Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft
File: 4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft (raw, json)
Hash identifier: fpep2MVYHBe+xibABBPHlefbCB/2ZJtTf+8RGYnS97A=
Subject key identifier: C7:5B:25:85:61:BB:62:3D:E4:DE:B5:E8:E2:08:7C:D2:03:72:C5:FD
Authority key identifier: E0:8D:6C:7F:E3:5F:E3:66:42:FE:6F:66:CC:DA:28:66:A6:62:42:F1
Certificate issuer: /CN=A918D96C/serialNumber=E08D6C7FE35FE36642FE6F66CCDA2866A66242F1
Certificate serial: 3449
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft
Manifest number: 3449
Signing time: Fri 31 Jan 2025 14:52:14 +0000
Manifest this update: Fri 31 Jan 2025 14:52:14 +0000
Manifest next update: Fri 07 Feb 2025 14:52:14 +0000
Files and hashes: 1: 4I1sf-Nf42ZC_m9mzNooZqZiQvE.crl (hash: YkNA03OuLG97VZ92RmNP4ENAYhE0uBHJUjJ7CBYYX7c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13385 (0x3449)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D96C/serialNumber=E08D6C7FE35FE36642FE6F66CCDA2866A66242F1
Validity
Not Before: Jan 31 14:52:14 2025 GMT
Not After : Feb 7 14:52:14 2025 GMT
Subject: CN=679ce39e-d491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:be:b7:2a:31:02:2c:fe:26:72:9e:4c:d8:b2:
bb:6e:b3:50:2d:32:d5:c6:dd:86:8b:e9:45:bc:54:
8d:0f:09:f3:e5:d4:91:e8:5d:71:8e:ca:85:1e:35:
ef:43:ef:e6:00:53:d6:6f:cc:31:0a:78:92:18:fb:
4e:c8:a6:38:fb:dd:0f:12:46:68:57:92:26:cc:ce:
71:69:9c:2c:73:c4:34:de:d8:e0:85:ba:54:cd:0c:
1f:99:9e:a3:4a:27:bf:94:17:3e:44:c3:a2:55:78:
06:30:e4:e6:78:d3:76:39:6c:2c:cb:15:3e:55:8c:
1f:85:a5:5f:a4:48:94:35:12:66:8d:20:fe:44:a4:
c3:61:f9:c1:ec:85:ae:e6:93:e1:55:e3:22:a8:48:
b3:17:12:93:bd:4e:5b:a3:6c:48:8e:73:c5:38:59:
15:c2:67:52:99:b4:2e:f7:fa:53:e1:68:70:f6:83:
55:77:6b:6a:79:62:e3:2c:96:c2:30:8e:53:68:a8:
1c:14:b8:07:39:b0:5a:d0:ba:b8:67:55:b8:26:c6:
a1:66:83:84:63:de:ee:68:1b:f1:be:aa:94:79:88:
32:7a:95:7e:40:ad:69:e6:96:c6:20:e0:45:ce:c0:
83:02:02:ae:55:70:81:ca:89:00:67:c6:8f:e8:36:
cd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5B:25:85:61:BB:62:3D:E4:DE:B5:E8:E2:08:7C:D2:03:72:C5:FD
X509v3 Authority Key Identifier:
keyid:E0:8D:6C:7F:E3:5F:E3:66:42:FE:6F:66:CC:DA:28:66:A6:62:42:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ca:6e:51:8e:67:21:16:8a:0f:f5:7f:0f:55:de:18:26:f5:
f7:a6:47:fc:e4:c9:59:96:7e:4b:49:06:e2:04:18:91:ef:30:
