Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft
File: FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft (raw, json)
Hash identifier: VqCy94KTDRhzbNDHkkV5djuE+MKHgGm9gud/UDS5FDQ=
Subject key identifier: 8F:D4:14:A1:E9:07:2D:A5:23:15:94:DE:AB:21:94:DB:BA:21:6B:17
Authority key identifier: 16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71
Certificate issuer: /CN=A918FC40/serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571
Certificate serial: 0AE9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft
Manifest number: 0AD4
Signing time: Thu 30 Jan 2025 19:25:01 +0000
Manifest this update: Thu 30 Jan 2025 19:25:00 +0000
Manifest next update: Thu 06 Feb 2025 19:25:00 +0000
Files and hashes: 1: FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl (hash: bP8NzSpt++1f/jY3luTgxaHdb7AibxJy0VxJ+RKIlSw=)
2: B7BC4714BEF011ED9634C070C4F9AE02.roa (hash: hCJDcBpZnY511Q8RFEjySoDwZo6yKwsip9nLzCPAimM=)
3: DCA05C0E419A11EAA5E2BA6EC4F9AE02.roa (hash: PF9MEJvH0IR25ZTC0vJ/AU9NL74Mubr8N6aNLLIh+tY=)
4: DC06CBC0419A11EAA5E2BA6EC4F9AE02.roa (hash: jb+NbLPJbNRFrpXKly3k3uaY8m7AD5q86vW7O0jvGcA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2793 (0xae9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC40/serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571
Validity
Not Before: Jan 30 19:25:00 2025 GMT
Not After : Feb 6 19:25:00 2025 GMT
Subject: CN=679bd20d-899e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d3:cf:93:4b:2e:13:99:2a:fa:f1:39:68:fa:
a3:a3:d6:a5:14:95:c0:e9:90:49:6a:fc:86:05:65:
b6:20:f7:03:ca:c9:9c:7f:27:12:b3:73:77:50:e1:
72:47:59:cf:df:e1:62:c6:a6:1a:fa:03:44:e9:e9:
4f:af:f1:d9:e6:a3:d8:61:56:97:24:3f:1a:29:e5:
c8:06:3e:5b:f5:c2:fc:c7:1d:af:1a:69:b5:1f:ab:
a7:31:77:c3:f8:e0:94:a4:5b:39:81:5d:3a:b5:c9:
48:93:74:3f:7d:c9:bc:9a:60:0d:27:d7:e5:f6:a1:
a3:92:dc:14:b1:90:f4:16:f1:5d:86:28:14:ec:e2:
b7:ef:9e:71:14:86:12:81:59:50:e5:16:c4:d6:b4:
b2:c5:b6:c1:24:6c:c2:f0:09:a1:6e:8a:9b:8f:98:
d3:ae:a1:85:3e:88:4a:4a:53:b3:b6:9d:fd:7a:0a:
5b:03:20:09:ad:6d:0f:f6:e0:da:c8:05:a1:30:cc:
b9:4d:28:46:93:24:b2:98:fa:69:f9:b0:d1:89:d4:
20:c4:85:9e:ea:9a:4b:37:40:81:fd:9f:67:9c:58:
7e:f1:9f:61:bd:24:d1:40:65:8b:9c:fb:43:ab:bd:
04:9f:01:a1:6a:a6:14:aa:70:8d:a3:4f:86:20:fd:
36:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D4:14:A1:E9:07:2D:A5:23:15:94:DE:AB:21:94:DB:BA:21:6B:17
X509v3 Authority Key Identifier:
keyid:16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:6a:4b:1e:a5:cb:28:44:d5:77:c5:85:f4:9c:7d:fb:1f:52:
98:b3:3a:8b:64:67:2d:0c:c9:8f:e3:02:e5:c3:e9:fa:8a:17:
27:e6:10:74:00:7b:95:da:b5:58:35:ca:0e:c6:b0:99:b9:c1:
60:ab:94:3b:9d:7e:5a:ba:1f:86:cb:2c:e0:86:9e:4f:34:fc:
88:f3:82:20:e2:52:22:97:25:5e:1a:58:25:46:4f:c3:9d:54:
70:ce:72:6b:84:8c:95:06:57:3c:57:f4:37:ef:a5:18:a3:38:
4c:0d:df:5d:ad:68:88:86:9e:70:15:a3:cd:37:9f:40:93:f2:
79:e4:58:41:27:9f:de:b9:75:fc:29:31:ee:4c:34:60:8a:33:
08:c8:bf:d4:95:2e:c0:12:67:ea:12:1a:a8:15:fd:13:67:6f:
8d:53:b7:c7:88:82:eb:f5:9a:b6:75:96:93:13:79:40:98:07:
08:51:76:5d:29:ba:21:d4:38:69:fe:6e:55:51:5f:91:88:ab:
22:ce:cc:08:0d:0a:25:70:a5:dc:e1:be:4a:f5:45:fb:9c:f7:
ce:0f:98:f4:7f:28:92:72:05:3e:7e:7b:19:fd:27:af:f9:21:
60:93:e3:c1:0b:6b:43:c5:41:74:4b:01:f0:91:b5:0d:ce:b3:
f6:ba:f6:6b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEZDNDAxMTAvBgNVBAUTKDE2MDFEODY1MERENTU2QjJBRkIwODNCMjMzRkY2NUFF
M0RBRDE1NzEwHhcNMjUwMTMwMTkyNTAwWhcNMjUwMjA2MTkyNTAwWjAYMRYwFAYD
VQQDEw02NzliZDIwZC04OTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx9PPk0suE5kq+vE5aPqjo9alFJXA6ZBJavyGBWW2IPcDysmcfycSs3N3UOFy
R1nP3+FixqYa+gNE6elPr/HZ5qPYYVaXJD8aKeXIBj5b9cL8xx2vGmm1H6unMXfD
+OCUpFs5gV06tclIk3Q/fcm8mmANJ9fl9qGjktwUsZD0FvFdhigU7OK3755xFIYS
gVlQ5RbE1rSyxbbBJGzC8Amhboqbj5jTrqGFPohKSlOztp39egpbAyAJrW0P9uDa
yAWhMMy5TShGkySymPpp+bDRidQgxIWe6ppLN0CB/Z9nnFh+8Z9hvSTRQGWLnPtD
q70EnwGhaqYUqnCNo0+GIP02JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/UFKHp
By2lIxWU3qshlNu6IWsXMB8GA1UdIwQYMBaAFBYB2GUN1Vayr7CDsjP/Za49rRVx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM0MC82MTdGMzUzNjQw
RTExMUVBQkM2MkRCMjZDNEY5QUUwMi9GZ0hZWlEzVlZyS3ZzSU95TV85bHJqMnRG
WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZnSFlaUTNWVnJLdnNJT3lNXzlscmoydEZYRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RkM0MC82MTdGMzUzNjQwRTExMUVBQkM2MkRCMjZDNEY5QUUwMi9GZ0hZWlEzVlZy
S3ZzSU95TV85bHJqMnRGWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC4aksepcsoRNV3xYX0nH37H1KYszqLZGctDMmP4wLlw+n6ihcn5hB0
AHuV2rVYNcoOxrCZucFgq5Q7nX5auh+Gyyzghp5PNPyI84Ig4lIilyVeGlglRk/D
nVRwznJrhIyVBlc8V/Q376UYozhMDd9drWiIhp5wFaPNN59Ak/J55FhBJ5/euXX8
KTHuTDRgijMIyL/UlS7AEmfqEhqoFf0TZ2+NU7fHiILr9Zq2dZaTE3lAmAcIUXZd
Kboh1Dhp/m5VUV+RiKsizswIDQolcKXc4b5K9UX7nPfOD5j0fyiScgU+fnsZ/Sev
+SFgk+PBC2tDxUF0SwHwkbUNzrP2uvZr
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:17:39 2025 by rpki-client