Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft
File: FiENxlKhYN7k5AFbvLQJ-odyRkA.mft (raw, json)
Hash identifier: KG/NngGL7ogO+wtjfmZlwhkox5t9T+xkGYT3USxxrmA=
Subject key identifier: E7:CD:24:89:5F:CC:06:E8:66:7F:93:36:B9:59:CD:52:95:5E:D5:8B
Authority key identifier: 16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40
Certificate issuer: /CN=A91983BD/serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640
Certificate serial: 3449
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft
Manifest number: 3842
Signing time: Fri 31 Jan 2025 14:38:23 +0000
Manifest this update: Fri 31 Jan 2025 14:38:22 +0000
Manifest next update: Fri 07 Feb 2025 14:38:22 +0000
Files and hashes: 1: FiENxlKhYN7k5AFbvLQJ-odyRkA.crl (hash: sRdFh5ExfgDQwKG86wGkqGtKpS9m/W7l08dkGma00W0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13385 (0x3449)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91983BD/serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640
Validity
Not Before: Jan 31 14:38:22 2025 GMT
Not After : Feb 7 14:38:22 2025 GMT
Subject: CN=679ce05e-e057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d5:b3:2d:24:a2:02:fc:ce:11:79:58:4b:f5:
b5:79:61:d8:13:50:32:6c:8e:68:ea:4f:dd:b8:55:
81:37:df:77:cc:13:3a:d0:db:24:32:d3:28:76:80:
58:fb:60:90:c8:84:2a:ba:3d:b4:9f:2c:e8:ed:69:
da:f4:c8:c7:83:e4:aa:cd:f0:64:22:9d:0c:60:e4:
94:dc:2d:ae:85:1c:16:47:c6:29:36:ca:d4:6a:2e:
12:0e:31:4f:09:20:c0:20:17:ce:93:8c:d8:92:2c:
17:10:23:87:d6:c7:4f:60:2f:c6:5a:7f:5c:fe:ac:
d9:4d:87:48:ee:46:a7:d5:68:72:fc:65:6b:30:82:
11:40:a6:7d:38:02:59:06:dc:12:2c:ff:f1:ce:fb:
d0:1e:6f:89:1f:ef:19:4d:e0:ca:87:3e:ef:18:2e:
fa:ac:29:32:55:4b:93:ba:9b:b7:f3:2c:29:39:28:
e2:bb:0b:21:1b:d7:d3:8c:d0:a9:6b:bf:e2:7f:62:
21:c7:58:21:f4:f2:f1:05:01:f7:b5:67:6e:cc:d3:
78:e4:55:ff:cf:b7:dd:74:6a:bf:75:70:58:65:b5:
1e:97:e6:f4:0f:3e:2d:c6:aa:16:c7:82:a0:bf:68:
ad:18:e4:5f:16:af:3f:81:3b:65:4c:f8:df:a4:51:
2b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CD:24:89:5F:CC:06:E8:66:7F:93:36:B9:59:CD:52:95:5E:D5:8B
X509v3 Authority Key Identifier:
keyid:16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:ee:a6:b7:77:98:e2:7c:e0:d1:3f:7b:12:22:dd:c9:10:8d:
34:94:ef:8b:7f:7d:0f:0a:de:47:70:ee:45:90:9e:01:20:de:
a4:89:f8:b2:a0:b6:97:2b:d8:2e:f4:fc:b9:27:d1:25:55:4e:
dc:83:d6:18:26:ab:c6:11:7c:d1:d5:88:3a:2e:32:72:5b:ea:
79:d0:12:c5:eb:57:7b:cd:2c:e3:24:52:80:ee:b1:e3:58:c4:
28:fb:02:fa:88:f2:30:49:22:24:8b:cd:50:46:10:f7:3e:ab:
b2:41:ee:34:f1:0e:f2:99:b4:a1:f9:66:1a:fe:d7:a3:db:fd:
be:03:23:e5:41:f5:97:a7:1b:35:d0:ae:24:f3:c9:aa:6b:43:
3f:e3:1a:f4:b8:fb:c8:58:df:22:48:a6:76:3e:55:86:f7:d5:
d1:c4:26:31:16:b8:b7:00:10:33:15:1c:7b:3d:5b:dc:f0:4f:
40:cf:92:8c:80:73:fb:df:bd:fb:35:98:2f:ea:32:21:d0:a7:
70:5f:8a:5a:6c:18:8f:99:01:5c:97:08:61:ed:50:9e:c3:4f:
65:ea:a5:d8:f8:7f:22:a0:cf:09:2b:b6:d2:d8:68:e3:5d:d0:
93:ad:43:9c:78:da:a7:e6:17:96:98:9f:e1:bf:82:9d:63:21:
07:30:b6:79
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTgzQkQxMTAvBgNVBAUTKDE2MjEwREM2NTJBMTYwREVFNEU0MDE1QkJDQjQwOUZB
ODc3MjQ2NDAwHhcNMjUwMTMxMTQzODIyWhcNMjUwMjA3MTQzODIyWjAYMRYwFAYD
VQQDEw02NzljZTA1ZS1lMDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAstWzLSSiAvzOEXlYS/W1eWHYE1AybI5o6k/duFWBN993zBM60NskMtModoBY
+2CQyIQquj20nyzo7Wna9MjHg+SqzfBkIp0MYOSU3C2uhRwWR8YpNsrUai4SDjFP
CSDAIBfOk4zYkiwXECOH1sdPYC/GWn9c/qzZTYdI7kan1Why/GVrMIIRQKZ9OAJZ
BtwSLP/xzvvQHm+JH+8ZTeDKhz7vGC76rCkyVUuTupu38ywpOSjiuwshG9fTjNCp
a7/if2Ihx1gh9PLxBQH3tWduzNN45FX/z7fddGq/dXBYZbUel+b0Dz4txqoWx4Kg
v2itGORfFq8/gTtlTPjfpFEraQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOfNJIlf
zAboZn+TNrlZzVKVXtWLMB8GA1UdIwQYMBaAFBYhDcZSoWDe5OQBW7y0CfqHckZA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNCRC9CRTdDRDAyQTFE
OEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9GaUVOeGxLaFlON2s1QUZidkxRSi1vZHlS
a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZpRU54bEtoWU43azVBRmJ2TFFKLW9keVJrQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
ODNCRC9CRTdDRDAyQTFEOEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9GaUVOeGxLaFlO
N2s1QUZidkxRSi1vZHlSa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAC7qa3d5jifODRP3sSIt3JEI00lO+Lf30PCt5HcO5FkJ4BIN6kifiy
oLaXK9gu9Py5J9ElVU7cg9YYJqvGEXzR1Yg6LjJyW+p50BLF61d7zSzjJFKA7rHj
WMQo+wL6iPIwSSIki81QRhD3PquyQe408Q7ymbSh+WYa/tej2/2+AyPlQfWXpxs1
0K4k88mqa0M/4xr0uPvIWN8iSKZ2PlWG99XRxCYxFri3ABAzFRx7PVvc8E9Az5KM
gHP73737NZgv6jIh0KdwX4pabBiPmQFclwhh7VCew09l6qXY+H8ioM8JK7bS2Gjj
XdCTrUOceNqn5heWmJ/hv4KdYyEHMLZ5
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:44:07 2025 by rpki-client