Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
File: cu8y2vToP5AZKWMgh047RFAI7Dk.mft (raw, json)
Hash identifier: RHhrPvfCqg1MZ4gtG1jgaaEcYbG25KRzp1RPo62qKM0=
Subject key identifier: 3E:20:78:1D:7A:96:2C:F3:D7:59:80:67:5E:C7:3A:A7:12:AE:EF:20
Authority key identifier: 72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39
Certificate issuer: /CN=A919ED93/serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39
Certificate serial: 0103
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
Manifest number: FC
Signing time: Fri 31 Jan 2025 04:21:27 +0000
Manifest this update: Fri 31 Jan 2025 04:21:26 +0000
Manifest next update: Fri 07 Feb 2025 04:21:26 +0000
Files and hashes: 1: cu8y2vToP5AZKWMgh047RFAI7Dk.crl (hash: RcXS4Tq/QZMCNDROT4LEmXscMwDBEOEf7Fwiwxk+qdM=)
2: 9436AC3668C711EE8C53A031C4F9AE02.roa (hash: YwXGuIwLbAOZzPiPRemoc11a6IYzMpgzJQrMI7kN5fw=)
3: 94A6144A68C711EE8C53A031C4F9AE02.roa (hash: NFu6vOIdrlQETQmdi2ziHOwoF9spOq/YA6DUc9jHTPM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 259 (0x103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919ED93/serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39
Validity
Not Before: Jan 31 04:21:26 2025 GMT
Not After : Feb 7 04:21:26 2025 GMT
Subject: CN=679c4fc7-4ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ad:0e:35:c1:92:fc:d2:d4:5d:c8:53:be:cd:
f3:fd:9a:bc:b1:3d:09:3f:46:c2:73:e5:8f:ae:9f:
a4:a6:57:4e:47:21:a6:c6:96:df:73:d9:64:a3:37:
87:4b:54:fc:66:14:d0:82:de:18:cc:56:29:c5:f9:
7b:7d:01:2d:b0:21:7e:1e:a8:d3:c0:08:3c:e5:35:
bf:69:01:1a:5d:8f:55:9d:51:e5:c2:ef:be:07:61:
8b:8c:8e:a3:7f:6c:62:5f:f4:a7:7f:77:cc:0e:85:
ad:34:af:80:b1:9a:94:aa:c2:1a:80:b9:bd:18:16:
4f:2b:6a:e0:a4:d7:a8:70:66:48:8b:fa:9c:d8:98:
6f:08:61:44:7b:4d:4f:31:6d:6b:f0:83:20:c6:2e:
ed:d9:1f:94:9c:c8:a1:2c:5e:72:cd:01:7b:e3:4c:
1c:73:82:17:33:e9:80:bd:4a:58:2a:51:01:dd:d2:
18:13:f8:77:c2:83:08:d1:d8:dd:55:ae:16:f1:fd:
6f:33:ed:ab:e8:cc:20:b6:68:58:4e:1f:c4:17:2f:
33:53:1c:e3:24:f9:dd:7b:67:4a:39:38:56:56:c3:
5b:8e:d3:d9:9c:50:60:0c:0a:9f:33:de:e3:e3:f8:
37:f8:14:00:df:ec:b1:54:c6:fa:ad:0e:8e:9e:e4:
08:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:20:78:1D:7A:96:2C:F3:D7:59:80:67:5E:C7:3A:A7:12:AE:EF:20
X509v3 Authority Key Identifier:
keyid:72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d4:c1:c0:2a:07:97:0c:2f:64:91:56:0b:db:12:d8:3a:b9:68:
