Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft
File: wA8Frg-ptoCpG1bw0yHFGIwecSw.mft (raw, json)
Hash identifier: Du/6J/2e354v8mFHhBgJadTKNTDucV2mevbQ2fWAs5U=
Subject key identifier: DF:B8:E6:09:70:F7:EB:53:7F:1C:44:FA:A8:8C:CB:11:BD:92:FD:A0
Authority key identifier: C0:0F:05:AE:0F:A9:B6:80:A9:1B:56:F0:D3:21:C5:18:8C:1E:71:2C
Certificate issuer: /CN=A914F937/serialNumber=C00F05AE0FA9B680A91B56F0D321C5188C1E712C
Certificate serial: FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft
Manifest number: FC
Signing time: Fri 31 Jan 2025 04:13:27 +0000
Manifest this update: Fri 31 Jan 2025 04:13:26 +0000
Manifest next update: Fri 07 Feb 2025 04:13:26 +0000
Files and hashes: 1: wA8Frg-ptoCpG1bw0yHFGIwecSw.crl (hash: xek7J0IcQdsJNtkV4iJWb3eruEcVnYu5TvUeCuuAg98=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252 (0xfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F937/serialNumber=C00F05AE0FA9B680A91B56F0D321C5188C1E712C
Validity
Not Before: Jan 31 04:13:26 2025 GMT
Not After : Feb 7 04:13:26 2025 GMT
Subject: CN=679c4de7-74c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f7:bc:df:f8:33:de:13:31:d8:1d:f1:36:ee:
9e:d0:68:53:90:c9:86:70:1b:17:fa:1c:b1:48:0d:
94:d2:01:f6:98:d0:5e:f0:2c:65:22:c1:6a:b0:8d:
25:df:93:22:af:43:82:c2:e7:1a:fe:d3:32:a5:5e:
33:7c:c8:ca:69:22:95:38:34:3a:c0:ba:d7:0c:de:
9b:25:f4:1f:28:b3:02:fd:dd:a5:3a:e1:f6:ae:13:
3f:9a:d7:c1:e1:7e:2f:2c:cd:8a:6e:32:d0:1d:d5:
ee:45:bb:ca:d8:99:4d:33:98:d0:56:50:8a:87:ad:
4b:da:80:39:4d:ef:4e:f6:61:8f:35:5f:3d:fd:c6:
9b:91:e8:c7:01:7e:4b:c6:12:ae:49:6e:db:93:4a:
0c:f4:a5:e8:d5:dd:7c:88:a4:72:ca:d4:5f:30:06:
99:1f:f8:55:9c:00:d8:4a:f8:25:c2:e3:cd:68:96:
63:23:4e:1d:cb:96:85:93:e4:23:8a:52:7d:56:2f:
74:d1:48:9c:b2:94:7d:b4:ab:86:1c:26:da:44:b9:
43:86:ff:76:3c:d9:31:57:c3:b5:f4:06:33:b5:7f:
ae:fe:b8:ed:bc:3b:dd:16:ff:e4:3e:13:a6:f2:a1:
73:d0:4f:97:26:34:07:97:e7:b9:04:00:77:0c:0e:
ff:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B8:E6:09:70:F7:EB:53:7F:1C:44:FA:A8:8C:CB:11:BD:92:FD:A0
X509v3 Authority Key Identifier:
keyid:C0:0F:05:AE:0F:A9:B6:80:A9:1B:56:F0:D3:21:C5:18:8C:1E:71:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:32:48:2a:b6:69:ad:a5:0b:db:8f:68:bf:da:0d:bf:9f:f3:
ff:a4:28:4e:69:10:25:56:22:a2:01:f2:a8:28:15:6f:8e:83:
9a:e8:3b:f3:93:db:ef:ed:5f:49:fe:06:ca:96:cb:e9:3c:5f:
85:89:db:4e:c5:32:3e:ea:fa:5b:78:e0:db:13:d1:a0:f9:d0:
53:89:09:4d:91:f9:61:fc:d7:c8:ec:3a:93:e9:3c:75:0f:cc:
46:dc:79:67:9b:60:8c:e2:73:f8:e2:41:10:76:ae:1f:fb:f7:
80:8a:06:3c:3f:4a:51:10:95:f2:7a:17:d6:c4:16:ae:df:bf:
c0:19:1e:b4:ee:2d:eb:30:2a:64:33:49:d7:c5:ac:09:58:c8:
cb:e0:1e:6f:93:27:8b:ea:ac:ce:d1:dc:82:36:13:44:76:42:
a4:eb:65:99:90:c8:a9:7b:f3:cf:60:dc:21:c0:fa:42:bb:e2:
91:e8:41:0e:e7:84:3f:53:0f:4f:03:21:6e:bb:39:43:27:63:
c3:bd:09:6e:fe:e3:2f:8f:ad:34:bb:28:44:81:40:db:51:86:
ed:22:ca:c0:43:f7:10:28:bd:34:1d:ed:85:b6:4f:7d:b0:36:
ee:31:69:02:e5:44:f0:e2:29:e1:5a:de:84:d2:1e:5e:eb:98:
7e:11:a3:ba
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEY5MzcxMTAvBgNVBAUTKEMwMEYwNUFFMEZBOUI2ODBBOTFCNTZGMEQzMjFDNTE4
OEMxRTcxMkMwHhcNMjUwMTMxMDQxMzI2WhcNMjUwMjA3MDQxMzI2WjAYMRYwFAYD
VQQDEw02NzljNGRlNy03NGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvve83/gz3hMx2B3xNu6e0GhTkMmGcBsX+hyxSA2U0gH2mNBe8CxlIsFqsI0l
35Mir0OCwuca/tMypV4zfMjKaSKVODQ6wLrXDN6bJfQfKLMC/d2lOuH2rhM/mtfB
4X4vLM2KbjLQHdXuRbvK2JlNM5jQVlCKh61L2oA5Te9O9mGPNV89/cabkejHAX5L
xhKuSW7bk0oM9KXo1d18iKRyytRfMAaZH/hVnADYSvglwuPNaJZjI04dy5aFk+Qj
ilJ9Vi900UicspR9tKuGHCbaRLlDhv92PNkxV8O19AYztX+u/rjtvDvdFv/kPhOm
8qFz0E+XJjQHl+e5BAB3DA7/XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+45glw
9+tTfxxE+qiMyxG9kv2gMB8GA1UdIwQYMBaAFMAPBa4PqbaAqRtW8NMhxRiMHnEs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjkzNy8yRjJCM0YyMDVC
MjMxMUVFQjg3NzNGNzBDNEY5QUUwMi93QThGcmctcHRvQ3BHMWJ3MHlIRkdJd2Vj
U3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dBOEZyZy1wdG9DcEcxYncweUhGR0l3ZWNTdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RjkzNy8yRjJCM0YyMDVCMjMxMUVFQjg3NzNGNzBDNEY5QUUwMi93QThGcmctcHRv
Q3BHMWJ3MHlIRkdJd2VjU3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC4MkgqtmmtpQvbj2i/2g2/n/P/pChOaRAlViKiAfKoKBVvjoOa6Dvz
k9vv7V9J/gbKlsvpPF+FidtOxTI+6vpbeODbE9Gg+dBTiQlNkflh/NfI7DqT6Tx1
D8xG3Hlnm2CM4nP44kEQdq4f+/eAigY8P0pREJXyehfWxBau37/AGR607i3rMCpk
M0nXxawJWMjL4B5vkyeL6qzO0dyCNhNEdkKk62WZkMipe/PPYNwhwPpCu+KR6EEO
54Q/Uw9PAyFuuzlDJ2PDvQlu/uMvj600uyhEgUDbUYbtIsrAQ/cQKL00He2Ftk99
sDbuMWkC5UTw4inhWt6E0h5e65h+EaO6
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:43:39 2025 by rpki-client