Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.mft
File: KaAJAT90Md42nADKtUcWypNFJtM.mft (raw, json)
Hash identifier: Z6ToPoFyl8xQwTErr/TSVuE8o2wnghslhwBdJ9BSTM8=
Subject key identifier: 6C:AE:50:94:82:49:C8:91:9B:9D:09:F8:21:BB:B7:E4:C1:FA:EC:08
Authority key identifier: 29:A0:09:01:3F:74:31:DE:36:9C:00:CA:B5:47:16:CA:93:45:26:D3
Certificate issuer: /CN=A91651CF/serialNumber=29A009013F7431DE369C00CAB54716CA934526D3
Certificate serial: 3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KaAJAT90Md42nADKtUcWypNFJtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.mft
Manifest number: 3C
Signing time: Fri 31 Jan 2025 06:33:12 +0000
Manifest this update: Fri 31 Jan 2025 06:33:11 +0000
Manifest next update: Fri 07 Feb 2025 06:33:11 +0000
Files and hashes: 1: KaAJAT90Md42nADKtUcWypNFJtM.crl (hash: n/y8AbzWImGX++1FBhB5p9sV/O7VWS7TqgWNwxaDwBs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91651CF/serialNumber=29A009013F7431DE369C00CAB54716CA934526D3
Validity
Not Before: Jan 31 06:33:11 2025 GMT
Not After : Feb 7 06:33:11 2025 GMT
Subject: CN=679c6ea7-a80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b2:0d:64:b6:01:c0:60:83:5e:d4:48:b8:8d:
09:7b:e6:81:8a:05:22:15:7b:f7:8f:95:52:60:da:
83:fa:8a:b0:5c:09:97:2b:4e:8c:d4:e2:f4:e9:40:
dc:57:c5:7f:83:68:c0:4b:ec:fb:7f:d3:5d:e3:f4:
37:f4:6e:57:28:97:8b:4b:1b:f7:06:af:83:22:19:
d4:71:a5:f6:8d:a5:96:0a:0c:10:22:62:d2:a6:4c:
c6:03:16:54:3d:08:21:e4:7b:b5:91:7d:3b:31:9d:
81:b9:b8:b1:6c:c5:36:f4:de:25:92:5f:24:c4:ac:
d9:44:f5:71:a6:06:51:15:35:6f:ff:04:36:ac:5b:
77:c6:a2:33:18:7f:b7:a4:56:32:94:8f:8d:27:49:
ec:96:73:cd:80:e2:c9:1a:c4:fe:96:81:d1:81:84:
1f:89:65:3a:27:73:2d:5c:03:84:e4:04:1b:ea:8e:
81:39:0a:22:31:fa:ae:16:e9:04:b2:b2:24:8f:1a:
db:1d:6a:5c:a3:77:05:c2:2f:b1:1d:3a:77:88:aa:
99:2e:83:d6:d5:80:a6:06:80:cf:67:c2:5a:96:66:
49:b8:2f:71:b8:08:04:0e:db:6e:13:b6:fc:0c:a8:
95:32:46:d7:65:19:15:dc:59:1b:e7:c0:25:95:70:
65:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AE:50:94:82:49:C8:91:9B:9D:09:F8:21:BB:B7:E4:C1:FA:EC:08
X509v3 Authority Key Identifier:
keyid:29:A0:09:01:3F:74:31:DE:36:9C:00:CA:B5:47:16:CA:93:45:26:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KaAJAT90Md42nADKtUcWypNFJtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:97:ca:44:48:1f:1b:fb:c6:d6:c9:07:c9:60:8c:4e:61:cb:
64:56:04:fc:64:3d:37:5c:04:be:63:9e:2c:dd:7d:50:76:5c:
bd:2a:3d:c9:44:f6:5a:dd:62:ca:ce:e5:36:79:e8:98:71:6f:
3c:ca:0b:39:31:ad:35:2a:b3:83:5e:de:38:4d:67:db:28:77:
ee:ea:e1:f6:b2:bb:a0:10:52:9f:c8:81:ec:96:3a:d5:1c:f0:
dc:9d:b4:4d:72:ff:b8:5f:79:bc:69:a6:ae:30:ec:bb:aa:04:
f7:2c:a1:7a:95:21:de:71:2a:08:40:be:fd:a8:69:ad:79:4b:
97:9b:dc:c5:b5:46:54:fe:5e:12:64:8a:9c:cb:ed:9c:de:97:
30:8f:6a:2c:e9:d8:37:b3:84:f0:a1:45:d8:a7:1e:f6:1b:e4:
68:59:b5:7c:53:26:22:0f:78:5d:28:f3:bc:af:65:c5:1b:d0:
8e:c9:3d:e8:6c:5c:fe:c3:af:70:8f:62:4a:8e:d4:28:c4:2f:
34:22:60:82:96:19:b6:6a:24:a4:f2:21:40:1c:15:c9:95:e5:
9e:88:a2:e9:17:c1:58:b0:c8:e2:f9:4d:70:2a:0c:85:69:40:
1a:8f:ef:7a:46:37:bd:cd:21:73:02:91:43:1b:02:41:27:34:
74:25:5f:7a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
NTFDRjExMC8GA1UEBRMoMjlBMDA5MDEzRjc0MzFERTM2OUMwMENBQjU0NzE2Q0E5
MzQ1MjZEMzAeFw0yNTAxMzEwNjMzMTFaFw0yNTAyMDcwNjMzMTFaMBgxFjAUBgNV
BAMTDTY3OWM2ZWE3LWE4MGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCvsg1ktgHAYINe1Ei4jQl75oGKBSIVe/ePlVJg2oP6irBcCZcrTozU4vTpQNxX
xX+DaMBL7Pt/013j9Df0blcol4tLG/cGr4MiGdRxpfaNpZYKDBAiYtKmTMYDFlQ9
CCHke7WRfTsxnYG5uLFsxTb03iWSXyTErNlE9XGmBlEVNW//BDasW3fGojMYf7ek
VjKUj40nSeyWc82A4skaxP6WgdGBhB+JZToncy1cA4TkBBvqjoE5CiIx+q4W6QSy
siSPGtsdalyjdwXCL7EdOneIqpkug9bVgKYGgM9nwlqWZkm4L3G4CAQO224TtvwM
qJUyRtdlGRXcWRvnwCWVcGU7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbK5QlIJJ
yJGbnQn4Ibu35MH67AgwHwYDVR0jBBgwFoAUKaAJAT90Md42nADKtUcWypNFJtMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1MUNGLzMwNDM2MzVDODZE
NzExRUY4NTRERDQ3QkM0RjlBRTAyL0thQUpBVDkwTWQ0Mm5BREt0VWNXeXBORkp0
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvS2FBSkFUOTBNZDQybkFES3RVY1d5cE5GSnRNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1
MUNGLzMwNDM2MzVDODZENzExRUY4NTRERDQ3QkM0RjlBRTAyL0thQUpBVDkwTWQ0
Mm5BREt0VWNXeXBORkp0TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAHaXykRIHxv7xtbJB8lgjE5hy2RWBPxkPTdcBL5jnizdfVB2XL0qPclE
9lrdYsrO5TZ56JhxbzzKCzkxrTUqs4Ne3jhNZ9sod+7q4fayu6AQUp/IgeyWOtUc
8NydtE1y/7hfebxppq4w7LuqBPcsoXqVId5xKghAvv2oaa15S5eb3MW1RlT+XhJk
ipzL7ZzelzCPaizp2DezhPChRdinHvYb5GhZtXxTJiIPeF0o87yvZcUb0I7JPehs
XP7Dr3CPYkqO1CjELzQiYIKWGbZqJKTyIUAcFcmV5Z6IoukXwViwyOL5TXAqDIVp
QBqP73pGN73NIXMCkUMbAkEnNHQlX3o=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:28:49 2025 by rpki-client