Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft
File: EEz4cGO16r803k4l_s6ata9zbBQ.mft (raw, json)
Hash identifier: HxpcGEfO9tJ0zdxE1sLPnWIlPWkH4j3TMjR6AZI+5kE=
Subject key identifier: A4:D5:8B:F5:43:D8:DB:2F:87:8D:B7:F8:A4:B8:B6:F1:F4:B1:05:11
Authority key identifier: 10:4C:F8:70:63:B5:EA:BF:34:DE:4E:25:FE:CE:9A:B5:AF:73:6C:14
Certificate issuer: /CN=A9111FFD/serialNumber=104CF87063B5EABF34DE4E25FECE9AB5AF736C14
Certificate serial: 04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft
Manifest number: 04
Signing time: Fri 31 Jan 2025 07:16:42 +0000
Manifest this update: Fri 31 Jan 2025 07:16:42 +0000
Manifest next update: Fri 07 Feb 2025 07:16:42 +0000
Files and hashes: 1: EEz4cGO16r803k4l_s6ata9zbBQ.crl (hash: GbX+j4yreeqgFHVWlikD9m+XdVZoaf5hpi9P+6eMAyo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111FFD/serialNumber=104CF87063B5EABF34DE4E25FECE9AB5AF736C14
Validity
Not Before: Jan 31 07:16:42 2025 GMT
Not After : Feb 7 07:16:42 2025 GMT
Subject: CN=679c78da-7f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cb:e1:49:bc:e3:e4:06:47:59:26:27:57:31:
78:05:3c:2b:59:c3:fa:eb:64:ed:3d:4b:36:01:c5:
fc:fe:66:91:5c:50:3d:84:c6:b2:5b:ef:89:7c:48:
97:24:66:08:f5:6b:a0:9f:4d:20:51:a9:d6:90:61:
44:ce:73:6e:18:eb:31:86:11:1e:2f:3d:e2:f3:2c:
6b:b3:41:55:73:77:92:d3:03:8f:80:76:57:d0:7a:
9f:a5:fd:88:d4:6c:af:30:e0:79:f5:bb:b1:03:65:
78:32:12:0f:c5:db:81:b5:b2:0e:b3:13:56:32:fd:
0d:9e:71:c2:c0:20:1e:76:a6:2b:26:75:fa:72:d4:
e4:75:be:5d:81:fe:9f:c3:93:12:fd:1f:cf:e5:79:
0a:03:5e:f1:51:52:05:ce:4c:e0:95:cf:d4:78:63:
1c:d8:d7:b6:9d:54:0e:61:7a:27:f3:40:02:21:04:
3a:8f:00:76:21:9d:d7:94:88:04:2f:d1:d2:a6:5f:
98:30:1f:1c:8a:e5:c5:5a:0c:43:04:93:d7:29:39:
0d:06:6f:62:9f:62:58:f1:57:3c:d0:6d:bf:77:94:
88:2f:20:e4:63:f6:8b:b1:47:c5:9c:ab:4c:5b:1b:
a4:5d:4b:c1:95:35:67:a3:e7:d1:37:2f:87:1a:e4:
3d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D5:8B:F5:43:D8:DB:2F:87:8D:B7:F8:A4:B8:B6:F1:F4:B1:05:11
X509v3 Authority Key Identifier:
keyid:10:4C:F8:70:63:B5:EA:BF:34:DE:4E:25:FE:CE:9A:B5:AF:73:6C:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:9f:c9:de:bd:7c:a4:0d:19:99:67:f1:19:4b:b5:10:06:46:
4a:fe:ed:4b:25:b6:18:27:bc:df:30:b4:55:6c:e1:67:78:87:
cf:3e:4c:46:b8:a3:76:9c:4b:a2:7b:c9:59:0b:f2:ed:45:5d:
37:69:04:c5:cf:fe:75:a4:53:17:95:bd:ed:d5:ae:4f:3d:bf:
03:d9:96:c9:86:c0:04:8b:6a:6d:63:cb:a0:fa:55:43:26:04:
20:06:cf:6d:24:39:ef:ca:a4:c9:83:ba:c4:8d:0b:a3:a3:da:
e7:30:ba:99:77:a7:28:03:29:ec:3c:da:86:36:23:13:f2:73:
c9:87:20:6f:c8:3c:48:e9:47:42:4e:75:c4:72:27:85:35:69:
09:61:2e:03:ff:86:ab:f2:c9:ab:17:19:a8:bb:5f:92:b5:c5:
41:fc:ab:45:dc:44:62:bc:2e:9d:bd:be:8d:cc:59:30:0b:89:
f1:27:96:87:1a:86:e1:94:62:b3:af:da:05:56:ed:80:e8:1f:
fe:e9:cf:fe:78:b2:a4:67:e4:7f:25:40:c6:ce:c5:84:5e:15:
b2:fe:f7:53:03:39:b7:92:6c:2f:c7:40:08:97:2b:c8:6c:98:
0a:eb:8c:36:4c:ce:85:98:5c:5b:ac:a2:10:dc:15:5a:6c:75:
d6:62:c3:c9
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
MUZGRDExMC8GA1UEBRMoMTA0Q0Y4NzA2M0I1RUFCRjM0REU0RTI1RkVDRTlBQjVB
RjczNkMxNDAeFw0yNTAxMzEwNzE2NDJaFw0yNTAyMDcwNzE2NDJaMBgxFjAUBgNV
BAMTDTY3OWM3OGRhLTdmMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC3y+FJvOPkBkdZJidXMXgFPCtZw/rrZO09SzYBxfz+ZpFcUD2ExrJb74l8SJck
Zgj1a6CfTSBRqdaQYUTOc24Y6zGGER4vPeLzLGuzQVVzd5LTA4+AdlfQep+l/YjU
bK8w4Hn1u7EDZXgyEg/F24G1sg6zE1Yy/Q2eccLAIB52pismdfpy1OR1vl2B/p/D
kxL9H8/leQoDXvFRUgXOTOCVz9R4YxzY17adVA5heifzQAIhBDqPAHYhndeUiAQv
0dKmX5gwHxyK5cVaDEMEk9cpOQ0Gb2KfYljxVzzQbb93lIgvIORj9ouxR8Wcq0xb
G6RdS8GVNWej59E3L4ca5D0NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpNWL9UPY
2y+Hjbf4pLi28fSxBREwHwYDVR0jBBgwFoAUEEz4cGO16r803k4l/s6ata9zbBQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExRkZELzQyRUIwNTM0REQz
ODExRUY5QzM0Njc0NUM0RjlBRTAyL0VFejRjR08xNnI4MDNrNGxfczZhdGE5emJC
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRUV6NGNHTzE2cjgwM2s0bF9zNmF0YTl6YkJRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx
RkZELzQyRUIwNTM0REQzODExRUY5QzM0Njc0NUM0RjlBRTAyL0VFejRjR08xNnI4
MDNrNGxfczZhdGE5emJCUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAFufyd69fKQNGZln8RlLtRAGRkr+7UslthgnvN8wtFVs4Wd4h88+TEa4
o3acS6J7yVkL8u1FXTdpBMXP/nWkUxeVve3Vrk89vwPZlsmGwASLam1jy6D6VUMm
BCAGz20kOe/KpMmDusSNC6Oj2ucwupl3pygDKew82oY2IxPyc8mHIG/IPEjpR0JO
dcRyJ4U1aQlhLgP/hqvyyasXGai7X5K1xUH8q0XcRGK8Lp29vo3MWTALifEnloca
huGUYrOv2gVW7YDoH/7pz/54sqRn5H8lQMbOxYReFbL+91MDObeSbC/HQAiXK8hs
mArrjDZMzoWYXFusohDcFVpsddZiw8k=
-----END CERTIFICATE-----
Generated at Wed Apr 30 15:44:14 2025 by rpki-client