Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft
File: u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft (raw, json)
Hash identifier: 8yJe8TTilubxJNZYeyjk8g/jhwgsbLIG7aWmA4ykz1k=
Subject key identifier: 02:22:DF:85:63:4E:31:2F:BF:4C:5C:3E:D1:8F:CC:E6:58:16:9D:10
Authority key identifier: BB:CC:76:0A:FE:3E:9F:0A:9B:88:C8:EC:7A:49:ED:7C:DD:03:96:F7
Certificate issuer: /CN=A919E3E3/serialNumber=BBCC760AFE3E9F0A9B88C8EC7A49ED7CDD0396F7
Certificate serial: 0658
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u8x2Cv4-nwqbiMjsekntfN0Dlvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft
Manifest number: 0653
Signing time: Thu 30 Jan 2025 22:26:10 +0000
Manifest this update: Thu 30 Jan 2025 22:26:10 +0000
Manifest next update: Thu 06 Feb 2025 22:26:10 +0000
Files and hashes: 1: u8x2Cv4-nwqbiMjsekntfN0Dlvc.crl (hash: vM+BpeWGq2ZVkIvxvHou1MYi4T+rL7Xwm8Z2cnrOIlI=)
2: 58B04DD46F3C11EB924C4E2AC4F9AE02.roa (hash: hT6PiTq4VuebMVKql1Edg2h7UOqDcrvg8gjAvmzNu5c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1624 (0x658)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E3E3/serialNumber=BBCC760AFE3E9F0A9B88C8EC7A49ED7CDD0396F7
Validity
Not Before: Jan 30 22:26:10 2025 GMT
Not After : Feb 6 22:26:10 2025 GMT
Subject: CN=679bfc82-d73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9d:55:7d:7a:be:1b:f1:48:9d:58:3a:49:41:
58:36:1f:a7:b2:6e:52:56:c3:b0:7e:bf:63:7e:0b:
77:03:3c:f1:6a:e4:74:2c:6d:c4:47:a9:a8:c0:33:
d5:1d:4a:46:50:00:78:49:cc:25:72:19:76:1b:2f:
52:1f:8b:77:f7:6a:b6:3e:92:d0:f5:d8:8a:c9:24:
98:7d:5b:53:25:50:ff:64:f4:ec:1a:de:a2:56:66:
c8:25:e9:89:33:24:e6:80:78:f5:3e:1a:ff:b7:3f:
46:ff:5d:6b:b2:8e:5f:bb:58:c1:13:63:f7:07:bc:
1f:01:8e:9a:fb:04:5d:b6:07:52:63:71:7b:91:c3:
1d:63:f9:a1:d3:45:7a:ae:55:d4:86:56:2e:19:b8:
d0:d4:bd:7f:17:c4:58:a9:65:0d:5c:25:46:2d:64:
a1:72:2e:3c:be:9b:ab:c7:95:20:7c:93:88:d2:ba:
91:8c:39:70:bd:84:43:b3:59:35:59:ce:2a:1d:32:
b6:9b:63:25:d6:48:ad:c8:28:79:97:23:04:44:8c:
e7:40:65:17:e9:e9:b1:49:be:72:76:a2:87:bf:fe:
3f:bb:c3:12:24:81:74:a6:39:d1:fc:5f:ee:2e:e8:
06:89:27:69:7f:0a:7b:0f:7e:35:1b:b8:10:a0:d3:
25:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:22:DF:85:63:4E:31:2F:BF:4C:5C:3E:D1:8F:CC:E6:58:16:9D:10
X509v3 Authority Key Identifier:
keyid:BB:CC:76:0A:FE:3E:9F:0A:9B:88:C8:EC:7A:49:ED:7C:DD:03:96:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u8x2Cv4-nwqbiMjsekntfN0Dlvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:1d:8c:05:4f:84:1f:59:f6:0f:81:b8:2a:c4:4b:5a:9a:c8:
b9:80:25:89:5e:a0:c5:a4:a1:8f:61:1f:1c:88:54:b1:02:6d:
8d:39:36:55:e4:70:51:94:4e:b8:1f:78:d0:9d:c5:ec:6b:cb:
37:3b:f9:cd:9d:09:2e:f0:ac:bd:1d:15:24:fd:3e:ff:29:eb:
7c:12:1c:a9:4d:d1:f3:72:78:49:ee:1a:1f:2f:80:99:cd:2e:
5b:51:c9:9a:a1:c8:ae:76:50:d8:d6:8b:2b:4a:99:54:98:5e:
df:a4:a9:eb:2d:88:f3:53:14:c7:f4:90:41:c9:f4:c5:af:51:
f1:e9:4d:05:26:44:09:04:98:b4:ef:ee:2b:7a:2a:95:57:04:
4d:f0:e5:78:2c:d3:91:c3:39:73:aa:bd:6b:46:17:db:e0:d4:
46:45:5d:ee:56:2d:92:c5:44:90:9e:60:64:ff:df:39:81:2b:
62:c9:bb:06:f6:5c:e0:81:16:92:c6:06:fc:8a:21:b9:b5:da:
00:9b:48:c3:5b:08:ae:46:b8:c6:04:8f:85:e6:d7:57:7e:b8:
3c:7b:74:8e:cf:ed:4e:52:79:08:61:f3:7c:4d:d9:ca:fd:e2:
c7:77:97:cc:ef:e2:3e:a9:fa:fc:c6:48:c7:b9:98:1c:5d:9e:
59:d4:25:ca
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUUzRTMxMTAvBgNVBAUTKEJCQ0M3NjBBRkUzRTlGMEE5Qjg4QzhFQzdBNDlFRDdD
REQwMzk2RjcwHhcNMjUwMTMwMjIyNjEwWhcNMjUwMjA2MjIyNjEwWjAYMRYwFAYD
VQQDEw02NzliZmM4Mi1kNzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0J1VfXq+G/FInVg6SUFYNh+nsm5SVsOwfr9jfgt3AzzxauR0LG3ER6mowDPV
HUpGUAB4Scwlchl2Gy9SH4t392q2PpLQ9diKySSYfVtTJVD/ZPTsGt6iVmbIJemJ
MyTmgHj1Phr/tz9G/11rso5fu1jBE2P3B7wfAY6a+wRdtgdSY3F7kcMdY/mh00V6
rlXUhlYuGbjQ1L1/F8RYqWUNXCVGLWShci48vpurx5UgfJOI0rqRjDlwvYRDs1k1
Wc4qHTK2m2Ml1kityCh5lyMERIznQGUX6emxSb5ydqKHv/4/u8MSJIF0pjnR/F/u
LugGiSdpfwp7D341G7gQoNMlNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAIi34Vj
TjEvv0xcPtGPzOZYFp0QMB8GA1UdIwQYMBaAFLvMdgr+Pp8Km4jI7HpJ7XzdA5b3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTNFMy8wOEI4RDBEMjZG
M0ExMUVCQjExMzM5N0VDNEY5QUUwMi91OHgyQ3Y0LW53cWJpTWpzZWtudGZOMERs
dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3U4eDJDdjQtbndxYmlNanNla250Zk4wRGx2Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RTNFMy8wOEI4RDBEMjZGM0ExMUVCQjExMzM5N0VDNEY5QUUwMi91OHgyQ3Y0LW53
cWJpTWpzZWtudGZOMERsdmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAjHYwFT4QfWfYPgbgqxEtamsi5gCWJXqDFpKGPYR8ciFSxAm2NOTZV
5HBRlE64H3jQncXsa8s3O/nNnQku8Ky9HRUk/T7/Ket8EhypTdHzcnhJ7hofL4CZ
zS5bUcmaociudlDY1osrSplUmF7fpKnrLYjzUxTH9JBByfTFr1Hx6U0FJkQJBJi0
7+4reiqVVwRN8OV4LNORwzlzqr1rRhfb4NRGRV3uVi2SxUSQnmBk/985gStiybsG
9lzggRaSxgb8iiG5tdoAm0jDWwiuRrjGBI+F5tdXfrg8e3SOz+1OUnkIYfN8TdnK
/eLHd5fM7+I+qfr8xkjHuZgcXZ5Z1CXK
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:07:11 2025 by rpki-client