Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft
File: 7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft (raw, json)
Hash identifier: aiAu6cj+MvpmNGA8xGlD5pOX0mrG08TvT8TX+inEyqA=
Subject key identifier: 9C:0C:2A:C4:7C:AE:A2:2A:E6:6B:94:EA:C4:B8:77:FA:E4:F8:09:2A
Authority key identifier: EC:4E:07:93:54:B6:4E:05:47:EB:9F:40:55:52:4B:44:2F:B3:D4:3B
Certificate issuer: /CN=A9151258/serialNumber=EC4E079354B64E0547EB9F4055524B442FB3D43B
Certificate serial: 344F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft
Manifest number: 344F
Signing time: Fri 31 Jan 2025 15:15:54 +0000
Manifest this update: Fri 31 Jan 2025 15:15:53 +0000
Manifest next update: Fri 07 Feb 2025 15:15:53 +0000
Files and hashes: 1: 7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl (hash: Td5faXmawC/vFsXmd0PyWRSdunLe+3z3ibYxvPkhHUQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13391 (0x344f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151258/serialNumber=EC4E079354B64E0547EB9F4055524B442FB3D43B
Validity
Not Before: Jan 31 15:15:53 2025 GMT
Not After : Feb 7 15:15:53 2025 GMT
Subject: CN=679ce929-7e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d8:17:e6:ae:ff:4a:51:bb:24:69:0a:8a:6b:
94:a6:85:e2:8a:45:df:f1:0f:eb:55:25:46:57:d5:
2f:8d:c0:50:9e:90:b2:a2:43:14:a6:35:da:df:87:
c4:18:f8:4f:8e:12:22:7d:46:b8:46:08:3c:84:a9:
54:49:04:bd:18:ef:f1:cd:05:2e:e1:0a:44:3e:e2:
84:99:6d:23:d2:02:0a:ea:4b:23:8a:c9:fe:8f:49:
52:36:ed:50:19:b0:fd:ba:6d:ed:16:f1:8e:b7:87:
08:47:c7:c0:07:f7:65:d9:0e:7e:e3:c0:88:52:0d:
3d:08:6b:f7:bb:45:6b:bb:d8:26:ae:fd:73:00:2f:
30:d6:11:39:34:e9:61:48:73:3f:6d:f4:80:46:b6:
df:8d:be:10:c5:6b:55:fa:94:a5:73:f1:6a:3c:38:
0b:80:a4:ec:b7:2c:f1:33:14:29:3a:f4:f6:c9:9c:
cb:6c:e8:6d:75:38:8e:38:8d:de:ce:ed:99:13:34:
b6:ad:87:24:d4:f9:36:1c:6e:73:81:1e:f1:e0:a7:
b8:a6:0c:50:48:a0:b5:37:92:dc:71:72:d9:af:07:
4a:0d:5f:ff:7b:7d:4b:fc:43:bd:f7:d4:6d:5e:d4:
ca:cc:37:2d:e8:d7:ce:34:2a:db:5f:4e:eb:ec:9c:
a8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0C:2A:C4:7C:AE:A2:2A:E6:6B:94:EA:C4:B8:77:FA:E4:F8:09:2A
X509v3 Authority Key Identifier:
keyid:EC:4E:07:93:54:B6:4E:05:47:EB:9F:40:55:52:4B:44:2F:B3:D4:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:e4:0f:aa:3f:01:c1:4f:61:a8:1a:88:d3:42:3e:0a:de:b2:
e5:a7:99:0f:ea:48:92:21:07:97:9f:80:79:12:2e:a6:bc:b3:
9d:0e:8e:ee:5d:87:ac:47:a2:06:5a:75:70:ca:69:a1:c2:d0:
42:43:44:0c:d2:4b:53:df:4f:38:30:61:5b:1e:5b:be:fc:88:
4d:8b:de:cf:86:f0:b0:9b:79:37:f5:f0:e4:f2:a7:1e:59:fb:
d0:29:20:78:7f:f9:79:1d:4d:0f:4d:80:fa:27:0f:b5:ca:5d:
22:be:6f:c3:59:55:0a:d1:72:4c:0f:40:52:61:d6:fd:e1:6c:
14:24:cf:c3:77:2a:29:50:ee:77:8f:4c:b8:60:6d:19:a4:7c:
1e:bb:2e:31:6b:5b:7a:59:f6:1f:c4:7f:81:7a:91:8a:44:7d:
e1:6b:30:3f:f5:07:77:ff:05:82:34:ad:7b:f1:e1:6f:a8:c9:
05:6b:4f:80:49:5f:7e:3d:7c:1d:63:e4:98:4f:f1:f6:54:3d:
e4:93:24:cd:a7:f1:2f:21:fa:0c:bd:0e:49:b7:f9:bc:ab:77:
d5:ee:3f:e5:19:2d:2e:24:50:ba:a9:06:56:20:09:a8:6e:4b:
dc:ca:ce:0f:85:31:d1:16:d9:b4:39:7a:4e:86:90:68:a0:24:
fd:56:e8:76
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTEyNTgxMTAvBgNVBAUTKEVDNEUwNzkzNTRCNjRFMDU0N0VCOUY0MDU1NTI0QjQ0
MkZCM0Q0M0IwHhcNMjUwMTMxMTUxNTUzWhcNMjUwMjA3MTUxNTUzWjAYMRYwFAYD
VQQDEw02NzljZTkyOS03ZTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxdgX5q7/SlG7JGkKimuUpoXiikXf8Q/rVSVGV9UvjcBQnpCyokMUpjXa34fE
GPhPjhIifUa4Rgg8hKlUSQS9GO/xzQUu4QpEPuKEmW0j0gIK6ksjisn+j0lSNu1Q
GbD9um3tFvGOt4cIR8fAB/dl2Q5+48CIUg09CGv3u0Vru9gmrv1zAC8w1hE5NOlh
SHM/bfSARrbfjb4QxWtV+pSlc/FqPDgLgKTstyzxMxQpOvT2yZzLbOhtdTiOOI3e
zu2ZEzS2rYck1Pk2HG5zgR7x4Ke4pgxQSKC1N5LccXLZrwdKDV//e31L/EO999Rt
XtTKzDct6NfONCrbX07r7JyopwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJwMKsR8
rqIq5muU6sS4d/rk+AkqMB8GA1UdIwQYMBaAFOxOB5NUtk4FR+ufQFVSS0Qvs9Q7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI1OC9DODQ4Q0U2NDFE
QTYxMUUyODZEOTFEOUUwOEIwMkNEMi83RTRIazFTMlRnVkg2NTlBVlZKTFJDLXox
RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdFNEhrMVMyVGdWSDY1OUFWVkpMUkMtejFEcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MTI1OC9DODQ4Q0U2NDFEQTYxMUUyODZEOTFEOUUwOEIwMkNEMi83RTRIazFTMlRn
Vkg2NTlBVlZKTFJDLXoxRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBV5A+qPwHBT2GoGojTQj4K3rLlp5kP6kiSIQeXn4B5Ei6mvLOdDo7u
XYesR6IGWnVwymmhwtBCQ0QM0ktT3084MGFbHlu+/IhNi97PhvCwm3k39fDk8qce
WfvQKSB4f/l5HU0PTYD6Jw+1yl0ivm/DWVUK0XJMD0BSYdb94WwUJM/DdyopUO53
j0y4YG0ZpHweuy4xa1t6WfYfxH+BepGKRH3hazA/9Qd3/wWCNK178eFvqMkFa0+A
SV9+PXwdY+SYT/H2VD3kkyTNp/EvIfoMvQ5Jt/m8q3fV7j/lGS0uJFC6qQZWIAmo
bkvcys4PhTHRFtm0OXpOhpBooCT9Vuh2
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:03:28 2025 by rpki-client