Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/1/7A443962573EC01D5131651F90F46DA19AFC21D2.mft
File: 7A443962573EC01D5131651F90F46DA19AFC21D2.mft (raw, json)
Hash identifier: TeY6TxcjqtTfNgY2kIVuAsaU/yej0XFOrj5m+QxqPTs=
Subject key identifier: 99:49:52:DB:D0:D1:F0:76:A1:B6:E3:BB:D3:85:7D:D9:23:0C:D6:09
Authority key identifier: 7A:44:39:62:57:3E:C0:1D:51:31:65:1F:90:F4:6D:A1:9A:FC:21:D2
Certificate issuer: /CN=A917447B0000/serialNumber=7A443962573EC01D5131651F90F46DA19AFC21D2
Certificate serial: 170C96F83CBA1A9E313A07A60DAA795B18D33A0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ekQ5Ylc-wB1RMWUfkPRtoZr8IdI.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A917447B0000/1/7A443962573EC01D5131651F90F46DA19AFC21D2.mft
Manifest number: B3
Signing time: Fri 31 Jan 2025 11:32:23 +0000
Manifest this update: Fri 31 Jan 2025 11:27:23 +0000
Manifest next update: Sat 01 Feb 2025 14:23:23 +0000
Files and hashes: 1: 7A443962573EC01D5131651F90F46DA19AFC21D2.crl (hash: DiHBxAXxYIIqgSVvVF2jzeNmX5PYoTn2VCRXd6501E4=)
2: 323030313a6466343a353134633a3a2f34362d3436203d3e20313533333436.roa (hash: 1C3rbFzudLCdfutKbgqgtRQRfEtQCAigc6gLtTheXZU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:0c:96:f8:3c:ba:1a:9e:31:3a:07:a6:0d:aa:79:5b:18:d3:3a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917447B0000/serialNumber=7A443962573EC01D5131651F90F46DA19AFC21D2
Validity
Not Before: Jan 31 11:27:23 2025 GMT
Not After : Feb 1 14:23:23 2025 GMT
Subject: CN=994952DBD0D1F076A1B6E3BBD3857DD9230CD609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:50:33:80:17:ca:16:7d:59:a7:fe:30:79:d5:
39:82:a0:2b:55:9d:1a:30:13:46:e0:af:eb:7a:12:
ba:7f:f1:fc:c2:28:bc:85:e5:a3:95:8e:57:6c:58:
fd:37:58:26:cc:d5:19:61:ef:86:1b:1c:7d:2f:64:
7c:4c:b9:91:b2:ea:9b:ec:41:31:ae:89:e4:c5:3f:
8e:c4:e8:a5:0d:64:f0:40:a1:5b:70:6b:c8:07:92:
ae:ff:ca:eb:d7:fb:ee:15:17:86:66:20:29:fa:f1:
11:c1:8b:a0:c0:fc:e9:ee:05:7c:35:db:ae:b9:cc:
95:62:24:33:e8:50:66:94:db:a5:1e:eb:fe:af:2c:
03:44:28:c0:ce:db:08:48:cb:aa:fd:32:cd:16:aa:
82:32:d8:26:4c:0e:4d:b9:bd:8b:3e:ea:31:e4:5f:
70:d6:f1:9b:f8:72:0c:9c:2b:45:38:8c:cc:17:ca:
3e:9c:ea:c4:d8:17:04:e7:e6:a4:ef:12:ca:e5:32:
e5:53:f2:4f:f4:f9:8f:25:0c:c6:91:87:bf:68:59:
5f:3c:f8:62:86:e9:ec:65:66:ef:e1:3c:cf:d5:b6:
30:46:0e:12:4a:82:dc:27:f1:82:58:a4:48:54:b4:
ee:91:5b:ed:2b:50:5d:ff:44:dd:34:3e:dc:67:f6:
23:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:49:52:DB:D0:D1:F0:76:A1:B6:E3:BB:D3:85:7D:D9:23:0C:D6:09
X509v3 Authority Key Identifier:
keyid:7A:44:39:62:57:3E:C0:1D:51:31:65:1F:90:F4:6D:A1:9A:FC:21:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/7A443962573EC01D5131651F90F46DA19AFC21D2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ekQ5Ylc-wB1RMWUfkPRtoZr8IdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/7A443962573EC01D5131651F90F46DA19AFC21D2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:87:69:b9:de:03:a8:1d:85:db:fb:a0:1f:01:28:eb:69:5a:
5b:4d:ed:87:6f:37:42:b8:2a:23:07:77:bd:2c:39:77:85:f1:
3c:e0:19:fd:19:0f:8a:f9:d1:4b:dc:37:0a:88:6c:42:b1:cb:
ad:c0:29:8e:59:06:66:b7:62:63:66:e3:21:4f:72:4c:69:4a:
c4:ae:2c:a5:49:52:ba:83:b5:54:b9:b5:06:13:54:8d:4d:69:
f7:85:bd:65:b7:81:92:27:09:48:05:40:2d:ea:b7:80:c4:0a:
ef:63:5b:15:3e:c1:2d:59:83:6c:2f:8c:ab:ae:27:7d:b5:72:
b0:bd:42:ae:42:7a:f1:67:5c:7f:36:19:69:79:73:54:c4:cc:
c7:f4:24:96:50:47:3f:66:b1:d2:45:fa:14:4b:88:ce:86:86:
b0:72:ec:86:6f:19:af:01:a6:75:a0:d8:a0:e8:55:7a:da:9e:
05:94:56:40:9f:bf:09:ec:51:5c:45:98:e2:69:40:b5:8a:87:
d7:a7:6e:9a:84:9f:f1:96:2a:36:44:e5:da:7a:c7:c8:a4:f3:
c3:c6:ff:42:a5:f0:28:fb:1b:57:65:a5:39:33:8e:71:a7:69:
2a:7e:c2:04:9b:be:23:fb:d3:18:7f:a1:3c:8a:65:c9:c6:a7:
49:73:59:83
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUFwyW+Dy6Gp4xOgemDap5WxjTOgowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNzQ0N0IwMDAwMTEwLwYDVQQFEyg3QTQ0Mzk2MjU3
M0VDMDFENTEzMTY1MUY5MEY0NkRBMTlBRkMyMUQyMB4XDTI1MDEzMTExMjcyM1oX
DTI1MDIwMTE0MjMyM1owMzExMC8GA1UEAxMoOTk0OTUyREJEMEQxRjA3NkExQjZF
M0JCRDM4NTdERDkyMzBDRDYwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMdQM4AXyhZ9Waf+MHnVOYKgK1WdGjATRuCv63oSun/x/MIovIXlo5WOV2xY
/TdYJszVGWHvhhscfS9kfEy5kbLqm+xBMa6J5MU/jsTopQ1k8EChW3BryAeSrv/K
69f77hUXhmYgKfrxEcGLoMD86e4FfDXbrrnMlWIkM+hQZpTbpR7r/q8sA0QowM7b
CEjLqv0yzRaqgjLYJkwOTbm9iz7qMeRfcNbxm/hyDJwrRTiMzBfKPpzqxNgXBOfm
pO8SyuUy5VPyT/T5jyUMxpGHv2hZXzz4Yobp7GVm7+E8z9W2MEYOEkqC3Cfxglik
SFS07pFb7StQXf9E3TQ+3Gf2IycCAwEAAaOCAhswggIXMB0GA1UdDgQWBBSZSVLb
0NHwdqG247vThX3ZIwzWCTAfBgNVHSMEGDAWgBR6RDliVz7AHVExZR+Q9G2hmvwh
0jAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3QjAwMDAvMS83QTQ0Mzk2
MjU3M0VDMDFENTEzMTY1MUY5MEY0NkRBMTlBRkMyMUQyLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9la1E1WWxjLXdC
MVJNV1Vma1BSdG9acjhJZEkuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3
QjAwMDAvMS83QTQ0Mzk2MjU3M0VDMDFENTEzMTY1MUY5MEY0NkRBMTlBRkMyMUQy
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEABYdpud4DqB2F2/ugHwEo62laW03th283QrgqIwd3vSw5d4Xx
POAZ/RkPivnRS9w3CohsQrHLrcApjlkGZrdiY2bjIU9yTGlKxK4spUlSuoO1VLm1
BhNUjU1p94W9ZbeBkicJSAVALeq3gMQK72NbFT7BLVmDbC+Mq64nfbVysL1CrkJ6
8WdcfzYZaXlzVMTMx/QkllBHP2ax0kX6FEuIzoaGsHLshm8ZrwGmdaDYoOhVetqe
BZRWQJ+/CexRXEWY4mlAtYqH16dumoSf8ZYqNkTl2nrHyKTzw8b/QqXwKPsbV2Wl
OTOOcadpKn7CBJu+I/vTGH+hPIplycanSXNZgw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:47 2025 by rpki-client