Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft
File: g9YM-N6oAia4ByS83mcD0Q1lf_4.mft (raw, json)
Hash identifier: PMUo0c1B0hBgaD6YL1N2x/oPsSO1hqzQIjCsfzI6ZCg=
Subject key identifier: D6:91:8F:A8:CD:C1:3D:B5:B8:9A:8C:87:67:B7:71:E6:3D:F1:41:DE
Authority key identifier: 83:D6:0C:F8:DE:A8:02:26:B8:07:24:BC:DE:67:03:D1:0D:65:7F:FE
Certificate issuer: /CN=A918F7A1/serialNumber=83D60CF8DEA80226B80724BCDE6703D10D657FFE
Certificate serial: 017F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9YM-N6oAia4ByS83mcD0Q1lf_4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft
Manifest number: 067E
Signing time: Thu 30 Jan 2025 23:40:17 +0000
Manifest this update: Thu 30 Jan 2025 23:40:16 +0000
Manifest next update: Thu 06 Feb 2025 23:40:16 +0000
Files and hashes: 1: g9YM-N6oAia4ByS83mcD0Q1lf_4.crl (hash: Xe4w98AtYWPP7GZ32L/r6tZ5pvqNaw4+nI4gOvl6/pQ=)
2: FC1D8B7A9C7C11ED96690F39C4F9AE02.roa (hash: ywWchnTSu/qeQDeWbCVaFbaIpGcNtf7MxWBgX+a8m9E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 383 (0x17f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F7A1/serialNumber=83D60CF8DEA80226B80724BCDE6703D10D657FFE
Validity
Not Before: Jan 30 23:40:16 2025 GMT
Not After : Feb 6 23:40:16 2025 GMT
Subject: CN=679c0de1-ea8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:01:8f:ca:ac:50:dd:c3:0d:d5:6d:2c:5e:93:
d1:ef:a6:82:14:7e:80:fc:0b:bf:c6:ba:df:29:0e:
db:68:1d:71:b7:db:1d:31:74:c9:0c:a5:e8:3d:39:
f4:46:83:5f:ac:4f:24:26:54:0f:75:72:54:75:b0:
1f:64:f9:bc:82:20:7f:1a:d4:1c:5c:d0:04:80:45:
cc:db:f8:d4:19:ac:4e:40:af:38:93:b0:16:45:d9:
c1:4a:1c:4b:49:88:f8:a1:92:88:6e:10:01:76:1b:
45:43:87:d3:b5:4a:51:8e:68:04:12:60:66:3b:db:
b6:a5:d7:fa:8f:49:29:89:70:4f:4c:61:31:11:61:
fd:8d:f4:ef:8d:98:fe:74:d1:c1:48:d4:f5:e3:ef:
3f:2f:d9:a3:e8:fc:32:6f:7a:23:3e:b5:ae:c8:48:
67:21:4e:ab:0e:69:02:d6:e6:ce:7c:15:2c:45:cc:
3c:61:de:45:bd:0d:51:52:3c:1a:27:c9:14:a3:63:
4f:6e:a2:f5:c8:1b:84:ab:4d:95:92:2e:7f:20:f9:
ff:19:b8:36:b2:14:98:2b:9c:48:37:bd:f7:1f:08:
c8:03:13:51:bf:2c:cb:2f:0a:65:af:69:b0:3c:66:
1d:d7:80:b2:2b:3f:2a:f2:d9:b6:62:2d:6e:38:79:
4d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:91:8F:A8:CD:C1:3D:B5:B8:9A:8C:87:67:B7:71:E6:3D:F1:41:DE
X509v3 Authority Key Identifier:
keyid:83:D6:0C:F8:DE:A8:02:26:B8:07:24:BC:DE:67:03:D1:0D:65:7F:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9YM-N6oAia4ByS83mcD0Q1lf_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:de:8a:87:b5:12:d7:c1:f5:cd:6f:49:86:b9:c3:65:a6:f4:
