Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft
File: 9BP1HYe7_0sKQQchh0duvgfTYb8.mft (raw, json)
Hash identifier: s8LE3lbvhezrA7/TTnvaeEIuTmZDveH/4Q+5/jIQSKk=
Subject key identifier: 30:C3:41:43:B9:3E:C8:F4:AB:BD:48:11:6F:59:F1:73:3F:F4:B6:53
Authority key identifier: F4:13:F5:1D:87:BB:FF:4B:0A:41:07:21:87:47:6E:BE:07:D3:61:BF
Certificate issuer: /CN=A9190CC3/serialNumber=F413F51D87BBFF4B0A41072187476EBE07D361BF
Certificate serial: 9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft
Manifest number: 9C
Signing time: Fri 31 Jan 2025 05:24:15 +0000
Manifest this update: Fri 31 Jan 2025 05:24:14 +0000
Manifest next update: Fri 07 Feb 2025 05:24:14 +0000
Files and hashes: 1: 9BP1HYe7_0sKQQchh0duvgfTYb8.crl (hash: UmSywxXMY0CSnw5V4rDLpR8c8AFo4V5oGhoX/MGN6cI=)
2: 88FD3F60EE7D11EE8868470EC4F9AE02.roa (hash: CY+0lVCE8pyV/yuqoYwTYIt3uyuTBJHx9OgX18w8m2Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190CC3/serialNumber=F413F51D87BBFF4B0A41072187476EBE07D361BF
Validity
Not Before: Jan 31 05:24:14 2025 GMT
Not After : Feb 7 05:24:14 2025 GMT
Subject: CN=679c5e7e-4fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ab:02:d6:64:27:2d:4a:77:b2:24:0b:e7:c1:
f5:8e:21:23:ac:4d:a7:94:03:06:2b:93:ad:0c:72:
9b:64:13:53:1d:29:c5:5e:dc:f1:b3:76:ff:b7:0c:
af:5c:00:cc:7a:65:15:6a:9e:48:cd:98:2b:7e:ea:
b5:cf:b3:ea:d4:8a:bd:35:03:e6:08:71:ba:59:7a:
86:76:11:6e:54:7d:ae:98:83:ec:13:6d:10:15:7a:
d5:f0:6b:8f:4f:5e:e6:8f:97:2d:90:61:a8:7a:24:
f5:7b:39:6c:62:5b:3e:9d:77:8e:cd:fd:e8:8a:6b:
43:78:3f:8f:07:ed:a8:3c:bf:ec:31:1a:c7:9d:50:
41:99:51:77:00:ef:ad:05:7e:87:eb:fd:1f:93:45:
98:82:a8:41:f1:85:4f:bf:60:86:8d:22:35:56:b4:
8a:22:e8:d1:47:4d:ea:0c:5e:e9:a3:fd:27:9c:70:
f1:fb:66:09:f7:63:57:42:ec:89:68:d2:8c:83:0d:
14:cf:84:e8:68:27:dd:7e:26:4b:9a:6f:6c:21:c8:
bd:70:f4:6c:01:29:88:d2:47:a9:58:23:7e:5a:df:
f8:ea:cd:c6:32:50:e9:33:59:d7:89:f6:e2:00:e4:
a9:16:3f:5a:77:ef:15:3d:75:27:d7:fd:c7:b8:83:
04:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C3:41:43:B9:3E:C8:F4:AB:BD:48:11:6F:59:F1:73:3F:F4:B6:53
X509v3 Authority Key Identifier:
keyid:F4:13:F5:1D:87:BB:FF:4B:0A:41:07:21:87:47:6E:BE:07:D3:61:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:b2:fb:1d:eb:34:8c:98:ce:47:b1:07:c5:59:6e:b7:b8:f0:
f0:f6:9c:22:3d:19:b2:fb:aa:ec:e9:c5:79:68:34:f3:c4:a3:
54:0a:da:57:68:30:07:de:02:eb:93:10:5d:17:13:9f:cd:3a:
de:98:02:34:1d:37:7d:89:f4:14:51:55:0b:55:21:7d:ce:0b:
df:47:18:8e:1c:ef:d3:be:d1:16:4c:65:3c:63:40:05:f8:8c:
05:8c:d2:04:8e:3d:9b:53:24:9f:84:2a:6f:4a:3a:09:38:14:
87:42:95:01:42:45:0d:ad:85:23:18:d1:8f:d6:8d:ba:67:4e:
c6:c7:d8:be:c5:25:12:b5:c9:27:cf:f6:11:d2:23:31:37:72:
fb:81:59:0f:ca:43:7a:f3:ef:ad:d0:fb:39:2d:f5:bd:29:ae:
1c:75:aa:6b:c9:55:c5:98:2d:7c:d3:91:c9:36:67:60:a6:64:
80:09:88:8d:91:a4:57:a7:43:7c:ef:da:48:b0:82:e0:14:d6:
d9:0a:fc:f9:ab:0b:d6:ac:5b:89:28:f1:be:7a:ce:c1:e3:30:
5b:fa:2b:2c:78:cb:32:b0:41:59:86:a0:08:41:1b:96:0b:8c:
d3:32:b0:ed:f9:0e:37:8c:12:a1:da:52:ed:9f:61:4a:11:13:
50:ec:aa:3d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTBDQzMxMTAvBgNVBAUTKEY0MTNGNTFEODdCQkZGNEIwQTQxMDcyMTg3NDc2RUJF
MDdEMzYxQkYwHhcNMjUwMTMxMDUyNDE0WhcNMjUwMjA3MDUyNDE0WjAYMRYwFAYD
VQQDEw02NzljNWU3ZS00ZmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoKsC1mQnLUp3siQL58H1jiEjrE2nlAMGK5OtDHKbZBNTHSnFXtzxs3b/twyv
XADMemUVap5IzZgrfuq1z7Pq1Iq9NQPmCHG6WXqGdhFuVH2umIPsE20QFXrV8GuP
T17mj5ctkGGoeiT1ezlsYls+nXeOzf3oimtDeD+PB+2oPL/sMRrHnVBBmVF3AO+t
BX6H6/0fk0WYgqhB8YVPv2CGjSI1VrSKIujRR03qDF7po/0nnHDx+2YJ92NXQuyJ
aNKMgw0Uz4ToaCfdfiZLmm9sIci9cPRsASmI0kepWCN+Wt/46s3GMlDpM1nXifbi
AOSpFj9ad+8VPXUn1/3HuIMEvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDDQUO5
Psj0q71IEW9Z8XM/9LZTMB8GA1UdIwQYMBaAFPQT9R2Hu/9LCkEHIYdHbr4H02G/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MENDMy8yNEI4RTI1OEVF
N0MxMUVFOUYyOTBFODBDNEY5QUUwMi85QlAxSFllN18wc0tRUWNoaDBkdXZnZlRZ
YjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlCUDFIWWU3XzBzS1FRY2hoMGR1dmdmVFliOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MENDMy8yNEI4RTI1OEVFN0MxMUVFOUYyOTBFODBDNEY5QUUwMi85QlAxSFllN18w
c0tRUWNoaDBkdXZnZlRZYjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAZsvsd6zSMmM5HsQfFWW63uPDw9pwiPRmy+6rs6cV5aDTzxKNUCtpX
aDAH3gLrkxBdFxOfzTremAI0HTd9ifQUUVULVSF9zgvfRxiOHO/TvtEWTGU8Y0AF
+IwFjNIEjj2bUySfhCpvSjoJOBSHQpUBQkUNrYUjGNGP1o26Z07Gx9i+xSUStckn
z/YR0iMxN3L7gVkPykN68++t0Ps5LfW9Ka4cdapryVXFmC1805HJNmdgpmSACYiN
kaRXp0N879pIsILgFNbZCvz5qwvWrFuJKPG+es7B4zBb+isseMsysEFZhqAIQRuW
C4zTMrDt+Q43jBKh2lLtn2FKERNQ7Ko9
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:41:53 2025 by rpki-client