Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft
File: NpFTMwCsweAQXuAxcGNQf4e0AS0.mft (raw, json)
Hash identifier: qrzHH//NGBzT7nhT1H5qlckR6ttsAygZ/1s23NowveA=
Subject key identifier: 66:0D:C4:18:94:DC:61:6F:89:44:28:C8:DA:56:30:FC:DD:F0:83:D9
Authority key identifier: 36:91:53:33:00:AC:C1:E0:10:5E:E0:31:70:63:50:7F:87:B4:01:2D
Certificate issuer: /CN=A918ACDD/serialNumber=3691533300ACC1E0105EE0317063507F87B4012D
Certificate serial: 01B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpFTMwCsweAQXuAxcGNQf4e0AS0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft
Manifest number: 01B2
Signing time: Fri 31 Jan 2025 02:25:39 +0000
Manifest this update: Fri 31 Jan 2025 02:25:38 +0000
Manifest next update: Fri 07 Feb 2025 02:25:38 +0000
Files and hashes: 1: NpFTMwCsweAQXuAxcGNQf4e0AS0.crl (hash: 9ikiAfmzbfIn1Yf1Ze5P8xbh71Y79ou+XoKOLiQUcX8=)
2: 397504CA4DD211ED8314A659C4F9AE02.roa (hash: IA7ndlMtzlimkIY6svrVtb7hYj1DKuX/Dcj54QQRijI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 438 (0x1b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918ACDD/serialNumber=3691533300ACC1E0105EE0317063507F87B4012D
Validity
Not Before: Jan 31 02:25:38 2025 GMT
Not After : Feb 7 02:25:38 2025 GMT
Subject: CN=679c34a2-8275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b5:dc:e1:76:56:da:32:8b:85:fb:db:9e:7b:
18:4b:9d:60:7e:66:b3:9d:60:31:c5:e5:bf:70:9f:
8b:82:58:76:32:b7:fa:1e:7d:f2:d3:36:7a:ad:8e:
fd:df:7b:1d:77:83:60:d1:93:2a:d6:f9:11:8a:a0:
6a:f9:ca:fa:96:4a:35:f0:4f:8a:b7:e2:ae:f1:7b:
7f:9a:7f:06:b0:db:af:3c:56:40:f0:3f:df:09:02:
91:6d:2a:54:e0:9b:2b:e1:ba:8d:06:26:01:c6:0c:
48:ec:84:dd:83:8a:7f:6b:11:08:08:5b:3e:9c:32:
a6:cc:78:7c:43:4a:1f:8f:f7:3b:70:1c:d4:d9:b0:
42:3c:ea:36:57:f2:58:0d:ce:97:bb:25:0b:0a:a7:
29:f5:5e:b5:d5:cb:4a:98:93:59:a6:61:fe:1b:e3:
25:78:4e:13:2f:86:11:15:99:90:3c:c3:41:3a:6a:
64:b3:d7:53:f9:56:d7:d6:79:6e:f4:23:14:67:c7:
00:cb:d1:8b:64:54:1b:27:4b:15:44:60:5d:ee:5e:
e7:87:10:3a:eb:2b:ed:30:ea:22:13:8a:d7:84:48:
3c:5a:f8:f6:53:a2:11:0a:53:16:26:c0:01:d1:a7:
f3:b8:2b:66:6b:b8:3f:6e:d0:20:a8:e8:42:7d:5e:
83:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0D:C4:18:94:DC:61:6F:89:44:28:C8:DA:56:30:FC:DD:F0:83:D9
X509v3 Authority Key Identifier:
keyid:36:91:53:33:00:AC:C1:E0:10:5E:E0:31:70:63:50:7F:87:B4:01:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpFTMwCsweAQXuAxcGNQf4e0AS0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:42:0b:f0:f4:cf:21:d0:d8:01:15:e6:b5:b6:6a:6d:0b:3f:
