Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft
File: 9o4033GQZ5Iit29wPgM3yhu5bz4.mft (raw, json)
Hash identifier: a3Z4UXl8tFfLgCyW4c0UukPVYRSRTvsjJgpU7gkaW7w=
Subject key identifier: AF:66:65:1A:6F:5E:15:94:C7:0F:AF:BF:6B:05:32:5B:AD:BE:0A:1D
Authority key identifier: F6:8E:34:DF:71:90:67:92:22:B7:6F:70:3E:03:37:CA:1B:B9:6F:3E
Certificate issuer: /CN=A911606A/serialNumber=F68E34DF7190679222B76F703E0337CA1BB96F3E
Certificate serial: BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o4033GQZ5Iit29wPgM3yhu5bz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft
Manifest number: BE
Signing time: Fri 31 Jan 2025 05:00:07 +0000
Manifest this update: Fri 31 Jan 2025 05:00:07 +0000
Manifest next update: Fri 07 Feb 2025 05:00:07 +0000
Files and hashes: 1: 9o4033GQZ5Iit29wPgM3yhu5bz4.crl (hash: Dqpjaxo4Eg+1tyVMIetH5EoIWdoxmu9mjp7zMN2D/eI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911606A/serialNumber=F68E34DF7190679222B76F703E0337CA1BB96F3E
Validity
Not Before: Jan 31 05:00:07 2025 GMT
Not After : Feb 7 05:00:07 2025 GMT
Subject: CN=679c58d7-8525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:22:bd:e2:12:ef:8c:49:d3:1e:73:82:1b:35:
28:70:6c:71:cd:ff:7c:78:88:37:f8:cb:8d:03:1f:
21:a7:4b:b9:d5:6a:71:bb:9a:eb:39:a5:c7:48:fd:
89:01:91:30:07:74:8b:14:03:18:7e:a1:9f:50:55:
49:73:2c:12:ba:0f:54:f1:aa:ad:8c:58:fc:a9:2f:
f8:4b:78:45:6d:a8:00:68:a8:c9:ee:84:ce:70:dc:
da:e0:46:0c:d5:ea:5f:56:0a:11:26:29:23:b0:49:
e6:b3:ae:31:0b:7f:4b:e7:62:63:07:f4:50:50:a1:
6b:7e:76:10:83:53:99:f6:31:50:19:ef:19:a4:16:
e0:70:d7:ca:26:47:9f:67:88:72:07:a9:11:6d:88:
9c:d8:7e:a9:ea:05:19:17:3e:5f:88:a3:51:65:eb:
92:54:e2:3f:9b:85:0f:57:c0:4e:06:0f:ec:99:5d:
ab:bc:70:7b:74:46:e3:a0:6b:ff:e5:16:07:89:51:
2d:25:a4:3a:51:f9:f0:ce:49:4a:ff:a5:09:b4:14:
b8:89:9e:42:4f:ea:35:ea:98:92:d5:ba:02:9f:7a:
22:fb:62:b6:15:7d:7c:10:32:1c:e5:e9:88:60:b5:
28:5d:43:0b:b6:27:29:26:a2:35:ec:84:b8:9a:a5:
e2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:66:65:1A:6F:5E:15:94:C7:0F:AF:BF:6B:05:32:5B:AD:BE:0A:1D
X509v3 Authority Key Identifier:
keyid:F6:8E:34:DF:71:90:67:92:22:B7:6F:70:3E:03:37:CA:1B:B9:6F:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o4033GQZ5Iit29wPgM3yhu5bz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:e6:f5:2e:de:9e:d7:62:7f:8f:b3:3e:00:a0:01:2e:09:90:
40:78:e3:c1:6c:12:8e:12:37:49:52:16:1a:01:45:0e:14:73:
57:f1:82:60:1f:64:a1:d0:8f:0d:19:b5:a4:95:65:c7:66:a9:
ed:50:93:be:b3:94:7d:3d:16:9f:82:41:6e:e9:3b:1c:6a:8d:
d1:e9:6c:8e:4b:c6:8b:22:23:3f:a3:18:8f:49:85:4a:4e:07:
5d:96:6f:63:8b:7f:29:7c:42:08:8b:60:5c:2a:2b:de:3a:4f:
a6:9c:c5:39:57:6d:3a:e6:9a:36:de:25:93:8f:4e:0d:3b:c8:
c2:c8:b6:fa:c5:28:a5:b8:c4:b1:ca:93:56:0c:e4:91:34:89:
3d:25:40:42:ce:2f:71:06:ff:62:1a:89:51:76:31:05:10:72:
7a:3b:ee:7a:17:3c:f1:92:59:eb:41:d8:81:3c:60:50:6e:f6:
22:5d:60:b9:79:4b:88:a6:95:a8:b8:02:12:6c:57:f4:cf:de:
fe:91:97:42:e5:40:1e:48:9a:21:75:97:86:7e:bc:62:7b:81:
03:46:1e:e2:d9:0c:58:bd:85:3e:94:7b:4f:a4:01:a1:cf:a1:
7c:02:dd:ca:52:31:3f:26:b8:1a:b5:37:51:40:ae:54:56:b2:
8b:87:98:ab
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTYwNkExMTAvBgNVBAUTKEY2OEUzNERGNzE5MDY3OTIyMkI3NkY3MDNFMDMzN0NB
MUJCOTZGM0UwHhcNMjUwMTMxMDUwMDA3WhcNMjUwMjA3MDUwMDA3WjAYMRYwFAYD
VQQDEw02NzljNThkNy04NTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAySK94hLvjEnTHnOCGzUocGxxzf98eIg3+MuNAx8hp0u51Wpxu5rrOaXHSP2J
AZEwB3SLFAMYfqGfUFVJcywSug9U8aqtjFj8qS/4S3hFbagAaKjJ7oTOcNza4EYM
1epfVgoRJikjsEnms64xC39L52JjB/RQUKFrfnYQg1OZ9jFQGe8ZpBbgcNfKJkef
Z4hyB6kRbYic2H6p6gUZFz5fiKNRZeuSVOI/m4UPV8BOBg/smV2rvHB7dEbjoGv/
5RYHiVEtJaQ6UfnwzklK/6UJtBS4iZ5CT+o16piS1boCn3oi+2K2FX18EDIc5emI
YLUoXUMLticpJqI17IS4mqXioQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9mZRpv
XhWUxw+vv2sFMlutvgodMB8GA1UdIwQYMBaAFPaONN9xkGeSIrdvcD4DN8obuW8+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjA2QS81ODcwQTlGNkJC
NDUxMUVFODMwQzk4NURDNEY5QUUwMi85bzQwMzNHUVo1SWl0Mjl3UGdNM3lodTVi
ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlvNDAzM0dRWjVJaXQyOXdQZ00zeWh1NWJ6NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjA2QS81ODcwQTlGNkJCNDUxMUVFODMwQzk4NURDNEY5QUUwMi85bzQwMzNHUVo1
SWl0Mjl3UGdNM3lodTViejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBY5vUu3p7XYn+Psz4AoAEuCZBAeOPBbBKOEjdJUhYaAUUOFHNX8YJg
H2Sh0I8NGbWklWXHZqntUJO+s5R9PRafgkFu6Tscao3R6WyOS8aLIiM/oxiPSYVK
Tgddlm9ji38pfEIIi2BcKiveOk+mnMU5V2065po23iWTj04NO8jCyLb6xSiluMSx
ypNWDOSRNIk9JUBCzi9xBv9iGolRdjEFEHJ6O+56FzzxklnrQdiBPGBQbvYiXWC5
eUuIppWouAISbFf0z97+kZdC5UAeSJohdZeGfrxie4EDRh7i2QxYvYU+lHtPpAGh
z6F8At3KUjE/JrgatTdRQK5UVrKLh5ir
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:25:55 2025 by rpki-client