Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft
File: aNpOhaeYSz_RCu80x9HQDxtGRTE.mft (raw, json)
Hash identifier: 0eP79Ni4WMAwILmO1hQTxHT/5LJ496uFRLOFojI4+UM=
Subject key identifier: 01:71:DD:81:F7:EA:0E:68:DA:26:41:03:58:03:C6:7D:73:8C:DF:AA
Authority key identifier: 68:DA:4E:85:A7:98:4B:3F:D1:0A:EF:34:C7:D1:D0:0F:1B:46:45:31
Certificate issuer: /CN=A918D931/serialNumber=68DA4E85A7984B3FD10AEF34C7D1D00F1B464531
Certificate serial: 0762
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft
Manifest number: 075C
Signing time: Thu 30 Jan 2025 21:27:49 +0000
Manifest this update: Thu 30 Jan 2025 21:27:48 +0000
Manifest next update: Thu 06 Feb 2025 21:27:48 +0000
Files and hashes: 1: aNpOhaeYSz_RCu80x9HQDxtGRTE.crl (hash: wbcoe3RFzUhLPGSUxrX4Sw7HOcmtZz/oULfTbJFzc9k=)
2: F575D65A085A11EBA6864D71C4F9AE02.roa (hash: MoYCzKz4ghJi1D1zSWKy/H/ig794mxo8w546loZw0HA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1890 (0x762)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D931/serialNumber=68DA4E85A7984B3FD10AEF34C7D1D00F1B464531
Validity
Not Before: Jan 30 21:27:48 2025 GMT
Not After : Feb 6 21:27:48 2025 GMT
Subject: CN=679beed5-7793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fc:ab:e6:f8:02:a5:93:19:31:ee:38:9c:f2:
69:2f:35:b7:15:5c:34:68:fe:db:e5:9c:7a:dc:8e:
14:24:e4:4a:a5:cb:1e:06:ed:01:cf:17:c7:3e:cb:
63:4b:b7:22:38:7c:01:66:2e:82:48:f8:e1:ad:02:
5f:32:a8:85:7d:de:aa:c7:18:eb:80:d8:4b:be:04:
c0:95:2a:a9:5c:dd:d2:49:94:1c:0a:02:8f:67:07:
3c:82:4f:19:61:1e:7c:3e:47:31:cd:98:68:da:ff:
20:c5:04:71:63:8a:6f:1f:29:a4:d4:11:20:fd:1b:
6f:13:c0:e6:80:e2:7e:d7:98:92:f8:69:2e:8d:fe:
7f:02:7d:3a:2b:32:6e:33:3f:49:09:e8:fc:6e:ae:
78:bd:e7:08:1f:b3:90:9c:96:44:f7:96:09:40:48:
40:57:63:7b:0b:0f:f9:cf:d0:18:6a:76:ef:44:ef:
de:23:c0:f7:68:ee:74:68:09:7c:ae:03:77:e1:cc:
16:46:3f:51:57:7a:04:8a:2f:7b:05:51:f5:cf:fe:
c0:82:19:29:20:81:df:d7:59:9e:d4:5b:b6:a6:5d:
24:fe:8b:c6:1e:ad:46:4c:65:ff:eb:0f:c1:bc:01:
8d:d4:1d:3a:f0:e8:30:73:5e:d0:c7:79:80:39:6b:
cc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:71:DD:81:F7:EA:0E:68:DA:26:41:03:58:03:C6:7D:73:8C:DF:AA
X509v3 Authority Key Identifier:
keyid:68:DA:4E:85:A7:98:4B:3F:D1:0A:EF:34:C7:D1:D0:0F:1B:46:45:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:73:0f:20:98:2a:42:b0:27:1f:23:8b:e6:dc:c0:a3:4c:ca:
63:9c:42:31:65:50:a6:d2:46:ca:2a:0a:be:29:8e:71:4c:55:
5e:a0:a0:9f:87:84:f1:e7:97:08:52:6b:5a:5a:27:e9:95:0c:
74:38:52:c4:ec:06:a0:7b:3b:0d:e0:25:2c:5d:fe:f3:c0:78:
67:32:5b:19:9c:d5:4a:3c:3e:6c:6b:e2:b7:3c:49:75:b3:40:
f1:c7:40:6c:e8:c7:17:5b:5e:cf:df:c7:12:52:5f:54:6a:80:
4e:60:03:e6:5a:5e:f7:fe:5c:0f:c6:96:42:c0:7d:9f:62:1f:
72:b6:d3:5c:67:92:d1:e7:6d:b0:9f:11:9b:b8:5c:0e:3b:bc:
9a:a5:c4:b5:f0:8c:64:3c:40:1d:13:ba:26:e0:f6:80:55:8f:
26:b8:cf:34:83:8e:80:31:8f:f2:3e:f3:d0:39:92:f2:3c:66:
38:1d:17:a8:1e:ff:fe:14:3e:aa:a0:62:59:7c:c3:c6:75:96:
b7:f8:8f:a2:e2:6c:37:f0:54:34:8e:45:af:aa:6b:df:09:32:
83:6f:16:4d:37:e6:6c:c6:22:e6:45:2c:6d:0d:a9:55:64:67:
3d:04:8e:97:4c:6e:9b:68:6b:e7:be:ca:ab:a2:8e:d9:55:3d:
17:67:85:46
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQ5MzExMTAvBgNVBAUTKDY4REE0RTg1QTc5ODRCM0ZEMTBBRUYzNEM3RDFEMDBG
MUI0NjQ1MzEwHhcNMjUwMTMwMjEyNzQ4WhcNMjUwMjA2MjEyNzQ4WjAYMRYwFAYD
VQQDEw02NzliZWVkNS03NzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr/yr5vgCpZMZMe44nPJpLzW3FVw0aP7b5Zx63I4UJORKpcseBu0BzxfHPstj
S7ciOHwBZi6CSPjhrQJfMqiFfd6qxxjrgNhLvgTAlSqpXN3SSZQcCgKPZwc8gk8Z
YR58PkcxzZho2v8gxQRxY4pvHymk1BEg/RtvE8DmgOJ+15iS+Gkujf5/An06KzJu
Mz9JCej8bq54vecIH7OQnJZE95YJQEhAV2N7Cw/5z9AYanbvRO/eI8D3aO50aAl8
rgN34cwWRj9RV3oEii97BVH1z/7AghkpIIHf11me1Fu2pl0k/ovGHq1GTGX/6w/B
vAGN1B068Ogwc17Qx3mAOWvMlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAFx3YH3
6g5o2iZBA1gDxn1zjN+qMB8GA1UdIwQYMBaAFGjaToWnmEs/0QrvNMfR0A8bRkUx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDkzMS9GQjVBNTA4NDA4
NTgxMUVCOTNCN0E2NkJDNEY5QUUwMi9hTnBPaGFlWVN6X1JDdTgweDlIUUR4dEdS
VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FOcE9oYWVZU3pfUkN1ODB4OUhRRHh0R1JURS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDkzMS9GQjVBNTA4NDA4NTgxMUVCOTNCN0E2NkJDNEY5QUUwMi9hTnBPaGFlWVN6
X1JDdTgweDlIUUR4dEdSVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC7cw8gmCpCsCcfI4vm3MCjTMpjnEIxZVCm0kbKKgq+KY5xTFVeoKCf
h4Tx55cIUmtaWifplQx0OFLE7AagezsN4CUsXf7zwHhnMlsZnNVKPD5sa+K3PEl1
s0Dxx0Bs6McXW17P38cSUl9UaoBOYAPmWl73/lwPxpZCwH2fYh9yttNcZ5LR522w
nxGbuFwOO7yapcS18IxkPEAdE7om4PaAVY8muM80g46AMY/yPvPQOZLyPGY4HReo
Hv/+FD6qoGJZfMPGdZa3+I+i4mw38FQ0jkWvqmvfCTKDbxZNN+ZsxiLmRSxtDalV
ZGc9BI6XTG6baGvnvsqroo7ZVT0XZ4VG
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:32:38 2025 by rpki-client