47:e0:1d:4d:2a:25:9a:4d:7c:f0:35:50:5c:32:5c:ee:6b:6e:
6b:90:05:02:88:f5:3a:40:aa:ce:a7:c8:6e:63:01:3c:9b:ce:
1f:e9:6d:d3:c9:8f:79:f9:83:47:c7:4d:8d:44:f3:63:c4:3d:
95:85:aa:90:bc:f9:43:06:1b:e7:04:0d:52:c4:25:42:f0:07:
8e:c9:fd:6b:d7:c9:66:bf:a0:2d:4d:6a:47:7d:f6:ac:c6:65:
40:f5:7a:03:08:ea:4f:f3:3a:78:9f:65:63:78:a4:6a:2a:ba:
04:ec:78:80:23:18:e8:49:9c:6b:d8:25:16:e8:76:e0:c3:b7:
31:dd:44:c0:ac:df:b9:f9:6b:98:90:4b:ad:e2:e8:a7:9f:05:
57:ce:4d:6e:8b:29:d1:94:c4:11:47:84:54:cf:97:2c:e7:7f:
83:26:cc:66:a7:c4:aa:7c:ff:2d:30:94:46:1c:36:45:81:5b:
07:1d:48:02:03:a0:6b:b8:f8:1b:bc:a4:90:b7:e3:7d:97:94:
ce:88:da:35:0b:f3:f9:35:f4:6a:53:bf:f1:0b:c9:ed:ad:e1:
08:c0:0d:6c:41:7f:90:47:48:ec:26:5f:1b:06:e8:cb:26:34:
84:33:46:cb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEFDREQxMTAvBgNVBAUTKDM2OTE1MzMzMDBBQ0MxRTAxMDVFRTAzMTcwNjM1MDdG
ODdCNDAxMkQwHhcNMjUwMTMxMDIyNTM4WhcNMjUwMjA3MDIyNTM4WjAYMRYwFAYD
VQQDEw02NzljMzRhMi04Mjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz7Xc4XZW2jKLhfvbnnsYS51gfmaznWAxxeW/cJ+Lglh2Mrf6Hn3y0zZ6rY79
33sdd4Ng0ZMq1vkRiqBq+cr6lko18E+Kt+Ku8Xt/mn8GsNuvPFZA8D/fCQKRbSpU
4Jsr4bqNBiYBxgxI7ITdg4p/axEICFs+nDKmzHh8Q0ofj/c7cBzU2bBCPOo2V/JY
Dc6XuyULCqcp9V611ctKmJNZpmH+G+MleE4TL4YRFZmQPMNBOmpks9dT+VbX1nlu
9CMUZ8cAy9GLZFQbJ0sVRGBd7l7nhxA66yvtMOoiE4rXhEg8Wvj2U6IRClMWJsAB
0afzuCtma7g/btAgqOhCfV6D9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYNxBiU
3GFviUQoyNpWMPzd8IPZMB8GA1UdIwQYMBaAFDaRUzMArMHgEF7gMXBjUH+HtAEt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUNERC8yQTJDRkM0NjRE
Q0YxMUVEQkYwNUZBNTNDNEY5QUUwMi9OcEZUTXdDc3dlQVFYdUF4Y0dOUWY0ZTBB
UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05wRlRNd0Nzd2VBUVh1QXhjR05RZjRlMEFTMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QUNERC8yQTJDRkM0NjREQ0YxMUVEQkYwNUZBNTNDNEY5QUUwMi9OcEZUTXdDc3dl
QVFYdUF4Y0dOUWY0ZTBBUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB3Qgvw9M8h0NgBFea1tmptCz9H4B1NKiWaTXzwNVBcMlzua25rkAUC
iPU6QKrOp8huYwE8m84f6W3TyY95+YNHx02NRPNjxD2VhaqQvPlDBhvnBA1SxCVC
8AeOyf1r18lmv6AtTWpHffasxmVA9XoDCOpP8zp4n2VjeKRqKroE7HiAIxjoSZxr
2CUW6Hbgw7cx3UTArN+5+WuYkEut4uinnwVXzk1uiynRlMQRR4RUz5cs53+DJsxm
p8SqfP8tMJRGHDZFgVsHHUgCA6BruPgbvKSQt+N9l5TOiNo1C/P5NfRqU7/xC8nt
reEIwA1sQX+QR0jsJl8bBujLJjSEM0bL
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:52:21 2025 by rpki-client