Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft
File: 8VAZIKVfOnwnEDkUn_oop8HMOPE.mft (raw, json)
Hash identifier: RK3YOR5PyjGsC9hAgkaf+tNPp/tlWzxWB2T+Nvdfem8=
Subject key identifier: 61:79:C2:D3:26:06:05:75:FD:EB:BB:7D:06:EE:F2:88:C1:F1:28:E7
Authority key identifier: F1:50:19:20:A5:5F:3A:7C:27:10:39:14:9F:FA:28:A7:C1:CC:38:F1
Certificate issuer: /CN=A91B49C0/serialNumber=F1501920A55F3A7C271039149FFA28A7C1CC38F1
Certificate serial: 0324
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft
Manifest number: 0320
Signing time: Fri 31 Jan 2025 01:13:43 +0000
Manifest this update: Fri 31 Jan 2025 01:13:42 +0000
Manifest next update: Fri 07 Feb 2025 01:13:42 +0000
Files and hashes: 1: 8VAZIKVfOnwnEDkUn_oop8HMOPE.crl (hash: Cc9YfbKEHVG7vWZa2J+6e46DNlw2SOfsFO4ipFEU/ow=)
2: 8304B142B34711EC90A6DA67C4F9AE02.roa (hash: WXC/B6Dbe8kPnOwbgfCf/9me935cYsiOJufkenUuGQo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 804 (0x324)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B49C0/serialNumber=F1501920A55F3A7C271039149FFA28A7C1CC38F1
Validity
Not Before: Jan 31 01:13:42 2025 GMT
Not After : Feb 7 01:13:42 2025 GMT
Subject: CN=679c23c6-74ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:33:6c:3f:57:f9:2c:c1:9c:5f:10:4f:88:9e:
57:5c:6f:c2:02:43:f1:9d:ed:2a:59:02:f4:f2:f4:
44:7c:2d:25:3f:77:69:f4:75:dc:89:f7:11:cb:5e:
d9:6c:58:d3:76:9b:ae:b2:f2:05:4d:23:aa:86:be:
c8:d3:b9:a2:92:dd:32:a6:5a:d6:36:d6:fc:93:45:
4f:b5:5a:dd:a9:b9:51:53:fa:15:21:39:6d:64:ed:
fa:92:95:cd:99:74:cc:f3:c4:14:43:6e:d0:d0:03:
6d:73:5e:bc:23:9a:6b:80:8a:6d:04:59:1b:2e:0c:
90:38:9e:ff:6d:1c:22:64:10:68:66:7f:c8:24:20:
7d:07:95:3e:a4:4e:e2:27:01:67:cc:4c:c9:bb:6a:
5f:b6:be:be:64:7d:4a:7a:86:d6:3d:c6:0b:9b:13:
66:1c:bc:cc:77:77:9d:c7:3e:38:3d:9f:e2:98:ee:
75:dd:66:96:98:51:bc:1f:8c:0b:5d:3d:b6:b3:e4:
eb:e5:13:ce:e6:0b:1f:28:b3:97:fe:36:2d:ac:d6:
c7:e7:a8:2f:ba:cb:42:45:c3:60:08:30:c4:e9:dd:
35:57:b3:84:c2:eb:11:7b:25:48:02:70:ac:96:a5:
76:28:23:b6:5f:1d:74:9c:bd:f9:74:78:d3:b9:b4:
63:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:79:C2:D3:26:06:05:75:FD:EB:BB:7D:06:EE:F2:88:C1:F1:28:E7
X509v3 Authority Key Identifier:
keyid:F1:50:19:20:A5:5F:3A:7C:27:10:39:14:9F:FA:28:A7:C1:CC:38:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:00:97:5b:ea:3a:a1:82:a6:50:00:26:67:9b:6d:bd:f5:57:
1a:f5:98:44:09:a9:9b:9a:b3:d1:85:99:7c:45:64:c3:c6:64:
85:a3:35:d4:b7:29:34:69:54:43:9a:b2:66:d2:9e:d3:40:e2:
fc:7c:a3:1c:26:c7:49:8c:42:2e:f9:06:01:16:ad:94:f9:7f:
76:2e:af:a9:c9:78:f7:c2:7a:b6:48:8d:6a:d8:ac:4d:de:7b:
f5:15:ba:b3:7e:09:8e:2b:e0:3d:74:71:a2:9f:bc:e8:49:1e:
cd:c5:d1:17:c0:81:ef:e4:4a:a6:3f:45:bf:f7:2d:53:25:2b:
94:81:60:31:45:8a:d6:ad:47:3f:16:5d:80:4f:e0:66:db:5c:
29:2c:33:d1:6b:a7:f0:b3:64:da:7e:fb:ea:13:b3:35:3f:c8:
41:97:c6:af:bc:a7:fc:75:70:e4:e1:e1:4f:64:f5:5b:36:6c:
b3:64:d0:17:e5:d8:9f:9c:07:40:2e:d8:34:7f:92:88:9f:a0:
db:bb:59:ab:ba:e5:12:31:9e:20:b3:22:98:1f:2b:b7:60:74:
9b:ad:36:75:76:5a:04:45:44:14:cc:0a:ec:dd:18:54:90:38:
f6:76:41:87:ea:c0:bb:e5:0c:66:24:9b:9d:bf:e4:e6:0f:3d:
8b:f2:36:c1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAyQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjQ5QzAxMTAvBgNVBAUTKEYxNTAxOTIwQTU1RjNBN0MyNzEwMzkxNDlGRkEyOEE3
QzFDQzM4RjEwHhcNMjUwMTMxMDExMzQyWhcNMjUwMjA3MDExMzQyWjAYMRYwFAYD
VQQDEw02NzljMjNjNi03NGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqDNsP1f5LMGcXxBPiJ5XXG/CAkPxne0qWQL08vREfC0lP3dp9HXcifcRy17Z
bFjTdpuusvIFTSOqhr7I07mikt0yplrWNtb8k0VPtVrdqblRU/oVITltZO36kpXN
mXTM88QUQ27Q0ANtc168I5prgIptBFkbLgyQOJ7/bRwiZBBoZn/IJCB9B5U+pE7i
JwFnzEzJu2pftr6+ZH1KeobWPcYLmxNmHLzMd3edxz44PZ/imO513WaWmFG8H4wL
XT22s+Tr5RPO5gsfKLOX/jYtrNbH56gvustCRcNgCDDE6d01V7OEwusReyVIAnCs
lqV2KCO2Xx10nL35dHjTubRjMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGF5wtMm
BgV1/eu7fQbu8ojB8SjnMB8GA1UdIwQYMBaAFPFQGSClXzp8JxA5FJ/6KKfBzDjx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDlDMC82Q0IzODM1OEIz
NDQxMUVDQUJDRTJBNjJDNEY5QUUwMi84VkFaSUtWZk9ud25FRGtVbl9vb3A4SE1P
UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhWQVpJS1ZmT253bkVEa1VuX29vcDhITU9QRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NDlDMC82Q0IzODM1OEIzNDQxMUVDQUJDRTJBNjJDNEY5QUUwMi84VkFaSUtWZk9u
d25FRGtVbl9vb3A4SE1PUEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBZAJdb6jqhgqZQACZnm2299Vca9ZhECambmrPRhZl8RWTDxmSFozXU
tyk0aVRDmrJm0p7TQOL8fKMcJsdJjEIu+QYBFq2U+X92Lq+pyXj3wnq2SI1q2KxN
3nv1FbqzfgmOK+A9dHGin7zoSR7NxdEXwIHv5EqmP0W/9y1TJSuUgWAxRYrWrUc/
Fl2AT+Bm21wpLDPRa6fws2TafvvqE7M1P8hBl8avvKf8dXDk4eFPZPVbNmyzZNAX
5difnAdALtg0f5KIn6Dbu1mruuUSMZ4gsyKYHyu3YHSbrTZ1dloERUQUzArs3RhU
kDj2dkGH6sC75QxmJJudv+TmDz2L8jbB
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:00 2025 by rpki-client