Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft
File: p6JnToSEYDkgd5o1LFWATlU2UBQ.mft (raw, json)
Hash identifier: X0YUYD8sAk12ZDU5FH38nX/5EGYQcLK50GypXutcw0w=
Subject key identifier: FF:B5:5A:35:99:88:53:2E:41:F9:E0:D1:0A:80:4F:F4:A3:5E:2D:70
Authority key identifier: A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14
Certificate issuer: /CN=A9185CF3/serialNumber=A7A2674E8484603920779A352C55804E55365014
Certificate serial: 0B7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft
Manifest number: 0B75
Signing time: Thu 30 Jan 2025 19:05:59 +0000
Manifest this update: Thu 30 Jan 2025 19:05:58 +0000
Manifest next update: Thu 06 Feb 2025 19:05:58 +0000
Files and hashes: 1: p6JnToSEYDkgd5o1LFWATlU2UBQ.crl (hash: r76I2+b4BH1SyTI0iGEAwn2MSOcyOOlxPjY5pjrzsIY=)
2: 53B6182C213611EAB9F02B49C4F9AE02.roa (hash: RvdTnjVHgMOyaT2D6NI7RBOs0ab70zz7muos4KwEa2g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2940 (0xb7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185CF3/serialNumber=A7A2674E8484603920779A352C55804E55365014
Validity
Not Before: Jan 30 19:05:58 2025 GMT
Not After : Feb 6 19:05:58 2025 GMT
Subject: CN=679bcd97-ec7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6b:96:14:a9:16:1e:de:26:9a:e2:df:7a:8b:
a6:f9:63:5d:68:8b:ce:b6:f5:50:e3:92:b1:7f:42:
87:d4:db:db:45:cf:f8:ba:b2:15:83:bd:05:3a:a0:
4a:a7:19:25:04:3a:b9:3b:8e:f7:a5:0d:42:1a:1b:
75:8b:9e:26:da:93:99:7d:7a:a3:25:41:36:0b:f6:
20:96:32:69:83:f7:6c:18:2b:bc:bb:e2:d1:f9:20:
ba:b5:91:06:0d:44:22:76:b0:ab:a2:37:81:4c:aa:
c0:ee:ac:d8:67:ea:1f:9b:10:a3:b4:23:64:c4:35:
ac:37:38:14:ae:64:85:bd:a6:1a:a0:3d:10:91:48:
ff:34:87:57:b1:1c:bb:e8:f8:fb:c3:fb:cf:9f:d8:
df:7e:f5:80:f0:e0:a7:6b:19:09:7b:57:2b:06:dc:
2e:8f:6e:5d:b7:0b:d3:f6:7a:38:78:4a:7d:f6:ec:
05:0d:af:a1:c0:aa:c2:06:e1:67:55:13:d5:be:05:
f7:43:29:3a:3f:fe:1c:8c:63:d6:6b:59:d9:5c:c6:
88:d0:2e:52:84:4c:6d:3f:31:e4:ea:c5:08:29:90:
3d:41:cd:81:28:82:36:eb:e9:c7:a1:7a:0d:a9:10:
38:9b:da:9c:c6:63:4b:b0:d3:15:b6:39:ee:27:e3:
29:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B5:5A:35:99:88:53:2E:41:F9:E0:D1:0A:80:4F:F4:A3:5E:2D:70
X509v3 Authority Key Identifier:
keyid:A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:cd:68:dd:58:83:8a:94:c3:1b:9e:a1:cd:db:05:b0:21:ba:
22:f6:b9:4e:d1:90:93:cb:82:08:d5:aa:f5:fa:9a:f4:21:ed:
