Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft
File: NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft (raw, json)
Hash identifier: Eig+dP57TkO85kVdNz1S3FrMQd6QZBgs/8xW5twQZcE=
Subject key identifier: 41:3D:2A:8B:89:67:8D:96:11:BA:A6:78:5D:1E:30:0F:BF:DF:7F:C7
Authority key identifier: 34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE
Certificate issuer: /CN=A9150EAB/serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE
Certificate serial: 0ABD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft
Manifest number: 114F
Signing time: Thu 30 Jan 2025 19:32:48 +0000
Manifest this update: Thu 30 Jan 2025 19:32:48 +0000
Manifest next update: Thu 06 Feb 2025 19:32:48 +0000
Files and hashes: 1: NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl (hash: ji3LvfOjDSYb+nfFL4Wu5Ua+8a7vroT0pB0hNo0tNxo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2749 (0xabd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150EAB/serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE
Validity
Not Before: Jan 30 19:32:48 2025 GMT
Not After : Feb 6 19:32:48 2025 GMT
Subject: CN=679bd3e0-de33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fd:1f:b3:d1:84:13:c3:9a:68:bf:f3:90:cc:
ed:1a:7f:63:c3:5f:13:8d:bd:ae:9a:c8:45:04:0b:
4b:15:a9:e7:68:d7:e9:68:d5:96:fe:6d:d7:4b:0a:
fd:01:4b:e5:f1:6a:db:39:4b:45:b2:3e:ca:6a:7f:
31:4e:f2:b2:95:81:31:d6:7b:4b:4f:2d:6a:00:73:
01:fe:c3:1d:98:16:4e:69:70:df:7c:ca:d6:63:94:
43:ff:f8:97:24:b5:c6:e7:48:3f:0b:6c:5a:5b:73:
4f:88:02:a7:70:94:9a:16:55:4a:a3:fd:7a:cb:fa:
3d:ca:fa:46:02:52:11:42:cb:41:7e:31:7b:6c:c0:
9b:74:2c:b1:c1:c6:37:1a:a4:ea:88:ab:6e:61:77:
1b:df:28:7b:9a:8b:b7:b1:7e:54:90:9b:b5:7c:dd:
03:a3:18:7c:d8:f1:f8:39:d0:15:ea:f7:e1:87:52:
2d:41:87:3f:87:77:1e:18:66:d6:fc:a8:f0:ce:da:
90:25:fa:38:ac:43:72:e2:0d:7b:72:26:ba:35:e7:
1f:2a:2c:d9:6d:17:52:83:b0:53:dd:32:1e:3a:42:
14:b6:5a:95:c0:6f:98:4f:78:95:a9:1c:38:b6:80:
dd:04:cb:9c:4c:d8:55:15:14:81:dd:cd:57:1f:9c:
82:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3D:2A:8B:89:67:8D:96:11:BA:A6:78:5D:1E:30:0F:BF:DF:7F:C7
X509v3 Authority Key Identifier:
keyid:34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:bb:48:aa:4e:14:3b:f4:12:9a:8a:7c:0d:f7:c3:17:fa:5b:
f9:82:cd:57:e6:fd:3a:db:b3:0b:5f:59:69:95:c0:22:a6:b5:
f5:c0:1d:0e:2b:c5:41:93:55:9d:ca:e1:81:53:04:01:da:bb:
bb:1d:74:54:93:5f:79:8a:27:e2:09:d6:db:90:02:52:ab:80:
f6:33:72:51:2d:4f:91:55:f8:dc:b2:87:49:a1:97:32:4b:f9:
3c:36:a8:ca:5e:33:0e:fe:3e:b5:19:1c:72:ec:3d:be:e9:69:
08:c8:a8:6a:d9:9b:a3:76:41:60:09:c5:fd:f1:44:d9:c2:a8:
49:2e:d8:8c:b9:cd:55:aa:f6:2c:a4:6d:54:ae:ff:4e:f0:57:
7a:8e:68:d7:36:ac:27:f5:69:44:52:23:0d:7b:71:11:76:69:
9d:64:35:55:c1:30:50:a4:68:61:a7:f3:9b:32:b1:12:09:b5:
55:80:9f:6b:d3:e3:88:d7:fc:99:de:c5:7a:1d:55:78:25:e1:
74:bb:a5:f1:8e:ba:4f:25:c0:df:25:5f:06:36:7a:8b:06:e4:
49:e6:25:09:15:3f:c0:32:dd:08:a9:a1:08:55:a5:f6:c5:fc:
bf:73:39:13:77:cc:a9:f0:24:a7:69:e3:c4:7e:76:4a:15:fa:
84:3d:cf:aa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTBFQUIxMTAvBgNVBAUTKDM0MUQwOTAyMUNCRjlGRDNCQjRDQjg4RTNEMEVEMUM3
NjRERUQwRkUwHhcNMjUwMTMwMTkzMjQ4WhcNMjUwMjA2MTkzMjQ4WjAYMRYwFAYD
VQQDEw02NzliZDNlMC1kZTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqf0fs9GEE8OaaL/zkMztGn9jw18Tjb2umshFBAtLFannaNfpaNWW/m3XSwr9
AUvl8WrbOUtFsj7Kan8xTvKylYEx1ntLTy1qAHMB/sMdmBZOaXDffMrWY5RD//iX
JLXG50g/C2xaW3NPiAKncJSaFlVKo/16y/o9yvpGAlIRQstBfjF7bMCbdCyxwcY3
GqTqiKtuYXcb3yh7mou3sX5UkJu1fN0Doxh82PH4OdAV6vfhh1ItQYc/h3ceGGbW
/KjwztqQJfo4rENy4g17cia6NecfKizZbRdSg7BT3TIeOkIUtlqVwG+YT3iVqRw4
toDdBMucTNhVFRSB3c1XH5yC8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEE9KouJ
Z42WEbqmeF0eMA+/33/HMB8GA1UdIwQYMBaAFDQdCQIcv5/Tu0y4jj0O0cdk3tD+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEVBQi8xQjJFNzA1MDQ0
NkIxMUVBOURFNTlBNTdDNEY5QUUwMi9OQjBKQWh5X245TzdUTGlPUFE3UngyVGUw
UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05CMEpBaHlfbjlPN1RMaU9QUTdSeDJUZTBQNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MEVBQi8xQjJFNzA1MDQ0NkIxMUVBOURFNTlBNTdDNEY5QUUwMi9OQjBKQWh5X245
TzdUTGlPUFE3UngyVGUwUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBbu0iqThQ79BKainwN98MX+lv5gs1X5v0627MLX1lplcAiprX1wB0O
K8VBk1WdyuGBUwQB2ru7HXRUk195iifiCdbbkAJSq4D2M3JRLU+RVfjcsodJoZcy
S/k8NqjKXjMO/j61GRxy7D2+6WkIyKhq2ZujdkFgCcX98UTZwqhJLtiMuc1VqvYs
pG1Urv9O8Fd6jmjXNqwn9WlEUiMNe3ERdmmdZDVVwTBQpGhhp/ObMrESCbVVgJ9r
0+OI1/yZ3sV6HVV4JeF0u6XxjrpPJcDfJV8GNnqLBuRJ5iUJFT/AMt0IqaEIVaX2
xfy/czkTd8yp8CSnaePEfnZKFfqEPc+q
-----END CERTIFICATE-----
Generated at Mon Apr 28 16:05:30 2025 by rpki-client