Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft
File: K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft (raw, json)
Hash identifier: JDW/I3jNc31vOoDdKfWJrgrOUI56ps4qIdt3Jns6gJE=
Subject key identifier: 64:AF:98:EE:78:27:F7:52:FA:71:D5:A8:A7:A9:5A:F2:AC:FF:D8:F9
Authority key identifier: 2B:F0:AE:67:90:D2:F0:1D:D1:DB:67:38:31:32:DC:40:3B:67:45:22
Certificate issuer: /CN=A912F6E3/serialNumber=2BF0AE6790D2F01DD1DB67383132DC403B674522
Certificate serial: 1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft
Manifest number: 1E
Signing time: Fri 31 Jan 2025 06:58:48 +0000
Manifest this update: Fri 31 Jan 2025 06:58:47 +0000
Manifest next update: Fri 07 Feb 2025 06:58:47 +0000
Files and hashes: 1: K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl (hash: 6bRG710OhcHqnXuWHrLWmZWweKudzkR901hLznLyh54=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F6E3/serialNumber=2BF0AE6790D2F01DD1DB67383132DC403B674522
Validity
Not Before: Jan 31 06:58:47 2025 GMT
Not After : Feb 7 06:58:47 2025 GMT
Subject: CN=679c74a8-034d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1e:09:28:62:8f:ab:dc:30:94:6a:6c:71:ea:
2f:ed:29:06:c2:f9:b8:fc:f8:5b:7c:68:db:dd:6e:
d3:d7:67:5e:82:f9:9c:d6:68:30:72:78:68:de:ea:
19:ec:23:1c:6b:d0:96:97:6d:52:31:36:5b:c3:ce:
64:9a:9a:02:46:06:3d:53:a1:65:52:a7:c7:41:ce:
64:d0:3a:7f:4a:9a:b4:9b:46:d8:8c:d2:d2:6e:7d:
22:aa:08:c5:83:5a:8e:83:5e:90:cb:1c:27:3d:62:
ff:37:b4:73:7d:42:f6:1c:21:b4:fb:b3:20:48:fe:
d9:d2:ec:ff:48:7c:93:c5:cc:ee:9e:8d:5d:ee:ce:
6e:e7:de:72:d6:66:e1:37:e6:18:5e:c9:b1:3c:43:
c1:64:53:16:38:89:22:34:bf:f5:0f:8b:70:f0:3f:
60:f7:32:ca:81:f4:34:55:0a:30:91:1b:b5:9d:1b:
a8:71:db:52:a1:47:af:bf:6b:83:6a:91:78:6b:c8:
13:a0:14:38:3b:38:da:5e:25:cc:c0:cd:b0:e3:84:
51:2b:84:b6:cf:15:1c:65:92:3a:07:67:27:ef:d0:
80:96:ea:83:44:e5:f2:21:48:65:6b:d6:28:19:e0:
58:a5:c0:72:08:52:62:61:93:0c:73:dd:27:c2:b3:
93:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AF:98:EE:78:27:F7:52:FA:71:D5:A8:A7:A9:5A:F2:AC:FF:D8:F9
X509v3 Authority Key Identifier:
keyid:2B:F0:AE:67:90:D2:F0:1D:D1:DB:67:38:31:32:DC:40:3B:67:45:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c8:b0:fe:46:9e:2c:b4:c1:c6:c0:38:0d:d7:38:3b:e3:eb:
6d:c1:ff:c4:b2:b7:5d:5f:3b:62:ff:3c:19:d4:e6:7e:e8:11:
