Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft
File: zPugs5k5MOsTt6JZJyqoEfh0SyM.mft (raw, json)
Hash identifier: /TuEX+sjb9cCcx5yrsfp7vxBmzZsxSymIzb5oXFYS+0=
Subject key identifier: 2C:7F:8A:B9:06:DE:77:F8:58:6C:E8:E1:DB:A8:2B:F2:86:5F:C9:B7
Authority key identifier: CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23
Certificate issuer: /CN=A9191D22/serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23
Certificate serial: 09B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft
Manifest number: 09AD
Signing time: Thu 30 Jan 2025 20:07:08 +0000
Manifest this update: Thu 30 Jan 2025 20:07:08 +0000
Manifest next update: Thu 06 Feb 2025 20:07:08 +0000
Files and hashes: 1: zPugs5k5MOsTt6JZJyqoEfh0SyM.crl (hash: Bc9DBQHZm7ZI5tEwcHgeJAFoPOfx6pWpxhhm+ZKwT3c=)
2: 047A427C7E2B11EAB1B5B00DC4F9AE02.roa (hash: vYfbYGbaZtOjNPwwYTLo3cpgHwXTvaA/VLhLM/0gXjE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2485 (0x9b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191D22/serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23
Validity
Not Before: Jan 30 20:07:08 2025 GMT
Not After : Feb 6 20:07:08 2025 GMT
Subject: CN=679bdbec-96ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5f:65:eb:4c:c7:a7:4f:32:16:99:9a:8d:ac:
e0:c5:e4:c9:84:1d:5a:61:3b:8d:63:8e:f7:33:05:
79:bb:5e:5a:0b:1c:cf:27:00:bf:08:7c:c0:6f:e9:
41:bd:9a:72:7a:ab:72:d0:13:45:28:95:5f:fa:cd:
bc:95:24:52:c8:cb:dd:fb:79:13:29:3d:27:37:37:
2e:3a:e4:42:b5:df:97:81:5d:69:70:d6:1c:83:74:
a9:4f:07:a1:8b:c1:e2:8f:6f:a0:0b:51:de:91:2e:
e5:1e:06:57:e5:34:17:9f:ff:59:dc:e2:6c:aa:92:
77:9e:4f:bf:92:90:c1:3a:2e:6d:0f:78:e3:90:73:
f6:1b:df:eb:29:e4:e8:da:62:de:7b:ae:20:36:92:
48:03:6a:29:5b:85:d6:2f:4f:2a:72:01:9c:10:5b:
38:45:d3:aa:d1:1f:f6:aa:c0:76:39:74:78:4c:2f:
d8:f2:e4:62:b6:8f:a1:e2:35:c5:1d:52:2a:58:be:
8b:c3:34:a2:9e:18:f5:89:7c:c0:f3:79:a9:9f:8a:
d9:fb:ce:11:cc:64:ba:cf:2d:27:cf:26:6f:d0:f3:
02:55:20:90:1d:9e:1d:f1:41:a9:27:82:e8:19:ea:
93:70:1a:d2:70:e4:2e:a4:e0:61:45:c2:a2:7f:25:
03:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7F:8A:B9:06:DE:77:F8:58:6C:E8:E1:DB:A8:2B:F2:86:5F:C9:B7
X509v3 Authority Key Identifier:
keyid:CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:65:df:cd:d0:34:14:d8:cb:49:17:13:c3:cc:7e:b7:7f:65:
40:9b:05:a2:f4:b8:5a:bf:95:9f:8c:4e:46:f3:c1:07:ea:45:
c1:4b:91:15:fc:fb:44:67:7d:31:99:38:09:e5:6c:04:20:be:
65:1d:ed:83:d5:94:e3:75:87:94:d6:8a:68:d3:b6:22:ca:51:
da:7a:65:c2:16:a3:de:7e:bd:be:64:07:ca:d7:be:11:b1:77:
25:f6:a3:4d:ca:0d:87:82:f9:b8:dc:ab:07:5d:a0:35:bf:71:
da:70:48:c7:c9:1d:91:40:db:57:4d:fa:1c:35:31:1c:53:82:
99:01:e3:76:e5:8f:88:00:f1:f6:d1:9c:f4:04:04:74:af:3d:
34:1a:ce:61:4c:6e:f4:15:f5:4c:90:d9:75:0a:f9:e4:27:d1:
8a:cc:25:15:1f:bc:94:06:2d:30:8e:8d:1e:7b:12:a7:48:0f:
d0:17:f0:f1:20:b8:10:97:07:88:cf:10:39:4c:f2:e2:2d:10:
0d:79:d0:c7:26:8c:fa:df:db:71:11:bc:8b:05:8c:92:4f:9a:
9a:4b:00:ca:56:03:1e:10:c8:31:bd:0d:17:d2:07:74:e4:61:
c1:2e:80:52:b0:82:75:f7:55:ad:f9:7d:71:b1:99:b3:10:74:
9b:c1:26:46
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTFEMjIxMTAvBgNVBAUTKENDRkJBMEIzOTkzOTMwRUIxM0I3QTI1OTI3MkFBODEx
Rjg3NDRCMjMwHhcNMjUwMTMwMjAwNzA4WhcNMjUwMjA2MjAwNzA4WjAYMRYwFAYD
VQQDEw02NzliZGJlYy05NmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7F9l60zHp08yFpmajazgxeTJhB1aYTuNY473MwV5u15aCxzPJwC/CHzAb+lB
vZpyeqty0BNFKJVf+s28lSRSyMvd+3kTKT0nNzcuOuRCtd+XgV1pcNYcg3SpTweh
i8Hij2+gC1HekS7lHgZX5TQXn/9Z3OJsqpJ3nk+/kpDBOi5tD3jjkHP2G9/rKeTo
2mLee64gNpJIA2opW4XWL08qcgGcEFs4RdOq0R/2qsB2OXR4TC/Y8uRito+h4jXF
HVIqWL6LwzSinhj1iXzA83mpn4rZ+84RzGS6zy0nzyZv0PMCVSCQHZ4d8UGpJ4Lo
GeqTcBrScOQupOBhRcKifyUDpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCx/irkG
3nf4WGzo4duoK/KGX8m3MB8GA1UdIwQYMBaAFMz7oLOZOTDrE7eiWScqqBH4dEsj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUQyMi8yODQwMDFFQzdC
MUYxMUVBODU4QkNEODZDNEY5QUUwMi96UHVnczVrNU1Pc1R0NkpaSnlxb0VmaDBT
eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pQdWdzNWs1TU9zVHQ2SlpKeXFvRWZoMFN5TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MUQyMi8yODQwMDFFQzdCMUYxMUVBODU4QkNEODZDNEY5QUUwMi96UHVnczVrNU1P
c1R0NkpaSnlxb0VmaDBTeU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB4Zd/N0DQU2MtJFxPDzH63f2VAmwWi9Lhav5WfjE5G88EH6kXBS5EV
/PtEZ30xmTgJ5WwEIL5lHe2D1ZTjdYeU1opo07YiylHaemXCFqPefr2+ZAfK174R
sXcl9qNNyg2Hgvm43KsHXaA1v3HacEjHyR2RQNtXTfocNTEcU4KZAeN25Y+IAPH2
0Zz0BAR0rz00Gs5hTG70FfVMkNl1CvnkJ9GKzCUVH7yUBi0wjo0eexKnSA/QF/Dx
ILgQlweIzxA5TPLiLRANedDHJoz639txEbyLBYyST5qaSwDKVgMeEMgxvQ0X0gd0
5GHBLoBSsIJ191Wt+X1xsZmzEHSbwSZG
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:36:41 2025 by rpki-client