Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft
File: G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft (raw, json)
Hash identifier: Sb24aTFxvMV9DzOOd0owdxP/JMAUwPeiRzsvJMBurdc=
Subject key identifier: 36:BF:97:45:C1:AC:C8:0E:2C:8D:E2:DE:E6:E8:D8:C6:4E:28:2F:BB
Authority key identifier: 1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE
Certificate issuer: /CN=A9139322/serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE
Certificate serial: 0150
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft
Manifest number: 0150
Signing time: Thu 30 Jan 2025 23:41:35 +0000
Manifest this update: Thu 30 Jan 2025 23:41:35 +0000
Manifest next update: Thu 06 Feb 2025 23:41:35 +0000
Files and hashes: 1: G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl (hash: OWQVeY5xjbMj2kzUs1dy/DXc6cXsTMqPOt5W9tsYiUo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 336 (0x150)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139322/serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE
Validity
Not Before: Jan 30 23:41:35 2025 GMT
Not After : Feb 6 23:41:35 2025 GMT
Subject: CN=679c0e2f-60d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:10:d9:85:98:4e:a5:11:ec:df:ee:9a:f5:8c:
fb:18:67:49:62:43:b6:94:5b:e0:09:07:52:0c:b6:
f9:b8:99:62:0d:7a:e9:c1:2c:77:9c:54:44:f8:0d:
47:47:aa:2c:95:81:29:cd:3c:28:d8:8d:0c:08:fd:
be:01:29:f6:b4:f1:b8:33:b8:81:2b:d7:39:58:22:
05:b0:5e:bd:80:50:d4:05:bf:82:2a:bf:eb:19:36:
53:49:1b:09:bd:93:27:b2:0f:eb:0e:65:dc:5b:3c:
42:53:8e:43:6c:90:00:9f:12:b4:ec:ce:97:47:f0:
26:41:72:75:7a:32:5a:12:b3:59:b0:ea:34:be:b5:
2b:5b:99:a5:6c:20:77:aa:fc:35:07:a7:8e:95:35:
d8:c7:31:f5:c8:bb:83:d1:2b:f6:c0:47:36:f9:8b:
e9:24:f3:2b:20:0c:87:11:77:e3:fa:f2:f7:75:af:
6e:f3:05:f2:a5:a9:71:3d:58:0b:1f:15:61:67:48:
91:1b:00:65:b1:b2:a5:bc:89:90:12:2c:05:09:af:
3c:10:3e:8b:d9:5e:58:ae:8f:dc:0a:bb:ad:7f:50:
d9:2c:4f:e3:d7:3a:ef:23:7e:bd:a7:51:0b:b5:37:
45:4e:66:1f:36:e2:50:ec:52:91:78:01:e4:4e:d8:
5e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BF:97:45:C1:AC:C8:0E:2C:8D:E2:DE:E6:E8:D8:C6:4E:28:2F:BB
X509v3 Authority Key Identifier:
keyid:1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:14:0d:c1:57:fa:54:fa:94:a0:77:af:43:f2:be:e2:bb:5a:
1e:ce:40:ce:ad:06:00:b7:70:0c:71:f7:b2:3f:5d:90:86:63:
ac:51:46:aa:c6:39:0d:44:7a:f8:17:97:39:d9:2e:f7:55:92:
a2:ca:42:66:39:6e:6a:95:d5:c7:9f:87:f5:b5:10:85:04:e6:
56:a9:41:f8:9e:97:4e:e1:ea:7d:e9:49:c2:75:8f:6c:c2:54:
17:db:4b:af:6d:8a:7c:4d:5c:f4:fb:c3:88:3e:9e:5d:74:c3:
d5:cb:2a:65:b7:e3:38:92:43:10:08:45:23:45:de:c1:46:ee:
c4:1d:d3:ab:8e:26:08:b5:f0:5a:18:8d:67:98:d3:19:70:00:
e9:73:cf:2c:ff:54:74:7b:1d:01:00:db:d0:5f:13:8a:46:d8:
9f:e6:3b:5b:db:0d:ac:28:bb:6c:6f:5c:12:e9:c8:12:b4:e5:
87:26:71:44:1e:0e:d3:54:99:51:ae:91:0d:e8:fe:af:f4:3d:
fb:31:eb:81:07:01:09:3a:ee:c3:26:55:86:06:f4:d0:bb:e8:
68:04:76:45:ca:6a:58:ff:18:e1:6d:85:fc:a7:bc:91:c8:c3:
43:c1:33:c0:14:fb:90:59:2f:80:16:01:d7:67:c5:27:0d:10:
74:6d:aa:ed
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzkzMjIxMTAvBgNVBAUTKDFCRkNENTk1QUQ1RkZEQjlDMDQzNzM3QkNBRkVDNzJF
MDQ2QzZCRUUwHhcNMjUwMTMwMjM0MTM1WhcNMjUwMjA2MjM0MTM1WjAYMRYwFAYD
VQQDEw02NzljMGUyZi02MGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4hDZhZhOpRHs3+6a9Yz7GGdJYkO2lFvgCQdSDLb5uJliDXrpwSx3nFRE+A1H
R6oslYEpzTwo2I0MCP2+ASn2tPG4M7iBK9c5WCIFsF69gFDUBb+CKr/rGTZTSRsJ
vZMnsg/rDmXcWzxCU45DbJAAnxK07M6XR/AmQXJ1ejJaErNZsOo0vrUrW5mlbCB3
qvw1B6eOlTXYxzH1yLuD0Sv2wEc2+YvpJPMrIAyHEXfj+vL3da9u8wXypalxPVgL
HxVhZ0iRGwBlsbKlvImQEiwFCa88ED6L2V5Yro/cCrutf1DZLE/j1zrvI369p1EL
tTdFTmYfNuJQ7FKReAHkTtheowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDa/l0XB
rMgOLI3i3ubo2MZOKC+7MB8GA1UdIwQYMBaAFBv81ZWtX/25wENze8r+xy4EbGvu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi85MUZFMDU2QURG
RkUxMUVEOTUxNTNEMzFDNEY5QUUwMi9HX3pWbGExZl9ibkFRM043eXY3SExnUnNh
LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0dfelZsYTFmX2JuQVEzTjd5djdITGdSc2EtNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OTMyMi85MUZFMDU2QURGRkUxMUVEOTUxNTNEMzFDNEY5QUUwMi9HX3pWbGExZl9i
bkFRM043eXY3SExnUnNhLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAdFA3BV/pU+pSgd69D8r7iu1oezkDOrQYAt3AMcfeyP12QhmOsUUaq
xjkNRHr4F5c52S73VZKiykJmOW5qldXHn4f1tRCFBOZWqUH4npdO4ep96UnCdY9s
wlQX20uvbYp8TVz0+8OIPp5ddMPVyyplt+M4kkMQCEUjRd7BRu7EHdOrjiYItfBa
GI1nmNMZcADpc88s/1R0ex0BANvQXxOKRtif5jtb2w2sKLtsb1wS6cgStOWHJnFE
Hg7TVJlRrpEN6P6v9D37MeuBBwEJOu7DJlWGBvTQu+hoBHZFympY/xjhbYX8p7yR
yMNDwTPAFPuQWS+AFgHXZ8UnDRB0bart
-----END CERTIFICATE-----
Generated at Mon Apr 28 02:28:06 2025 by rpki-client