Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.mft
File: X3A2SNc_YGlFARjbom-WaC1a5so.mft (raw, json)
Hash identifier: QatxSTt+TWLn5ADZYhA42r7w2O5lMvbkI7e55JsjvRc=
Subject key identifier: 35:AE:F3:94:BF:F7:2B:20:1A:65:76:A5:4B:65:46:64:92:E8:B9:F6
Authority key identifier: 5F:70:36:48:D7:3F:60:69:45:01:18:DB:A2:6F:96:68:2D:5A:E6:CA
Certificate issuer: /CN=A91508BB/serialNumber=5F703648D73F6069450118DBA26F96682D5AE6CA
Certificate serial: 3447
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X3A2SNc_YGlFARjbom-WaC1a5so.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.mft
Manifest number: 3447
Signing time: Fri 31 Jan 2025 14:39:14 +0000
Manifest this update: Fri 31 Jan 2025 14:39:13 +0000
Manifest next update: Fri 07 Feb 2025 14:39:13 +0000
Files and hashes: 1: X3A2SNc_YGlFARjbom-WaC1a5so.crl (hash: WO/la+pEq61X4ntfyer2ux6EzOUsZfGH4KFopRJcIrc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13383 (0x3447)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91508BB/serialNumber=5F703648D73F6069450118DBA26F96682D5AE6CA
Validity
Not Before: Jan 31 14:39:13 2025 GMT
Not After : Feb 7 14:39:13 2025 GMT
Subject: CN=679ce091-28bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:25:fb:92:6c:3b:fb:5e:bf:37:77:f2:0c:78:
16:59:4d:0b:eb:fa:84:0a:45:a9:3e:0f:23:5a:8e:
90:60:96:30:8f:92:50:94:b3:f2:83:9a:42:df:f5:
bb:8f:e0:c2:eb:c6:1b:bd:72:12:97:5f:83:70:27:
6f:1a:52:be:18:ac:ef:a9:21:aa:aa:d8:72:4e:2f:
30:b9:ae:3a:68:4f:47:c9:09:de:8d:43:27:2d:5f:
54:ae:ee:40:31:34:91:3b:a7:7a:71:55:e9:ad:05:
08:d2:3b:65:17:46:a1:ba:4b:e5:fa:92:b3:32:5e:
a5:51:6b:c1:44:c8:d6:03:83:12:ba:11:89:4a:7c:
b1:15:fe:42:da:a1:64:8e:38:c1:64:3c:f0:a4:da:
61:ca:fd:9a:97:26:19:40:8a:88:2c:ae:22:a3:b3:
6a:3b:29:51:40:b4:10:18:a3:2f:04:0b:7d:f8:8a:
e9:3a:2b:c4:20:bc:89:b3:7b:1f:c2:17:26:62:37:
ca:42:50:72:e7:e0:a1:11:ac:73:b5:3f:e0:74:15:
c1:77:15:e3:5b:eb:94:02:c3:47:14:1a:6c:b2:49:
6c:75:b4:f0:da:10:7a:55:bf:0a:a4:08:9e:28:67:
a1:31:60:d4:e1:74:4a:19:97:d8:38:8e:a2:1d:5c:
19:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AE:F3:94:BF:F7:2B:20:1A:65:76:A5:4B:65:46:64:92:E8:B9:F6
X509v3 Authority Key Identifier:
keyid:5F:70:36:48:D7:3F:60:69:45:01:18:DB:A2:6F:96:68:2D:5A:E6:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X3A2SNc_YGlFARjbom-WaC1a5so.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:8d:d1:13:da:48:6b:b0:3d:1b:7a:28:10:57:0d:9c:e4:28:
81:1c:e0:fe:5b:12:38:43:7b:69:8b:18:a9:f3:0e:56:ff:8a:
a5:72:86:08:95:9c:08:ae:c5:a8:74:7b:98:54:b6:d2:3f:c4:
b9:1e:6b:66:64:e8:f6:32:de:21:05:a0:89:60:ff:88:e2:ab:
60:55:c5:1a:51:e3:14:cc:12:b2:19:80:04:3c:54:62:30:be:
0c:6e:82:5c:32:14:e5:c8:57:e2:05:00:74:a0:8d:ab:42:86:
65:2d:4a:53:50:16:04:da:68:d7:c4:00:0f:24:83:d5:a0:cf:
11:98:d5:f3:a1:2c:3a:38:1b:72:a5:5d:4d:88:15:30:e8:cb:
39:a1:3b:e9:db:1b:ab:fe:13:3e:17:39:78:63:5a:18:07:5f:
2a:11:d0:ed:fd:1e:5b:62:1c:4b:c9:2c:51:a4:c6:b9:ed:99:
01:3d:07:f6:e9:65:72:39:c8:54:7b:4f:e7:d0:4c:9e:1f:53:
4b:73:c4:dc:19:b8:02:67:75:32:ef:ee:21:7f:e1:06:b6:d9:
77:05:01:5f:81:fe:e6:0e:56:35:56:0b:aa:de:f8:b2:36:3f:
df:97:60:23:4e:be:ff:66:41:65:e6:38:e5:47:87:32:18:3d:
b0:e6:ce:81
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTA4QkIxMTAvBgNVBAUTKDVGNzAzNjQ4RDczRjYwNjk0NTAxMThEQkEyNkY5NjY4
MkQ1QUU2Q0EwHhcNMjUwMTMxMTQzOTEzWhcNMjUwMjA3MTQzOTEzWjAYMRYwFAYD
VQQDEw02NzljZTA5MS0yOGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1SX7kmw7+16/N3fyDHgWWU0L6/qECkWpPg8jWo6QYJYwj5JQlLPyg5pC3/W7
j+DC68YbvXISl1+DcCdvGlK+GKzvqSGqqthyTi8wua46aE9HyQnejUMnLV9Uru5A
MTSRO6d6cVXprQUI0jtlF0ahukvl+pKzMl6lUWvBRMjWA4MSuhGJSnyxFf5C2qFk
jjjBZDzwpNphyv2alyYZQIqILK4io7NqOylRQLQQGKMvBAt9+IrpOivEILyJs3sf
whcmYjfKQlBy5+ChEaxztT/gdBXBdxXjW+uUAsNHFBpssklsdbTw2hB6Vb8KpAie
KGehMWDU4XRKGZfYOI6iHVwZowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDWu85S/
9ysgGmV2pUtlRmSS6Ln2MB8GA1UdIwQYMBaAFF9wNkjXP2BpRQEY26JvlmgtWubK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDhCQi81QTBEOTU4ODFE
OEQxMUUyQTlENjA3RUIwOEIwMkNEMi9YM0EyU05jX1lHbEZBUmpib20tV2FDMWE1
c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1gzQTJTTmNfWUdsRkFSamJvbS1XYUMxYTVzby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MDhCQi81QTBEOTU4ODFEOEQxMUUyQTlENjA3RUIwOEIwMkNEMi9YM0EyU05jX1lH
bEZBUmpib20tV2FDMWE1c28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBMjdET2khrsD0beigQVw2c5CiBHOD+WxI4Q3tpixip8w5W/4qlcoYI
lZwIrsWodHuYVLbSP8S5HmtmZOj2Mt4hBaCJYP+I4qtgVcUaUeMUzBKyGYAEPFRi
ML4MboJcMhTlyFfiBQB0oI2rQoZlLUpTUBYE2mjXxAAPJIPVoM8RmNXzoSw6OBty
pV1NiBUw6Ms5oTvp2xur/hM+Fzl4Y1oYB18qEdDt/R5bYhxLySxRpMa57ZkBPQf2
6WVyOchUe0/n0EyeH1NLc8TcGbgCZ3Uy7+4hf+EGttl3BQFfgf7mDlY1Vguq3viy
Nj/fl2AjTr7/ZkFl5jjlR4cyGD2w5s6B
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:54:07 2025 by rpki-client