Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft
File: _dkd0w6bH-o7t-Eq73YhZigSmyM.mft (raw, json)
Hash identifier: KDI8Ny4GclMcpeA5f8OtcIMhreiBSKhtMWZ+py32PlI=
Subject key identifier: 6B:D3:B0:BC:7F:64:A8:85:BE:B1:53:FC:26:39:5F:0D:F7:FB:15:CB
Authority key identifier: FD:D9:1D:D3:0E:9B:1F:EA:3B:B7:E1:2A:EF:76:21:66:28:12:9B:23
Certificate issuer: /CN=A9192B86/serialNumber=FDD91DD30E9B1FEA3BB7E12AEF76216628129B23
Certificate serial: D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dkd0w6bH-o7t-Eq73YhZigSmyM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft
Manifest number: CF
Signing time: Fri 31 Jan 2025 04:50:06 +0000
Manifest this update: Fri 31 Jan 2025 04:50:06 +0000
Manifest next update: Fri 07 Feb 2025 04:50:06 +0000
Files and hashes: 1: _dkd0w6bH-o7t-Eq73YhZigSmyM.crl (hash: xkeu6IGWnX2AqxiRJVxtcGxA9C7ej/xIZJmOJtxE708=)
2: DECE1662A87D11EE882D7B6EC4F9AE02.roa (hash: C77jJoshdfxzPcbWVGuVdmC/Yt4X5b0+J8bsZe99ndM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192B86/serialNumber=FDD91DD30E9B1FEA3BB7E12AEF76216628129B23
Validity
Not Before: Jan 31 04:50:06 2025 GMT
Not After : Feb 7 04:50:06 2025 GMT
Subject: CN=679c567e-51e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f1:9c:27:a1:0d:04:77:45:cb:e5:3d:f8:28:
ff:79:27:1d:8d:cd:65:3d:57:8c:12:76:6a:35:d2:
27:8f:c8:18:a7:8c:9f:1e:07:dd:1f:27:06:a0:42:
70:63:ef:de:4d:eb:6e:99:54:f4:ca:ae:e2:52:a3:
6e:1f:ba:b4:57:8a:cc:6c:2a:68:12:dd:c8:29:19:
81:21:0c:41:f9:28:ca:62:31:f9:f7:1c:92:a4:a0:
77:b6:c4:6f:c1:ca:50:b6:c7:af:ea:f2:c7:f8:36:
7b:5b:7b:cc:06:7e:c9:18:53:2b:0e:57:67:82:cf:
16:06:e8:cd:58:e9:60:fb:7e:2b:50:83:32:2f:c3:
9c:b1:9a:e3:c4:9e:13:fa:5e:17:60:9e:6b:9e:b4:
aa:f3:64:4f:7c:ef:b9:e9:ce:5a:b3:cc:88:23:51:
8a:43:63:9a:49:21:4e:78:dd:86:32:f4:bf:d8:30:
d1:26:9d:22:fb:a2:90:4c:37:44:f3:f5:10:92:5a:
ce:83:2d:1e:da:84:cf:f0:c9:15:04:b2:3d:79:ff:
ed:87:88:ba:04:d8:43:01:6f:20:33:40:e7:3b:4b:
f2:23:a4:c9:d5:05:64:60:df:a8:1e:11:94:28:cc:
c3:2a:8d:66:7a:a0:bb:51:6b:7d:91:a2:c4:f9:78:
7b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D3:B0:BC:7F:64:A8:85:BE:B1:53:FC:26:39:5F:0D:F7:FB:15:CB
X509v3 Authority Key Identifier:
keyid:FD:D9:1D:D3:0E:9B:1F:EA:3B:B7:E1:2A:EF:76:21:66:28:12:9B:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dkd0w6bH-o7t-Eq73YhZigSmyM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:81:d2:57:74:ee:21:e8:6b:e0:81:92:b1:14:53:1d:05:ec:
