Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.mft
File: 8wm0k6ku58YpXgCQYwolGh0TZRc.mft (raw, json)
Hash identifier: VVNegmOS8rINDRdGt4i4dlpfxvy/smiC0y7pNL5AOKk=
Subject key identifier: BF:F0:34:81:E7:85:C4:45:FA:79:01:BD:7F:98:08:1A:D5:EF:52:CA
Authority key identifier: F3:09:B4:93:A9:2E:E7:C6:29:5E:00:90:63:0A:25:1A:1D:13:65:17
Certificate issuer: /CN=A913D756/serialNumber=F309B493A92EE7C6295E0090630A251A1D136517
Certificate serial: 21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wm0k6ku58YpXgCQYwolGh0TZRc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.mft
Manifest number: 21
Signing time: Fri 31 Jan 2025 06:56:12 +0000
Manifest this update: Fri 31 Jan 2025 06:56:10 +0000
Manifest next update: Fri 07 Feb 2025 06:56:10 +0000
Files and hashes: 1: 8wm0k6ku58YpXgCQYwolGh0TZRc.crl (hash: OnRMdyZMpmsdJqjjOo96gPWnHIzX3i/g5i715pN4Bi4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D756/serialNumber=F309B493A92EE7C6295E0090630A251A1D136517
Validity
Not Before: Jan 31 06:56:10 2025 GMT
Not After : Feb 7 06:56:10 2025 GMT
Subject: CN=679c740b-effe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:98:3b:a5:a9:fc:77:ec:43:55:24:02:9e:1b:
dc:bc:09:a9:5e:2a:11:a4:ce:46:10:8f:05:cb:5a:
f6:25:b3:b4:31:75:69:8b:ed:a3:d3:26:3a:9e:55:
fa:e8:4e:b3:13:f4:f5:af:a5:32:c8:9d:3e:2b:90:
5b:65:48:66:10:12:a9:6f:59:a9:27:64:f0:93:67:
23:da:f2:0e:1c:8e:01:9d:15:bc:85:e5:82:53:c7:
db:7d:c4:de:ac:b7:03:56:15:69:e4:2c:aa:b0:bc:
d9:0a:d7:7a:6a:a8:09:34:fb:89:7b:5f:b0:9b:ff:
cb:6e:c1:a5:df:ad:79:23:6d:5b:81:95:21:df:13:
2b:ad:6b:17:58:16:7f:30:b2:8f:1a:45:e3:8b:0c:
b1:79:a4:1b:a8:06:d3:d9:ad:bf:32:25:26:ea:e0:
fe:81:e8:a3:28:2d:ae:89:ac:8a:df:cb:59:7f:23:
bc:3b:eb:41:0a:59:27:e0:34:3c:04:5c:51:51:2e:
06:7d:0c:e6:a7:c2:a6:86:a4:97:fb:fd:a5:f5:b8:
cf:70:55:e8:8a:8c:b4:1e:c8:b9:8d:d7:5f:42:9c:
76:ed:2f:ae:a4:e7:2d:ce:6c:7f:78:66:34:d8:72:
53:f3:c3:64:c0:07:87:27:70:22:b2:10:5a:1d:b7:
02:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F0:34:81:E7:85:C4:45:FA:79:01:BD:7F:98:08:1A:D5:EF:52:CA
X509v3 Authority Key Identifier:
keyid:F3:09:B4:93:A9:2E:E7:C6:29:5E:00:90:63:0A:25:1A:1D:13:65:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wm0k6ku58YpXgCQYwolGh0TZRc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:24:de:51:e4:44:7a:85:9b:76:e7:05:da:ed:b9:29:fc:4e:
