Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/vBN8J3flHee9Gs6A2Gj9k6HsekM.mft
File: vBN8J3flHee9Gs6A2Gj9k6HsekM.mft (raw, json)
Hash identifier: dJsYWUu1fSQ1FP/tD1KYqhm/67RkKUnhRWiSLJodiys=
Subject key identifier: 5C:77:42:53:41:FA:C7:DF:84:E7:C9:7C:C8:06:52:83:90:6A:9A:51
Authority key identifier: BC:13:7C:27:77:E5:1D:E7:BD:1A:CE:80:D8:68:FD:93:A1:EC:7A:43
Certificate issuer: /CN=A9126DA8/serialNumber=BC137C2777E51DE7BD1ACE80D868FD93A1EC7A43
Certificate serial: 02B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBN8J3flHee9Gs6A2Gj9k6HsekM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/vBN8J3flHee9Gs6A2Gj9k6HsekM.mft
Manifest number: 0285
Signing time: Sun 29 Dec 2024 01:05:35 +0000
Manifest this update: Sun 29 Dec 2024 01:05:35 +0000
Manifest next update: Sun 05 Jan 2025 01:05:35 +0000
Files and hashes: 1: vBN8J3flHee9Gs6A2Gj9k6HsekM.crl (hash: a2dEyQQ7RQfe0+x7rn+ZIFNusnIypBzKCij9hEkWeZk=)
2: 778CCA00A7C011EFBD7BEB2CC4F9AE02.roa (hash: LuEYhqz5AbGN55ZyXp4UptQ1C1/7/ToDJPqDs6dIQco=)
3: 2BAB8262C3E011EEB2428870C4F9AE02.roa (hash: l8LmNf7dw4lpE2t1iEeA/WiUyOVT0TclK1VikhzrofY=)
4: 6895C6749D8D11EF9F951D24C4F9AE02.roa (hash: /EjKOFCI68jV75I4ZYfu3mX8PtwLfDQUOXDo1m5Latg=)
5: ABCD12D8796311EF9BFCD176C4F9AE02.roa (hash: +RKW+/uN9Hi39qxkzWYiutguIiAMAssFq6PeTVoSj88=)
6: 431E858E4A4511EF81E2217FC4F9AE02.roa (hash: UantZ7IQVMnUv9mB5fXQS3+6aNnIGeKGtaAHXJvRAhs=)
7: 423FF06C4A4511EF81E2217FC4F9AE02.roa (hash: p64lN/EUHHqmbgUUqW2L703RRR1IDPfGY6k2MR7AakQ=)
8: CE7D2C2A564811EFB4DC2425C4F9AE02.roa (hash: UkC4+mtP4VnnLgF0yLlhyQWp87RAUcMz/wezKwi+9sE=)
9: C12CCFBC53AF11EF9C14C60FC4F9AE02.roa (hash: BgVoOI9tnTQA0N2W9svDih5HMRSYGKCH/awz9saFK1M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 694 (0x2b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126DA8
Validity
Not Before: Dec 29 01:05:35 2024 GMT
Not After : Jan 5 01:05:35 2025 GMT
Subject: CN=6770a05f-0269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b4:61:47:9f:70:c8:d3:70:61:49:cd:ee:24:
f7:22:18:15:23:38:fd:d5:2f:dd:56:12:af:b9:c0:
cb:b0:c8:26:c8:ea:10:e2:ae:f2:01:47:32:06:92:
05:55:08:8c:cc:a3:10:4e:30:2f:f8:05:25:7b:48:
c9:05:10:fd:1d:ce:6d:05:4c:56:02:13:7f:54:01:
9e:9e:dc:29:d3:93:c0:a2:ad:76:cd:09:99:e3:9a:
5a:40:5d:f9:29:24:de:f5:30:67:19:ed:ca:b4:be:
93:9d:be:31:d0:7f:19:6c:e9:b1:84:ea:82:47:69:
4d:18:a0:ab:36:c2:96:22:e4:87:2d:be:2d:01:64:
26:a5:49:75:48:eb:48:44:72:81:80:a5:81:90:1a:
c4:10:4d:fd:5f:c7:3b:b1:7c:cd:1a:cc:0e:6c:93:
8a:14:7c:0a:6a:0f:b2:13:2c:22:5b:a8:6a:4a:85:
19:d1:78:58:ea:28:a2:80:b4:43:91:0f:05:60:18:
96:94:6f:17:d2:c6:db:67:71:f5:ea:a5:a2:f9:eb:
0c:6d:58:10:af:7d:94:22:2e:05:68:8f:4b:31:be:
e8:84:84:2b:b5:5d:92:24:57:0e:3f:75:40:2a:09:
fa:9d:a6:80:e2:6c:57:a6:87:9c:22:3f:eb:f9:5c:
14:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:77:42:53:41:FA:C7:DF:84:E7:C9:7C:C8:06:52:83:90:6A:9A:51
