Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.mft
File: Pq60tRb3A-pY8W4I2opmdwP7XK4.mft (raw, json)
Hash identifier: cGiJbf9++Fcl3WjtP3ygA10bVNcBCdjf/yb6jKcxYv4=
Subject key identifier: A3:CB:4B:F6:27:D8:AD:A8:B8:AB:DA:8D:73:A4:F1:73:9C:52:21:43
Authority key identifier: 3E:AE:B4:B5:16:F7:03:EA:58:F1:6E:08:DA:8A:66:77:03:FB:5C:AE
Certificate issuer: /CN=A919D109/serialNumber=3EAEB4B516F703EA58F16E08DA8A667703FB5CAE
Certificate serial: 010E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pq60tRb3A-pY8W4I2opmdwP7XK4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.mft
Manifest number: 0106
Signing time: Fri 31 Jan 2025 04:16:29 +0000
Manifest this update: Fri 31 Jan 2025 04:16:29 +0000
Manifest next update: Fri 07 Feb 2025 04:16:29 +0000
Files and hashes: 1: Pq60tRb3A-pY8W4I2opmdwP7XK4.crl (hash: F4SECNvVQLQxs5RgNsh1v9z62MrI+g8TP2DvQ5ux2tw=)
2: B67DC27A60E311EEB04BEA49C4F9AE02.roa (hash: Uh7NExbaYKDBSUUKd+crKnXeWpl3+22sEhcewGQ9kp8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 270 (0x10e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D109/serialNumber=3EAEB4B516F703EA58F16E08DA8A667703FB5CAE
Validity
Not Before: Jan 31 04:16:29 2025 GMT
Not After : Feb 7 04:16:29 2025 GMT
Subject: CN=679c4e9d-30fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6a:7c:76:4a:17:16:57:cd:80:af:d6:d9:a4:
cb:a9:f6:8d:7d:83:5e:ba:55:3c:b2:21:8e:d9:74:
88:b6:96:a1:4a:3e:74:0d:f2:83:33:07:e8:38:bb:
7c:d2:b4:f2:95:14:8e:b6:0f:75:df:ec:40:1e:ea:
2c:e2:54:b3:01:9d:41:fa:89:46:4f:00:c3:0f:83:
fb:e4:23:54:d0:b4:34:ad:1c:54:9e:46:0d:72:24:
ee:86:d0:8a:9c:95:45:10:7f:9f:ad:61:83:8d:5c:
63:20:45:01:4d:0d:54:af:da:56:f3:38:ce:9e:d8:
79:f2:66:12:77:18:cc:a0:da:4c:e4:63:cd:72:9f:
83:2a:23:bd:97:d9:5b:74:c5:b6:22:02:f6:d8:93:
b2:2d:45:9b:3d:e5:bd:5f:15:0d:42:ef:65:47:75:
32:9c:e7:28:7c:a3:02:21:0e:ea:99:f4:21:aa:c3:
79:06:6c:51:31:b9:ae:b0:ac:e2:2b:9b:cf:97:1c:
f3:e9:4c:8d:da:a5:2c:50:5e:8a:ec:29:a1:a5:c1:
b9:c3:52:04:c5:c5:67:a3:0e:de:c9:8a:89:10:3c:
b5:6e:a0:7a:b9:48:9d:9f:39:06:24:32:4c:fe:49:
0f:e0:6c:ab:1f:c4:54:88:3c:31:95:37:8e:47:86:
c7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CB:4B:F6:27:D8:AD:A8:B8:AB:DA:8D:73:A4:F1:73:9C:52:21:43
X509v3 Authority Key Identifier:
keyid:3E:AE:B4:B5:16:F7:03:EA:58:F1:6E:08:DA:8A:66:77:03:FB:5C:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pq60tRb3A-pY8W4I2opmdwP7XK4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:7b:2b:f8:03:c1:7a:67:fe:4d:b9:55:0c:ac:db:46:63:c1:
