Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft
File: 9Avota0WsYR_wNT0cI-dQUkxq6Y.mft (raw, json)
Hash identifier: Jtpov8Cdu2mfrpsKa4/5x4UFIzLHDTKx+yi+9B/gR4c=
Subject key identifier: 67:11:76:D7:AC:BC:37:C8:4F:EF:A0:B2:4E:3C:CC:4D:BB:51:E9:1A
Authority key identifier: F4:0B:E8:B5:AD:16:B1:84:7F:C0:D4:F4:70:8F:9D:41:49:31:AB:A6
Certificate issuer: /CN=A918BCEE/serialNumber=F40BE8B5AD16B1847FC0D4F4708F9D414931ABA6
Certificate serial: 0283
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft
Manifest number: 025C
Signing time: Fri 31 Jan 2025 02:02:52 +0000
Manifest this update: Fri 31 Jan 2025 02:02:52 +0000
Manifest next update: Fri 07 Feb 2025 02:02:51 +0000
Files and hashes: 1: 9Avota0WsYR_wNT0cI-dQUkxq6Y.crl (hash: MKmdxP3MWU+1HFVHBTNa6gIS5vMSepMRtXRLEmMbYqU=)
2: 214E67EA1EF911EDAAC3AE62C4F9AE02.roa (hash: P+oFsHSrz6Z40GVPmZYxBjW2akRghdlk5wpEVhVL1rI=)
3: 36660EAE679E11EFBAD37686C4F9AE02.roa (hash: nH2+QhXBKJeLjmB/2YigT5kFiPqVwLkkeX6UUXFHL/Y=)
4: E6E564502DD811EF8471C475C4F9AE02.roa (hash: c6P7cvTAYa5cIr6cZFpnulKD16R+KCzXwu9F72fYmvs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 643 (0x283)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BCEE/serialNumber=F40BE8B5AD16B1847FC0D4F4708F9D414931ABA6
Validity
Not Before: Jan 31 02:02:52 2025 GMT
Not After : Feb 7 02:02:51 2025 GMT
Subject: CN=679c2f4c-549f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:92:64:80:11:19:1e:1b:08:ed:52:df:81:4a:
cd:67:fa:32:84:92:20:38:e5:84:99:41:32:d0:71:
96:4b:a6:07:ea:85:c5:b6:80:e2:7b:ed:14:32:f0:
29:a8:f9:31:b2:8a:6b:10:0d:93:ab:3f:5c:24:73:
99:b5:ad:3e:18:5d:f3:1b:ae:ba:38:a3:44:15:ea:
d1:ea:e1:0d:f6:49:95:b0:85:9c:86:bd:51:7f:42:
0c:7b:e7:87:fe:ab:82:0d:2f:ce:6f:ba:bf:2e:46:
88:d0:48:7b:9d:75:71:0d:2d:6d:42:6f:00:24:d9:
ff:6f:ee:07:7c:bd:94:28:41:e1:6c:04:af:f8:66:
29:57:b8:e0:6a:11:c4:8b:85:94:23:ff:5f:b6:f3:
0a:c0:2c:9a:57:3f:7b:3c:a4:d8:d7:72:5f:48:6a:
93:9c:d6:c4:c3:3b:74:d5:1e:c6:48:4a:74:fa:a0:
ed:4a:a1:6a:58:b8:bc:68:8b:18:21:b9:6d:19:8c:
fb:d6:4e:c0:4a:a9:31:20:0a:e9:3a:ac:5a:ce:74:
a6:c6:31:f1:48:11:a6:66:5f:e6:da:a6:37:46:68:
6d:fc:f5:54:c3:03:44:e5:6c:79:f6:21:c3:d3:a1:
45:0f:35:6a:f7:95:7b:9b:19:72:81:8d:2d:77:d4:
17:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:11:76:D7:AC:BC:37:C8:4F:EF:A0:B2:4E:3C:CC:4D:BB:51:E9:1A
X509v3 Authority Key Identifier:
keyid:F4:0B:E8:B5:AD:16:B1:84:7F:C0:D4:F4:70:8F:9D:41:49:31:AB:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:9f:59:04:2c:7b:9d:6c:36:9d:2f:b3:37:f0:bb:7e:df:a8:
1a:2c:12:9d:95:5a:91:c4:9c:2b:0a:df:64:87:2c:4e:81:43:
20:99:b0:64:85:00:ef:74:ce:b0:2a:2c:26:d5:a8:d2:22:be:
41:83:13:c4:1c:68:06:97:2c:d3:cb:c7:4b:73:68:b0:f6:65:
f6:80:4b:2f:41:11:d2:ef:38:50:7e:70:65:06:84:6b:c9:dd:
25:8c:4d:96:a6:80:35:2e:89:93:50:e4:79:9c:21:ba:6f:cf:
ca:7f:9c:63:ed:f1:dd:26:eb:d0:39:e3:3e:a9:c8:ee:bb:49:
b9:28:08:f6:22:3a:0f:e5:1e:9b:87:98:39:5b:33:a3:36:ea:
8c:00:1c:65:d5:24:9f:15:e1:d4:40:50:0a:b5:d2:47:3f:a5:
5e:85:26:6e:84:22:0f:cc:83:55:7e:99:d0:2f:3b:c2:5f:d4:
38:20:9c:69:5d:08:93:c9:04:5a:86:73:29:8e:bc:75:2d:83:
f3:1e:4f:d5:11:b6:07:87:5a:bc:a8:3e:dd:90:df:80:31:7d:
03:8d:42:7f:79:25:67:1a:fb:81:11:7f:62:4c:57:a5:23:cf:
8c:e7:c3:9b:51:75:17:d2:9b:c4:cc:20:3e:8b:20:d8:e0:34:
1e:a1:05:a1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEJDRUUxMTAvBgNVBAUTKEY0MEJFOEI1QUQxNkIxODQ3RkMwRDRGNDcwOEY5RDQx
NDkzMUFCQTYwHhcNMjUwMTMxMDIwMjUyWhcNMjUwMjA3MDIwMjUxWjAYMRYwFAYD
VQQDEw02NzljMmY0Yy01NDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtZJkgBEZHhsI7VLfgUrNZ/oyhJIgOOWEmUEy0HGWS6YH6oXFtoDie+0UMvAp
qPkxsoprEA2Tqz9cJHOZta0+GF3zG666OKNEFerR6uEN9kmVsIWchr1Rf0IMe+eH
/quCDS/Ob7q/LkaI0Eh7nXVxDS1tQm8AJNn/b+4HfL2UKEHhbASv+GYpV7jgahHE
i4WUI/9ftvMKwCyaVz97PKTY13JfSGqTnNbEwzt01R7GSEp0+qDtSqFqWLi8aIsY
IbltGYz71k7ASqkxIArpOqxaznSmxjHxSBGmZl/m2qY3Rmht/PVUwwNE5Wx59iHD
06FFDzVq95V7mxlygY0td9QXKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGcRdtes
vDfIT++gsk48zE27UekaMB8GA1UdIwQYMBaAFPQL6LWtFrGEf8DU9HCPnUFJMaum
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkNFRS82OEMzNTYzMDEz
RkYxMUVEQTNGMzM5NDFDNEY5QUUwMi85QXZvdGEwV3NZUl93TlQwY0ktZFFVa3hx
NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlBdm90YTBXc1lSX3dOVDBjSS1kUVVreHE2WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QkNFRS82OEMzNTYzMDEzRkYxMUVEQTNGMzM5NDFDNEY5QUUwMi85QXZvdGEwV3NZ
Ul93TlQwY0ktZFFVa3hxNlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBXn1kELHudbDadL7M38Lt+36gaLBKdlVqRxJwrCt9khyxOgUMgmbBk
hQDvdM6wKiwm1ajSIr5BgxPEHGgGlyzTy8dLc2iw9mX2gEsvQRHS7zhQfnBlBoRr
yd0ljE2WpoA1LomTUOR5nCG6b8/Kf5xj7fHdJuvQOeM+qcjuu0m5KAj2IjoP5R6b
h5g5WzOjNuqMABxl1SSfFeHUQFAKtdJHP6VehSZuhCIPzINVfpnQLzvCX9Q4IJxp
XQiTyQRahnMpjrx1LYPzHk/VEbYHh1q8qD7dkN+AMX0DjUJ/eSVnGvuBEX9iTFel
I8+M58ObUXUX0pvEzCA+iyDY4DQeoQWh
-----END CERTIFICATE-----
Generated at Sun Apr 27 02:55:52 2025 by rpki-client