Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft
File: T9EeLMzVFBlTCsBKFCWPEahXfq0.mft (raw, json)
Hash identifier: 5O0fZLuGgIiUj1qa8ycvuRet5uwrzBjPzLuzJpBEdmE=
Subject key identifier: C8:EC:FD:1F:85:2F:FF:4D:8D:C0:2A:55:A8:44:29:1F:1D:2B:7F:5A
Authority key identifier: 4F:D1:1E:2C:CC:D5:14:19:53:0A:C0:4A:14:25:8F:11:A8:57:7E:AD
Certificate issuer: /CN=A9172B65/serialNumber=4FD11E2CCCD51419530AC04A14258F11A8577EAD
Certificate serial: 66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9EeLMzVFBlTCsBKFCWPEahXfq0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft
Manifest number: 66
Signing time: Fri 31 Jan 2025 06:02:42 +0000
Manifest this update: Fri 31 Jan 2025 06:02:42 +0000
Manifest next update: Fri 07 Feb 2025 06:02:42 +0000
Files and hashes: 1: T9EeLMzVFBlTCsBKFCWPEahXfq0.crl (hash: LbQylnhYnjqplsV2ZNHAqNTbNVahBcqoxQvSL0zYQU4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172B65/serialNumber=4FD11E2CCCD51419530AC04A14258F11A8577EAD
Validity
Not Before: Jan 31 06:02:42 2025 GMT
Not After : Feb 7 06:02:42 2025 GMT
Subject: CN=679c6782-17fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:11:c1:c7:0c:6b:53:e8:dc:0a:77:c9:14:55:
c8:b9:e0:ea:6d:e9:7e:da:cd:0f:d3:a9:13:80:9e:
8d:fa:d8:c1:a1:fe:14:da:ac:a0:88:ac:4e:1f:a7:
e7:68:34:5e:a4:01:3c:2a:1c:09:60:fc:39:97:60:
68:29:6e:81:c0:30:91:26:40:9d:c8:23:03:77:3f:
4e:57:5a:20:85:82:8d:37:34:5f:ce:35:09:96:cb:
47:0d:05:73:88:c4:a8:d4:62:13:76:f8:5a:58:de:
71:d4:a2:40:de:39:9d:e4:40:4f:d4:e4:24:c2:19:
e2:53:d4:9a:05:41:11:c9:d8:f8:b0:e5:ec:8e:ec:
b7:b7:30:ac:f9:a9:56:14:07:9a:b4:e5:de:61:3a:
c8:18:e5:39:44:fa:d8:37:c3:9c:21:0f:98:fb:a1:
30:c0:ac:07:25:a0:b4:72:50:36:85:92:ab:0f:b7:
f6:78:97:2b:94:56:e6:8a:cd:23:27:7d:cb:dd:ce:
6a:00:5c:25:e6:15:8b:01:cc:37:79:b3:98:82:6d:
7b:87:40:3e:26:be:9e:b8:f3:a6:a1:1f:be:af:75:
25:cf:40:ee:33:c7:2a:01:5b:df:1e:ff:2d:30:5d:
5d:98:50:fd:01:3a:f9:80:4d:75:36:eb:f9:1e:4a:
14:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EC:FD:1F:85:2F:FF:4D:8D:C0:2A:55:A8:44:29:1F:1D:2B:7F:5A
X509v3 Authority Key Identifier:
keyid:4F:D1:1E:2C:CC:D5:14:19:53:0A:C0:4A:14:25:8F:11:A8:57:7E:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9EeLMzVFBlTCsBKFCWPEahXfq0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b4:e6:ef:c0:cd:ad:0c:69:a5:c0:17:32:63:bb:72:b8:80:
