Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft
File: 4klmeNb9TiLorA6f9s1YENb7eU0.mft (raw, json)
Hash identifier: PIqhPckSBQNC9jGOYmEIJAwPhiCZhFQW4o9x4rZ07Kw=
Subject key identifier: E5:13:69:A5:C8:25:CB:4D:FD:69:7E:77:67:02:3F:F3:92:3F:D8:BC
Authority key identifier: E2:49:66:78:D6:FD:4E:22:E8:AC:0E:9F:F6:CD:58:10:D6:FB:79:4D
Certificate issuer: /CN=A9177E33/serialNumber=E2496678D6FD4E22E8AC0E9FF6CD5810D6FB794D
Certificate serial: 3448
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft
Manifest number: 3447
Signing time: Fri 31 Jan 2025 14:27:56 +0000
Manifest this update: Fri 31 Jan 2025 14:27:56 +0000
Manifest next update: Fri 07 Feb 2025 14:27:56 +0000
Files and hashes: 1: 4klmeNb9TiLorA6f9s1YENb7eU0.crl (hash: fCDqb1J+QvNSw4t/ag7SyVJADkQTMpnNlJI/kKd11k8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13384 (0x3448)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177E33/serialNumber=E2496678D6FD4E22E8AC0E9FF6CD5810D6FB794D
Validity
Not Before: Jan 31 14:27:56 2025 GMT
Not After : Feb 7 14:27:56 2025 GMT
Subject: CN=679cddec-d267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:11:56:43:ca:3d:e7:68:08:73:13:08:8d:3a:
39:5c:f3:35:7c:1b:63:a0:bb:c1:a2:b9:c6:68:86:
9a:ef:dc:5e:15:cb:ee:b3:a9:46:2a:ef:3c:45:b6:
43:a4:dc:34:06:2a:58:56:34:f5:5c:5a:60:8c:d4:
d7:dc:22:7e:8f:4c:2c:e1:0c:27:09:b6:17:f3:1b:
3f:59:8a:3c:ee:c1:ee:96:86:1e:3d:a5:f3:2f:b6:
7c:48:a3:c2:53:fb:51:fe:ea:61:b7:8c:7b:25:9e:
82:4d:23:84:30:91:a6:61:85:f9:d8:d7:a0:79:14:
27:7b:5f:5a:4c:a2:ff:e5:cc:a5:35:61:f6:20:16:
9d:e9:06:5e:fb:9a:e1:1f:02:e9:ac:88:53:36:98:
ba:ed:d0:66:44:81:00:04:68:06:0e:dd:3c:b3:2e:
5f:00:89:7e:88:43:20:b8:55:f4:ea:82:dc:27:e5:
b7:8f:77:86:70:97:f2:96:88:76:d2:d5:11:2d:d9:
d1:22:dd:52:d0:40:cb:0c:5d:ea:94:5d:34:4b:02:
44:9f:d9:e3:4a:7d:a0:33:35:b5:ea:fb:ee:bb:91:
77:83:ae:68:08:ad:0d:df:14:25:64:f3:a6:26:75:
7e:89:b2:26:c3:61:c6:b4:e6:50:2e:10:8c:98:1f:
2d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:13:69:A5:C8:25:CB:4D:FD:69:7E:77:67:02:3F:F3:92:3F:D8:BC
X509v3 Authority Key Identifier:
keyid:E2:49:66:78:D6:FD:4E:22:E8:AC:0E:9F:F6:CD:58:10:D6:FB:79:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:03:b3:bd:91:48:ae:57:1c:60:91:c7:ac:a0:89:b6:f9:2b:
ce:d0:f0:3a:b1:c3:d6:eb:16:3b:1e:a5:91:d5:d5:95:0a:3b:
e1:51:46:0d:25:90:a6:ba:7d:95:89:a6:5f:d2:4c:a9:24:f2:
9e:c0:98:02:b8:bb:a1:00:cd:67:a0:70:e6:bc:ac:28:59:9a:
c3:9b:b7:f5:94:5b:7b:0b:3b:f7:b5:ae:f8:b2:65:b2:75:a8:
b2:e3:d2:67:f1:34:e0:81:7d:fb:cd:00:bc:89:f1:79:6f:bf:
da:d0:e6:6b:5d:96:09:b7:99:94:23:66:ea:0c:7c:b2:e3:a4:
01:bb:ef:c2:8c:4b:2a:89:62:9c:8f:fd:ea:00:16:a1:eb:4c:
ca:1f:96:ad:00:f4:4f:80:10:cb:46:6e:a6:75:4f:00:fb:8a:
b8:1b:db:a0:17:1d:d6:e8:da:b1:23:85:dc:d3:65:38:63:57:
82:75:74:13:db:24:95:6a:f7:c5:dc:6b:2f:e1:05:71:a9:79:
05:6d:67:53:82:04:0b:bc:ec:52:9b:58:d7:db:73:1a:24:88:
3f:8d:53:3d:d0:94:0a:f5:86:19:2b:a5:ce:32:da:d0:89:17:
bf:bc:71:f3:82:26:33:ac:4b:e6:0c:ea:08:20:1a:2f:fb:ec:
51:8a:ff:6d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzdFMzMxMTAvBgNVBAUTKEUyNDk2Njc4RDZGRDRFMjJFOEFDMEU5RkY2Q0Q1ODEw
RDZGQjc5NEQwHhcNMjUwMTMxMTQyNzU2WhcNMjUwMjA3MTQyNzU2WjAYMRYwFAYD
VQQDEw02NzljZGRlYy1kMjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxBFWQ8o952gIcxMIjTo5XPM1fBtjoLvBornGaIaa79xeFcvus6lGKu88RbZD
pNw0BipYVjT1XFpgjNTX3CJ+j0ws4QwnCbYX8xs/WYo87sHuloYePaXzL7Z8SKPC
U/tR/upht4x7JZ6CTSOEMJGmYYX52NegeRQne19aTKL/5cylNWH2IBad6QZe+5rh
HwLprIhTNpi67dBmRIEABGgGDt08sy5fAIl+iEMguFX06oLcJ+W3j3eGcJfyloh2
0tURLdnRIt1S0EDLDF3qlF00SwJEn9njSn2gMzW16vvuu5F3g65oCK0N3xQlZPOm
JnV+ibImw2HGtOZQLhCMmB8t6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOUTaaXI
JctN/Wl+d2cCP/OSP9i8MB8GA1UdIwQYMBaAFOJJZnjW/U4i6KwOn/bNWBDW+3lN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3N0UzMy9BODBFQ0U0ODFE
ODYxMUUyQkU5MzBBREUwOEIwMkNEMi80a2xtZU5iOVRpTG9yQTZmOXMxWUVOYjdl
VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRrbG1lTmI5VGlMb3JBNmY5czFZRU5iN2VVMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
N0UzMy9BODBFQ0U0ODFEODYxMUUyQkU5MzBBREUwOEIwMkNEMi80a2xtZU5iOVRp
TG9yQTZmOXMxWUVOYjdlVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBNA7O9kUiuVxxgkcesoIm2+SvO0PA6scPW6xY7HqWR1dWVCjvhUUYN
JZCmun2ViaZf0kypJPKewJgCuLuhAM1noHDmvKwoWZrDm7f1lFt7Czv3ta74smWy
daiy49Jn8TTggX37zQC8ifF5b7/a0OZrXZYJt5mUI2bqDHyy46QBu+/CjEsqiWKc
j/3qABah60zKH5atAPRPgBDLRm6mdU8A+4q4G9ugFx3W6NqxI4Xc02U4Y1eCdXQT
2ySVavfF3Gsv4QVxqXkFbWdTggQLvOxSm1jX23MaJIg/jVM90JQK9YYZK6XOMtrQ
iRe/vHHzgiYzrEvmDOoIIBov++xRiv9t
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:55:24 2025 by rpki-client