Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/RxYGeFsy9N8-yUPyp4fbohJpbh8.mft
File: RxYGeFsy9N8-yUPyp4fbohJpbh8.mft (raw, json)
Hash identifier: VN0PcvQEZTcRq3xWlLt7xlM83Bm9uvUSYgh7GBUy41s=
Subject key identifier: 95:69:AB:E1:7B:DE:61:E2:D7:69:B4:93:66:3E:83:E4:51:EB:DF:1E
Authority key identifier: 47:16:06:78:5B:32:F4:DF:3E:C9:43:F2:A7:87:DB:A2:12:69:6E:1F
Certificate issuer: /CN=A9146B28/serialNumber=471606785B32F4DF3EC943F2A787DBA212696E1F
Certificate serial: 2574
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxYGeFsy9N8-yUPyp4fbohJpbh8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/RxYGeFsy9N8-yUPyp4fbohJpbh8.mft
Manifest number: 254F
Signing time: Fri 31 Jan 2025 03:57:55 +0000
Manifest this update: Fri 31 Jan 2025 03:57:55 +0000
Manifest next update: Fri 07 Feb 2025 03:57:55 +0000
Files and hashes: 1: RxYGeFsy9N8-yUPyp4fbohJpbh8.crl (hash: 8OngBuixkbgLjKdwtJg8oL68NcFkK6KeC41JlDM/e1k=)
2: 9E7A9830049911E89DF5A065C4F9AE02.roa (hash: +Hb+NiJ9R+0o3y3C5pGdfyqayEUbh+XeiaUDvnEWILw=)
3: 141AEAA8BD1C11EFB070C357C4F9AE02.roa (hash: ZHukmgPHIC0gOsj5QiPuNBG0Yrwwix4FGf6Zp9Vgl4M=)
4: 5802E100BD1A11EFACD7C33CC4F9AE02.roa (hash: djDFaCPYy5mYyTIxWAG/Kwi/pm16dtJzzBoXZ+73Gzg=)
5: 58EB6F3E115511EC97960769C4F9AE02.roa (hash: o3kWnyNSxJFY3lvDnoQm9cCtMvw8qbOporWcpE2Yjl8=)
6: 598E740E5A6011EDAF6FC679C4F9AE02.roa (hash: HL4pbC/iVl60jzP8PvY6wEjqTSd1XUG9dKyfATvV9ks=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9588 (0x2574)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146B28
Validity
Not Before: Jan 31 03:57:55 2025 GMT
Not After : Feb 7 03:57:55 2025 GMT
Subject: CN=679c4a43-7148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:81:92:04:f2:b4:26:3e:07:fc:8f:fe:21:fd:
20:5e:b2:58:da:18:83:53:8b:38:50:4f:67:02:3c:
4c:89:a0:a4:a3:eb:ab:3a:da:85:0a:c3:b9:b9:fa:
ed:87:ef:ec:a4:1c:cb:0a:10:91:77:66:cf:5a:de:
f2:d6:ac:bd:35:3b:ae:a5:7f:58:38:2f:05:e5:be:
b8:6a:4f:c7:01:3b:4c:11:0d:66:74:e1:68:68:3c:
d4:d2:3d:e4:40:4b:5d:5f:b5:f5:0f:ce:ba:b0:4f:
22:12:16:6c:61:54:e7:8b:a0:1a:f0:7a:91:fe:62:
58:d7:0f:7c:ee:9a:52:70:c8:2e:36:4c:a4:c4:a2:
a6:62:74:fe:d8:5f:5c:63:ce:44:93:9c:60:a1:da:
1f:96:42:fe:a4:1b:30:b7:bd:39:32:85:c5:d3:1e:
cf:a4:03:df:01:9f:c6:c4:2a:ea:66:cd:f6:ed:a7:
27:84:a4:9d:63:47:e9:8d:78:93:a3:00:b5:cd:15:
44:45:4a:49:26:16:f9:4a:ec:df:f2:df:58:e2:79:
c7:6e:eb:d6:14:2c:98:c3:70:fe:b6:3f:7c:db:7c:
a4:c1:c3:cb:42:b1:94:74:76:38:45:a6:1f:15:94:
4c:af:1b:ca:97:21:81:74:93:bf:27:d7:12:58:dd:
b0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:69:AB:E1:7B:DE:61:E2:D7:69:B4:93:66:3E:83:E4:51:EB:DF:1E
X509v3 Authority Key Identifier:
keyid:47:16:06:78:5B:32:F4:DF:3E:C9:43:F2:A7:87:DB:A2:12:69:6E:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/RxYGeFsy9N8-yUPyp4fbohJpbh8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxYGeFsy9N8-yUPyp4fbohJpbh8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/RxYGeFsy9N8-yUPyp4fbohJpbh8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:08:e8:cc:0e:32:4a:ef:03:01:7c:ee:26:ef:be:f0:79:35:
0f:e8:94:b4:f0:3b:ac:bc:25:70:79:13:65:88:bd:b1:ba:a9:
08:3d:34:29:34:d0:ab:d1:07:1b:84:77:1b:9a:34:ce:f6:c2:
e1:4a:0d:5e:1c:51:d4:4c:dc:27:10:3b:4d:e5:35:47:56:2d:
a2:e0:f8:29:c6:d2:d1:52:53:b0:bd:e9:d7:e9:98:5d:09:fa:
7d:13:9c:6a:01:d1:b2:e0:93:e3:6a:ed:98:ad:ef:44:42:9a:
5b:bd:05:84:de:e4:0f:16:e4:af:32:67:91:07:44:bc:1b:94:
45:bd:61:3b:5a:42:39:5e:16:26:33:0f:9e:5c:7c:0b:d7:cc:
3e:2b:07:41:91:ac:15:fd:34:be:98:b2:52:07:b6:2a:d8:56:
6d:9d:d0:f5:35:6f:df:a2:ca:07:85:a1:09:1e:40:f2:ef:fb:
b8:f1:23:67:1e:cc:92:c7:28:a7:09:06:7a:0a:39:a2:b5:c7:
01:dc:e3:18:79:1f:5f:c3:e7:77:73:1a:12:eb:1e:fe:5f:56:
e5:eb:1d:33:33:fb:5a:06:8e:2d:30:a9:0a:38:28:46:21:b9:
88:d8:be:1a:ae:91:c7:8e:3f:97:ac:51:b1:d8:bb:2d:90:40:
78:f8:e3:88
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICJXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDZCMjgxMTAvBgNVBAUTKDQ3MTYwNjc4NUIzMkY0REYzRUM5NDNGMkE3ODdEQkEy
MTI2OTZFMUYwHhcNMjUwMTMxMDM1NzU1WhcNMjUwMjA3MDM1NzU1WjAYMRYwFAYD
VQQDEw02NzljNGE0My03MTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo4GSBPK0Jj4H/I/+If0gXrJY2hiDU4s4UE9nAjxMiaCko+urOtqFCsO5ufrt
h+/spBzLChCRd2bPWt7y1qy9NTuupX9YOC8F5b64ak/HATtMEQ1mdOFoaDzU0j3k
QEtdX7X1D866sE8iEhZsYVTni6Aa8HqR/mJY1w987ppScMguNkykxKKmYnT+2F9c
Y85Ek5xgodoflkL+pBswt705MoXF0x7PpAPfAZ/GxCrqZs327acnhKSdY0fpjXiT
owC1zRVERUpJJhb5Suzf8t9Y4nnHbuvWFCyYw3D+tj9823ykwcPLQrGUdHY4RaYf
FZRMrxvKlyGBdJO/J9cSWN2wxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJVpq+F7
3mHi12m0k2Y+g+RR698eMB8GA1UdIwQYMBaAFEcWBnhbMvTfPslD8qeH26ISaW4f
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkIyOC9GQUVGOENCRTEz
NDMxMUU1OTZGNTQwMUVDNEY5QUUwMi9SeFlHZUZzeTlOOC15VVB5cDRmYm9oSnBi
aDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1J4WUdlRnN5OU44LXlVUHlwNGZib2hKcGJoOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NkIyOC9GQUVGOENCRTEzNDMxMUU1OTZGNTQwMUVDNEY5QUUwMi9SeFlHZUZzeTlO
OC15VVB5cDRmYm9oSnBiaDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC4COjMDjJK7wMBfO4m777weTUP6JS08DusvCVweRNliL2xuqkIPTQp
NNCr0QcbhHcbmjTO9sLhSg1eHFHUTNwnEDtN5TVHVi2i4PgpxtLRUlOwvenX6Zhd
Cfp9E5xqAdGy4JPjau2Yre9EQppbvQWE3uQPFuSvMmeRB0S8G5RFvWE7WkI5XhYm
Mw+eXHwL18w+KwdBkawV/TS+mLJSB7Yq2FZtndD1NW/fosoHhaEJHkDy7/u48SNn
HsySxyinCQZ6CjmitccB3OMYeR9fw+d3cxoS6x7+X1bl6x0zM/taBo4tMKkKOChG
IbmI2L4arpHHjj+XrFGx2LstkEB4+OOI
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:23:49 2025 by rpki-client