Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
File: D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft (raw, json)
Hash identifier: MefAYVOJUL2cB+ALh81spJCC+xTiUuNnVExURky1Kwc=
Subject key identifier: 3C:B9:E5:5A:64:34:70:3D:52:05:C3:5A:00:C2:37:A7:E5:A8:8E:A6
Authority key identifier: 0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
Certificate issuer: /CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Certificate serial: 0137
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
Manifest number: 0122
Signing time: Fri 31 Jan 2025 04:07:12 +0000
Manifest this update: Fri 31 Jan 2025 04:07:12 +0000
Manifest next update: Fri 07 Feb 2025 04:07:12 +0000
Files and hashes: 1: D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl (hash: ir9LCvucG80IBbzw9Um2NP3+pF4RLOeH2pqoHyYISz4=)
2: 69878488BC8B11EFB075381FC4F9AE02.roa (hash: Kmp0PciiNtKK7c+FdEXA06umwfCqCRDZ3N8OrEbYJkI=)
3: 6A056E20BC8B11EFB075381FC4F9AE02.roa (hash: z9FtwRycmw1xJJubed7pKOkECuOqubJFRg9nEXMu5eI=)
4: B67EFE26A2DB11EEABACB981C4F9AE02.roa (hash: ra0yVXf7WKyMc/TV/KsDqYCa6PLBvgSOfzPKvq7nVBw=)
5: A045C92CB46611EEAFEE8758C4F9AE02.roa (hash: VlIb3exIwpSPjFwHyuIwV8wlOpGvSIVB8uNPjyxZHoM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 311 (0x137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Validity
Not Before: Jan 31 04:07:12 2025 GMT
Not After : Feb 7 04:07:12 2025 GMT
Subject: CN=679c4c70-9936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:45:e2:2a:08:10:a0:c7:ad:20:f7:79:9e:11:
ae:81:33:6b:41:8d:17:e8:6b:cb:91:9a:1a:44:d2:
a8:10:d2:2b:cd:76:aa:72:a0:3f:57:3e:67:94:39:
59:6d:0f:68:91:4c:c9:9d:be:74:93:5a:b8:a2:f8:
0f:c8:7d:17:72:fb:4d:19:7a:da:4f:25:06:7f:8d:
a2:bc:5a:f9:50:1a:bd:62:c9:2b:28:3e:e6:d5:d2:
fd:91:3e:d8:85:24:8f:4a:87:1b:51:a7:d0:25:68:
51:a1:c1:f7:d1:93:34:ea:5f:6c:38:54:6e:4f:a4:
4d:a7:a5:cf:a1:4a:38:9a:18:e2:bb:0d:b4:c7:2a:
2a:65:b3:a8:cd:a4:5b:99:1a:88:16:f1:67:62:14:
f8:d4:38:c3:70:46:ec:60:96:4c:db:73:ea:d8:f4:
18:c8:26:df:9d:32:21:64:04:26:d5:8c:c8:e3:c1:
89:a8:7d:22:95:3a:ea:28:8d:8e:65:f2:be:85:9d:
db:c1:e5:d9:fa:e1:e6:de:50:e2:c8:aa:d5:00:59:
51:55:08:1b:de:0a:d0:ce:1f:7b:5a:17:58:3f:2b:
56:e1:05:57:08:ec:0d:bf:29:3a:04:e6:0c:3e:86:
32:eb:bd:51:d3:0e:e7:9d:b5:d3:e5:44:b9:f9:70:
c5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B9:E5:5A:64:34:70:3D:52:05:C3:5A:00:C2:37:A7:E5:A8:8E:A6
X509v3 Authority Key Identifier:
