Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft
File: CF4MUA89R900skS9OSnO_a3ZbD0.mft (raw, json)
Hash identifier: UD8cgQGMQfS6tJp6sc3tbhekJWQAMJG2SkkHasB4zpM=
Subject key identifier: D8:4E:81:3B:69:50:9B:A2:84:8B:E6:60:B3:87:A4:9E:7D:D2:37:89
Authority key identifier: 08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D
Certificate issuer: /CN=A919D118/serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D
Certificate serial: 0A42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft
Manifest number: 0A31
Signing time: Thu 30 Jan 2025 19:52:12 +0000
Manifest this update: Thu 30 Jan 2025 19:52:11 +0000
Manifest next update: Thu 06 Feb 2025 19:52:11 +0000
Files and hashes: 1: CF4MUA89R900skS9OSnO_a3ZbD0.crl (hash: HrJS0cBCEffuMW20Wt+2xKprK/at1ExlurpFZO6KNKw=)
2: E56559AA7CAD11EEB3536044C4F9AE02.roa (hash: mQHhbjcZjesdw8CGvTaqC+ZwbELZTj2o4sPH/U1ueLA=)
3: 5FFA4BEC3C0B11ED89AD755FC4F9AE02.roa (hash: u7yXnD3bGqVmUVwiLw2YbUnZGmEt5M03j3uj8hclD10=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2626 (0xa42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D118/serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D
Validity
Not Before: Jan 30 19:52:11 2025 GMT
Not After : Feb 6 19:52:11 2025 GMT
Subject: CN=679bd86b-159f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:44:67:39:cb:da:fb:3c:06:c3:30:30:37:d3:
53:0b:82:83:97:f6:3d:20:eb:09:3d:c0:f0:14:8c:
e9:d3:c5:a5:81:3c:b6:e5:a5:70:31:e3:ad:cf:4f:
7e:93:4d:fc:85:5c:00:b7:dd:40:6d:4e:79:d0:a9:
69:a1:d6:24:24:4e:c5:0b:98:1f:33:a8:49:7c:fe:
ac:9f:0d:cb:91:9d:0d:c0:80:43:64:ec:2c:9f:a8:
81:1a:3f:cf:40:91:29:a7:95:22:77:3d:f7:4e:87:
0b:21:c3:24:2a:5f:43:ff:37:8a:78:39:49:35:fa:
2f:d8:4f:d5:68:19:4a:35:5f:91:8c:8e:05:6f:42:
1f:3d:86:b3:fb:8f:6c:15:80:50:d6:3b:ea:0c:49:
16:82:e7:18:c4:29:55:20:78:08:ea:47:32:cb:fe:
09:34:d4:72:7f:a9:b0:31:f3:25:8b:e3:7b:ff:5b:
0b:76:5d:d5:dd:00:72:49:99:7e:c7:df:c0:21:5a:
1e:68:17:08:af:60:c1:59:f7:ba:47:e0:db:e5:01:
e6:9e:57:2f:95:3f:45:33:7f:97:6a:0a:8c:6a:9e:
5e:8e:b2:34:16:09:d6:2d:33:9f:36:d6:65:55:fd:
33:e6:14:2b:2b:2d:20:da:6a:eb:86:ee:5b:52:c2:
15:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4E:81:3B:69:50:9B:A2:84:8B:E6:60:B3:87:A4:9E:7D:D2:37:89
X509v3 Authority Key Identifier:
keyid:08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:b9:9e:29:c7:c2:c6:d2:65:d2:34:d4:d3:62:12:6a:15:ed:
23:8c:30:da:1d:f2:35:21:39:4e:c4:d6:79:4d:86:c7:97:d4:
15:5f:17:7f:b7:8a:09:0e:1c:d3:5d:17:ad:7a:c0:6e:af:da:
b6:a1:d4:ba:9c:f3:96:00:a0:c5:7f:93:5d:ae:26:9f:3a:01:
33:41:f4:26:0b:91:f8:6e:e9:d1:2e:af:4b:9c:44:9a:a8:79:
4f:df:5e:83:dc:31:be:9e:6f:19:cd:ab:34:2d:3b:ca:f6:21:
b6:82:87:29:df:d8:31:b1:ae:07:f2:0b:d6:65:d9:bf:62:fe:
31:22:8c:0e:09:23:55:a1:b2:5b:02:f5:d3:65:ab:90:02:13:
a5:c7:cf:52:3f:02:58:64:ae:b6:45:31:d4:76:40:26:53:95:
45:a5:57:4f:6b:c8:4b:36:8e:c9:9a:58:62:ae:36:ba:1a:99:
f0:7a:c0:9c:4e:30:6c:af:cb:8a:b7:f7:ef:a4:1a:b3:28:f1:
47:07:e8:a0:bd:e5:11:d1:19:fa:7f:0d:27:19:15:87:09:9e:
e3:42:ce:f4:82:7f:00:e9:f7:57:29:b1:64:18:09:06:23:2c:
6f:07:d1:ed:21:b6:55:3d:c6:3c:fe:78:eb:21:87:27:f2:d7:
61:eb:da:b8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUQxMTgxMTAvBgNVBAUTKDA4NUUwQzUwMEYzRDQ3REQzNEIyNDRCRDM5MjlDRUZE
QUREOTZDM0QwHhcNMjUwMTMwMTk1MjExWhcNMjUwMjA2MTk1MjExWjAYMRYwFAYD
VQQDEw02NzliZDg2Yi0xNTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArERnOcva+zwGwzAwN9NTC4KDl/Y9IOsJPcDwFIzp08WlgTy25aVwMeOtz09+
k038hVwAt91AbU550KlpodYkJE7FC5gfM6hJfP6snw3LkZ0NwIBDZOwsn6iBGj/P
QJEpp5Uidz33TocLIcMkKl9D/zeKeDlJNfov2E/VaBlKNV+RjI4Fb0IfPYaz+49s
FYBQ1jvqDEkWgucYxClVIHgI6kcyy/4JNNRyf6mwMfMli+N7/1sLdl3V3QBySZl+
x9/AIVoeaBcIr2DBWfe6R+Db5QHmnlcvlT9FM3+XagqMap5ejrI0FgnWLTOfNtZl
Vf0z5hQrKy0g2mrrhu5bUsIVkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhOgTtp
UJuihIvmYLOHpJ590jeJMB8GA1UdIwQYMBaAFAheDFAPPUfdNLJEvTkpzv2t2Ww9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDExOC9CQjgxQTUxNDYy
QkYxMUVBQUEzQTg5NDVDNEY5QUUwMi9DRjRNVUE4OVI5MDBza1M5T1NuT19hM1pi
RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NGNE1VQTg5UjkwMHNrUzlPU25PX2EzWmJEMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RDExOC9CQjgxQTUxNDYyQkYxMUVBQUEzQTg5NDVDNEY5QUUwMi9DRjRNVUE4OVI5
MDBza1M5T1NuT19hM1piRDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCCuZ4px8LG0mXSNNTTYhJqFe0jjDDaHfI1ITlOxNZ5TYbHl9QVXxd/
t4oJDhzTXRetesBur9q2odS6nPOWAKDFf5NdriafOgEzQfQmC5H4bunRLq9LnESa
qHlP316D3DG+nm8Zzas0LTvK9iG2gocp39gxsa4H8gvWZdm/Yv4xIowOCSNVobJb
AvXTZauQAhOlx89SPwJYZK62RTHUdkAmU5VFpVdPa8hLNo7Jmlhirja6GpnwesCc
TjBsr8uKt/fvpBqzKPFHB+igveUR0Rn6fw0nGRWHCZ7jQs70gn8A6fdXKbFkGAkG
IyxvB9HtIbZVPcY8/njrIYcn8tdh69q4
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:24:32 2025 by rpki-client