cb:eb:76:2a:90:60:27:72:4a:e4:93:be:64:56:74:b6:79:32:
bc:5b:d4:87:c6:9d:05:9e:e7:48:35:8c:bb:78:cb:95:46:cd:
f9:56:47:f2:53:00:ed:1d:57:49:2c:48:36:24:bc:d3:20:3c:
d7:df:de:48:50:57:74:e8:b0:61:e7:cf:1d:3b:d0:04:80:c5:
14:02:2d:d5:cf:95:3f:57:b8:b1:24:0e:05:2e:8f:e2:68:41:
93:09:3d:cf:03:57:a0:60:17:d7:81:34:78:bd:3d:6f:e7:23:
a4:fe:7f:6d:44:6b:94:9f:fa:26:8c:ff:40:99:87:08:79:86:
10:7e:ff:1a:fe:b4:86:50:47:df:cb:64:3f:e1:76:c2:15:dc:
b4:34:9c:79:85:db:99:2c:c0:b0:a8:6d:36:dc:34:d2:4f:7d:
29:77:e8:62:e2:95:1c:37:3b:fb:0b:38:37:af:4b:37:e6:2f:
b7:dc:67:79:44:59:b7:e7:34:86:6e:e0:2f:fc:92:ab:43:e0:
e2:61:5f:b9:75:38:16:ad:2f:fb:14:8b:da:70:a4:b6:3b:31:
59:c5:a2:a8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODVDRjMxMTAvBgNVBAUTKEE3QTI2NzRFODQ4NDYwMzkyMDc3OUEzNTJDNTU4MDRF
NTUzNjUwMTQwHhcNMjUwMTMwMTkwNTU4WhcNMjUwMjA2MTkwNTU4WjAYMRYwFAYD
VQQDEw02NzliY2Q5Ny1lYzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnGuWFKkWHt4mmuLfeoum+WNdaIvOtvVQ45Kxf0KH1NvbRc/4urIVg70FOqBK
pxklBDq5O473pQ1CGht1i54m2pOZfXqjJUE2C/YgljJpg/dsGCu8u+LR+SC6tZEG
DUQidrCrojeBTKrA7qzYZ+ofmxCjtCNkxDWsNzgUrmSFvaYaoD0QkUj/NIdXsRy7
6Pj7w/vPn9jffvWA8OCnaxkJe1crBtwuj25dtwvT9no4eEp99uwFDa+hwKrCBuFn
VRPVvgX3Qyk6P/4cjGPWa1nZXMaI0C5ShExtPzHk6sUIKZA9Qc2BKII26+nHoXoN
qRA4m9qcxmNLsNMVtjnuJ+MpyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+1WjWZ
iFMuQfng0QqAT/SjXi1wMB8GA1UdIwQYMBaAFKeiZ06EhGA5IHeaNSxVgE5VNlAU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUNGMy80QkRENTE4RTIx
MzUxMUVBQkU0ODg3NDdDNEY5QUUwMi9wNkpuVG9TRVlEa2dkNW8xTEZXQVRsVTJV
QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3A2Sm5Ub1NFWURrZ2Q1bzFMRldBVGxVMlVCUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NUNGMy80QkRENTE4RTIxMzUxMUVBQkU0ODg3NDdDNEY5QUUwMi9wNkpuVG9TRVlE
a2dkNW8xTEZXQVRsVTJVQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBkzWjdWIOKlMMbnqHN2wWwIboi9rlO0ZCTy4II1ar1+pr0Ie3L63Yq
kGAnckrkk75kVnS2eTK8W9SHxp0FnudINYy7eMuVRs35VkfyUwDtHVdJLEg2JLzT
IDzX395IUFd06LBh588dO9AEgMUUAi3Vz5U/V7ixJA4FLo/iaEGTCT3PA1egYBfX
gTR4vT1v5yOk/n9tRGuUn/omjP9AmYcIeYYQfv8a/rSGUEffy2Q/4XbCFdy0NJx5
hduZLMCwqG023DTST30pd+hi4pUcNzv7Czg3r0s35i+33Gd5RFm35zSGbuAv/JKr
Q+DiYV+5dTgWrS/7FIvacKS2OzFZxaKo
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:32 2025 by rpki-client