Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.mft
File: RyIWWikMD62wOOjNLGOuxx6Pg-w.mft (raw, json)
Hash identifier: jHcP5qfzBzbH2lwbGdMAXxmdsP6wBCgdwsK3g7zZ4nY=
Subject key identifier: 45:3C:CF:67:4D:56:35:51:67:C0:47:7B:43:5C:BB:EC:7F:B6:43:0F
Authority key identifier: 47:22:16:5A:29:0C:0F:AD:B0:38:E8:CD:2C:63:AE:C7:1E:8F:83:EC
Certificate issuer: /CN=A918A341/serialNumber=4722165A290C0FADB038E8CD2C63AEC71E8F83EC
Certificate serial: 04D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RyIWWikMD62wOOjNLGOuxx6Pg-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.mft
Manifest number: 04CE
Signing time: Thu 30 Jan 2025 23:51:11 +0000
Manifest this update: Thu 30 Jan 2025 23:51:10 +0000
Manifest next update: Thu 06 Feb 2025 23:51:10 +0000
Files and hashes: 1: RyIWWikMD62wOOjNLGOuxx6Pg-w.crl (hash: W9pHJASrPTs1dWCrcW5WMTWQhtTQFg5I0tdxNOQtgI4=)
2: EF3517E8099311ECAD398842C4F9AE02.roa (hash: 70nUVsPI/eDiHF1rN+y5OKRTGHTL9/bXu36vYcff6Yo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1234 (0x4d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A341/serialNumber=4722165A290C0FADB038E8CD2C63AEC71E8F83EC
Validity
Not Before: Jan 30 23:51:10 2025 GMT
Not After : Feb 6 23:51:10 2025 GMT
Subject: CN=679c106f-3d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2c:52:9d:82:bf:1d:c5:6f:d8:ff:ce:3b:7f:
37:71:77:f2:f9:e9:54:c6:fe:a5:58:0c:91:56:81:
5b:0c:e3:42:37:76:3c:c5:8c:eb:12:14:7b:ed:9d:
1a:98:c5:32:40:69:d9:19:ba:95:10:1f:81:bc:19:
90:b4:22:33:55:76:83:95:70:86:a2:57:1b:9a:b5:
b2:e1:19:b2:e2:f7:a2:9f:6d:60:61:05:a6:31:e7:
cd:97:f8:6f:ab:f8:88:8e:fc:30:5c:e5:b8:cd:ee:
e4:09:57:93:03:f3:d3:25:4f:7f:76:88:45:b9:99:
dc:7b:0a:09:3c:9c:72:3a:21:5d:4c:86:46:a8:28:
7c:34:22:d7:ba:93:62:ef:c4:6d:0a:c8:39:7b:d9:
f0:f4:f5:31:17:56:e1:4c:e9:38:6b:21:f6:aa:f3:
6e:56:7c:c0:9c:98:10:54:59:a4:ee:6b:dd:a7:cb:
b2:0d:eb:0b:0a:7a:28:7f:d7:b1:e8:3c:e8:9f:94:
d1:72:62:5f:cf:3e:e8:c2:f0:d6:65:9c:ba:9c:17:
e0:38:75:47:72:d4:6c:ac:3f:1d:81:5e:96:15:0c:
60:c4:86:ab:ec:3b:ac:83:76:af:52:7b:e5:14:01:
be:a6:6a:5b:a5:79:2a:56:dd:3c:17:7a:a4:1f:be:
38:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3C:CF:67:4D:56:35:51:67:C0:47:7B:43:5C:BB:EC:7F:B6:43:0F
X509v3 Authority Key Identifier:
keyid:47:22:16:5A:29:0C:0F:AD:B0:38:E8:CD:2C:63:AE:C7:1E:8F:83:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RyIWWikMD62wOOjNLGOuxx6Pg-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:48:21:ea:ee:66:f0:0f:0a:4f:2f:2a:92:e7:b1:67:a1:84:
dc:ab:22:66:c1:30:c5:f5:bd:7d:73:33:6e:1f:40:3b:3c:56:
a4:19:f5:d1:a8:68:46:88:e5:b6:1f:a0:0e:1e:b0:ef:83:e4:
a6:ce:95:20:a0:db:93:19:97:01:07:0e:72:60:74:3f:c6:d4:
6b:9e:5c:e1:13:b9:9f:7b:1c:fc:78:8e:2d:a8:f1:62:a0:03:
a1:a7:5a:25:ae:7c:dd:39:b9:d5:7d:8e:8c:81:26:cd:3d:36:
f6:72:08:ec:4d:c1:6f:c4:8a:00:75:bb:21:9d:a1:c4:4f:23:
50:72:86:8e:5a:c4:d3:77:85:b9:7e:2e:74:a1:88:80:e5:2d:
15:a1:7c:3d:2f:78:ad:51:ad:21:7d:05:d9:c7:f3:3b:07:fb:
ed:f8:61:13:07:85:eb:2c:7f:e8:ea:57:ed:1b:f7:e8:b5:36:
7a:34:b9:fe:51:42:bb:ca:4c:fc:b1:60:bd:02:c8:50:6d:f6:
72:d8:ab:63:25:7a:eb:f9:cd:95:1a:ac:ca:89:a3:69:20:7c:
83:34:db:11:98:56:a5:7b:ca:14:0b:a8:7e:af:1e:ae:cc:cf:
1a:ee:39:42:7e:cb:f2:50:07:56:c9:b5:0d:57:b8:5d:f5:f3:
5b:f4:fa:39
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEEzNDExMTAvBgNVBAUTKDQ3MjIxNjVBMjkwQzBGQURCMDM4RThDRDJDNjNBRUM3
MUU4RjgzRUMwHhcNMjUwMTMwMjM1MTEwWhcNMjUwMjA2MjM1MTEwWjAYMRYwFAYD
VQQDEw02NzljMTA2Zi0zZDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1ixSnYK/HcVv2P/OO383cXfy+elUxv6lWAyRVoFbDONCN3Y8xYzrEhR77Z0a
mMUyQGnZGbqVEB+BvBmQtCIzVXaDlXCGolcbmrWy4Rmy4vein21gYQWmMefNl/hv
q/iIjvwwXOW4ze7kCVeTA/PTJU9/dohFuZncewoJPJxyOiFdTIZGqCh8NCLXupNi
78RtCsg5e9nw9PUxF1bhTOk4ayH2qvNuVnzAnJgQVFmk7mvdp8uyDesLCnoof9ex
6Dzon5TRcmJfzz7owvDWZZy6nBfgOHVHctRsrD8dgV6WFQxgxIar7Dusg3avUnvl
FAG+pmpbpXkqVt08F3qkH744mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEU8z2dN
VjVRZ8BHe0Ncu+x/tkMPMB8GA1UdIwQYMBaAFEciFlopDA+tsDjozSxjrscej4Ps
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTM0MS85QTdFQUM0QTA5
OEYxMUVDQTYzM0UxM0JDNEY5QUUwMi9SeUlXV2lrTUQ2MndPT2pOTEdPdXh4NlBn
LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1J5SVdXaWtNRDYyd09Pak5MR091eHg2UGctdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QTM0MS85QTdFQUM0QTA5OEYxMUVDQTYzM0UxM0JDNEY5QUUwMi9SeUlXV2lrTUQ2
MndPT2pOTEdPdXh4NlBnLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCmSCHq7mbwDwpPLyqS57FnoYTcqyJmwTDF9b19czNuH0A7PFakGfXR
qGhGiOW2H6AOHrDvg+SmzpUgoNuTGZcBBw5yYHQ/xtRrnlzhE7mfexz8eI4tqPFi
oAOhp1olrnzdObnVfY6MgSbNPTb2cgjsTcFvxIoAdbshnaHETyNQcoaOWsTTd4W5
fi50oYiA5S0VoXw9L3itUa0hfQXZx/M7B/vt+GETB4XrLH/o6lftG/fotTZ6NLn+
UUK7ykz8sWC9AshQbfZy2KtjJXrr+c2VGqzKiaNpIHyDNNsRmFale8oUC6h+rx6u
zM8a7jlCfsvyUAdWybUNV7hd9fNb9Po5
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:46:34 2025 by rpki-client