4c:0a:0a:4a:b3:8c:cc:bc:3c:3b:07:65:e1:b8:50:28:54:94:
32:3f:0d:ff:d8:4d:e8:0f:e4:f4:37:43:c5:31:cc:02:38:8f:
65:ec:69:11:4f:43:0c:41:a5:4f:8b:5f:31:2e:b4:25:ea:43:
2e:e6:25:5f:dc:78:a2:62:c4:73:89:05:9e:6e:ac:b1:cc:14:
4a:3b:bb:52:80:03:18:e0:d4:7b:68:ae:7b:c4:7d:4b:d4:8e:
f2:05:ac:e1:df:11:cd:13:11:04:2e:ac:d9:4a:19:ec:eb:2c:
38:de:7a:01:19:16:cc:72:70:df:62:14:91:ec:36:19:e7:90:
00:a6:49:50:0a:2c:55:09:9a:ee:01:77:44:76:bb:f0:71:20:
e0:f0:96:ea:fa:a0:9c:c0:38:15:68:dd:9f:e6:d5:79:0b:32:
05:7f:a8:5c:38:e4:10:16:30:b3:46:11:7c:17:55:6a:af:a8:
a8:2e:fa:4f:63:ff:8a:a4:08:5d:dd:c4:b6:21:a5:4f:93:ae:
a2:b9:99:b2:49:bb:ab:31:fd:38:40:fd:22:8e:8b:a5:10:d8:
72:29:f3:8c:4f:ed:c0:f8:e2:e6:02:8f:b5:43:df:d0:2a:16:
fb:00:e6:bc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUQxMDkxMTAvBgNVBAUTKDNFQUVCNEI1MTZGNzAzRUE1OEYxNkUwOERBOEE2Njc3
MDNGQjVDQUUwHhcNMjUwMTMxMDQxNjI5WhcNMjUwMjA3MDQxNjI5WjAYMRYwFAYD
VQQDEw02NzljNGU5ZC0zMGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyGp8dkoXFlfNgK/W2aTLqfaNfYNeulU8siGO2XSItpahSj50DfKDMwfoOLt8
0rTylRSOtg913+xAHuos4lSzAZ1B+olGTwDDD4P75CNU0LQ0rRxUnkYNciTuhtCK
nJVFEH+frWGDjVxjIEUBTQ1Ur9pW8zjOnth58mYSdxjMoNpM5GPNcp+DKiO9l9lb
dMW2IgL22JOyLUWbPeW9XxUNQu9lR3UynOcofKMCIQ7qmfQhqsN5BmxRMbmusKzi
K5vPlxzz6UyN2qUsUF6K7CmhpcG5w1IExcVnow7eyYqJEDy1bqB6uUidnzkGJDJM
/kkP4GyrH8RUiDwxlTeOR4bHGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKPLS/Yn
2K2ouKvajXOk8XOcUiFDMB8GA1UdIwQYMBaAFD6utLUW9wPqWPFuCNqKZncD+1yu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDEwOS9EQUM2NjZDMDVD
RTAxMUVFQjZDMUI1MTNDNEY5QUUwMi9QcTYwdFJiM0EtcFk4VzRJMm9wbWR3UDdY
SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BxNjB0UmIzQS1wWThXNEkyb3BtZHdQN1hLNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RDEwOS9EQUM2NjZDMDVDRTAxMUVFQjZDMUI1MTNDNEY5QUUwMi9QcTYwdFJiM0Et
cFk4VzRJMm9wbWR3UDdYSzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCmeyv4A8F6Z/5NuVUMrNtGY8FMCgpKs4zMvDw7B2XhuFAoVJQyPw3/
2E3oD+T0N0PFMcwCOI9l7GkRT0MMQaVPi18xLrQl6kMu5iVf3HiiYsRziQWebqyx
zBRKO7tSgAMY4NR7aK57xH1L1I7yBazh3xHNExEELqzZShns6yw43noBGRbMcnDf
YhSR7DYZ55AApklQCixVCZruAXdEdrvwcSDg8Jbq+qCcwDgVaN2f5tV5CzIFf6hc
OOQQFjCzRhF8F1Vqr6ioLvpPY/+KpAhd3cS2IaVPk66iuZmySburMf04QP0ijoul
ENhyKfOMT+3A+OLmAo+1Q9/QKhb7AOa8
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:53:38 2025 by rpki-client