b4:26:f5:34:ca:e0:f2:1a:b9:2a:7f:2c:ea:2c:57:ec:61:85:
ef:ab:7e:87:85:2c:75:17:0a:bd:d5:d5:53:4f:98:b5:90:35:
81:8e:73:00:0f:89:d3:46:87:b0:94:db:4a:f3:ab:3f:78:6a:
17:d2:d1:25:1b:ae:92:33:1d:7d:26:fd:42:48:3e:55:73:f5:
eb:f2:eb:ad:48:fe:99:39:d6:72:78:89:c9:60:db:06:32:30:
02:14:92:7c:a2:28:e6:5b:9d:15:15:55:63:79:d8:89:72:87:
87:d0:d1:c2:60:3c:56:3a:bc:bf:88:b7:a2:17:bb:c1:19:f0:
d2:be:1d:69:c9:88:06:d4:fa:8d:b2:22:45:4d:a1:39:d5:d3:
98:f3:f7:c6:b5:5c:d0:f2:59:bb:55:07:ce:57:a4:06:65:42:
3d:b7:18:e7:e4:a2:f3:f3:af:16:de:da:12:b5:c3:80:a1:7b:
31:a2:b5:42:71:5a:7f:90:d2:f7:f2:06:7a:41:da:9e:db:5a:
a0:df:74:a3:66:50:c4:00:fb:65:f0:56:18:ce:ea:c0:a9:7a:
bd:50:b5:73:67:0d:b0:1d:ef:3f:51:43:ab:18:f5:54:31:e8:
8a:b7:2d:bb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVEOTMxMTAvBgNVBAUTKDcyRUYzMkRBRjRFODNGOTAxOTI5NjMyMDg3NEUzQjQ0
NTAwOEVDMzkwHhcNMjUwMTMxMDQyMTI2WhcNMjUwMjA3MDQyMTI2WjAYMRYwFAYD
VQQDEw02NzljNGZjNy00Y2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp60ONcGS/NLUXchTvs3z/Zq8sT0JP0bCc+WPrp+kpldORyGmxpbfc9lkozeH
S1T8ZhTQgt4YzFYpxfl7fQEtsCF+HqjTwAg85TW/aQEaXY9VnVHlwu++B2GLjI6j
f2xiX/Snf3fMDoWtNK+AsZqUqsIagLm9GBZPK2rgpNeocGZIi/qc2JhvCGFEe01P
MW1r8IMgxi7t2R+UnMihLF5yzQF740wcc4IXM+mAvUpYKlEB3dIYE/h3woMI0djd
Va4W8f1vM+2r6MwgtmhYTh/EFy8zUxzjJPnde2dKOThWVsNbjtPZnFBgDAqfM97j
4/g3+BQA3+yxVMb6rQ6OnuQI1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD4geB16
lizz11mAZ17HOqcSru8gMB8GA1UdIwQYMBaAFHLvMtr06D+QGSljIIdOO0RQCOw5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUQ5My9BMzZDNjhGNDY4
QzYxMUVFOTU5NjRGN0NDNEY5QUUwMi9jdTh5MnZUb1A1QVpLV01naDA0N1JGQUk3
RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2N1OHkydlRvUDVBWktXTWdoMDQ3UkZBSTdEay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUQ5My9BMzZDNjhGNDY4QzYxMUVFOTU5NjRGN0NDNEY5QUUwMi9jdTh5MnZUb1A1
QVpLV01naDA0N1JGQUk3RGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDUwcAqB5cML2SRVgvbEtg6uWi0JvU0yuDyGrkqfyzqLFfsYYXvq36H
hSx1Fwq91dVTT5i1kDWBjnMAD4nTRoewlNtK86s/eGoX0tElG66SMx19Jv1CSD5V
c/Xr8uutSP6ZOdZyeInJYNsGMjACFJJ8oijmW50VFVVjediJcoeH0NHCYDxWOry/
iLeiF7vBGfDSvh1pyYgG1PqNsiJFTaE51dOY8/fGtVzQ8lm7VQfOV6QGZUI9txjn
5KLz868W3toStcOAoXsxorVCcVp/kNL38gZ6Qdqe21qg33SjZlDEAPtl8FYYzurA
qXq9ULVzZw2wHe8/UUOrGPVUMeiKty27
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:31:56 2025 by rpki-client