11:45:60:7b:e0:3c:6d:6d:9d:bb:8a:87:a7:6a:d5:f7:79:ef:
90:02:91:7c:be:3a:2a:27:09:fb:c1:c2:ba:2b:ad:54:f2:94:
b6:71:9b:28:6c:ac:9c:13:bf:a5:1b:b6:ad:3c:3c:75:25:12:
36:e1:27:3e:74:db:64:94:1f:ed:ef:ed:87:cb:a9:06:9f:fa:
6c:a8:ee:e1:b9:3e:51:34:49:8f:df:55:ed:a3:29:ac:79:c2:
c0:6c:3b:38:08:87:43:77:33:54:d1:db:93:6b:80:08:21:88:
e8:06:0d:1c:8b:90:28:35:db:95:d5:32:60:7d:96:6e:41:07:
d1:ff:fe:a7:a8:78:68:76:22:24:d1:7c:50:9d:f8:10:43:ec:
61:4c:97:8b:6b:f4:df:fa:ae:70:6f:ae:30:3e:54:be:50:fa:
a6:3e:a8:2f:c8:cd:75:62:37:82:01:a8:24:e0:5a:ff:9d:1f:
f7:57:fa:fa:7b:9c:ce:c2:3c:f8:87:f5:bd:50:86:6b:54:c7:
08:88:57:98:2a:4d:bf:a5:a0:af:a1:c8:80:bc:55:6b:32:fe:
55:5c:56:f4:38:1f:ec:d0:f4:88:2d:11:5e:88:fc:45:33:40:
06:94:04:49
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTJCODYxMTAvBgNVBAUTKEZERDkxREQzMEU5QjFGRUEzQkI3RTEyQUVGNzYyMTY2
MjgxMjlCMjMwHhcNMjUwMTMxMDQ1MDA2WhcNMjUwMjA3MDQ1MDA2WjAYMRYwFAYD
VQQDEw02NzljNTY3ZS01MWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5/GcJ6ENBHdFy+U9+Cj/eScdjc1lPVeMEnZqNdInj8gYp4yfHgfdHycGoEJw
Y+/eTetumVT0yq7iUqNuH7q0V4rMbCpoEt3IKRmBIQxB+SjKYjH59xySpKB3tsRv
wcpQtsev6vLH+DZ7W3vMBn7JGFMrDldngs8WBujNWOlg+34rUIMyL8OcsZrjxJ4T
+l4XYJ5rnrSq82RPfO+56c5as8yII1GKQ2OaSSFOeN2GMvS/2DDRJp0i+6KQTDdE
8/UQklrOgy0e2oTP8MkVBLI9ef/th4i6BNhDAW8gM0DnO0vyI6TJ1QVkYN+oHhGU
KMzDKo1meqC7UWt9kaLE+Xh78wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGvTsLx/
ZKiFvrFT/CY5Xw33+xXLMB8GA1UdIwQYMBaAFP3ZHdMOmx/qO7fhKu92IWYoEpsj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkI4Ni84NkU5NzdDQUE4
N0QxMUVFOUZBNTVBNkRDNEY5QUUwMi9fZGtkMHc2Ykgtbzd0LUVxNzNZaFppZ1Nt
eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19ka2QwdzZiSC1vN3QtRXE3M1loWmlnU215TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MkI4Ni84NkU5NzdDQUE4N0QxMUVFOUZBNTVBNkRDNEY5QUUwMi9fZGtkMHc2Ykgt
bzd0LUVxNzNZaFppZ1NteU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBhgdJXdO4h6GvggZKxFFMdBewRRWB74DxtbZ27ioenatX3ee+QApF8
vjoqJwn7wcK6K61U8pS2cZsobKycE7+lG7atPDx1JRI24Sc+dNtklB/t7+2Hy6kG
n/psqO7huT5RNEmP31XtoymsecLAbDs4CIdDdzNU0duTa4AIIYjoBg0ci5AoNduV
1TJgfZZuQQfR//6nqHhodiIk0XxQnfgQQ+xhTJeLa/Tf+q5wb64wPlS+UPqmPqgv
yM11YjeCAagk4Fr/nR/3V/r6e5zOwjz4h/W9UIZrVMcIiFeYKk2/paCvociAvFVr
Mv5VXFb0OB/s0PSILRFeiPxFM0AGlARJ
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:09:02 2025 by rpki-client