Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft
File: NKEjLqcYRp6tt628TNngDfaoUgY.mft (raw, json)
Hash identifier: H3UCbmRxhpGkHJzcyh0QKqsrk+VvMXqYu+PzJO41ZoM=
Subject key identifier: 5A:97:99:4D:A6:9A:D1:6F:78:75:3D:24:D9:D0:9F:E1:48:8D:F8:DB
Authority key identifier: 34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06
Certificate issuer: /CN=A9186684/serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206
Certificate serial: 0559
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft
Manifest number: 054E
Signing time: Thu 30 Jan 2025 23:27:18 +0000
Manifest this update: Thu 30 Jan 2025 23:27:17 +0000
Manifest next update: Thu 06 Feb 2025 23:27:17 +0000
Files and hashes: 1: NKEjLqcYRp6tt628TNngDfaoUgY.crl (hash: pkHRzF9pZDkt481iOYZBmIDGCMLBOGYDB9YZNaYgGf0=)
2: D737BB744B4111ECACAF3B6FC4F9AE02.roa (hash: 78UGN0+7orQTcucSGGqLKKQdBZ/eBwdHdIbrun6HmgE=)
3: 80D77ED8D8A811EB85D5E456C4F9AE02.roa (hash: 5vdLLR7SsjyoWbJEWGx2u6gT4judyFxezvmtzE9hlfI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1369 (0x559)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186684/serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206
Validity
Not Before: Jan 30 23:27:17 2025 GMT
Not After : Feb 6 23:27:17 2025 GMT
Subject: CN=679c0ad5-8418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1c:84:0e:e7:0a:aa:97:b5:c9:1b:60:24:9c:
1a:af:cc:6b:00:84:df:60:b9:bd:ca:82:5c:4d:78:
fe:6e:2f:1b:c8:98:b7:97:be:42:a9:0b:42:8a:25:
cd:f4:ae:d6:85:4e:98:63:1b:25:5a:ce:43:04:03:
18:5a:1e:cc:64:2a:ac:ac:91:17:fe:9b:77:71:8c:
32:ac:d5:a5:0f:9d:12:6d:fd:8a:52:96:29:b4:cc:
9c:ec:cf:9a:c3:9a:df:2e:f2:37:c3:2e:38:e0:87:
de:f2:92:4d:0d:9e:8d:f8:a1:2b:d5:f7:e7:8f:1e:
68:5c:e6:8f:85:97:1c:a3:8f:e2:4b:dd:d5:4a:73:
2e:c6:03:6d:f4:28:a8:67:1e:33:46:fa:b6:82:89:
29:f6:60:6b:c6:e5:64:7e:c8:89:ae:78:3b:08:c8:
06:08:89:39:3f:d5:17:84:9d:59:30:09:a2:51:f8:
60:bc:9a:99:cd:cd:15:60:11:ce:50:68:58:9b:1d:
f0:ad:b9:9f:46:c1:3b:cb:27:d0:a7:5f:b7:e2:43:
66:bc:ce:87:b9:e3:fe:57:82:2f:cf:2e:06:2a:e6:
05:a2:7d:a2:16:e1:bf:d8:00:eb:ed:03:d3:50:24:
df:7e:48:c3:4c:ad:49:9b:b4:b1:30:12:c1:37:36:
de:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:97:99:4D:A6:9A:D1:6F:78:75:3D:24:D9:D0:9F:E1:48:8D:F8:DB
X509v3 Authority Key Identifier:
keyid:34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:51:12:84:1e:2c:64:76:87:a7:65:3c:22:ad:fb:7f:cb:7c:
