Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft
File: jgK1xN61PytxL_B33gSQg3XoE9s.mft (raw, json)
Hash identifier: bsQhXdWIpbALIp2UR/lasClFmSJgtKRKSKJBOvuBD9I=
Subject key identifier: AC:91:A1:88:AD:53:C7:00:28:1A:81:FE:D8:27:AC:EB:19:99:EC:27
Authority key identifier: 8E:02:B5:C4:DE:B5:3F:2B:71:2F:F0:77:DE:04:90:83:75:E8:13:DB
Certificate issuer: /CN=A9185B6D/serialNumber=8E02B5C4DEB53F2B712FF077DE04908375E813DB
Certificate serial: A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft
Manifest number: A0
Signing time: Fri 31 Jan 2025 05:21:45 +0000
Manifest this update: Fri 31 Jan 2025 05:21:45 +0000
Manifest next update: Fri 07 Feb 2025 05:21:45 +0000
Files and hashes: 1: jgK1xN61PytxL_B33gSQg3XoE9s.crl (hash: TtpU3G4nc6/tToRPOeE1YfmDIdQNnGfpfRlO2Wt/n0E=)
2: 5A32E8DAE79111EE972FC923C4F9AE02.roa (hash: aFMYkYBw2EhyeI2pqMsreJuK3qV39ueiDtvXsuPF2Sc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161 (0xa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185B6D/serialNumber=8E02B5C4DEB53F2B712FF077DE04908375E813DB
Validity
Not Before: Jan 31 05:21:45 2025 GMT
Not After : Feb 7 05:21:45 2025 GMT
Subject: CN=679c5de9-0112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7c:9c:f4:6d:1e:a6:1b:2f:6f:a7:13:f8:61:
8a:2b:b9:e3:1b:ad:36:21:c4:1f:f6:ea:5d:94:71:
5a:4b:ee:2c:7a:79:41:cf:70:b3:a4:e1:aa:b0:61:
e3:4a:1a:18:cc:e2:a6:fe:ac:63:2d:4a:38:4f:34:
ed:b3:0d:08:c3:19:b8:17:20:ac:07:ed:8d:67:41:
18:96:2a:f0:cd:a3:25:3b:95:6e:9e:50:16:2c:cb:
8a:e6:05:df:e9:2c:17:55:9c:da:51:92:05:09:56:
18:b8:78:e4:ae:17:4f:e3:ff:81:1f:86:96:28:41:
28:1b:fe:18:c6:f5:be:d0:d6:82:9e:b3:f4:3e:8b:
8f:4b:a8:77:54:28:d4:e2:88:01:58:8b:2e:14:84:
af:50:16:43:db:27:f9:61:8a:35:f4:b4:79:d1:2f:
8a:21:67:e4:3f:7d:10:10:40:4f:7f:c1:ce:8a:d6:
0a:ad:f9:c2:cc:73:41:65:5f:4c:ec:8c:b8:f5:6b:
1c:35:2c:75:b7:bb:b9:cf:9a:39:93:0a:8c:92:a2:
ac:15:59:b5:3a:1b:01:f8:2a:cd:1a:24:9a:10:01:
e9:e8:b3:83:1f:1f:5b:e9:55:49:8b:90:e1:fa:1e:
95:98:65:09:fb:07:30:3e:26:2e:61:06:05:8a:4e:
59:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:91:A1:88:AD:53:C7:00:28:1A:81:FE:D8:27:AC:EB:19:99:EC:27
X509v3 Authority Key Identifier:
keyid:8E:02:B5:C4:DE:B5:3F:2B:71:2F:F0:77:DE:04:90:83:75:E8:13:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:7b:99:79:b5:60:f3:47:ca:ff:38:9e:03:fc:af:a7:cf:aa:
0c:44:ff:7d:af:4f:03:fd:1f:bd:dd:0e:15:4f:60:93:6f:0d:
f8:39:35:9f:5d:7b:4e:27:6f:95:aa:99:d4:1a:19:e2:21:34:
c7:d1:64:ca:27:0c:6d:c1:a6:61:fc:c6:e3:55:36:aa:2d:b5:
6e:f8:19:c4:8d:d0:1d:af:09:24:85:3d:1f:db:cc:a6:cf:b0:
4e:09:4c:12:a4:0e:7f:a6:d8:5b:0f:59:d7:34:9c:af:a7:0b:
19:ba:e4:a5:0e:d4:5f:6a:17:b9:16:ee:6c:82:86:b6:a2:77:
52:4d:f1:86:c8:c1:f6:2b:15:60:ea:3b:60:73:0f:98:5b:dd:
db:c4:2b:3b:14:f9:f7:1b:e3:64:e5:2a:6c:ec:37:01:bd:c2:
84:f8:6e:83:00:5f:57:b3:39:3b:ae:25:43:c1:5f:f9:5e:ac:
49:a7:6a:75:67:c9:26:f0:ab:35:a0:61:8c:48:4f:41:ed:bd:
19:bc:ba:4c:7c:98:15:4a:19:51:5c:21:63:f3:b1:4a:1a:91:
4d:8d:df:59:85:93:15:3d:01:99:be:fd:b3:18:28:f5:b9:1b:
cc:60:24:a1:a8:a1:1e:9f:8f:0e:7e:77:e2:b6:d8:fb:1b:90:
91:a0:3f:50
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODVCNkQxMTAvBgNVBAUTKDhFMDJCNUM0REVCNTNGMkI3MTJGRjA3N0RFMDQ5MDgz
NzVFODEzREIwHhcNMjUwMTMxMDUyMTQ1WhcNMjUwMjA3MDUyMTQ1WjAYMRYwFAYD
VQQDEw02NzljNWRlOS0wMTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx3yc9G0ephsvb6cT+GGKK7njG602IcQf9updlHFaS+4senlBz3CzpOGqsGHj
ShoYzOKm/qxjLUo4TzTtsw0Iwxm4FyCsB+2NZ0EYlirwzaMlO5VunlAWLMuK5gXf
6SwXVZzaUZIFCVYYuHjkrhdP4/+BH4aWKEEoG/4YxvW+0NaCnrP0PouPS6h3VCjU
4ogBWIsuFISvUBZD2yf5YYo19LR50S+KIWfkP30QEEBPf8HOitYKrfnCzHNBZV9M
7Iy49WscNSx1t7u5z5o5kwqMkqKsFVm1OhsB+CrNGiSaEAHp6LODHx9b6VVJi5Dh
+h6VmGUJ+wcwPiYuYQYFik5ZHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKyRoYit
U8cAKBqB/tgnrOsZmewnMB8GA1UdIwQYMBaAFI4CtcTetT8rcS/wd94EkIN16BPb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI2RC8yMTUyMjE4MkU3
OEUxMUVFOTgzMUVCN0VDNEY5QUUwMi9qZ0sxeE42MVB5dHhMX0IzM2dTUWczWG9F
OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pnSzF4TjYxUHl0eExfQjMzZ1NRZzNYb0U5cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NUI2RC8yMTUyMjE4MkU3OEUxMUVFOTgzMUVCN0VDNEY5QUUwMi9qZ0sxeE42MVB5
dHhMX0IzM2dTUWczWG9FOXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBRe5l5tWDzR8r/OJ4D/K+nz6oMRP99r08D/R+93Q4VT2CTbw34OTWf
XXtOJ2+VqpnUGhniITTH0WTKJwxtwaZh/MbjVTaqLbVu+BnEjdAdrwkkhT0f28ym
z7BOCUwSpA5/pthbD1nXNJyvpwsZuuSlDtRfahe5Fu5sgoa2ondSTfGGyMH2KxVg
6jtgcw+YW93bxCs7FPn3G+Nk5Sps7DcBvcKE+G6DAF9Xszk7riVDwV/5XqxJp2p1
Z8km8Ks1oGGMSE9B7b0ZvLpMfJgVShlRXCFj87FKGpFNjd9ZhZMVPQGZvv2zGCj1
uRvMYCShqKEen48Ofnfittj7G5CRoD9Q
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:11:08 2025 by rpki-client