8b:16:db:9e:29:8b:ce:dc:39:b6:e3:d6:ef:34:15:99:31:e9:
8f:ff:54:fa:78:89:b2:00:91:6a:91:c5:bd:99:d7:ea:8a:ae:
1f:fb:fc:bd:15:68:8a:7c:8e:97:06:3b:99:0c:e2:27:d0:3f:
4b:6e:d8:68:46:74:1e:a8:7a:3a:d0:d4:52:3f:55:bd:73:5d:
da:da:2f:1b:92:76:40:1a:c3:ef:60:8c:56:2a:0d:53:e5:35:
ff:3f:3f:3a:07:5a:9e:97:f4:72:31:30:d8:fa:77:bc:45:ee:
f1:e2:27:dd:0d:5f:d6:5c:fa:0d:71:56:b2:7a:ac:b9:52:bd:
6b:bf:d2:d1:20:ed:c9:fc:b1:ef:b2:31:e6:43:50:9a:bb:aa:
b5:5f:db:64:c6:c8:2a:90:57:10:ba:12:92:85:c1:74:fb:34:
ac:12:ca:2c:38:6c:08:b4:67:47:fb:8f:88:58:0e:43:b8:e7:
d1:b3:e4:cf:88:33:eb:c6:29:2a:95:77:21:be:2f:00:c9:03:
c0:f3:ff:02:b2:3d:ff:51:ac:a9:75:c4:43:c5:0b:dc:9f:f1:
e7:48:45:34:fa:75:6b:4b:b1:91:b4:d9:39:96:c6:73:e1:02:
4e:b3:3d:da
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
MkI2NTExMC8GA1UEBRMoNEZEMTFFMkNDQ0Q1MTQxOTUzMEFDMDRBMTQyNThGMTFB
ODU3N0VBRDAeFw0yNTAxMzEwNjAyNDJaFw0yNTAyMDcwNjAyNDJaMBgxFjAUBgNV
BAMTDTY3OWM2NzgyLTE3ZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDxEcHHDGtT6NwKd8kUVci54Opt6X7azQ/TqROAno362MGh/hTarKCIrE4fp+do
NF6kATwqHAlg/DmXYGgpboHAMJEmQJ3IIwN3P05XWiCFgo03NF/ONQmWy0cNBXOI
xKjUYhN2+FpY3nHUokDeOZ3kQE/U5CTCGeJT1JoFQRHJ2Piw5eyO7Le3MKz5qVYU
B5q05d5hOsgY5TlE+tg3w5whD5j7oTDArAcloLRyUDaFkqsPt/Z4lyuUVuaKzSMn
fcvdzmoAXCXmFYsBzDd5s5iCbXuHQD4mvp6486ahH76vdSXPQO4zxyoBW98e/y0w
XV2YUP0BOvmATXU26/keShQVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyOz9H4Uv
/02NwCpVqEQpHx0rf1owHwYDVR0jBBgwFoAUT9EeLMzVFBlTCsBKFCWPEahXfq0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyQjY1LzA5ODUwQjgyNDVC
NzExRUZBNTlFMTMzMkM0RjlBRTAyL1Q5RWVMTXpWRkJsVENzQktGQ1dQRWFoWGZx
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVDlFZUxNelZGQmxUQ3NCS0ZDV1BFYWhYZnEwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcy
QjY1LzA5ODUwQjgyNDVCNzExRUZBNTlFMTMzMkM0RjlBRTAyL1Q5RWVMTXpWRkJs
VENzQktGQ1dQRWFoWGZxMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAAq05u/Aza0MaaXAFzJju3K4gIsW254pi87cObbj1u80FZkx6Y//VPp4
ibIAkWqRxb2Z1+qKrh/7/L0VaIp8jpcGO5kM4ifQP0tu2GhGdB6oejrQ1FI/Vb1z
XdraLxuSdkAaw+9gjFYqDVPlNf8/PzoHWp6X9HIxMNj6d7xF7vHiJ90NX9Zc+g1x
VrJ6rLlSvWu/0tEg7cn8se+yMeZDUJq7qrVf22TGyCqQVxC6EpKFwXT7NKwSyiw4
bAi0Z0f7j4hYDkO459Gz5M+IM+vGKSqVdyG+LwDJA8Dz/wKyPf9RrKl1xEPFC9yf
8edIRTT6dWtLsZG02TmWxnPhAk6zPdo=
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:38:49 2025 by rpki-client