X509v3 Authority Key Identifier:
keyid:BC:13:7C:27:77:E5:1D:E7:BD:1A:CE:80:D8:68:FD:93:A1:EC:7A:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/vBN8J3flHee9Gs6A2Gj9k6HsekM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBN8J3flHee9Gs6A2Gj9k6HsekM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/vBN8J3flHee9Gs6A2Gj9k6HsekM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:d0:89:02:d2:97:be:25:71:da:e9:87:1c:ce:40:da:5b:ee:
f5:3a:a0:87:a3:f7:a1:e8:d5:c0:64:de:f3:52:9d:c1:37:b0:
fd:d1:b1:5b:50:3b:4b:4c:a7:8c:68:df:16:39:e4:bc:01:34:
f6:77:f5:c1:31:c9:43:9d:e9:6a:1b:be:1f:7f:f3:95:56:ed:
7b:63:93:e9:af:6b:98:b5:0f:70:c9:a7:96:dd:11:c0:a7:88:
1a:e4:7a:fb:40:14:2f:87:35:ce:c8:7b:42:36:0c:4c:af:b0:
59:88:5b:4a:b1:2d:4c:d8:77:ad:15:04:9f:1f:e9:4d:10:36:
13:ac:7e:27:da:b4:f7:fe:f6:89:e1:5e:72:11:82:7f:02:9f:
a4:3e:31:aa:a6:c1:39:b5:0f:36:37:bd:94:1e:b1:8f:3e:e6:
eb:1c:bf:90:e1:ec:ee:b8:d4:dd:45:29:9d:b4:12:fd:3d:5b:
02:2b:eb:e5:f6:af:9c:b4:07:df:5d:c5:f6:c8:fa:47:1f:17:
f2:0a:02:68:33:a4:d0:44:a6:97:04:8a:0d:ab:98:6f:1d:bd:
d1:6b:71:71:83:08:0b:d0:32:51:b4:ab:80:8f:c4:23:c0:c5:
00:36:d3:47:b0:19:29:97:e3:0b:f5:87:e2:8b:6b:3e:25:17:
26:b9:a2:e4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICArYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjZEQTgxMTAvBgNVBAUTKEJDMTM3QzI3NzdFNTFERTdCRDFBQ0U4MEQ4NjhGRDkz
QTFFQzdBNDMwHhcNMjQxMjI5MDEwNTM1WhcNMjUwMTA1MDEwNTM1WjAYMRYwFAYD
VQQDEw02NzcwYTA1Zi0wMjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAprRhR59wyNNwYUnN7iT3IhgVIzj91S/dVhKvucDLsMgmyOoQ4q7yAUcyBpIF
VQiMzKMQTjAv+AUle0jJBRD9Hc5tBUxWAhN/VAGentwp05PAoq12zQmZ45paQF35
KSTe9TBnGe3KtL6Tnb4x0H8ZbOmxhOqCR2lNGKCrNsKWIuSHLb4tAWQmpUl1SOtI
RHKBgKWBkBrEEE39X8c7sXzNGswObJOKFHwKag+yEywiW6hqSoUZ0XhY6iiigLRD
kQ8FYBiWlG8X0sbbZ3H16qWi+esMbVgQr32UIi4FaI9LMb7ohIQrtV2SJFcOP3VA
Kgn6naaA4mxXpoecIj/r+VwU6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFx3QlNB
+sffhOfJfMgGUoOQappRMB8GA1UdIwQYMBaAFLwTfCd35R3nvRrOgNho/ZOh7HpD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkRBOC83NkVENDRFRTAx
RUIxMUVEOTlBMzFBMUZDNEY5QUUwMi92Qk44SjNmbEhlZTlHczZBMkdqOWs2SHNl
a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZCTjhKM2ZsSGVlOUdzNkEyR2o5azZIc2VrTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NkRBOC83NkVENDRFRTAxRUIxMUVEOTlBMzFBMUZDNEY5QUUwMi92Qk44SjNmbEhl
ZTlHczZBMkdqOWs2SHNla00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCa0IkC0pe+JXHa6YcczkDaW+71OqCHo/eh6NXAZN7zUp3BN7D90bFb
UDtLTKeMaN8WOeS8ATT2d/XBMclDnelqG74ff/OVVu17Y5Ppr2uYtQ9wyaeW3RHA
p4ga5Hr7QBQvhzXOyHtCNgxMr7BZiFtKsS1M2HetFQSfH+lNEDYTrH4n2rT3/vaJ
4V5yEYJ/Ap+kPjGqpsE5tQ82N72UHrGPPubrHL+Q4ezuuNTdRSmdtBL9PVsCK+vl
9q+ctAffXcX2yPpHHxfyCgJoM6TQRKaXBIoNq5hvHb3Ra3FxgwgL0DJRtKuAj8Qj
wMUANtNHsBkpl+ML9Yfii2s+JRcmuaLk
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:56:40 2025 by rpki-client