Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174ECB/9542C8A0EE6311E8846B4655C4F9AE02/a37iiR6-HTrwpWLFqEZlgbkEWaQ.mft
File: a37iiR6-HTrwpWLFqEZlgbkEWaQ.mft (raw, json)
Hash identifier: eE/ZzJp9ErYbEVVh3IO49TyZVHEtD7JK57QCl+mcDX4=
Subject key identifier: 83:DF:CD:EA:19:07:2B:FA:40:2D:E5:5D:5C:54:69:E6:33:CE:F6:2E
Authority key identifier: 6B:7E:E2:89:1E:BE:1D:3A:F0:A5:62:C5:A8:46:65:81:B9:04:59:A4
Certificate issuer: /CN=A9174ECB/serialNumber=6B7EE2891EBE1D3AF0A562C5A8466581B90459A4
Certificate serial: 1190
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a37iiR6-HTrwpWLFqEZlgbkEWaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174ECB/9542C8A0EE6311E8846B4655C4F9AE02/a37iiR6-HTrwpWLFqEZlgbkEWaQ.mft
Manifest number: 1186
Signing time: Wed 08 Jan 2025 03:53:55 +0000
Manifest this update: Wed 08 Jan 2025 03:53:55 +0000
Manifest next update: Wed 15 Jan 2025 03:53:55 +0000
Files and hashes: 1: a37iiR6-HTrwpWLFqEZlgbkEWaQ.crl (hash: tx1YxtQauQeOQ5iF8Bpb1dGElV+mEnDyMziZm4GJnXs=)
2: 4CC318AC7FFF11EB8D47E82EC4F9AE02.roa (hash: 4VUKnU4kNEFcNtf8BMCmylFtM9+Lha6DbgUuHYC6jg0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4496 (0x1190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174ECB
Validity
Not Before: Jan 8 03:53:55 2025 GMT
Not After : Jan 15 03:53:55 2025 GMT
Subject: CN=677df6d3-c8d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9d:cf:5d:5e:84:7e:f6:71:31:31:ff:d6:d3:
7e:c8:aa:03:fe:b0:96:e7:82:9a:d1:8e:0d:96:99:
7e:2c:d7:35:0d:8d:69:7e:4b:98:84:3b:65:89:1c:
49:4a:04:71:71:d1:a3:90:20:dd:27:7a:2c:3a:7b:
17:ce:60:19:da:9d:01:40:c6:8c:95:b3:a8:60:90:
91:12:fb:17:3d:eb:c8:14:46:44:6d:f5:c9:08:8a:
2f:e3:33:66:02:26:83:b0:cb:80:71:47:a3:d8:25:
79:b0:1e:6f:81:98:b9:f4:37:a5:31:05:e0:75:e7:
e7:41:45:d7:b4:ec:51:9c:fd:63:03:56:80:14:b5:
e7:50:fa:28:48:ca:d9:93:37:a1:f0:01:f9:d2:72:
38:3e:5a:43:e8:f0:07:84:60:f9:a7:5b:00:b2:1b:
32:41:6a:2b:f0:4a:9c:64:a4:37:a3:4b:b2:60:6d:
d1:fc:2c:a9:54:66:3d:65:e0:de:ed:72:5a:f1:ec:
ce:a3:bd:d2:5c:e5:f5:a9:13:41:ac:f4:09:d8:cf:
bd:17:23:00:49:b2:4c:64:30:b3:88:89:c2:b5:e4:
ec:f5:d6:22:64:54:a7:f1:44:0c:a5:3b:cd:e0:9f:
0d:cd:c2:21:27:1d:d6:bf:fa:1f:b7:8b:dc:a5:ce:
6b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DF:CD:EA:19:07:2B:FA:40:2D:E5:5D:5C:54:69:E6:33:CE:F6:2E
X509v3 Authority Key Identifier:
keyid:6B:7E:E2:89:1E:BE:1D:3A:F0:A5:62:C5:A8:46:65:81:B9:04:59:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174ECB/9542C8A0EE6311E8846B4655C4F9AE02/a37iiR6-HTrwpWLFqEZlgbkEWaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a37iiR6-HTrwpWLFqEZlgbkEWaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174ECB/9542C8A0EE6311E8846B4655C4F9AE02/a37iiR6-HTrwpWLFqEZlgbkEWaQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:fd:c5:a1:c9:7c:e5:b9:f5:54:9d:7d:23:69:d9:68:f0:d7:
ab:52:fd:21:05:b5:84:84:9e:c9:a1:3b:1f:9c:56:93:45:b4:
bd:81:c5:7e:f1:ea:13:7f:fd:70:2b:94:9f:5f:a6:eb:c8:02:
71:0a:60:7e:ae:02:c9:61:d4:c2:66:3f:99:7a:dd:2d:5e:59:
b1:71:10:18:42:ba:ba:de:2c:68:26:ff:36:14:9f:2c:6a:10:
78:1b:7e:7e:cd:e6:19:e2:33:45:8c:f6:bd:2e:50:57:bd:2b:
cc:51:94:69:aa:6c:85:85:a1:01:f1:96:b5:a6:d1:4e:b5:a3:
01:c6:80:a5:f7:90:f7:7f:db:7e:66:78:4a:86:ed:0f:d1:e4:
3f:2f:c1:c2:79:93:30:58:9f:4c:29:38:28:99:f4:db:6b:32:
09:dd:7a:5c:36:d5:b0:25:e1:06:3b:d5:90:85:f6:db:b3:ba:
ad:1e:f8:98:c2:46:1a:5d:b2:eb:c8:21:55:69:a6:50:94:b1:
ad:d2:55:2d:3d:b1:dd:ea:7f:c4:08:7b:1e:6f:83:17:1e:e9:
cc:56:29:4b:d1:73:f6:b3:c8:91:9d:cb:ef:50:ce:86:56:33:
2e:ba:f7:3a:f2:79:bd:8b:6a:3a:95:8b:2c:57:bf:31:c0:42:
b5:17:e7:89
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzRFQ0IxMTAvBgNVBAUTKDZCN0VFMjg5MUVCRTFEM0FGMEE1NjJDNUE4NDY2NTgx
QjkwNDU5QTQwHhcNMjUwMTA4MDM1MzU1WhcNMjUwMTE1MDM1MzU1WjAYMRYwFAYD
VQQDEw02NzdkZjZkMy1jOGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnp3PXV6EfvZxMTH/1tN+yKoD/rCW54Ka0Y4Nlpl+LNc1DY1pfkuYhDtliRxJ
SgRxcdGjkCDdJ3osOnsXzmAZ2p0BQMaMlbOoYJCREvsXPevIFEZEbfXJCIov4zNm
AiaDsMuAcUej2CV5sB5vgZi59DelMQXgdefnQUXXtOxRnP1jA1aAFLXnUPooSMrZ
kzeh8AH50nI4PlpD6PAHhGD5p1sAshsyQWor8EqcZKQ3o0uyYG3R/CypVGY9ZeDe
7XJa8ezOo73SXOX1qRNBrPQJ2M+9FyMASbJMZDCziInCteTs9dYiZFSn8UQMpTvN
4J8NzcIhJx3Wv/oft4vcpc5rZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIPfzeoZ
Byv6QC3lXVxUaeYzzvYuMB8GA1UdIwQYMBaAFGt+4okevh068KVixahGZYG5BFmk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEVDQi85NTQyQzhBMEVF
NjMxMUU4ODQ2QjQ2NTVDNEY5QUUwMi9hMzdpaVI2LUhUcndwV0xGcUVabGdia0VX
YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2EzN2lpUjYtSFRyd3BXTEZxRVpsZ2JrRVdhUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NEVDQi85NTQyQzhBMEVFNjMxMUU4ODQ2QjQ2NTVDNEY5QUUwMi9hMzdpaVI2LUhU
cndwV0xGcUVabGdia0VXYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCK/cWhyXzlufVUnX0jadlo8NerUv0hBbWEhJ7JoTsfnFaTRbS9gcV+
8eoTf/1wK5SfX6bryAJxCmB+rgLJYdTCZj+Zet0tXlmxcRAYQrq63ixoJv82FJ8s
ahB4G35+zeYZ4jNFjPa9LlBXvSvMUZRpqmyFhaEB8Za1ptFOtaMBxoCl95D3f9t+
ZnhKhu0P0eQ/L8HCeZMwWJ9MKTgomfTbazIJ3XpcNtWwJeEGO9WQhfbbs7qtHviY
wkYaXbLryCFVaaZQlLGt0lUtPbHd6n/ECHseb4MXHunMVilL0XP2s8iRncvvUM6G
VjMuuvc68nm9i2o6lYssV78xwEK1F+eJ
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:48:51 2025 by rpki-client