c9:1f:a5:26:7e:f3:ba:5c:d2:3d:73:a5:cb:1c:d1:77:1d:22:
f8:fe:1e:c9:bc:ea:01:31:ad:1d:b7:11:c7:c0:c5:75:9d:47:
1e:be:c2:89:dd:ea:76:e1:cf:3b:2a:08:96:a2:3d:51:b8:71:
80:da:01:d7:38:58:1a:d5:cf:fe:5a:bf:0f:6d:a2:42:94:e5:
fc:14:15:74:72:24:36:d1:ea:ed:9a:1e:11:de:3a:71:9e:e6:
87:a9:ae:c1:3d:47:9d:49:b1:22:b5:40:76:ad:52:37:46:5c:
65:dd:8c:14:35:48:b5:66:bc:c5:c1:fd:c9:a1:54:c5:08:d8:
0a:29:d3:8d:6c:ff:d0:9f:35:2b:41:43:1e:02:d5:cb:98:01:
39:e5:6f:4b:cc:42:eb:55:c9:7a:44:f8:21:0f:bf:07:a8:b4:
39:51:bf:32:41:76:14:8b:b5:37:47:7c:9c:16:1f:bc:c5:b3:
48:d4:0d:9b:e8:d5:aa:25:fe:e1:3c:94:65:dc:f9:3e:f2:fb:
3e:de:4e:5e:a9:07:6e:b1:db:1d:e9:2d:99:68:c6:6a:32:63:
3a:9a:40:ba
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
RjZFMzExMC8GA1UEBRMoMkJGMEFFNjc5MEQyRjAxREQxREI2NzM4MzEzMkRDNDAz
QjY3NDUyMjAeFw0yNTAxMzEwNjU4NDdaFw0yNTAyMDcwNjU4NDdaMBgxFjAUBgNV
BAMTDTY3OWM3NGE4LTAzNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCzHgkoYo+r3DCUamxx6i/tKQbC+bj8+Ft8aNvdbtPXZ16C+ZzWaDByeGje6hns
Ixxr0JaXbVIxNlvDzmSamgJGBj1ToWVSp8dBzmTQOn9KmrSbRtiM0tJufSKqCMWD
Wo6DXpDLHCc9Yv83tHN9QvYcIbT7syBI/tnS7P9IfJPFzO6ejV3uzm7n3nLWZuE3
5hheybE8Q8FkUxY4iSI0v/UPi3DwP2D3MsqB9DRVCjCRG7WdG6hx21KhR6+/a4Nq
kXhryBOgFDg7ONpeJczAzbDjhFErhLbPFRxlkjoHZyfv0ICW6oNE5fIhSGVr1igZ
4FilwHIIUmJhkwxz3SfCs5NJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZK+Y7ngn
91L6cdWop6la8qz/2PkwHwYDVR0jBBgwFoAUK/CuZ5DS8B3R22c4MTLcQDtnRSIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGNkUzL0YyRkI4MjUwQjVE
RDExRUY5N0Q5RkEzNEM0RjlBRTAyL0tfQ3VaNURTOEIzUjIyYzRNVExjUUR0blJT
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvS19DdVo1RFM4QjNSMjJjNE1UTGNRRHRuUlNJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG
NkUzL0YyRkI4MjUwQjVERDExRUY5N0Q5RkEzNEM0RjlBRTAyL0tfQ3VaNURTOEIz
UjIyYzRNVExjUUR0blJTSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJrIsP5Gniy0wcbAOA3XODvj623B/8Syt11fO2L/PBnU5n7oEckfpSZ+
87pc0j1zpcsc0XcdIvj+Hsm86gExrR23EcfAxXWdRx6+wond6nbhzzsqCJaiPVG4
cYDaAdc4WBrVz/5avw9tokKU5fwUFXRyJDbR6u2aHhHeOnGe5oeprsE9R51JsSK1
QHatUjdGXGXdjBQ1SLVmvMXB/cmhVMUI2Aop041s/9CfNStBQx4C1cuYATnlb0vM
QutVyXpE+CEPvweotDlRvzJBdhSLtTdHfJwWH7zFs0jUDZvo1aol/uE8lGXc+T7y
+z7eTl6pB26x2x3pLZloxmoyYzqaQLo=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:08:59 2025 by rpki-client