Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft
File: 7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft (raw, json)
Hash identifier: N8JL+70f6zXliZr7wW8D+2YySdD0SpLKEd8VTW47UJE=
Subject key identifier: 7C:B0:7B:1C:E7:0D:01:64:82:C0:30:32:32:95:6F:FC:2B:54:DD:5F
Authority key identifier: EC:80:08:6C:22:07:B1:A0:46:00:72:51:83:E3:C4:F0:FD:E1:67:5F
Certificate issuer: /CN=A9141526/serialNumber=EC80086C2207B1A04600725183E3C4F0FDE1675F
Certificate serial: 20EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft
Manifest number: 20EB
Signing time: Fri 31 Jan 2025 15:56:39 +0000
Manifest this update: Fri 31 Jan 2025 15:56:38 +0000
Manifest next update: Fri 07 Feb 2025 15:56:38 +0000
Files and hashes: 1: 7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl (hash: yUOwhm5KkpG1J/3GWyOt0p9RuGrLnmiXngNb0ErT5uI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8427 (0x20eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141526/serialNumber=EC80086C2207B1A04600725183E3C4F0FDE1675F
Validity
Not Before: Jan 31 15:56:38 2025 GMT
Not After : Feb 7 15:56:38 2025 GMT
Subject: CN=679cf2b7-3758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cb:5c:60:33:b8:cd:fd:d5:96:65:dc:a7:c4:
88:ab:9c:bf:32:0b:df:27:52:2b:7f:95:e5:57:4b:
f7:ba:cd:36:2c:7e:81:1b:dc:d2:b4:86:05:33:cd:
d6:21:59:c6:e3:16:73:e3:15:d1:93:c5:85:e2:a8:
bc:ed:97:1a:01:73:99:f7:c5:f7:7d:b5:6d:ca:b8:
ce:2f:96:c7:5a:95:88:6b:23:64:df:4f:a4:12:7b:
b9:65:59:1c:75:08:8a:b9:b0:86:26:7c:38:36:b5:
be:aa:1b:54:8e:16:45:de:cc:66:19:fe:40:60:c5:
31:d3:4a:e3:7f:3e:75:b6:72:0e:b8:f2:c3:0a:2e:
53:f9:66:ed:e6:57:17:dc:7a:b1:80:e4:0e:cc:1e:
e5:69:62:bc:bc:29:9e:57:11:00:66:47:dc:a9:d7:
fd:91:ec:c4:4f:b9:b8:c1:65:86:c2:88:b1:d9:d5:
28:72:46:4c:11:a8:02:c0:56:3d:ce:d4:d1:3f:1d:
d7:77:d1:46:56:22:05:e1:48:5a:86:d1:f2:51:01:
19:e9:80:8f:63:96:50:fd:a3:86:21:da:9f:24:c1:
83:dc:a9:00:af:eb:61:26:c9:98:74:6c:5e:50:e1:
5f:0e:2d:f5:b1:70:f2:55:8d:70:8c:a0:a3:4d:fd:
d4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B0:7B:1C:E7:0D:01:64:82:C0:30:32:32:95:6F:FC:2B:54:DD:5F
X509v3 Authority Key Identifier:
keyid:EC:80:08:6C:22:07:B1:A0:46:00:72:51:83:E3:C4:F0:FD:E1:67:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:8e:47:cc:24:f9:40:4e:f9:c7:0a:c8:20:b8:60:df:6f:f9:
6a:12:9e:d0:36:cd:f4:c5:8d:bb:35:99:03:96:3b:3c:3c:64:
