Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft
File: SC1I47aWHxIIwGcVJOCOkDOV9lk.mft (raw, json)
Hash identifier: VvX7YDyYBMToC9jJoQvW6jMIPbqyXI4jRDsHaEngbIo=
Subject key identifier: A1:09:9F:BF:C4:E3:7E:83:A7:26:FA:E6:5A:75:AA:92:87:B0:78:7E
Authority key identifier: 48:2D:48:E3:B6:96:1F:12:08:C0:67:15:24:E0:8E:90:33:95:F6:59
Certificate issuer: /CN=A915BCE2/serialNumber=482D48E3B6961F1208C0671524E08E903395F659
Certificate serial: D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC1I47aWHxIIwGcVJOCOkDOV9lk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft
Manifest number: D5
Signing time: Fri 31 Jan 2025 04:45:11 +0000
Manifest this update: Fri 31 Jan 2025 04:45:10 +0000
Manifest next update: Fri 07 Feb 2025 04:45:10 +0000
Files and hashes: 1: SC1I47aWHxIIwGcVJOCOkDOV9lk.crl (hash: BbyXUJBitX8Bq4mv9/Q39tTR0Qijb8RXVyYN/c9aMso=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213 (0xd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BCE2/serialNumber=482D48E3B6961F1208C0671524E08E903395F659
Validity
Not Before: Jan 31 04:45:10 2025 GMT
Not After : Feb 7 04:45:10 2025 GMT
Subject: CN=679c5556-7792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b5:ef:6c:a0:17:38:7f:4f:92:04:82:c3:46:
2c:35:8c:da:d4:0f:03:25:79:35:72:bb:96:58:50:
3e:81:34:66:2e:68:ef:70:3f:a7:ff:8e:56:0b:92:
3a:19:98:87:22:16:05:5c:5a:9f:71:c2:a6:85:4a:
35:0d:2f:86:d5:ea:35:20:03:2c:19:91:f7:5a:1c:
ae:44:a0:7d:b1:1b:dd:8b:39:bc:3d:3c:55:26:4f:
ca:af:ff:e1:51:fc:0e:07:a2:e1:57:64:9e:93:08:
ae:db:ba:42:ee:70:c7:3d:71:0e:b3:66:fc:1a:7a:
f6:89:a2:a0:40:93:93:3e:b4:21:d9:c8:12:7c:a8:
0a:43:49:0f:09:e4:81:1e:43:b4:d7:cf:fd:4a:e8:
dd:cd:50:4b:5a:fc:a1:23:04:5f:63:f4:b6:6d:4a:
54:fc:e6:06:59:3c:4a:7b:08:d4:97:30:a8:38:4c:
1a:8b:ad:d3:b1:10:cf:b1:d7:55:44:66:25:54:78:
51:80:44:93:d3:33:22:4f:cd:af:98:49:68:28:41:
8d:d1:67:c4:82:c8:76:fe:b7:8f:8e:ab:0a:e0:2e:
ca:40:7a:38:8a:54:a9:d3:74:c2:77:15:3a:da:6a:
7a:f0:58:90:56:e6:2a:5b:83:69:e0:35:e0:0d:f9:
a0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:09:9F:BF:C4:E3:7E:83:A7:26:FA:E6:5A:75:AA:92:87:B0:78:7E
X509v3 Authority Key Identifier:
keyid:48:2D:48:E3:B6:96:1F:12:08:C0:67:15:24:E0:8E:90:33:95:F6:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC1I47aWHxIIwGcVJOCOkDOV9lk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:e9:11:9f:84:ff:78:d2:8f:95:bb:f9:8e:43:0c:c7:79:24:
6f:d4:e8:d9:d8:14:56:4b:83:60:2f:8a:0b:e6:d9:1d:8b:06:
37:c8:d9:c3:dc:e5:8e:5f:d9:85:d5:b5:e3:b6:b2:e6:df:b0:
96:4a:82:bc:04:06:80:ee:ae:aa:77:7d:62:45:76:70:96:2a:
62:39:4a:e3:45:7f:c5:87:1e:33:26:da:c0:23:3e:91:f6:86:
45:9c:93:ed:62:e5:20:51:31:b5:ff:f2:60:9a:c9:0a:10:a8:
c6:9a:35:37:3a:39:9f:49:0f:1c:63:e4:4b:ff:b3:d2:c1:ae:
cc:23:c8:8f:84:0f:60:27:0e:88:2f:15:9b:bb:5d:b9:c5:7a:
2e:3c:9a:c0:62:9e:41:b3:0b:d7:16:e8:7e:c3:5c:ea:05:65:
40:5a:76:dc:a1:f7:c5:ad:fc:79:f6:67:6f:ef:21:f7:3a:4c:
85:cd:9e:5e:44:74:ed:a7:63:30:2b:f9:30:59:9a:aa:25:43:
28:d8:d3:33:ec:eb:46:bb:75:6d:5b:55:e3:c3:fc:30:7d:56:
37:89:ea:ad:3b:33:01:f3:c3:da:05:f0:e1:72:21:ac:c8:66:
ad:56:9c:79:e5:d8:58:3f:53:16:24:d0:9d:db:55:4c:3d:35:
42:23:c7:b4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUJDRTIxMTAvBgNVBAUTKDQ4MkQ0OEUzQjY5NjFGMTIwOEMwNjcxNTI0RTA4RTkw
MzM5NUY2NTkwHhcNMjUwMTMxMDQ0NTEwWhcNMjUwMjA3MDQ0NTEwWjAYMRYwFAYD
VQQDEw02NzljNTU1Ni03NzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy7XvbKAXOH9PkgSCw0YsNYza1A8DJXk1cruWWFA+gTRmLmjvcD+n/45WC5I6
GZiHIhYFXFqfccKmhUo1DS+G1eo1IAMsGZH3WhyuRKB9sRvdizm8PTxVJk/Kr//h
UfwOB6LhV2Sekwiu27pC7nDHPXEOs2b8Gnr2iaKgQJOTPrQh2cgSfKgKQ0kPCeSB
HkO018/9SujdzVBLWvyhIwRfY/S2bUpU/OYGWTxKewjUlzCoOEwai63TsRDPsddV
RGYlVHhRgEST0zMiT82vmEloKEGN0WfEgsh2/rePjqsK4C7KQHo4ilSp03TCdxU6
2mp68FiQVuYqW4Np4DXgDfmghwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKEJn7/E
436Dpyb65lp1qpKHsHh+MB8GA1UdIwQYMBaAFEgtSOO2lh8SCMBnFSTgjpAzlfZZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkNFMi8yNEY3RTI3RTk3
QzgxMUVFOTEwMjg4MEFDNEY5QUUwMi9TQzFJNDdhV0h4SUl3R2NWSk9DT2tET1Y5
bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NDMUk0N2FXSHhJSXdHY1ZKT0NPa0RPVjlsay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QkNFMi8yNEY3RTI3RTk3QzgxMUVFOTEwMjg4MEFDNEY5QUUwMi9TQzFJNDdhV0h4
SUl3R2NWSk9DT2tET1Y5bGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBg6RGfhP940o+Vu/mOQwzHeSRv1OjZ2BRWS4NgL4oL5tkdiwY3yNnD
3OWOX9mF1bXjtrLm37CWSoK8BAaA7q6qd31iRXZwlipiOUrjRX/Fhx4zJtrAIz6R
9oZFnJPtYuUgUTG1//JgmskKEKjGmjU3OjmfSQ8cY+RL/7PSwa7MI8iPhA9gJw6I
LxWbu125xXouPJrAYp5BswvXFuh+w1zqBWVAWnbcoffFrfx59mdv7yH3OkyFzZ5e
RHTtp2MwK/kwWZqqJUMo2NMz7OtGu3VtW1Xjw/wwfVY3ieqtOzMB88PaBfDhciGs
yGatVpx55dhYP1MWJNCd21VMPTVCI8e0
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:09:35 2025 by rpki-client