01:c6:40:ef:08:e6:14:4e:ff:30:91:f6:25:3f:64:a3:71:61:
49:fe:c6:79:58:02:1e:96:7a:5e:d5:73:0b:9e:37:6f:72:49:
27:bd:79:b8:65:aa:98:de:a0:80:91:ee:7f:25:66:49:1f:94:
70:17:c4:fb:74:0d:34:ab:f3:67:32:44:7b:15:6c:c9:03:e8:
b5:31:55:29:f7:6a:fc:19:33:d1:ec:73:04:a2:24:0a:18:62:
3c:5b:28:4e:e5:55:bc:ab:f9:86:98:05:e5:c7:4c:d0:60:01:
15:a8:ea:a2:9e:93:b3:a8:f4:6c:e3:81:f5:4d:da:1c:d5:d1:
ba:d4:66:4c:4a:da:e6:4b:61:04:db:c7:6a:62:d6:de:41:7f:
83:0e:59:69:aa:e1:57:65:4c:f2:79:68:9e:ef:a5:a1:05:91:
2f:d1:5b:55:67:24:ba:77:f2:28:af:d9:6f:b4:67:d5:68:3c:
2e:9b:1a:18:9b:94:80:54:a4:4b:7c:59:49:9d:0a:68:14:b1:
11:16:10:88:1e:9f:fa:2a:62:85:06:06:ec:60:0b:df:94:0b:
e6:c9:e2:3c:8b:c9:56:63:f9:e1:ef:5b:ac:b6:3b:3b:0b:19:
a0:5f:79:d5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODY2ODQxMTAvBgNVBAUTKDM0QTEyMzJFQTcxODQ2OUVBREI3QURCQzRDRDlFMDBE
RjZBODUyMDYwHhcNMjUwMTMwMjMyNzE3WhcNMjUwMjA2MjMyNzE3WjAYMRYwFAYD
VQQDEw02NzljMGFkNS04NDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuByEDucKqpe1yRtgJJwar8xrAITfYLm9yoJcTXj+bi8byJi3l75CqQtCiiXN
9K7WhU6YYxslWs5DBAMYWh7MZCqsrJEX/pt3cYwyrNWlD50Sbf2KUpYptMyc7M+a
w5rfLvI3wy444Ife8pJNDZ6N+KEr1ffnjx5oXOaPhZcco4/iS93VSnMuxgNt9Cio
Zx4zRvq2gokp9mBrxuVkfsiJrng7CMgGCIk5P9UXhJ1ZMAmiUfhgvJqZzc0VYBHO
UGhYmx3wrbmfRsE7yyfQp1+34kNmvM6HueP+V4Ivzy4GKuYFon2iFuG/2ADr7QPT
UCTffkjDTK1Jm7SxMBLBNzbelQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqXmU2m
mtFveHU9JNnQn+FIjfjbMB8GA1UdIwQYMBaAFDShIy6nGEaerbetvEzZ4A32qFIG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjY4NC8zNkI4NkFEQ0Q4
OUYxMUVCQUI5OEM1NUFDNEY5QUUwMi9OS0VqTHFjWVJwNnR0NjI4VE5uZ0RmYW9V
Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05LRWpMcWNZUnA2dHQ2MjhUTm5nRGZhb1VnWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NjY4NC8zNkI4NkFEQ0Q4OUYxMUVCQUI5OEM1NUFDNEY5QUUwMi9OS0VqTHFjWVJw
NnR0NjI4VE5uZ0RmYW9VZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQALURKEHixkdoenZTwirft/y3wBxkDvCOYUTv8wkfYlP2SjcWFJ/sZ5
WAIelnpe1XMLnjdvckknvXm4ZaqY3qCAke5/JWZJH5RwF8T7dA00q/NnMkR7FWzJ
A+i1MVUp92r8GTPR7HMEoiQKGGI8WyhO5VW8q/mGmAXlx0zQYAEVqOqinpOzqPRs
44H1Tdoc1dG61GZMStrmS2EE28dqYtbeQX+DDllpquFXZUzyeWie76WhBZEv0VtV
ZyS6d/Ior9lvtGfVaDwumxoYm5SAVKRLfFlJnQpoFLERFhCIHp/6KmKFBgbsYAvf
lAvmyeI8i8lWY/nh71ustjs7CxmgX3nV
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:09:10 2025 by rpki-client