Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
File: 584ZoXhVIoFdq2P_ZttviQP8-fo.mft (raw, json)
Hash identifier: 07VM9xBO2JKaLXeILjWUzE5Q2WtUPtHH5fu+upqmxLg=
Subject key identifier: E0:9F:BF:46:63:52:CB:6F:A8:79:0F:5C:59:29:64:BB:4E:5F:30:75
Authority key identifier: E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA
Certificate issuer: /CN=A9190CC7/serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA
Certificate serial: 01BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
Manifest number: 01AE
Signing time: Fri 31 Jan 2025 02:33:14 +0000
Manifest this update: Fri 31 Jan 2025 02:33:13 +0000
Manifest next update: Fri 07 Feb 2025 02:33:13 +0000
Files and hashes: 1: 584ZoXhVIoFdq2P_ZttviQP8-fo.crl (hash: 5CaBScc3pjcrkjem/eAM69MLMfBFo2ByOJ3/NW8/qZk=)
2: 0BC0C374A7D711EEB631CA47C4F9AE02.roa (hash: GYHUkkvyeIFfScmABzCLZTH4inEWtwXGbi+j71xqPHQ=)
3: 455D199EE38B11EE84566164C4F9AE02.roa (hash: QIfFh4ayHyE+fbiYpOjvVIDqpWczkf3Nd//Ot2hnu8A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 445 (0x1bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190CC7/serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA
Validity
Not Before: Jan 31 02:33:13 2025 GMT
Not After : Feb 7 02:33:13 2025 GMT
Subject: CN=679c366a-45c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:57:18:97:87:3a:77:88:22:73:a1:e3:6c:44:
03:dc:2d:fe:1d:4b:5a:fc:75:d4:7d:07:e6:7d:47:
d6:c6:72:03:f7:6a:6b:ae:14:ca:34:7d:7b:5e:1d:
3c:c4:79:78:f6:b1:99:2a:f3:5d:dd:c9:0f:7c:6a:
1d:23:72:2b:44:71:55:eb:4e:cf:21:95:0a:21:ab:
7e:72:45:bf:af:66:41:26:f3:16:39:84:a0:63:e9:
19:16:0a:df:6e:d2:6a:bd:ac:07:38:39:de:3e:ff:
60:10:c6:fa:90:4f:31:1d:d0:9c:5b:0e:84:19:0f:
41:b7:2a:a5:ca:b6:9a:a4:09:5a:18:fc:57:0b:fb:
6d:b3:1b:b5:23:f5:4c:96:87:da:7e:e8:5d:c7:d5:
5d:00:0b:8e:89:2d:b1:2e:08:fb:aa:c5:53:e9:8f:
19:e4:a0:a8:4f:d8:0d:78:7a:ac:2a:3a:64:aa:d6:
a5:6e:84:9c:13:e6:38:49:b1:13:41:59:f5:d2:37:
39:5c:07:0f:9f:4d:8e:76:4a:e6:0c:c3:97:2c:95:
e4:49:3f:89:ed:b2:c9:33:9d:c3:cc:cc:92:49:65:
cc:e8:f7:59:68:38:e9:87:6b:09:6c:20:67:12:41:
e7:a6:9b:da:40:02:ea:b8:d3:84:a5:53:9b:56:27:
d4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9F:BF:46:63:52:CB:6F:A8:79:0F:5C:59:29:64:BB:4E:5F:30:75
X509v3 Authority Key Identifier:
keyid:E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:cb:d4:e4:bf:73:f4:16:7f:5c:d6:08:51:6f:e2:85:6d:c6:
