Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft
File: XCJQF8zJYrDnOQswzwpWIvfN-u0.mft (raw, json)
Hash identifier: Rn0vsUZUj5zwJxOKivw6NGmFSIFBmct0L2y0+owA0eY=
Subject key identifier: 41:CE:F4:17:56:14:B9:A4:D1:43:E8:EA:6F:E0:CA:54:52:D6:B7:52
Authority key identifier: 5C:22:50:17:CC:C9:62:B0:E7:39:0B:30:CF:0A:56:22:F7:CD:FA:ED
Certificate issuer: /CN=A9154330/serialNumber=5C225017CCC962B0E7390B30CF0A5622F7CDFAED
Certificate serial: 1276
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft
Manifest number: 1274
Signing time: Fri 31 Jan 2025 17:05:20 +0000
Manifest this update: Fri 31 Jan 2025 17:05:20 +0000
Manifest next update: Fri 07 Feb 2025 17:05:20 +0000
Files and hashes: 1: XCJQF8zJYrDnOQswzwpWIvfN-u0.crl (hash: WYKr0RdAfocu1FZD93JtLt1pHl/nOlKm7XwJK0FB1sg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4726 (0x1276)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154330/serialNumber=5C225017CCC962B0E7390B30CF0A5622F7CDFAED
Validity
Not Before: Jan 31 17:05:20 2025 GMT
Not After : Feb 7 17:05:20 2025 GMT
Subject: CN=679d02d0-8012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5f:ba:38:16:4d:38:bc:26:73:04:a7:da:d8:
2b:4c:5b:8b:dd:9b:01:46:c5:34:b5:6d:37:e2:52:
65:a8:41:1c:59:02:25:a3:95:95:d7:f2:e5:02:49:
f1:a9:30:4e:bd:03:39:05:dc:84:8f:f3:e7:8b:7d:
6b:26:e9:87:25:49:f7:70:7e:b5:3a:01:06:a7:08:
7b:e9:56:68:91:5c:2a:04:51:73:4d:08:97:7f:0f:
4a:64:56:42:df:9b:7c:75:7d:7d:28:01:e9:10:14:
44:25:7a:7b:3e:a1:36:b0:c7:52:26:46:bb:be:97:
0a:10:d5:99:45:f4:54:08:30:4f:b4:15:d7:82:d2:
96:34:30:63:30:f2:8d:d9:48:57:95:ab:fd:84:61:
ae:a2:b0:ab:64:bc:9e:4d:1f:0b:4b:fa:9d:87:f6:
34:38:9a:30:63:3d:dd:a0:c5:a6:03:c4:50:ff:7e:
75:38:a3:81:0b:68:30:85:c4:c7:e1:57:cf:17:50:
cb:0e:8f:b8:4e:a1:d1:aa:e7:41:6f:bc:f1:97:a1:
b5:3b:9c:bd:f9:e3:ed:c6:31:40:b9:38:06:80:b3:
25:0d:7e:a1:d6:15:ea:92:e7:27:d9:e1:d2:79:02:
1c:16:30:02:5f:ba:6f:b1:c6:66:10:50:57:e3:51:
19:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CE:F4:17:56:14:B9:A4:D1:43:E8:EA:6F:E0:CA:54:52:D6:B7:52
X509v3 Authority Key Identifier:
keyid:5C:22:50:17:CC:C9:62:B0:E7:39:0B:30:CF:0A:56:22:F7:CD:FA:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5a:28:6d:c7:32:1b:92:f6:da:79:a7:12:18:7f:7f:8b:1e:
5f:f4:7b:99:12:c8:0e:9d:96:d8:f7:82:e4:19:a4:6b:5d:07:
6f:70:5d:7c:40:4d:58:7b:62:e5:78:89:91:cc:f7:43:49:40:
f3:07:0a:30:d8:83:11:66:95:a4:eb:67:f1:8f:d0:0f:49:f1:
ef:f5:8c:1c:01:a4:8f:e1:0d:05:12:ca:ee:f5:ea:1b:e3:80:
02:91:da:85:6b:04:6a:61:7b:62:47:77:f3:c3:14:a0:57:bd:
cd:82:a1:c9:fb:a4:8a:45:d5:65:e5:bc:5a:43:1c:4d:c4:ca:
b5:15:a4:bd:70:21:e6:fc:5e:59:6f:1c:8b:c7:a2:7b:1f:07:
4f:09:5d:6e:df:47:9f:a7:f8:69:c7:ab:55:76:49:96:f6:d5:
77:00:f3:7a:54:b8:48:8a:53:cc:4e:82:c1:3d:ae:d1:b4:ae:
62:25:9b:7d:ab:4f:29:96:e9:8e:12:8b:16:64:0d:58:3f:3f:
a9:ad:6d:cf:8b:32:72:68:69:c0:77:ea:46:7b:ea:5a:18:85:
34:de:8d:59:3b:b8:ad:1f:48:0f:65:ae:40:4b:cf:a9:91:4c:
88:e3:8d:77:38:98:59:b3:ca:66:01:09:f2:9d:3a:d7:df:ad:
ac:22:ea:10
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQzMzAxMTAvBgNVBAUTKDVDMjI1MDE3Q0NDOTYyQjBFNzM5MEIzMENGMEE1NjIy
RjdDREZBRUQwHhcNMjUwMTMxMTcwNTIwWhcNMjUwMjA3MTcwNTIwWjAYMRYwFAYD
VQQDEw02NzlkMDJkMC04MDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzV+6OBZNOLwmcwSn2tgrTFuL3ZsBRsU0tW034lJlqEEcWQIlo5WV1/LlAknx
qTBOvQM5BdyEj/Pni31rJumHJUn3cH61OgEGpwh76VZokVwqBFFzTQiXfw9KZFZC
35t8dX19KAHpEBREJXp7PqE2sMdSJka7vpcKENWZRfRUCDBPtBXXgtKWNDBjMPKN
2UhXlav9hGGuorCrZLyeTR8LS/qdh/Y0OJowYz3doMWmA8RQ/351OKOBC2gwhcTH
4VfPF1DLDo+4TqHRqudBb7zxl6G1O5y9+ePtxjFAuTgGgLMlDX6h1hXqkucn2eHS
eQIcFjACX7pvscZmEFBX41EZJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEHO9BdW
FLmk0UPo6m/gylRS1rdSMB8GA1UdIwQYMBaAFFwiUBfMyWKw5zkLMM8KViL3zfrt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDMzMC9FQUQ4NzYzQ0Mw
OTMxMUU4ODBFNTJEMjNDNEY5QUUwMi9YQ0pRRjh6SllyRG5PUXN3endwV0l2Zk4t
dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hDSlFGOHpKWXJEbk9Rc3d6d3BXSXZmTi11MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NDMzMC9FQUQ4NzYzQ0MwOTMxMUU4ODBFNTJEMjNDNEY5QUUwMi9YQ0pRRjh6Slly
RG5PUXN3endwV0l2Zk4tdTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBcWihtxzIbkvbaeacSGH9/ix5f9HuZEsgOnZbY94LkGaRrXQdvcF18
QE1Ye2LleImRzPdDSUDzBwow2IMRZpWk62fxj9APSfHv9YwcAaSP4Q0FEsru9eob
44ACkdqFawRqYXtiR3fzwxSgV73NgqHJ+6SKRdVl5bxaQxxNxMq1FaS9cCHm/F5Z
bxyLx6J7HwdPCV1u30efp/hpx6tVdkmW9tV3APN6VLhIilPMToLBPa7RtK5iJZt9
q08plumOEosWZA1YPz+prW3PizJyaGnAd+pGe+paGIU03o1ZO7itH0gPZa5AS8+p
kUyI4413OJhZs8pmAQnynTrX362sIuoQ
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:34:46 2025 by rpki-client