Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
File: 2xinykRiG1ZTwgBDlHaz8qOAhT4.mft (raw, json)
Hash identifier: u+U++Yifc4Q22162IBUvbnDdPmrMoUA5T/9d4Or075k=
Subject key identifier: E7:EC:BE:7D:FD:B1:0A:AF:7B:DE:7C:C5:9C:4F:08:91:BE:10:09:93
Authority key identifier: DB:18:A7:CA:44:62:1B:56:53:C2:00:43:94:76:B3:F2:A3:80:85:3E
Certificate issuer: /CN=A918C774/serialNumber=DB18A7CA44621B5653C200439476B3F2A380853E
Certificate serial: 3454
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
Manifest number: 344E
Signing time: Fri 31 Jan 2025 14:58:08 +0000
Manifest this update: Fri 31 Jan 2025 14:58:07 +0000
Manifest next update: Fri 07 Feb 2025 14:58:07 +0000
Files and hashes: 1: 2xinykRiG1ZTwgBDlHaz8qOAhT4.crl (hash: gE0X9C1sciPlXLICnwyxTPKwOwKKdhArD8G21jflH/s=)
2: 0458A9A409FB11EA8742F60AC4F9AE02.roa (hash: 3MU65ygEf1r2eIYg+fVLMHTs4lWxF35EpdxMw38lBRc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13396 (0x3454)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C774/serialNumber=DB18A7CA44621B5653C200439476B3F2A380853E
Validity
Not Before: Jan 31 14:58:07 2025 GMT
Not After : Feb 7 14:58:07 2025 GMT
Subject: CN=679ce4ff-44ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3b:77:42:3e:68:25:b3:a9:c4:8a:f4:72:5f:
25:61:fe:20:59:d0:53:c1:7c:fa:74:f4:fb:03:93:
79:ed:ad:bd:13:85:d0:d6:b1:c6:41:2f:75:f7:d4:
a4:70:63:c3:8a:d1:d3:dd:17:a1:ce:b5:bb:e0:36:
84:ab:d6:91:3e:37:cc:f7:65:a2:92:5e:d7:e4:e2:
17:28:0c:8f:72:d4:34:b9:b1:69:9f:2d:87:ac:4d:
0a:2a:68:26:c3:70:91:97:02:33:85:ce:47:46:f2:
ba:a7:dc:72:06:b7:9b:f4:7b:72:4b:eb:a7:af:ac:
98:d9:dc:22:6b:d9:83:d4:62:1a:a1:01:d3:ad:37:
aa:9b:a3:a8:28:e3:24:4e:aa:59:4d:a4:0b:fe:5f:
fd:46:1e:ad:bd:cf:e4:55:f5:55:c6:c0:32:13:a4:
b3:cd:84:57:8b:90:90:59:08:a9:57:56:8d:97:97:
d1:7c:c4:d2:6b:4c:ee:f7:84:0e:e5:90:25:45:94:
54:9c:ff:a8:98:5b:64:20:cb:e5:f1:16:a4:f5:cf:
a2:34:73:35:17:85:f7:39:bf:e7:60:d4:95:f3:e2:
fa:4b:fb:40:f3:47:c5:3a:67:3a:08:c2:d8:ea:23:
2e:fc:f0:75:56:6d:74:92:8f:db:54:80:21:1d:50:
d4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:EC:BE:7D:FD:B1:0A:AF:7B:DE:7C:C5:9C:4F:08:91:BE:10:09:93
X509v3 Authority Key Identifier:
keyid:DB:18:A7:CA:44:62:1B:56:53:C2:00:43:94:76:B3:F2:A3:80:85:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:dd:d3:74:61:6a:66:4d:e5:ba:d3:5a:5d:5a:81:15:fb:46:
94:75:24:71:18:c2:d2:e7:36:ab:58:ff:18:67:ac:13:a0:03:
75:11:1e:e6:7a:f9:c5:3c:37:dd:f8:17:4e:c3:e8:57:fc:d7:
0b:a5:d6:97:77:dc:49:04:b9:d3:83:25:62:0e:bf:18:fb:ea:
2e:ba:a0:a8:3b:a6:8c:05:b2:a5:1f:12:c3:5c:57:03:43:c2:
67:ff:a8:0a:47:db:24:be:dd:d0:e0:13:1e:98:a5:76:4c:95:
20:69:9e:c0:17:46:3d:8d:6c:d2:ac:c9:81:80:15:3a:06:da:
a8:0f:e6:1b:4a:dd:47:73:68:0a:fd:87:96:16:85:a0:99:01:
91:d1:9a:c8:37:ea:d8:a1:07:91:24:fd:26:02:26:da:4e:b5:
0c:57:c4:8c:4a:c7:50:2d:05:ad:ec:3d:43:51:00:59:b7:43:
b6:07:84:a5:ec:be:e9:55:c3:5f:4f:b8:24:69:d5:dc:bc:69:
41:e3:20:93:a5:15:1e:df:84:d5:58:94:6e:7e:6b:2d:ae:af:
0d:99:23:b6:80:b7:1d:a0:bf:88:45:c9:06:01:17:99:82:f6:
c2:93:08:c6:81:fd:ee:d6:d8:55:f4:b9:34:02:95:3b:1f:0d:
93:9a:dd:d8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEM3NzQxMTAvBgNVBAUTKERCMThBN0NBNDQ2MjFCNTY1M0MyMDA0Mzk0NzZCM0Yy
QTM4MDg1M0UwHhcNMjUwMTMxMTQ1ODA3WhcNMjUwMjA3MTQ1ODA3WjAYMRYwFAYD
VQQDEw02NzljZTRmZi00NGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwjt3Qj5oJbOpxIr0cl8lYf4gWdBTwXz6dPT7A5N57a29E4XQ1rHGQS9199Sk
cGPDitHT3RehzrW74DaEq9aRPjfM92Wikl7X5OIXKAyPctQ0ubFpny2HrE0KKmgm
w3CRlwIzhc5HRvK6p9xyBreb9HtyS+unr6yY2dwia9mD1GIaoQHTrTeqm6OoKOMk
TqpZTaQL/l/9Rh6tvc/kVfVVxsAyE6SzzYRXi5CQWQipV1aNl5fRfMTSa0zu94QO
5ZAlRZRUnP+omFtkIMvl8Rak9c+iNHM1F4X3Ob/nYNSV8+L6S/tA80fFOmc6CMLY
6iMu/PB1Vm10ko/bVIAhHVDU3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOfsvn39
sQqve958xZxPCJG+EAmTMB8GA1UdIwQYMBaAFNsYp8pEYhtWU8IAQ5R2s/KjgIU+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Qzc3NC81Nzk4ODdCNjFE
OTkxMUUyOUUyRjA5ODQwOEIwMkNEMi8yeGlueWtSaUcxWlR3Z0JEbEhhejhxT0Fo
VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJ4aW55a1JpRzFaVHdnQkRsSGF6OHFPQWhUNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Qzc3NC81Nzk4ODdCNjFEOTkxMUUyOUUyRjA5ODQwOEIwMkNEMi8yeGlueWtSaUcx
WlR3Z0JEbEhhejhxT0FoVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCO3dN0YWpmTeW601pdWoEV+0aUdSRxGMLS5zarWP8YZ6wToAN1ER7m
evnFPDfd+BdOw+hX/NcLpdaXd9xJBLnTgyViDr8Y++ouuqCoO6aMBbKlHxLDXFcD
Q8Jn/6gKR9skvt3Q4BMemKV2TJUgaZ7AF0Y9jWzSrMmBgBU6BtqoD+YbSt1Hc2gK
/YeWFoWgmQGR0ZrIN+rYoQeRJP0mAibaTrUMV8SMSsdQLQWt7D1DUQBZt0O2B4Sl
7L7pVcNfT7gkadXcvGlB4yCTpRUe34TVWJRufmstrq8NmSO2gLcdoL+IRckGAReZ
gvbCkwjGgf3u1thV9Lk0ApU7Hw2Tmt3Y
-----END CERTIFICATE-----
Generated at Sat Apr 26 21:57:51 2025 by rpki-client