Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft
File: 7grUN1-fCpi3ptnvqKUlFY2BcJE.mft (raw, json)
Hash identifier: AfvWj1gC3jibN4avwSZ0WSB25jCS6bsXuAYsD/1ID1g=
Subject key identifier: 9D:C4:C5:4D:E5:86:D8:01:12:09:9E:40:BF:2A:49:80:3D:E1:64:9C
Authority key identifier: EE:0A:D4:37:5F:9F:0A:98:B7:A6:D9:EF:A8:A5:25:15:8D:81:70:91
Certificate issuer: /CN=A9193BF8/serialNumber=EE0AD4375F9F0A98B7A6D9EFA8A525158D817091
Certificate serial: 0153
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft
Manifest number: 0150
Signing time: Fri 31 Jan 2025 03:25:44 +0000
Manifest this update: Fri 31 Jan 2025 03:25:44 +0000
Manifest next update: Fri 07 Feb 2025 03:25:43 +0000
Files and hashes: 1: 7grUN1-fCpi3ptnvqKUlFY2BcJE.crl (hash: TIQvpefxr74YymOTdd1MrFgi56VcIUTByawKtHoLLk0=)
2: B983A684E01811ED8385DA62C4F9AE02.roa (hash: XNf/2Q6uWI444vIMmSBl+gGmGXhm3xu89mz5NFyHmH4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339 (0x153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193BF8/serialNumber=EE0AD4375F9F0A98B7A6D9EFA8A525158D817091
Validity
Not Before: Jan 31 03:25:44 2025 GMT
Not After : Feb 7 03:25:43 2025 GMT
Subject: CN=679c42b8-d0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ea:32:05:1b:3a:a4:10:a7:6b:df:40:fa:ef:
dc:53:e8:21:d6:9b:b6:d0:82:9b:d5:d1:74:a4:46:
32:a4:22:cd:26:c1:63:1f:8c:1a:fb:48:2f:62:36:
eb:2b:29:27:e6:f8:87:59:f0:ed:97:1b:7d:07:dc:
65:a4:32:ae:5d:63:bc:19:d0:02:ae:ed:5e:15:0d:
13:c3:55:cb:52:f1:de:53:17:98:06:ba:ed:03:8a:
9d:b0:2e:a5:cb:f7:56:69:cf:7b:66:da:d8:39:c1:
99:90:86:57:64:7b:0b:32:1a:fe:73:4a:41:9d:ba:
62:86:2a:35:2b:ff:2f:18:c6:8e:7f:07:22:bc:cc:
ff:8b:6d:16:c8:1c:c8:e7:ec:46:ba:25:1b:e0:4d:
a9:a7:88:a5:b5:ae:da:18:fc:bd:68:18:16:a9:f6:
6b:8e:17:6b:06:a9:0f:f1:35:c9:b6:b6:08:eb:d3:
d2:3f:b0:a1:48:65:7d:16:c6:96:9c:68:bc:bf:60:
d1:0c:4d:ff:45:08:7b:e8:6f:95:0d:c3:ae:7f:8a:
b9:12:e7:2f:71:65:d2:c6:06:08:01:7d:21:74:05:
22:b5:b3:bc:53:36:36:29:d1:08:0a:a9:b0:cf:83:
e2:6f:f6:13:80:27:74:01:7e:97:d1:9c:56:d5:06:
a5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C4:C5:4D:E5:86:D8:01:12:09:9E:40:BF:2A:49:80:3D:E1:64:9C
X509v3 Authority Key Identifier:
keyid:EE:0A:D4:37:5F:9F:0A:98:B7:A6:D9:EF:A8:A5:25:15:8D:81:70:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:65:64:b8:e6:d4:80:60:91:14:18:68:24:02:fc:70:c9:a4:
e4:94:74:93:8e:6d:91:62:78:58:74:0e:67:c7:02:08:ce:17:
d1:78:e6:1a:6c:41:d8:ce:39:a8:79:af:cf:23:89:cb:b8:25:
cf:05:60:d0:07:6b:43:6b:ba:b3:62:af:c6:20:ac:cb:bb:2e:
bf:82:d8:43:4b:d2:e2:3d:8b:ce:2a:01:a3:13:70:eb:eb:45:
5a:1b:af:be:47:92:b4:fc:3a:0f:fe:4a:fe:d0:f4:e9:a6:8d:
90:5b:24:db:19:3c:3c:87:36:24:64:b4:0b:72:d5:61:36:a6:
01:f2:99:55:bf:c7:ce:ed:32:4f:22:8d:2d:4a:24:a4:5e:b5:
f1:55:fc:fd:03:ae:16:8f:43:5f:5d:6f:40:30:3c:b1:5e:d5:
2c:50:c8:af:99:bd:dd:e1:0f:ba:18:5f:bc:05:b9:5d:f1:79:
99:52:34:d7:e4:ee:2e:97:2f:15:88:9a:b5:82:2a:7a:36:6e:
4d:c4:bd:36:fb:75:fd:41:2e:c3:d7:e9:ad:8c:cb:39:ec:9b:
a2:8b:80:c9:04:af:44:08:e6:49:38:8a:6c:ce:f4:d0:f5:4c:
a7:3a:a2:3c:28:32:81:88:18:7f:c0:ed:65:4c:68:73:19:10:
b3:7e:1c:68
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTNCRjgxMTAvBgNVBAUTKEVFMEFENDM3NUY5RjBBOThCN0E2RDlFRkE4QTUyNTE1
OEQ4MTcwOTEwHhcNMjUwMTMxMDMyNTQ0WhcNMjUwMjA3MDMyNTQzWjAYMRYwFAYD
VQQDEw02NzljNDJiOC1kMGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxuoyBRs6pBCna99A+u/cU+gh1pu20IKb1dF0pEYypCLNJsFjH4wa+0gvYjbr
Kykn5viHWfDtlxt9B9xlpDKuXWO8GdACru1eFQ0Tw1XLUvHeUxeYBrrtA4qdsC6l
y/dWac97ZtrYOcGZkIZXZHsLMhr+c0pBnbpihio1K/8vGMaOfwcivMz/i20WyBzI
5+xGuiUb4E2pp4ilta7aGPy9aBgWqfZrjhdrBqkP8TXJtrYI69PSP7ChSGV9FsaW
nGi8v2DRDE3/RQh76G+VDcOuf4q5EucvcWXSxgYIAX0hdAUitbO8UzY2KdEICqmw
z4Pib/YTgCd0AX6X0ZxW1QaluQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ3ExU3l
htgBEgmeQL8qSYA94WScMB8GA1UdIwQYMBaAFO4K1DdfnwqYt6bZ76ilJRWNgXCR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0JGOC9BQzI5NERFOEUw
MTUxMUVEQjE2NjY5NjFDNEY5QUUwMi83Z3JVTjEtZkNwaTNwdG52cUtVbEZZMkJj
SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdnclVOMS1mQ3BpM3B0bnZxS1VsRlkyQmNKRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
M0JGOC9BQzI5NERFOEUwMTUxMUVEQjE2NjY5NjFDNEY5QUUwMi83Z3JVTjEtZkNw
aTNwdG52cUtVbEZZMkJjSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB9ZWS45tSAYJEUGGgkAvxwyaTklHSTjm2RYnhYdA5nxwIIzhfReOYa
bEHYzjmoea/PI4nLuCXPBWDQB2tDa7qzYq/GIKzLuy6/gthDS9LiPYvOKgGjE3Dr
60VaG6++R5K0/DoP/kr+0PTppo2QWyTbGTw8hzYkZLQLctVhNqYB8plVv8fO7TJP
Io0tSiSkXrXxVfz9A64Wj0NfXW9AMDyxXtUsUMivmb3d4Q+6GF+8Bbld8XmZUjTX
5O4uly8ViJq1gip6Nm5NxL02+3X9QS7D1+mtjMs57Juii4DJBK9ECOZJOIpszvTQ
9UynOqI8KDKBiBh/wO1lTGhzGRCzfhxo
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:26:39 2025 by rpki-client