Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft
File: KiZlwxQeS_P9LwBKrimlmHETod8.mft (raw, json)
Hash identifier: jp/Sx1mIAsJLXkUcLDwL0VPJI3/3BuXPTUZznn5ecHo=
Subject key identifier: 96:82:EA:19:A1:6A:9A:08:4C:21:93:A0:99:1F:40:34:71:35:CA:A5
Authority key identifier: 2A:26:65:C3:14:1E:4B:F3:FD:2F:00:4A:AE:29:A5:98:71:13:A1:DF
Certificate issuer: /CN=A911972D/serialNumber=2A2665C3141E4BF3FD2F004AAE29A5987113A1DF
Certificate serial: 0349
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KiZlwxQeS_P9LwBKrimlmHETod8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft
Manifest number: 0344
Signing time: Fri 31 Jan 2025 01:08:02 +0000
Manifest this update: Fri 31 Jan 2025 01:08:01 +0000
Manifest next update: Fri 07 Feb 2025 01:08:01 +0000
Files and hashes: 1: KiZlwxQeS_P9LwBKrimlmHETod8.crl (hash: YPTvXzPhcavvgDaJeEK5wRhbNAXkRCo0VrVPmc6V33M=)
2: B067CCDCA8C511EC8F560C42C4F9AE02.roa (hash: xmdlJLhBfyeauv2Ft4ug73ckVk3r1dVH2Fa5m4Eb/po=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 841 (0x349)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911972D/serialNumber=2A2665C3141E4BF3FD2F004AAE29A5987113A1DF
Validity
Not Before: Jan 31 01:08:01 2025 GMT
Not After : Feb 7 01:08:01 2025 GMT
Subject: CN=679c2272-5c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:17:84:b2:2d:16:d7:3d:a0:90:7e:2e:25:57:
bc:32:81:55:91:a7:84:70:77:f4:07:83:51:88:76:
24:e0:17:3b:a3:48:90:da:7a:5b:be:f9:8f:2b:c5:
46:5b:cb:9f:2c:e7:c6:7f:c2:cd:9c:70:cf:3d:ff:
0f:d1:db:64:8f:cf:98:6d:4c:95:fd:8b:05:02:6c:
44:d3:c8:33:30:a6:3c:ba:b2:77:3b:75:18:a3:4d:
4b:6e:4e:7b:6e:11:01:dd:f6:42:c6:44:08:c9:d1:
70:62:53:52:5e:d2:41:64:3e:fc:a9:59:0d:34:01:
b8:04:8e:96:91:32:b9:af:4a:5e:b6:90:13:7d:03:
60:43:65:2f:87:e7:de:c1:39:42:ba:cb:fc:a3:5a:
ee:51:68:a5:86:3c:6b:e2:92:cb:3b:be:c0:8a:42:
f5:12:cb:ea:61:a8:95:80:94:bb:18:73:54:c2:8d:
54:b5:3d:1a:73:a7:f2:c3:c6:74:68:78:5f:57:15:
dc:b1:24:0b:ae:f8:6d:78:ca:c4:57:d2:6d:45:0f:
ea:e9:e5:cf:0d:f0:58:99:68:d2:23:55:ab:66:4a:
37:23:ed:e9:50:23:b1:47:65:a2:47:ac:2a:98:82:
3f:d8:32:14:d8:22:78:18:77:ec:ae:34:98:46:58:
d8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:82:EA:19:A1:6A:9A:08:4C:21:93:A0:99:1F:40:34:71:35:CA:A5
X509v3 Authority Key Identifier:
keyid:2A:26:65:C3:14:1E:4B:F3:FD:2F:00:4A:AE:29:A5:98:71:13:A1:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KiZlwxQeS_P9LwBKrimlmHETod8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ea:9d:13:e2:e0:2b:7a:dc:3c:bd:cf:61:80:4c:89:d9:be:91:
a3:8d:2b:93:e8:a0:96:88:80:ba:23:3f:7a:3b:82:1e:af:ae:
73:5a:23:16:50:62:47:25:07:5d:1d:71:89:d1:0c:9c:db:32:
f8:cb:1d:f4:bf:99:76:df:26:bb:93:10:6a:83:40:c3:74:70:
dc:12:a7:8f:cd:52:9f:98:d3:e9:fd:3b:83:c0:96:34:bc:a3:
7b:2c:72:07:7f:bc:66:cc:eb:65:d7:b7:22:c5:54:ac:0f:3d:
60:21:a6:d2:12:2f:99:45:36:44:b8:07:66:41:ab:a9:b1:36:
61:fc:27:d8:d2:8b:ac:d0:b2:8d:d4:fe:3c:d7:cf:00:e9:9b:
54:57:ad:1c:48:0c:4c:eb:72:8c:e5:3e:a1:9e:b0:79:e6:a7:
18:aa:84:53:f7:e7:d9:ec:de:7c:a5:c7:72:4b:7e:51:4e:3b:
b4:90:cb:10:38:53:31:35:50:34:c3:0b:33:a6:8f:27:84:21:
b0:13:fc:b2:e7:00:44:43:15:d3:1e:a0:03:72:d9:c6:eb:87:
55:28:8c:f1:7c:7d:92:47:92:98:ce:45:e7:d8:5d:4c:16:33:
c5:fa:2a:20:ac:4d:53:de:2d:fd:08:52:aa:1f:4b:db:38:1e:
6a:16:74:db
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTk3MkQxMTAvBgNVBAUTKDJBMjY2NUMzMTQxRTRCRjNGRDJGMDA0QUFFMjlBNTk4
NzExM0ExREYwHhcNMjUwMTMxMDEwODAxWhcNMjUwMjA3MDEwODAxWjAYMRYwFAYD
VQQDEw02NzljMjI3Mi01YzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvxeEsi0W1z2gkH4uJVe8MoFVkaeEcHf0B4NRiHYk4Bc7o0iQ2npbvvmPK8VG
W8ufLOfGf8LNnHDPPf8P0dtkj8+YbUyV/YsFAmxE08gzMKY8urJ3O3UYo01Lbk57
bhEB3fZCxkQIydFwYlNSXtJBZD78qVkNNAG4BI6WkTK5r0petpATfQNgQ2Uvh+fe
wTlCusv8o1ruUWilhjxr4pLLO77AikL1EsvqYaiVgJS7GHNUwo1UtT0ac6fyw8Z0
aHhfVxXcsSQLrvhteMrEV9JtRQ/q6eXPDfBYmWjSI1WrZko3I+3pUCOxR2WiR6wq
mII/2DIU2CJ4GHfsrjSYRljYGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJaC6hmh
apoITCGToJkfQDRxNcqlMB8GA1UdIwQYMBaAFComZcMUHkvz/S8ASq4ppZhxE6Hf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTcyRC85OUVFOTUwQ0E2
ODIxMUVDQjRFM0VDM0FDNEY5QUUwMi9LaVpsd3hRZVNfUDlMd0JLcmltbG1IRVRv
ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tpWmx3eFFlU19QOUx3QktyaW1sbUhFVG9kOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OTcyRC85OUVFOTUwQ0E2ODIxMUVDQjRFM0VDM0FDNEY5QUUwMi9LaVpsd3hRZVNf
UDlMd0JLcmltbG1IRVRvZDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDqnRPi4Ct63Dy9z2GATInZvpGjjSuT6KCWiIC6Iz96O4Ier65zWiMW
UGJHJQddHXGJ0Qyc2zL4yx30v5l23ya7kxBqg0DDdHDcEqePzVKfmNPp/TuDwJY0
vKN7LHIHf7xmzOtl17cixVSsDz1gIabSEi+ZRTZEuAdmQaupsTZh/CfY0ous0LKN
1P48188A6ZtUV60cSAxM63KM5T6hnrB55qcYqoRT9+fZ7N58pcdyS35RTju0kMsQ
OFMxNVA0wwszpo8nhCGwE/yy5wBEQxXTHqADctnG64dVKIzxfH2SR5KYzkXn2F1M
FjPF+iogrE1T3i39CFKqH0vbOB5qFnTb
-----END CERTIFICATE-----
Generated at Wed Apr 30 12:58:29 2025 by rpki-client