73:28:59:2f:33:b9:30:cb:ee:a6:10:d1:a0:b0:49:a0:d1:00:
8a:29:df:4f:f7:04:79:b8:4e:41:77:81:6a:8a:40:fe:5a:b6:
8f:1f:ce:96:21:79:45:ce:9c:81:01:e7:b0:98:d7:63:f1:aa:
27:10:1f:57:c5:ca:6b:1a:a1:e0:d7:42:76:40:9d:15:08:cb:
94:a6:56:0c:6a:21:3f:c9:66:09:27:cb:29:60:a6:48:1f:70:
22:dc:de:2c:b9:69:7a:b4:bb:2c:d4:27:4d:e0:31:19:85:43:
de:fa:7e:7f:d8:e8:db:7e:13:c1:7e:3a:f7:98:06:5b:75:ac:
34:b0:0e:97:66:1e:3d:13:42:df:32:e5:98:58:be:25:ab:2e:
9c:d4:ae:ff:5f:93:06:9f:a1:68:9f:ca:da:0e:68:de:f8:db:
84:3c:1d:06:93:b1:a2:a9:70:d5:84:e2:44:34:e8:d8:30:ed:
37:35:78:63:4d:94:f3:15:95:63:c5:39:8f:37:0d:c9:44:a7:
c7:c9:b4:a7:02:90:3f:18:1a:a7:89:07:a7:2d:74:f3:79:2d:
ec:19:ee:b1:0e:78:27:26:31:d7:e7:f4:71:80:15:2b:e9:32:
75:a9:79:56
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
RDc1NjExMC8GA1UEBRMoRjMwOUI0OTNBOTJFRTdDNjI5NUUwMDkwNjMwQTI1MUEx
RDEzNjUxNzAeFw0yNTAxMzEwNjU2MTBaFw0yNTAyMDcwNjU2MTBaMBgxFjAUBgNV
BAMTDTY3OWM3NDBiLWVmZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+mDulqfx37ENVJAKeG9y8CaleKhGkzkYQjwXLWvYls7QxdWmL7aPTJjqeVfro
TrMT9PWvpTLInT4rkFtlSGYQEqlvWaknZPCTZyPa8g4cjgGdFbyF5YJTx9t9xN6s
twNWFWnkLKqwvNkK13pqqAk0+4l7X7Cb/8tuwaXfrXkjbVuBlSHfEyutaxdYFn8w
so8aReOLDLF5pBuoBtPZrb8yJSbq4P6B6KMoLa6JrIrfy1l/I7w760EKWSfgNDwE
XFFRLgZ9DOanwqaGpJf7/aX1uM9wVeiKjLQeyLmN119CnHbtL66k5y3ObH94ZjTY
clPzw2TAB4cncCKyEFodtwInAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUv/A0geeF
xEX6eQG9f5gIGtXvUsowHwYDVR0jBBgwFoAU8wm0k6ku58YpXgCQYwolGh0TZRcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNENzU2LzZBNDIxQTgwQjA2
NzExRUY4MjE0RDQ2OUM0RjlBRTAyLzh3bTBrNmt1NThZcFhnQ1FZd29sR2gwVFpS
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvOHdtMGs2a3U1OFlwWGdDUVl3b2xHaDBUWlJjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE
NzU2LzZBNDIxQTgwQjA2NzExRUY4MjE0RDQ2OUM0RjlBRTAyLzh3bTBrNmt1NThZ
cFhnQ1FZd29sR2gwVFpSYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBALAk3lHkRHqFm3bnBdrtuSn8TnMoWS8zuTDL7qYQ0aCwSaDRAIop30/3
BHm4TkF3gWqKQP5ato8fzpYheUXOnIEB57CY12PxqicQH1fFymsaoeDXQnZAnRUI
y5SmVgxqIT/JZgknyylgpkgfcCLc3iy5aXq0uyzUJ03gMRmFQ976fn/Y6Nt+E8F+
OveYBlt1rDSwDpdmHj0TQt8y5ZhYviWrLpzUrv9fkwafoWifytoOaN7424Q8HQaT
saKpcNWE4kQ06Ngw7Tc1eGNNlPMVlWPFOY83DclEp8fJtKcCkD8YGqeJB6ctdPN5
LewZ7rEOeCcmMdfn9HGAFSvpMnWpeVY=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:45:28 2025 by rpki-client