ce:9a:86:28:e0:43:44:1b:59:7e:d3:00:b2:ef:29:2a:1f:98:
f9:2e:a1:8c:eb:83:8a:9d:47:aa:01:94:41:9e:a5:2e:84:18:
f4:29:a2:04:d0:9a:b3:7e:6b:f1:e8:b8:de:37:1d:a8:0a:fd:
3b:23:32:7e:a2:cd:98:6f:db:ee:03:11:29:1c:29:c6:66:9b:
9d:a1:bd:d1:c0:28:a4:c1:e4:9d:60:e8:2e:2b:7c:a7:73:96:
5e:2b:f4:16:46:4d:87:3d:8b:4b:ac:66:fa:74:d4:7c:50:2e:
31:02:64:d8:5f:f8:b6:69:dc:f0:81:ed:67:d7:e8:ed:8f:21:
2a:2e:5c:12:59:3a:56:af:5f:4e:71:18:21:95:6d:80:b7:81:
3d:9c:2d:62:d9:be:e3:b0:f8:20:ad:28:9f:f9:64:35:2e:5f:
67:c2:57:cc:31:f0:f9:3b:72:31:7b:c9:80:44:7d:3a:ac:ba:
29:fc:70:77:39:56:da:48:2e:56:f3:db:d6:46:ee:82:29:d8:
72:7f:5c:fd:0f:8e:fc:04:29:8d:2c:30:07:74:7a:75:30:46:
96:87:e7:c6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICIOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDE1MjYxMTAvBgNVBAUTKEVDODAwODZDMjIwN0IxQTA0NjAwNzI1MTgzRTNDNEYw
RkRFMTY3NUYwHhcNMjUwMTMxMTU1NjM4WhcNMjUwMjA3MTU1NjM4WjAYMRYwFAYD
VQQDEw02NzljZjJiNy0zNzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzstcYDO4zf3VlmXcp8SIq5y/MgvfJ1Irf5XlV0v3us02LH6BG9zStIYFM83W
IVnG4xZz4xXRk8WF4qi87ZcaAXOZ98X3fbVtyrjOL5bHWpWIayNk30+kEnu5ZVkc
dQiKubCGJnw4NrW+qhtUjhZF3sxmGf5AYMUx00rjfz51tnIOuPLDCi5T+Wbt5lcX
3HqxgOQOzB7laWK8vCmeVxEAZkfcqdf9kezET7m4wWWGwoix2dUockZMEagCwFY9
ztTRPx3Xd9FGViIF4UhahtHyUQEZ6YCPY5ZQ/aOGIdqfJMGD3KkAr+thJsmYdGxe
UOFfDi31sXDyVY1wjKCjTf3UewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHywexzn
DQFkgsAwMjKVb/wrVN1fMB8GA1UdIwQYMBaAFOyACGwiB7GgRgByUYPjxPD94Wdf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTUyNi9GNjI4QTMzNkU5
QTQxMUU1OTZBQjgyMjNDNEY5QUUwMi83SUFJYkNJSHNhQkdBSEpSZy1QRThQM2ha
MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdJQUliQ0lIc2FCR0FISlJnLVBFOFAzaFoxOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MTUyNi9GNjI4QTMzNkU5QTQxMUU1OTZBQjgyMjNDNEY5QUUwMi83SUFJYkNJSHNh
QkdBSEpSZy1QRThQM2haMTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA/jkfMJPlATvnHCsgguGDfb/lqEp7QNs30xY27NZkDljs8PGTOmoYo
4ENEG1l+0wCy7ykqH5j5LqGM64OKnUeqAZRBnqUuhBj0KaIE0Jqzfmvx6LjeNx2o
Cv07IzJ+os2Yb9vuAxEpHCnGZpudob3RwCikweSdYOguK3ync5ZeK/QWRk2HPYtL
rGb6dNR8UC4xAmTYX/i2adzwge1n1+jtjyEqLlwSWTpWr19OcRghlW2At4E9nC1i
2b7jsPggrSif+WQ1Ll9nwlfMMfD5O3Ixe8mARH06rLop/HB3OVbaSC5W89vWRu6C
Kdhyf1z9D478BCmNLDAHdHp1MEaWh+fG
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:06:07 2025 by rpki-client