Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft
File: clTejLmzOZRVQ9h-jrBW8VPVH1A.mft (raw, json)
Hash identifier: wAUWFCRumhZ5cznTzBM0BHJZZsGsPs6XGPSEonaGv7c=
Subject key identifier: F9:DD:F4:1F:DD:32:AC:18:EA:9F:59:B0:AD:ED:0D:A6:06:A2:CF:E3
Authority key identifier: 72:54:DE:8C:B9:B3:39:94:55:43:D8:7E:8E:B0:56:F1:53:D5:1F:50
Certificate issuer: /CN=A9198166/serialNumber=7254DE8CB9B339945543D87E8EB056F153D51F50
Certificate serial: 01B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/clTejLmzOZRVQ9h-jrBW8VPVH1A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft
Manifest number: 01AE
Signing time: Fri 31 Jan 2025 02:25:12 +0000
Manifest this update: Fri 31 Jan 2025 02:25:11 +0000
Manifest next update: Fri 07 Feb 2025 02:25:11 +0000
Files and hashes: 1: clTejLmzOZRVQ9h-jrBW8VPVH1A.crl (hash: 29ge5wIPXQXBMxBwcsXDITV8Ne8Bnya0tLZIDtg5cww=)
2: A968BCA24C8511ED94579477C4F9AE02.roa (hash: QhihCyN5bbG8v0q4aS9nZCy8ZGeOjrQ8K/ICbkjXPrw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434 (0x1b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198166/serialNumber=7254DE8CB9B339945543D87E8EB056F153D51F50
Validity
Not Before: Jan 31 02:25:11 2025 GMT
Not After : Feb 7 02:25:11 2025 GMT
Subject: CN=679c3487-ce87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7e:f6:13:8f:bc:ce:2b:37:f5:62:7b:3f:24:
8f:87:53:62:1e:0d:3e:e7:87:e7:d6:6a:15:ad:a2:
db:c7:55:97:31:a2:0b:a5:c6:68:1d:b4:10:d7:41:
56:0a:b6:85:e0:e1:12:6e:9d:da:5f:5c:cb:17:d6:
33:c4:7d:f2:27:8a:4d:4f:ca:d7:cc:8a:88:7e:0b:
8c:d0:ba:41:6f:44:65:ca:b7:22:8a:38:57:b7:a9:
73:af:fc:a8:65:a8:fd:65:24:62:7f:d3:67:9e:ca:
9c:3c:c9:ce:a0:cc:4f:3c:5b:a6:70:da:0e:28:82:
d6:55:a6:34:e3:a5:83:7b:2c:db:81:8d:9e:b5:92:
cb:4f:32:35:8e:7c:9b:ce:68:5e:9c:30:60:77:e8:
90:b1:87:42:10:88:5e:27:75:07:7a:b1:68:d4:5e:
e2:6a:fd:2e:21:15:6d:e0:a2:4d:ae:94:d5:63:a4:
70:55:67:30:71:42:14:f0:e3:ad:e7:e0:07:48:39:
b8:eb:2d:80:bd:89:1e:98:31:9f:d7:49:d2:49:4f:
9d:23:ee:92:55:2b:c2:53:fc:39:cb:cb:e3:79:55:
76:f6:48:ba:08:16:0c:81:20:71:33:e0:4e:a4:71:
66:4e:34:27:0d:b9:d8:31:0b:60:b7:1c:55:fb:b2:
6d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DD:F4:1F:DD:32:AC:18:EA:9F:59:B0:AD:ED:0D:A6:06:A2:CF:E3
X509v3 Authority Key Identifier:
keyid:72:54:DE:8C:B9:B3:39:94:55:43:D8:7E:8E:B0:56:F1:53:D5:1F:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/clTejLmzOZRVQ9h-jrBW8VPVH1A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:0c:e5:64:cf:6c:78:4f:bd:40:6a:dd:16:86:42:d5:60:c2:
27:b8:8d:5a:dd:0f:59:ca:74:d3:b4:84:43:70:e8:4b:08:ae:
16:ab:7f:f8:d9:dd:9b:dc:cf:e2:99:dc:c7:cd:a6:cb:e3:1a:
f9:dd:06:4a:ae:b3:16:fb:ec:7d:4f:6c:b0:b9:1e:10:a7:04:
bf:35:0b:60:03:f6:03:13:72:7f:e1:08:05:d0:d2:44:75:28:
ee:9d:73:b2:a4:c5:9a:c5:d4:4e:77:48:13:fb:46:8f:1d:d5:
93:3b:16:4c:0c:b9:a6:16:03:54:a4:4d:ba:c5:9d:c7:4f:0d:
5b:1b:28:18:f6:3d:66:3e:04:69:fb:90:a1:7c:c5:97:75:ff:
82:f2:31:66:c4:e6:ef:9d:dc:72:fe:87:78:c8:bb:50:66:0f:
b2:e1:95:39:be:09:2a:cf:5a:d8:8b:a5:27:a3:fc:9c:8d:c6:
53:e7:51:d4:d0:d8:52:de:20:c0:8d:e8:b6:5e:2b:0d:bc:6c:
08:88:29:f9:cb:bb:23:4d:0f:e6:d3:32:b7:a8:e4:dd:19:04:
b6:66:17:da:0f:82:10:5c:64:9d:ca:c3:5e:0f:00:eb:16:1d:
64:de:53:fb:3c:29:53:3b:c5:4a:5e:17:dd:a6:f0:d3:97:3c:
9d:80:22:48
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTgxNjYxMTAvBgNVBAUTKDcyNTRERThDQjlCMzM5OTQ1NTQzRDg3RThFQjA1NkYx
NTNENTFGNTAwHhcNMjUwMTMxMDIyNTExWhcNMjUwMjA3MDIyNTExWjAYMRYwFAYD
VQQDEw02NzljMzQ4Ny1jZTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqH72E4+8zis39WJ7PySPh1NiHg0+54fn1moVraLbx1WXMaILpcZoHbQQ10FW
CraF4OESbp3aX1zLF9YzxH3yJ4pNT8rXzIqIfguM0LpBb0RlyrciijhXt6lzr/yo
Zaj9ZSRif9NnnsqcPMnOoMxPPFumcNoOKILWVaY046WDeyzbgY2etZLLTzI1jnyb
zmhenDBgd+iQsYdCEIheJ3UHerFo1F7iav0uIRVt4KJNrpTVY6RwVWcwcUIU8OOt
5+AHSDm46y2AvYkemDGf10nSSU+dI+6SVSvCU/w5y8vjeVV29ki6CBYMgSBxM+BO
pHFmTjQnDbnYMQtgtxxV+7JtWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPnd9B/d
MqwY6p9ZsK3tDaYGos/jMB8GA1UdIwQYMBaAFHJU3oy5szmUVUPYfo6wVvFT1R9Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODE2Ni8zRTYxMjI5NDRD
ODIxMUVEOUIwM0Q0NDlDNEY5QUUwMi9jbFRlakxtek9aUlZROWgtanJCVzhWUFZI
MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NsVGVqTG16T1pSVlE5aC1qckJXOFZQVkgxQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
ODE2Ni8zRTYxMjI5NDRDODIxMUVEOUIwM0Q0NDlDNEY5QUUwMi9jbFRlakxtek9a
UlZROWgtanJCVzhWUFZIMUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBxDOVkz2x4T71Aat0WhkLVYMInuI1a3Q9ZynTTtIRDcOhLCK4Wq3/4
2d2b3M/imdzHzabL4xr53QZKrrMW++x9T2ywuR4QpwS/NQtgA/YDE3J/4QgF0NJE
dSjunXOypMWaxdROd0gT+0aPHdWTOxZMDLmmFgNUpE26xZ3HTw1bGygY9j1mPgRp
+5ChfMWXdf+C8jFmxObvndxy/od4yLtQZg+y4ZU5vgkqz1rYi6Uno/ycjcZT51HU
0NhS3iDAjei2XisNvGwIiCn5y7sjTQ/m0zK3qOTdGQS2ZhfaD4IQXGSdysNeDwDr
Fh1k3lP7PClTO8VKXhfdpvDTlzydgCJI
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:37:59 2025 by rpki-client