Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.mft
File: n5wj0nP2qZxl77wDDStoHkIykWc.mft (raw, json)
Hash identifier: LJSr47foiKv7LnvMJee0H3ziH0Y8/p/bUITKNWiAsKU=
Subject key identifier: C6:A1:21:AF:66:80:F2:78:E3:C2:20:76:F7:3B:64:8C:BA:D4:5A:74
Authority key identifier: 9F:9C:23:D2:73:F6:A9:9C:65:EF:BC:03:0D:2B:68:1E:42:32:91:67
Certificate issuer: /CN=A9144C70/serialNumber=9F9C23D273F6A99C65EFBC030D2B681E42329167
Certificate serial: 0345
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5wj0nP2qZxl77wDDStoHkIykWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.mft
Manifest number: 036B
Signing time: Fri 31 Jan 2025 01:09:34 +0000
Manifest this update: Fri 31 Jan 2025 01:09:33 +0000
Manifest next update: Fri 07 Feb 2025 01:09:33 +0000
Files and hashes: 1: n5wj0nP2qZxl77wDDStoHkIykWc.crl (hash: Xl70IqRyzgXDzv5Jr+bOk13hLbZMyhnePeM8UStonb0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 837 (0x345)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144C70/serialNumber=9F9C23D273F6A99C65EFBC030D2B681E42329167
Validity
Not Before: Jan 31 01:09:33 2025 GMT
Not After : Feb 7 01:09:33 2025 GMT
Subject: CN=679c22cd-f0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3b:18:9b:9e:20:af:1c:c7:cc:9e:af:f5:ca:
ce:21:4c:40:9c:a6:30:e8:75:a6:ff:6a:c2:73:38:
3b:2f:80:69:4e:f5:c8:f5:9e:4b:2f:07:ef:2c:c5:
44:22:ba:d3:2f:61:23:5d:da:05:31:bf:10:93:9c:
47:97:bc:18:db:7b:df:ac:08:44:21:27:2c:11:de:
f1:24:ef:2a:8b:c7:f6:66:a5:b3:3a:52:01:49:1e:
74:e2:cf:0d:6e:c3:3c:ed:9c:a5:15:8e:9b:75:d0:
e8:1e:c1:aa:04:1b:bb:39:ea:b7:29:85:c5:1d:f7:
74:7d:5d:fc:40:18:4b:dd:e1:07:04:5f:fd:20:eb:
5d:5f:2a:3a:a4:97:f3:6b:ce:6e:1b:84:0f:1e:8d:
c5:46:8c:43:d9:49:f7:e4:16:21:12:57:7f:62:c7:
2b:04:cb:36:ac:3c:f4:39:2c:2b:9c:65:44:c6:18:
fb:10:5e:0b:dc:65:51:22:f2:09:26:9e:db:31:e5:
f1:6b:aa:a7:3e:4b:ed:c8:e3:cf:89:7f:14:51:18:
22:e2:23:09:cb:ad:cc:12:9a:b4:0d:d2:e0:bc:de:
cc:76:7e:f6:fe:f4:fd:e0:cf:5b:cb:91:d6:89:a4:
1e:38:14:de:2a:36:62:e3:e8:9f:09:23:88:c9:f4:
b2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A1:21:AF:66:80:F2:78:E3:C2:20:76:F7:3B:64:8C:BA:D4:5A:74
X509v3 Authority Key Identifier:
keyid:9F:9C:23:D2:73:F6:A9:9C:65:EF:BC:03:0D:2B:68:1E:42:32:91:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5wj0nP2qZxl77wDDStoHkIykWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:cc:43:d6:e3:39:71:f4:46:f4:97:6e:46:ea:0e:88:a3:36:
aa:0e:77:45:d6:e6:69:71:f9:74:6a:26:6d:54:3c:a4:35:f6:
89:26:23:23:3b:59:7a:b9:d7:25:72:93:bf:5b:b8:15:a9:bc:
96:e5:90:d3:ba:8d:3e:98:aa:63:a3:d9:e3:3b:a7:0a:f1:7d:
dd:0d:da:b9:f0:b8:37:49:58:0c:3a:a8:b6:9a:2e:a1:4c:e8:
24:55:66:ca:18:95:37:ef:8b:af:80:cb:43:a7:1e:9d:8e:d4:
31:34:b3:6e:22:e9:d3:01:f1:66:e1:51:aa:6a:83:97:da:fe:
e8:43:74:64:d0:db:c2:7e:f2:87:25:75:f1:67:bc:00:a0:e2:
b7:92:50:15:d4:45:1e:58:76:22:a4:b0:b2:1d:e4:86:2f:b6:
29:af:14:26:a5:48:b2:7f:ca:b9:6d:e7:fc:1c:cc:2c:bd:b1:
b6:4a:d3:16:91:1e:12:2f:b4:77:60:91:23:24:aa:6c:53:73:
0c:3e:4c:8d:95:83:02:5c:d3:fa:e6:34:14:22:33:31:1c:6b:
ca:45:ec:ec:b3:7b:24:91:29:94:46:7a:dc:e8:43:92:cb:ab:
e2:a7:24:91:9f:10:54:19:ea:c0:2c:c8:21:72:8c:2b:65:79:
37:90:a8:69
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDRDNzAxMTAvBgNVBAUTKDlGOUMyM0QyNzNGNkE5OUM2NUVGQkMwMzBEMkI2ODFF
NDIzMjkxNjcwHhcNMjUwMTMxMDEwOTMzWhcNMjUwMjA3MDEwOTMzWjAYMRYwFAYD
VQQDEw02NzljMjJjZC1mMGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsjsYm54grxzHzJ6v9crOIUxAnKYw6HWm/2rCczg7L4BpTvXI9Z5LLwfvLMVE
IrrTL2EjXdoFMb8Qk5xHl7wY23vfrAhEIScsEd7xJO8qi8f2ZqWzOlIBSR504s8N
bsM87ZylFY6bddDoHsGqBBu7Oeq3KYXFHfd0fV38QBhL3eEHBF/9IOtdXyo6pJfz
a85uG4QPHo3FRoxD2Un35BYhEld/YscrBMs2rDz0OSwrnGVExhj7EF4L3GVRIvIJ
Jp7bMeXxa6qnPkvtyOPPiX8UURgi4iMJy63MEpq0DdLgvN7Mdn72/vT94M9by5HW
iaQeOBTeKjZi4+ifCSOIyfSy/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMahIa9m
gPJ448Igdvc7ZIy61Fp0MB8GA1UdIwQYMBaAFJ+cI9Jz9qmcZe+8Aw0raB5CMpFn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEM3MC84MkJDODRFRUFD
NjcxMUVDQjc1Q0RBMjRDNEY5QUUwMi9uNXdqMG5QMnFaeGw3N3dERFN0b0hrSXlr
V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL241d2owblAycVp4bDc3d0REU3RvSGtJeWtXYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NEM3MC84MkJDODRFRUFDNjcxMUVDQjc1Q0RBMjRDNEY5QUUwMi9uNXdqMG5QMnFa
eGw3N3dERFN0b0hrSXlrV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAUzEPW4zlx9Eb0l25G6g6IozaqDndF1uZpcfl0aiZtVDykNfaJJiMj
O1l6udclcpO/W7gVqbyW5ZDTuo0+mKpjo9njO6cK8X3dDdq58Lg3SVgMOqi2mi6h
TOgkVWbKGJU374uvgMtDpx6djtQxNLNuIunTAfFm4VGqaoOX2v7oQ3Rk0NvCfvKH
JXXxZ7wAoOK3klAV1EUeWHYipLCyHeSGL7YprxQmpUiyf8q5bef8HMwsvbG2StMW
kR4SL7R3YJEjJKpsU3MMPkyNlYMCXNP65jQUIjMxHGvKRezss3skkSmURnrc6EOS
y6vipySRnxBUGerALMghcowrZXk3kKhp
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:02:54 2025 by rpki-client