Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft
File: NAcoRkbqh4WDwlsPqefW7aCRMpg.mft (raw, json)
Hash identifier: qE/VV5MbCdw1UQehnYbLEHw6Z8A/hhfvnaW3/geRCOI=
Subject key identifier: C3:8F:C9:B7:69:01:25:45:8F:89:65:DB:98:35:C7:63:E6:CE:B4:E6
Authority key identifier: 34:07:28:46:46:EA:87:85:83:C2:5B:0F:A9:E7:D6:ED:A0:91:32:98
Certificate issuer: /CN=A919C318/serialNumber=3407284646EA878583C25B0FA9E7D6EDA0913298
Certificate serial: 08C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft
Manifest number: 08BE
Signing time: Thu 30 Jan 2025 20:31:39 +0000
Manifest this update: Thu 30 Jan 2025 20:31:38 +0000
Manifest next update: Thu 06 Feb 2025 20:31:38 +0000
Files and hashes: 1: NAcoRkbqh4WDwlsPqefW7aCRMpg.crl (hash: +XV4U9A8ELaJ2B1qRw0FHvU02MdY5QzRNu0TEH8X1KA=)
2: 9AA539E6A82411EA996D5F41C4F9AE02.roa (hash: gEu0ijhyj0r+0z14Ka2hm7sOceLx+LnbF4hfMxdOez4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2244 (0x8c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C318/serialNumber=3407284646EA878583C25B0FA9E7D6EDA0913298
Validity
Not Before: Jan 30 20:31:38 2025 GMT
Not After : Feb 6 20:31:38 2025 GMT
Subject: CN=679be1aa-faa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c1:43:35:86:f6:eb:ce:64:22:18:6e:3a:90:
bd:3b:2b:83:f9:2d:c9:71:ba:0c:25:aa:e6:f8:bb:
44:9c:aa:f0:82:0d:8b:b6:d1:5c:07:c0:3a:8f:23:
b2:1f:b6:f5:61:b5:d5:f5:5f:2e:9d:68:a6:d2:43:
69:8b:8f:50:2c:99:56:7b:cb:dc:df:4e:63:96:3f:
82:0b:2e:72:c5:d5:9a:1a:26:33:86:44:eb:bd:a2:
0e:d2:5b:50:08:96:fc:f2:7d:97:b8:94:8c:19:f2:
e5:f7:e7:85:ca:32:54:86:5f:3d:ec:d4:29:17:a0:
15:31:04:de:69:96:ac:01:27:49:c3:56:75:a1:bd:
0b:c4:58:d7:e2:aa:e6:09:68:b3:8e:1f:09:8f:4a:
a9:5b:08:d9:ad:03:46:65:c0:b8:e7:22:37:c8:71:
b1:7b:26:11:28:56:3a:fc:fe:71:53:9e:d8:04:df:
23:5b:ba:6d:a0:6a:bd:62:8d:1c:28:0e:40:11:6c:
59:5f:94:92:30:e2:62:9f:07:1f:ce:48:fa:4d:b9:
04:5e:6d:d6:fa:81:88:7e:bd:65:e1:b2:8f:8c:d9:
a2:71:3e:20:95:d1:7c:08:46:89:e0:16:03:d6:7e:
78:c5:7d:87:22:98:aa:8a:ba:96:11:4f:58:00:da:
0d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8F:C9:B7:69:01:25:45:8F:89:65:DB:98:35:C7:63:E6:CE:B4:E6
X509v3 Authority Key Identifier:
keyid:34:07:28:46:46:EA:87:85:83:C2:5B:0F:A9:E7:D6:ED:A0:91:32:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:f2:bc:ae:02:5a:68:5f:43:1a:62:6b:dd:b8:b0:21:21:9d:
db:0f:47:82:a8:96:9c:81:a5:19:bf:5c:86:0a:20:a0:ba:a0:
8f:28:4d:ee:5d:6b:ea:72:36:b8:53:3b:76:d8:68:b0:7a:6f:
ee:47:21:51:3f:ce:83:7a:ab:d3:b1:fe:32:2a:4b:86:01:5e:
5b:a1:0d:5e:0a:0a:1d:cb:b4:78:10:f7:91:66:84:1c:a1:d9:
d1:92:7a:ce:35:d7:0c:3a:82:6d:4a:ef:11:03:c0:a2:a2:7c:
6c:94:46:c2:76:e5:e7:d8:81:0a:49:1e:3b:bf:07:d6:5f:03:
95:14:04:27:de:33:d7:87:de:80:6d:59:0f:05:c4:3c:8b:8f:
0a:70:f2:ac:c2:dd:f1:3e:97:3b:da:e1:03:51:92:a6:5e:49:
2a:83:c7:8e:c0:42:2b:ed:dc:4e:d6:c5:33:41:50:d3:7b:f7:
ab:90:c6:c1:39:5e:37:a9:fb:42:bf:fd:15:51:b5:a5:c3:46:
8a:7a:01:0e:ef:a2:9a:54:40:63:21:05:b3:08:db:ef:56:7a:
9f:10:7d:ab:00:d3:02:91:a2:7e:5b:ae:22:cd:d0:f9:27:fb:
4e:cf:28:fd:06:95:a9:26:ac:67:d7:13:18:41:3b:c6:ec:e5:
10:49:e3:1a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUMzMTgxMTAvBgNVBAUTKDM0MDcyODQ2NDZFQTg3ODU4M0MyNUIwRkE5RTdENkVE
QTA5MTMyOTgwHhcNMjUwMTMwMjAzMTM4WhcNMjUwMjA2MjAzMTM4WjAYMRYwFAYD
VQQDEw02NzliZTFhYS1mYWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAssFDNYb2685kIhhuOpC9OyuD+S3JcboMJarm+LtEnKrwgg2LttFcB8A6jyOy
H7b1YbXV9V8unWim0kNpi49QLJlWe8vc305jlj+CCy5yxdWaGiYzhkTrvaIO0ltQ
CJb88n2XuJSMGfLl9+eFyjJUhl897NQpF6AVMQTeaZasASdJw1Z1ob0LxFjX4qrm
CWizjh8Jj0qpWwjZrQNGZcC45yI3yHGxeyYRKFY6/P5xU57YBN8jW7ptoGq9Yo0c
KA5AEWxZX5SSMOJinwcfzkj6TbkEXm3W+oGIfr1l4bKPjNmicT4gldF8CEaJ4BYD
1n54xX2HIpiqirqWEU9YANoN4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMOPybdp
ASVFj4ll25g1x2PmzrTmMB8GA1UdIwQYMBaAFDQHKEZG6oeFg8JbD6nn1u2gkTKY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzMxOC82NUI2NzFCNkE4
MjIxMUVBQUJBQTJGMTlDNEY5QUUwMi9OQWNvUmticWg0V0R3bHNQcWVmVzdhQ1JN
cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05BY29Sa2JxaDRXRHdsc1BxZWZXN2FDUk1wZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QzMxOC82NUI2NzFCNkE4MjIxMUVBQUJBQTJGMTlDNEY5QUUwMi9OQWNvUmticWg0
V0R3bHNQcWVmVzdhQ1JNcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBD8ryuAlpoX0MaYmvduLAhIZ3bD0eCqJacgaUZv1yGCiCguqCPKE3u
XWvqcja4Uzt22Giwem/uRyFRP86DeqvTsf4yKkuGAV5boQ1eCgody7R4EPeRZoQc
odnRknrONdcMOoJtSu8RA8CionxslEbCduXn2IEKSR47vwfWXwOVFAQn3jPXh96A
bVkPBcQ8i48KcPKswt3xPpc72uEDUZKmXkkqg8eOwEIr7dxO1sUzQVDTe/erkMbB
OV43qftCv/0VUbWlw0aKegEO76KaVEBjIQWzCNvvVnqfEH2rANMCkaJ+W64izdD5
J/tOzyj9BpWpJqxn1xMYQTvG7OUQSeMa
-----END CERTIFICATE-----
Generated at Fri Apr 25 17:03:39 2025 by rpki-client