6c:0f:97:50:a7:88:7c:0c:9d:96:71:c1:e3:5e:2c:89:63:df:
0e:ba:03:e2:19:d5:fc:69:77:19:f8:07:47:80:b5:ff:d2:a0:
3e:06:68:0b:24:08:c1:f4:4d:68:95:ca:68:2f:12:12:2f:4c:
d7:1b:91:6d:74:80:7c:e3:8e:a2:0f:33:2b:b9:95:73:62:6a:
c6:fc:13:cc:0f:3c:2c:b8:1b:0f:06:a3:29:a4:db:33:48:17:
7e:e3:78:05:48:8b:69:d5:4b:b9:32:a5:6c:37:24:4b:12:ee:
d4:03:f0:ab:91:e0:d3:6b:f5:b7:bf:94:14:7f:38:73:20:d9:
06:e2:51:3a:d7:67:a4:05:02:55:f1:fe:20:76:76:dd:55:cb:
98:51:56:24:2f:3c:a5:b5:15:d2:c6:f1:d2:99:cc:ed:39:a5:
9b:ca:bc:b3:7b:4b:b7:c1:fb:9d:31:16:28:fa:ad:80:ab:6c:
d5:a4:32:90:d9:e7:77:27:a3:6b:29:bc:d6:70:01:de:9a:ed:
43:c1:4f:3b:9d:b9:3e:8b:5e:31:63:b8:14:aa:ff:36:b5:12:
c6:f5:ee:62
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQ5NkMxMTAvBgNVBAUTKEUwOEQ2QzdGRTM1RkUzNjY0MkZFNkY2NkNDREEyODY2
QTY2MjQyRjEwHhcNMjUwMTMxMTQ1MjE0WhcNMjUwMjA3MTQ1MjE0WjAYMRYwFAYD
VQQDEw02NzljZTM5ZS1kNDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6763KjECLP4mcp5M2LK7brNQLTLVxt2Gi+lFvFSNDwnz5dSR6F1xjsqFHjXv
Q+/mAFPWb8wxCniSGPtOyKY4+90PEkZoV5ImzM5xaZwsc8Q03tjghbpUzQwfmZ6j
Sie/lBc+RMOiVXgGMOTmeNN2OWwsyxU+VYwfhaVfpEiUNRJmjSD+RKTDYfnB7IWu
5pPhVeMiqEizFxKTvU5bo2xIjnPFOFkVwmdSmbQu9/pT4Whw9oNVd2tqeWLjLJbC
MI5TaKgcFLgHObBa0Lq4Z1W4JsahZoOEY97uaBvxvqqUeYgyepV+QK1p5pbGIOBF
zsCDAgKuVXCByokAZ8aP6DbNtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdbJYVh
u2I95N616OIIfNIDcsX9MB8GA1UdIwQYMBaAFOCNbH/jX+NmQv5vZszaKGamYkLx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDk2Qy9BNDJFMzdGRTFE
OTYxMUUyOUM1RjRBN0YwOEIwMkNEMi80STFzZi1OZjQyWkNfbTltek5vb1pxWmlR
dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRJMXNmLU5mNDJaQ19tOW16Tm9vWnFaaVF2RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDk2Qy9BNDJFMzdGRTFEOTYxMUUyOUM1RjRBN0YwOEIwMkNEMi80STFzZi1OZjQy
WkNfbTltek5vb1pxWmlRdkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBNym5RjmchFooP9X8PVd4YJvX3pkf85MlZln5LSQbiBBiR7zBsD5dQ
p4h8DJ2WccHjXiyJY98OugPiGdX8aXcZ+AdHgLX/0qA+BmgLJAjB9E1olcpoLxIS
L0zXG5FtdIB8446iDzMruZVzYmrG/BPMDzwsuBsPBqMppNszSBd+43gFSItp1Uu5
MqVsNyRLEu7UA/CrkeDTa/W3v5QUfzhzINkG4lE612ekBQJV8f4gdnbdVcuYUVYk
LzyltRXSxvHSmcztOaWbyryze0u3wfudMRYo+q2Aq2zVpDKQ2ed3J6NrKbzWcAHe
mu1DwU87nbk+i14xY7gUqv82tRLG9e5i
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:59:45 2025 by rpki-client