ff:72:68:f3:cb:5f:23:38:2f:0e:9c:45:fc:62:31:12:9e:a5:
82:f7:2d:cd:44:ee:bd:56:51:9a:01:90:2b:c1:e7:01:16:06:
6f:ae:a0:6f:53:23:af:92:7d:19:b3:5a:4f:6b:c5:9f:4f:2d:
38:8d:b5:d9:a6:76:25:ab:23:28:a8:b4:77:04:82:9b:98:94:
04:08:15:95:f6:4d:8b:48:e0:e4:59:0f:10:9d:79:61:36:5b:
22:c1:fa:76:56:84:cc:47:7b:5e:8d:d5:83:3b:74:3a:4f:5b:
49:cc:38:78:1d:14:0d:01:28:d4:c8:e4:c0:06:af:dd:99:17:
d8:b3:2b:56:d7:28:eb:66:16:6b:8b:37:99:4e:86:04:2c:5d:
42:1e:ca:26:c5:e5:99:c8:fb:f3:13:51:6a:db:d0:16:db:21:
37:06:41:13:f9:8d:ee:21:95:25:0f:23:6b:12:15:0f:d8:6b:
0e:9f:97:f0:41:a0:4d:57:a3:41:1f:1c:ec:08:96:18:fd:47:
36:f6:7d:a6:7b:a5:e4:f8:e2:d9:42:6e:bf:c3:73:0e:39:87:
67:23:21:8b:2f:fe:d8:26:e9:05:77:eb:10:a4:c2:dc:d5:36:
a5:6f:84:43
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTBDQzcxMTAvBgNVBAUTKEU3Q0UxOUExNzg1NTIyODE1REFCNjNGRjY2REI2Rjg5
MDNGQ0Y5RkEwHhcNMjUwMTMxMDIzMzEzWhcNMjUwMjA3MDIzMzEzWjAYMRYwFAYD
VQQDEw02NzljMzY2YS00NWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu1cYl4c6d4gic6HjbEQD3C3+HUta/HXUfQfmfUfWxnID92prrhTKNH17Xh08
xHl49rGZKvNd3ckPfGodI3IrRHFV607PIZUKIat+ckW/r2ZBJvMWOYSgY+kZFgrf
btJqvawHODnePv9gEMb6kE8xHdCcWw6EGQ9BtyqlyraapAlaGPxXC/ttsxu1I/VM
lofafuhdx9VdAAuOiS2xLgj7qsVT6Y8Z5KCoT9gNeHqsKjpkqtalboScE+Y4SbET
QVn10jc5XAcPn02OdkrmDMOXLJXkST+J7bLJM53DzMySSWXM6PdZaDjph2sJbCBn
EkHnppvaQALquNOEpVObVifUawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOCfv0Zj
UstvqHkPXFkpZLtOXzB1MB8GA1UdIwQYMBaAFOfOGaF4VSKBXatj/2bbb4kD/Pn6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MENDNy8wMzRGQzYxQTY0
MTUxMUVEOThGMkU1NTRDNEY5QUUwMi81ODRab1hoVklvRmRxMlBfWnR0dmlRUDgt
Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzU4NFpvWGhWSW9GZHEyUF9adHR2aVFQOC1mby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MENDNy8wMzRGQzYxQTY0MTUxMUVEOThGMkU1NTRDNEY5QUUwMi81ODRab1hoVklv
RmRxMlBfWnR0dmlRUDgtZm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB9y9Tkv3P0Fn9c1ghRb+KFbcb/cmjzy18jOC8OnEX8YjESnqWC9y3N
RO69VlGaAZArwecBFgZvrqBvUyOvkn0Zs1pPa8WfTy04jbXZpnYlqyMoqLR3BIKb
mJQECBWV9k2LSODkWQ8QnXlhNlsiwfp2VoTMR3tejdWDO3Q6T1tJzDh4HRQNASjU
yOTABq/dmRfYsytW1yjrZhZrizeZToYELF1CHsomxeWZyPvzE1Fq29AW2yE3BkET
+Y3uIZUlDyNrEhUP2GsOn5fwQaBNV6NBHxzsCJYY/Uc29n2me6Xk+OLZQm6/w3MO
OYdnIyGLL/7YJukFd+sQpMLc1Talb4RD
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:43:55 2025 by rpki-client