cc:53:d1:c4:1b:3f:0b:cd:49:79:83:03:5d:8d:7f:fa:ff:f5:
5e:0a:ed:e2:7e:4b:f8:61:ad:01:68:73:c9:a7:c1:36:c9:cc:
49:29:e2:2f:45:bf:03:73:42:8b:c6:c6:3f:6c:d8:9e:e0:d8:
7c:ab:e2:86:76:19:ed:80:d2:74:07:95:cd:41:0f:84:62:a3:
b2:32:f9:55:25:60:58:b2:00:14:3b:c7:19:9f:1f:23:01:7d:
62:51:8e:9d:6c:b9:81:00:09:5a:5d:05:5d:ef:e3:9e:51:7a:
c9:80:7a:d0:80:72:98:7a:2e:ed:44:a3:ea:bc:48:b4:af:7f:
03:16:05:e0:73:84:05:97:aa:9c:b1:0f:dd:cc:ab:ed:fc:c2:
81:c2:68:fc:c4:68:dd:b1:01:c5:e7:00:de:3c:89:72:58:c6:
b6:15:df:2d:0a:d4:88:f2:d7:f8:cb:42:da:71:c1:ef:80:79:
4b:c9:8b:04:85:c6:2f:78:ca:d7:be:ab:bb:fa:c0:91:3c:84:
c1:a3:97:b2:e2:d5:3c:11:01:3f:ba:89:1e:a2:17:82:67:fe:
27:53:39:e2:07:f7:b1:ba:09:52:02:10:c8:02:ec:cb:50:b2:
15:e4:fb:5e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEY3QTExMTAvBgNVBAUTKDgzRDYwQ0Y4REVBODAyMjZCODA3MjRCQ0RFNjcwM0Qx
MEQ2NTdGRkUwHhcNMjUwMTMwMjM0MDE2WhcNMjUwMjA2MjM0MDE2WjAYMRYwFAYD
VQQDEw02NzljMGRlMS1lYThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0AGPyqxQ3cMN1W0sXpPR76aCFH6A/Au/xrrfKQ7baB1xt9sdMXTJDKXoPTn0
RoNfrE8kJlQPdXJUdbAfZPm8giB/GtQcXNAEgEXM2/jUGaxOQK84k7AWRdnBShxL
SYj4oZKIbhABdhtFQ4fTtUpRjmgEEmBmO9u2pdf6j0kpiXBPTGExEWH9jfTvjZj+
dNHBSNT14+8/L9mj6Pwyb3ojPrWuyEhnIU6rDmkC1ubOfBUsRcw8Yd5FvQ1RUjwa
J8kUo2NPbqL1yBuEq02Vki5/IPn/Gbg2shSYK5xIN733HwjIAxNRvyzLLwplr2mw
PGYd14CyKz8q8tm2Yi1uOHlNJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNaRj6jN
wT21uJqMh2e3ceY98UHeMB8GA1UdIwQYMBaAFIPWDPjeqAImuAckvN5nA9ENZX/+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjdBMS85MUU4RTI4NEY0
MzcxMUVCQjVENTY5MUNDNEY5QUUwMi9nOVlNLU42b0FpYTRCeVM4M21jRDBRMWxm
XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2c5WU0tTjZvQWlhNEJ5UzgzbWNEMFExbGZfNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RjdBMS85MUU4RTI4NEY0MzcxMUVCQjVENTY5MUNDNEY5QUUwMi9nOVlNLU42b0Fp
YTRCeVM4M21jRDBRMWxmXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCd3oqHtRLXwfXNb0mGucNlpvTMU9HEGz8LzUl5gwNdjX/6//VeCu3i
fkv4Ya0BaHPJp8E2ycxJKeIvRb8Dc0KLxsY/bNie4Nh8q+KGdhntgNJ0B5XNQQ+E
YqOyMvlVJWBYsgAUO8cZnx8jAX1iUY6dbLmBAAlaXQVd7+OeUXrJgHrQgHKYei7t
RKPqvEi0r38DFgXgc4QFl6qcsQ/dzKvt/MKBwmj8xGjdsQHF5wDePIlyWMa2Fd8t
CtSI8tf4y0LaccHvgHlLyYsEhcYveMrXvqu7+sCRPITBo5ey4tU8EQE/uokeoheC
Z/4nUzniB/exuglSAhDIAuzLULIV5Pte
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:47:47 2025 by rpki-client