Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91612FE/491D694CA25511EFB2CA782AC4F9AE02/1H75KB4xQx3ljjR8aX45vydCkRk.mft
File: 1H75KB4xQx3ljjR8aX45vydCkRk.mft (raw, json)
Hash identifier: W6qjEK/46UC+Ykv3lvl3GhSemmTSTj8HRLZBP7n2bGw=
Subject key identifier: 81:6C:AD:EA:CB:EE:50:90:D4:58:64:CA:63:F2:95:A4:CD:09:3E:F7
Authority key identifier: D4:7E:F9:28:1E:31:43:1D:E5:8E:34:7C:69:7E:39:BF:27:42:91:19
Certificate issuer: /CN=A91612FE/serialNumber=D47EF9281E31431DE58E347C697E39BF27429119
Certificate serial: 2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1H75KB4xQx3ljjR8aX45vydCkRk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91612FE/491D694CA25511EFB2CA782AC4F9AE02/1H75KB4xQx3ljjR8aX45vydCkRk.mft
Manifest number: 2A
Signing time: Fri 31 Jan 2025 06:48:24 +0000
Manifest this update: Fri 31 Jan 2025 06:48:24 +0000
Manifest next update: Fri 07 Feb 2025 06:48:24 +0000
Files and hashes: 1: 1H75KB4xQx3ljjR8aX45vydCkRk.crl (hash: xf+LZo/9mZv51/rgj9NNVmgKeHGIGHuJb3TpwZBKG/I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91612FE/serialNumber=D47EF9281E31431DE58E347C697E39BF27429119
Validity
Not Before: Jan 31 06:48:24 2025 GMT
Not After : Feb 7 06:48:24 2025 GMT
Subject: CN=679c7238-e22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:20:60:d9:2e:b6:c8:22:63:d4:63:cd:e0:c3:
64:24:b4:22:93:7e:cf:f2:96:30:93:69:ff:66:6f:
1b:26:29:50:51:72:37:fd:97:19:76:74:a5:ea:60:
c8:d0:88:7a:ca:49:5c:46:07:19:d6:45:65:66:18:
ed:31:d5:41:25:a6:a6:49:87:20:da:a1:ac:e4:6c:
9c:23:ce:2b:b5:03:18:82:8e:fd:6e:06:3c:e5:43:
34:c8:e0:2e:38:ae:42:91:bb:43:3d:22:28:26:99:
81:9d:91:6d:e5:9b:f3:30:c9:8e:64:71:f2:30:d2:
ce:a2:ef:23:ad:dd:8c:21:24:57:18:88:45:5a:6f:
44:d5:b4:37:f0:ae:2f:05:12:ae:d8:2a:3d:39:8c:
5d:ba:77:41:7b:cb:75:b4:75:80:d5:3a:e8:b2:49:
0e:f3:84:23:42:3d:46:ed:31:7b:5f:a7:55:77:c1:
d5:7e:e5:14:27:5f:5d:e5:85:f4:07:94:47:32:38:
e0:fc:b9:14:76:12:e5:6f:92:74:47:a7:78:3e:5c:
1d:24:67:0e:22:01:56:31:cb:0d:91:af:48:af:6e:
34:7d:95:ba:d2:ac:01:08:46:7e:c4:ba:e1:9e:02:
2d:ee:48:db:cc:6b:0f:1c:2a:1d:14:aa:df:8d:f6:
eb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6C:AD:EA:CB:EE:50:90:D4:58:64:CA:63:F2:95:A4:CD:09:3E:F7
X509v3 Authority Key Identifier:
keyid:D4:7E:F9:28:1E:31:43:1D:E5:8E:34:7C:69:7E:39:BF:27:42:91:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91612FE/491D694CA25511EFB2CA782AC4F9AE02/1H75KB4xQx3ljjR8aX45vydCkRk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1H75KB4xQx3ljjR8aX45vydCkRk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91612FE/491D694CA25511EFB2CA782AC4F9AE02/1H75KB4xQx3ljjR8aX45vydCkRk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:0b:f0:0a:b2:b2:0c:07:e4:a6:79:5a:fb:0a:6a:86:87:81:
98:13:7b:d5:f5:e9:5c:54:81:bc:a2:12:c9:e6:c2:91:a7:13:
55:96:41:6c:46:16:44:eb:cd:fc:1e:da:9c:ff:0b:99:de:3c:
fd:3e:63:74:f3:97:5e:23:68:7b:fb:c8:b9:e9:3d:30:60:e3:
81:ab:3e:e7:20:08:7f:d4:ce:60:d9:e9:37:35:2f:0c:53:80:
2b:f1:8c:53:38:69:07:75:de:3e:ba:7c:5b:33:a8:92:f3:84:
44:91:85:c9:42:a0:e8:53:62:95:ad:07:c9:ca:66:e6:59:85:
1c:d4:07:77:ec:90:e8:79:bc:a0:be:e0:1a:5e:d3:ae:78:f6:
9a:63:73:c2:60:24:a1:21:28:47:07:9a:34:60:e4:46:96:ad:
fe:7f:e3:52:90:3c:bc:39:7e:11:d0:d0:3f:1d:ab:87:32:f3:
0d:35:c5:96:4c:3d:e3:89:e8:a8:1d:f3:05:be:27:88:0d:0d:
a4:91:40:7b:c2:3e:0d:d3:79:ef:e3:8c:ee:4a:9f:72:a8:41:
a3:d1:34:20:b2:35:6b:84:1e:48:52:15:42:25:3e:fb:1f:4c:
5d:13:6a:84:a6:2d:14:58:26:65:34:b0:6a:51:19:4d:c3:9f:
61:8c:de:bc
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
MTJGRTExMC8GA1UEBRMoRDQ3RUY5MjgxRTMxNDMxREU1OEUzNDdDNjk3RTM5QkYy
NzQyOTExOTAeFw0yNTAxMzEwNjQ4MjRaFw0yNTAyMDcwNjQ4MjRaMBgxFjAUBgNV
BAMTDTY3OWM3MjM4LWUyMmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCvIGDZLrbIImPUY83gw2QktCKTfs/yljCTaf9mbxsmKVBRcjf9lxl2dKXqYMjQ
iHrKSVxGBxnWRWVmGO0x1UElpqZJhyDaoazkbJwjziu1AxiCjv1uBjzlQzTI4C44
rkKRu0M9IigmmYGdkW3lm/MwyY5kcfIw0s6i7yOt3YwhJFcYiEVab0TVtDfwri8F
Eq7YKj05jF26d0F7y3W0dYDVOuiySQ7zhCNCPUbtMXtfp1V3wdV+5RQnX13lhfQH
lEcyOOD8uRR2EuVvknRHp3g+XB0kZw4iAVYxyw2Rr0ivbjR9lbrSrAEIRn7EuuGe
Ai3uSNvMaw8cKh0Uqt+N9usZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgWyt6svu
UJDUWGTKY/KVpM0JPvcwHwYDVR0jBBgwFoAU1H75KB4xQx3ljjR8aX45vydCkRkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxMkZFLzQ5MUQ2OTRDQTI1
NTExRUZCMkNBNzgyQUM0RjlBRTAyLzFINzVLQjR4UXgzbGpqUjhhWDQ1dnlkQ2tS
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMUg3NUtCNHhReDNsampSOGFYNDV2eWRDa1JrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx
MkZFLzQ5MUQ2OTRDQTI1NTExRUZCMkNBNzgyQUM0RjlBRTAyLzFINzVLQjR4UXgz
bGpqUjhhWDQ1dnlkQ2tSay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAKQL8AqysgwH5KZ5WvsKaoaHgZgTe9X16VxUgbyiEsnmwpGnE1WWQWxG
FkTrzfwe2pz/C5nePP0+Y3Tzl14jaHv7yLnpPTBg44GrPucgCH/UzmDZ6Tc1LwxT
gCvxjFM4aQd13j66fFszqJLzhESRhclCoOhTYpWtB8nKZuZZhRzUB3fskOh5vKC+
4Bpe06549ppjc8JgJKEhKEcHmjRg5EaWrf5/41KQPLw5fhHQ0D8dq4cy8w01xZZM
PeOJ6Kgd8wW+J4gNDaSRQHvCPg3Tee/jjO5Kn3KoQaPRNCCyNWuEHkhSFUIlPvsf
TF0TaoSmLRRYJmU0sGpRGU3Dn2GM3rw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:18:03 2025 by rpki-client