keyid:0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:eb:a2:65:20:66:95:60:64:e5:8d:bb:ff:d0:93:33:44:fa:
de:74:f6:fa:95:d0:cb:f6:a3:24:5e:23:84:7f:1f:d3:97:c7:
fc:6a:74:bc:e5:0c:22:57:d1:11:23:b4:8a:8e:3c:95:bf:b5:
50:c8:9d:8c:eb:27:a3:cc:6d:6e:2e:3d:a3:a3:9a:ee:bd:bf:
78:03:30:02:d1:81:68:b6:b9:ce:e9:a0:5a:94:34:86:b0:6b:
0f:d8:83:e7:74:aa:25:e0:c3:bf:f1:e1:00:96:12:bc:97:b1:
b8:c0:c4:bf:f4:df:71:bf:56:e1:cb:8f:8d:8e:f7:66:49:97:
ad:5c:c8:0b:e4:e6:b6:56:ed:d4:1b:09:fe:a8:0c:96:84:e1:
97:d3:88:c7:58:87:26:31:ba:59:24:ee:7d:49:9b:3f:c9:9e:
60:eb:15:33:4f:1d:e2:ce:62:c4:4a:b9:f6:7f:de:18:6e:c0:
e5:20:26:8a:b8:4d:b3:da:07:01:c5:eb:69:db:5b:07:fa:5d:
76:36:fc:83:ca:75:6d:45:ca:df:7d:8a:61:c9:6f:f0:64:1f:
6b:62:7f:80:cd:d0:26:2e:bf:c5:10:bf:d1:8a:a6:45:cf:02:
5d:11:38:3c:f6:ff:12:20:09:6f:b9:aa:8e:0b:c3:ac:24:6b:
48:ae:a7:9b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEEwNUQxMTAvBgNVBAUTKDBGNTQ1RTYyNzNEN0M5N0U5OTk1NDExRjc2RDVDNEYw
MDZCQjUxODYwHhcNMjUwMTMxMDQwNzEyWhcNMjUwMjA3MDQwNzEyWjAYMRYwFAYD
VQQDEw02NzljNGM3MC05OTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxUXiKggQoMetIPd5nhGugTNrQY0X6GvLkZoaRNKoENIrzXaqcqA/Vz5nlDlZ
bQ9okUzJnb50k1q4ovgPyH0XcvtNGXraTyUGf42ivFr5UBq9YskrKD7m1dL9kT7Y
hSSPSocbUafQJWhRocH30ZM06l9sOFRuT6RNp6XPoUo4mhjiuw20xyoqZbOozaRb
mRqIFvFnYhT41DjDcEbsYJZM23Pq2PQYyCbfnTIhZAQm1YzI48GJqH0ilTrqKI2O
ZfK+hZ3bweXZ+uHm3lDiyKrVAFlRVQgb3grQzh97WhdYPytW4QVXCOwNvyk6BOYM
PoYy671R0w7nnbXT5US5+XDF0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDy55Vpk
NHA9UgXDWgDCN6flqI6mMB8GA1UdIwQYMBaAFA9UXmJz18l+mZVBH3bVxPAGu1GG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTA1RC9DMUVGQjA4MDRF
MjUxMUVFQUFBRTZENDlDNEY5QUUwMi9EMVJlWW5QWHlYNlpsVUVmZHRYRThBYTdV
WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0QxUmVZblBYeVg2WmxVRWZkdFhFOEFhN1VZWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QTA1RC9DMUVGQjA4MDRFMjUxMUVFQUFBRTZENDlDNEY5QUUwMi9EMVJlWW5QWHlY
NlpsVUVmZHRYRThBYTdVWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBc66JlIGaVYGTljbv/0JMzRPredPb6ldDL9qMkXiOEfx/Tl8f8anS8
5QwiV9ERI7SKjjyVv7VQyJ2M6yejzG1uLj2jo5ruvb94AzAC0YFotrnO6aBalDSG
sGsP2IPndKol4MO/8eEAlhK8l7G4wMS/9N9xv1bhy4+NjvdmSZetXMgL5Oa2Vu3U
Gwn+qAyWhOGX04jHWIcmMbpZJO59SZs/yZ5g6xUzTx3izmLESrn2f94YbsDlICaK
uE2z2gcBxetp21sH+l12NvyDynVtRcrffYphyW/wZB9rYn+AzdAmLr/FEL/RiqZF
zwJdETg89v8SIAlvuaqOC8OsJGtIrqeb
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:47:55 2025 by rpki-client