQDEw02NzljNDlmMS02M2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvakJ1QIDWWWzRkVn1jw5pE1GaLpEF3G9oswFrE9L+fzA/lzTyAOlcrck7sUF
GE2FNROavx4uzYLqceYYXc2aWGrhOpjQ++/9+IE8Y+NafaQ7sQqJQvBVNHtyO68i
oX81utIsC2iUmF7hMYR4OWVnA+7YQ5bgyUA41FqtlA4denIi2HCB4+RQdUGVoW+K
lWw2Iwwuk2RB0jloVRwFnp6L/gM5mi8M9VJdxY1Jt3ftNsO03BaGqcVCEMagGUIp
E2uLC811k7pnVWysG5uMdOstX1Gcn0Aq8Iylbdk+RxPxT6OQkWyGZogTs5hITR/K
grK5qEViHa2kmQeIehOWf37n1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1zOkWy
5wKdZmsc4Q9Uw4ysOZ4WMB8GA1UdIwQYMBaAFKyyxU7wtk3CEApIanuPWTJLrXtJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTY3My84MDNBQ0QyQzMy
OTIxMUVFOTg2RjE0MUZDNEY5QUUwMi9yTExGVHZDMlRjSVFDa2hxZTQ5Wk1rdXRl
MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JMTEZUdkMyVGNJUUNraHFlNDlaTWt1dGUway5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NTY3My84MDNBQ0QyQzMyOTIxMUVFOTg2RjE0MUZDNEY5QUUwMi9yTExGVHZDMlRj
SVFDa2hxZTQ5Wk1rdXRlMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQASF8msBzElBrzwNxEatoli5LoK2EhUf58Y+0m8hOh4XeOXh+xJZiPl
c4p8jDyp/SUKYA/jgHSH7CPN9O/vrI/aUEHQUuRIUSVvAqjbu550WnE29GKtt9Q8
fhNnqhVq1bO5CD2ZgmPnVBzKyxWU7tqWFF8sRhH/pvtu5bh+a45Qe/SksJJ7557p
zxYbTWJLf0mVPaqn5G56IJiYtjRebbWr/JJ2lxGLAmrdPT6A8G3GssVqbX6N4ZsP
jWXHxBlcMWD07yistLsLXEiMTPuh4y+C3f6wxoXLpdYR4J8s7DzuC166nAN2bKIx
35BxG5Gvjw6OP9RD1br9BpnQvWeMhqoC
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:25:47 2025 by rpki-client