Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.mft
File: NA-BNDNxmnYOO_4hkzaHJhF5wyc.mft (raw, json)
Hash identifier: A4WcxN4s9+Ih0yOg0jMv2Bp9cNatSeYQWOzuGeCYIl4=
Subject key identifier: 62:9A:BE:0E:B1:84:D3:FA:14:46:FE:5A:85:3E:8F:11:43:48:C7:B5
Authority key identifier: 34:0F:81:34:33:71:9A:76:0E:3B:FE:21:93:36:87:26:11:79:C3:27
Certificate issuer: /CN=A91FA562/serialNumber=340F813433719A760E3BFE21933687261179C327
Certificate serial: 0138
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NA-BNDNxmnYOO_4hkzaHJhF5wyc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.mft
Manifest number: 0134
Signing time: Fri 31 Jan 2025 03:41:37 +0000
Manifest this update: Fri 31 Jan 2025 03:41:36 +0000
Manifest next update: Fri 07 Feb 2025 03:41:36 +0000
Files and hashes: 1: NA-BNDNxmnYOO_4hkzaHJhF5wyc.crl (hash: D3/1u6yhu6bX5IwLTtaEFDyJqs/58zfq6JbaYs8QoSU=)
2: 7588035C913E11EFB46E9A72C4F9AE02.roa (hash: 4YQPxlb6PsWiAtpK43YsiLFyCkQjvUYNK7OStoBKN5I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 312 (0x138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA562/serialNumber=340F813433719A760E3BFE21933687261179C327
Validity
Not Before: Jan 31 03:41:36 2025 GMT
Not After : Feb 7 03:41:36 2025 GMT
Subject: CN=679c4670-e397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d2:84:fc:f1:c1:2c:a1:8a:64:75:62:f9:50:
01:de:07:a9:7c:e9:46:61:9e:41:d9:28:eb:2b:07:
dd:3a:28:fc:57:a0:93:da:a2:a2:92:ed:55:41:f2:
3d:db:25:02:68:05:44:b4:1d:1f:4a:33:2e:d9:43:
10:9c:34:0b:7d:a1:d5:c6:b3:2d:a8:a2:25:6e:76:
55:09:5b:ed:b6:4a:d0:11:f4:0e:62:11:7e:16:c4:
8b:d9:1c:24:98:91:dc:7b:60:52:f4:54:b8:98:6d:
ee:97:60:15:e4:d3:90:e2:5a:15:7e:d0:b5:d9:e5:
bd:e6:f2:c4:b6:3d:dd:8f:9f:4d:65:cf:be:f2:ce:
cd:ad:7f:be:09:e0:04:ad:57:c3:27:96:16:2b:4e:
a5:40:20:40:44:f1:c7:36:c3:53:93:18:cd:9d:f5:
66:b1:61:1e:68:2f:cf:8d:2f:ed:43:de:ab:db:8b:
a8:d0:e6:2e:03:7f:f1:1b:43:1e:dc:21:13:8e:00:
63:28:38:7a:8c:7a:70:1f:82:20:c9:38:0c:b8:a7:
9d:0d:26:be:1d:7f:ff:79:3a:46:23:59:b2:32:78:
db:77:5e:31:de:7e:04:7d:a6:5b:8d:bf:02:ee:10:
55:c2:fb:de:9c:a8:c9:25:9c:08:61:86:7d:84:5a:
2a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9A:BE:0E:B1:84:D3:FA:14:46:FE:5A:85:3E:8F:11:43:48:C7:B5
X509v3 Authority Key Identifier:
keyid:34:0F:81:34:33:71:9A:76:0E:3B:FE:21:93:36:87:26:11:79:C3:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NA-BNDNxmnYOO_4hkzaHJhF5wyc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d3:71:0b:dc:60:68:cd:ff:43:ac:b6:06:60:8e:cc:9a:2a:
53:89:06:c6:8d:71:e0:94:ac:92:36:dc:b8:15:e2:40:ca:50:
f5:1e:b4:ba:0a:d3:6d:a0:bc:ae:0a:d0:d0:6a:a0:5d:3f:4e:
b9:47:35:82:4e:0a:b1:ee:19:21:15:7f:60:2f:2d:8e:38:15:
55:aa:cd:48:b0:4f:33:9e:6e:99:09:92:93:20:1e:8e:73:46:
cc:51:e9:00:b1:50:3b:ed:50:b8:fc:45:21:29:b8:c5:b7:3e:
ac:ac:80:93:73:38:ac:89:df:4e:06:6c:e0:af:75:6b:7b:2f:
42:19:e8:09:16:ec:52:09:5c:ca:3f:61:8f:92:b1:36:f0:fe:
e1:04:bb:53:f7:b6:da:49:49:64:da:f6:40:5e:f2:5d:28:b5:
d0:db:7b:13:fc:d4:d0:f7:bf:9f:7d:06:bb:0e:1c:c5:60:0f:
2c:39:f8:d9:5f:b6:25:47:bc:4d:3e:fb:f6:bc:4e:b8:38:7e:
bb:50:7c:4a:96:91:2f:fd:8f:b5:b7:91:83:04:f0:2c:85:4f:
66:dc:8a:af:e3:34:62:a8:3f:ea:77:3b:41:de:64:95:0d:fb:
1c:38:b8:0e:5b:ca:dc:76:f0:4a:9b:d9:65:23:e1:af:bf:f4:
85:54:0d:8b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkE1NjIxMTAvBgNVBAUTKDM0MEY4MTM0MzM3MTlBNzYwRTNCRkUyMTkzMzY4NzI2
MTE3OUMzMjcwHhcNMjUwMTMxMDM0MTM2WhcNMjUwMjA3MDM0MTM2WjAYMRYwFAYD
VQQDEw02NzljNDY3MC1lMzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAydKE/PHBLKGKZHVi+VAB3gepfOlGYZ5B2SjrKwfdOij8V6CT2qKiku1VQfI9
2yUCaAVEtB0fSjMu2UMQnDQLfaHVxrMtqKIlbnZVCVvttkrQEfQOYhF+FsSL2Rwk
mJHce2BS9FS4mG3ul2AV5NOQ4loVftC12eW95vLEtj3dj59NZc++8s7NrX++CeAE
rVfDJ5YWK06lQCBARPHHNsNTkxjNnfVmsWEeaC/PjS/tQ96r24uo0OYuA3/xG0Me
3CETjgBjKDh6jHpwH4IgyTgMuKedDSa+HX//eTpGI1myMnjbd14x3n4EfaZbjb8C
7hBVwvvenKjJJZwIYYZ9hFoq4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGKavg6x
hNP6FEb+WoU+jxFDSMe1MB8GA1UdIwQYMBaAFDQPgTQzcZp2Djv+IZM2hyYRecMn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTU2Mi8yNjU3RjczRTBC
QzkxMUVFOEY3OUJCNURDNEY5QUUwMi9OQS1CTkROeG1uWU9PXzRoa3phSEpoRjV3
eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05BLUJORE54bW5ZT09fNGhremFISmhGNXd5Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QTU2Mi8yNjU3RjczRTBCQzkxMUVFOEY3OUJCNURDNEY5QUUwMi9OQS1CTkROeG1u
WU9PXzRoa3phSEpoRjV3eWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCO03EL3GBozf9DrLYGYI7MmipTiQbGjXHglKySNty4FeJAylD1HrS6
CtNtoLyuCtDQaqBdP065RzWCTgqx7hkhFX9gLy2OOBVVqs1IsE8znm6ZCZKTIB6O
c0bMUekAsVA77VC4/EUhKbjFtz6srICTczisid9OBmzgr3Vrey9CGegJFuxSCVzK
P2GPkrE28P7hBLtT97baSUlk2vZAXvJdKLXQ23sT/NTQ97+ffQa7DhzFYA8sOfjZ
X7YlR7xNPvv2vE64OH67UHxKlpEv/Y+1t5GDBPAshU9m3Iqv4zRiqD/qdztB3mSV
DfscOLgOW8rcdvBKm9llI+Gvv/SFVA2L
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:18:24 2025 by rpki-client