Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
File: 3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft (raw, json)
Hash identifier: 3bn3dr+a4ut3Y5xKi0FE9wVnWCuXIaBV9tHf+odyToU=
Subject key identifier: 2F:E5:D4:89:39:D2:7F:93:40:49:B7:F8:74:C8:DB:CD:E1:71:61:16
Authority key identifier: DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5
Certificate issuer: /CN=A919A016/serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5
Certificate serial: 0AD4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
Manifest number: 0ACD
Signing time: Thu 30 Jan 2025 19:28:49 +0000
Manifest this update: Thu 30 Jan 2025 19:28:49 +0000
Manifest next update: Thu 06 Feb 2025 19:28:49 +0000
Files and hashes: 1: 3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl (hash: TqW3ulIPP2WM7J+7uuM21xnkbGBiSrjLinJVKSU9Gj0=)
2: AD03DBB2419D11EABC319278C4F9AE02.roa (hash: lXRhvrRkiDZ89FEGOujFjOkOv02tmbv3I/6VRa5eWzo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2772 (0xad4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A016/serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5
Validity
Not Before: Jan 30 19:28:49 2025 GMT
Not After : Feb 6 19:28:49 2025 GMT
Subject: CN=679bd2f1-ac94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:00:ec:91:57:2c:a8:61:0a:6c:0a:85:9c:be:
7f:c7:cb:ff:6b:b0:f9:9e:57:5e:87:ad:ee:5a:3d:
73:a1:bf:67:32:3b:3f:7c:1d:83:13:4f:af:77:22:
50:06:5d:b5:3a:2b:39:40:6b:0b:8f:d8:55:5e:c6:
2e:fd:bc:55:f0:9b:68:63:a0:04:27:3a:de:2e:d8:
b5:07:44:f7:c7:79:07:a5:6e:7e:22:47:08:52:97:
a6:e5:1b:cd:0f:1b:b2:b8:0b:dd:d3:b2:56:68:b1:
2d:15:eb:64:b2:d3:1b:77:79:0d:49:71:1e:3d:ff:
99:2c:89:7d:ba:b6:1a:27:ed:29:b5:da:eb:ce:e8:
cd:b1:7a:63:8c:ae:fd:63:66:8c:e9:44:6e:68:59:
17:37:62:32:a4:98:a9:fb:0a:33:c7:45:3f:c9:1a:
1c:3a:ec:df:9d:a9:da:81:05:f3:ec:18:37:9b:89:
5a:3e:39:d1:4f:ed:12:e3:b1:2b:1b:f0:4e:c0:ff:
4f:69:a1:d2:97:cc:5a:64:8d:85:94:5d:c4:c9:9a:
7a:d7:d8:5f:dc:0c:6e:1e:3b:38:c9:28:ba:52:3a:
97:00:c5:71:0f:42:fa:29:4f:be:dd:47:06:94:d1:
91:b6:49:02:66:0b:79:a7:c0:2f:4f:4f:52:54:f5:
56:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E5:D4:89:39:D2:7F:93:40:49:B7:F8:74:C8:DB:CD:E1:71:61:16
X509v3 Authority Key Identifier:
keyid:DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:e8:77:83:0e:23:00:ae:1f:41:83:1e:b2:0d:43:e0:4f:b2:
20:5a:1d:26:0d:e9:b3:52:97:b3:30:47:cc:3d:31:39:69:e9:
35:00:ed:fc:9f:9d:46:38:17:a1:dd:41:eb:1e:4e:15:80:fb:
92:2c:db:2e:70:9e:b8:1d:27:0c:e0:ed:a5:91:b9:b4:32:9a:
2a:55:72:82:c3:ed:f3:ad:da:76:c9:08:ba:e2:a3:ed:5c:75:
4f:44:60:d9:82:83:9f:05:e0:90:97:aa:5e:24:10:38:58:6d:
77:9a:e6:cb:7f:84:3d:94:f5:2e:a7:ef:77:7a:c6:41:73:1a:
84:0c:56:3b:99:22:8d:3e:d9:04:67:b5:42:db:bd:49:eb:8c:
7b:b9:22:cc:90:5d:1e:16:08:da:7f:be:aa:8b:13:98:53:d3:
a3:ab:7c:bf:60:14:ca:4e:4e:51:3b:9e:56:98:9d:b3:a6:fe:
e9:4e:ae:d5:eb:ba:86:16:4e:a2:f1:9e:ce:8d:86:fd:da:7a:
4b:39:29:9a:72:97:4e:1a:ce:cd:50:83:0d:0b:e2:e1:91:80:
b1:40:72:fd:6b:fc:cf:9d:16:02:f9:99:84:60:d9:c4:ab:f8:
e9:8e:8e:22:ab:4c:49:f1:84:c0:82:8e:b4:8d:3e:8c:95:a4:
e1:cc:7c:6b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUEwMTYxMTAvBgNVBAUTKERGMkY4QTc1RjNFOTI3NUUwRDRGMTBGQzZBMzE5OTk3
OTExQkU1QjUwHhcNMjUwMTMwMTkyODQ5WhcNMjUwMjA2MTkyODQ5WjAYMRYwFAYD
VQQDEw02NzliZDJmMS1hYzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqQDskVcsqGEKbAqFnL5/x8v/a7D5nldeh63uWj1zob9nMjs/fB2DE0+vdyJQ
Bl21Ois5QGsLj9hVXsYu/bxV8JtoY6AEJzreLti1B0T3x3kHpW5+IkcIUpem5RvN
DxuyuAvd07JWaLEtFetkstMbd3kNSXEePf+ZLIl9urYaJ+0ptdrrzujNsXpjjK79
Y2aM6URuaFkXN2IypJip+wozx0U/yRocOuzfnanagQXz7Bg3m4laPjnRT+0S47Er
G/BOwP9PaaHSl8xaZI2FlF3EyZp619hf3AxuHjs4ySi6UjqXAMVxD0L6KU++3UcG
lNGRtkkCZgt5p8AvT09SVPVWPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/l1Ik5
0n+TQEm3+HTI283hcWEWMB8GA1UdIwQYMBaAFN8vinXz6SdeDU8Q/GoxmZeRG+W1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTAxNi9DMDY3NzIyNjQx
NzExMUVBQUFEMjZBNkNDNEY5QUUwMi8zeS1LZGZQcEoxNE5UeEQ4YWpHWmw1RWI1
YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzN5LUtkZlBwSjE0TlR4RDhhakdabDVFYjViVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QTAxNi9DMDY3NzIyNjQxNzExMUVBQUFEMjZBNkNDNEY5QUUwMi8zeS1LZGZQcEox
NE5UeEQ4YWpHWmw1RWI1YlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBm6HeDDiMArh9Bgx6yDUPgT7IgWh0mDemzUpezMEfMPTE5aek1AO38
n51GOBeh3UHrHk4VgPuSLNsucJ64HScM4O2lkbm0MpoqVXKCw+3zrdp2yQi64qPt
XHVPRGDZgoOfBeCQl6peJBA4WG13mubLf4Q9lPUup+93esZBcxqEDFY7mSKNPtkE
Z7VC271J64x7uSLMkF0eFgjaf76qixOYU9Ojq3y/YBTKTk5RO55WmJ2zpv7pTq7V
67qGFk6i8Z7OjYb92npLOSmacpdOGs7NUIMNC+LhkYCxQHL9a/zPnRYC+ZmEYNnE
q/jpjo4iq0xJ8YTAgo60jT6MlaThzHxr
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:25 2025 by rpki-client