Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft
File: I-mD64u3-GulkjUkGhAWDIBSxk4.mft (raw, json)
Hash identifier: 9szrwM/nUVCyacRPbJ1w5cuhbrcYJl5CfeA+q8xnQVI=
Subject key identifier: 16:FB:2F:03:35:AE:D2:DA:89:CD:AE:D3:72:27:EA:A0:E3:DB:3C:76
Authority key identifier: 23:E9:83:EB:8B:B7:F8:6B:A5:92:35:24:1A:10:16:0C:80:52:C6:4E
Certificate issuer: /CN=A919EDE5/serialNumber=23E983EB8BB7F86BA59235241A10160C8052C64E
Certificate serial: 3449
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft
Manifest number: 3449
Signing time: Fri 31 Jan 2025 15:04:44 +0000
Manifest this update: Fri 31 Jan 2025 15:04:44 +0000
Manifest next update: Fri 07 Feb 2025 15:04:44 +0000
Files and hashes: 1: I-mD64u3-GulkjUkGhAWDIBSxk4.crl (hash: Eb26m4qKcLPoeS2ogXUIaGhOaFpvrya+evH7YnWRhVw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13385 (0x3449)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EDE5/serialNumber=23E983EB8BB7F86BA59235241A10160C8052C64E
Validity
Not Before: Jan 31 15:04:44 2025 GMT
Not After : Feb 7 15:04:44 2025 GMT
Subject: CN=679ce68c-546e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:38:52:dd:32:b3:16:e6:c3:4d:ac:12:89:12:
cc:81:c4:2c:81:e2:9f:c7:2c:cd:b2:78:e4:ab:d7:
2c:b4:60:e3:a2:83:47:29:f9:67:ba:0f:d1:42:55:
9d:4c:23:6f:74:c7:88:65:a0:31:a7:94:3a:2d:38:
e3:0c:d7:6f:f4:55:e7:f2:1a:b8:a0:01:a5:d4:15:
72:67:08:f2:2c:8e:17:2b:b3:da:35:b8:df:a0:71:
5a:7a:a7:28:98:dd:7c:09:a3:66:52:be:29:a0:8b:
91:fe:c9:aa:26:41:7f:34:70:89:53:79:60:92:2f:
74:99:ca:2b:30:1f:4c:0b:2c:af:2b:ac:ab:0a:b6:
be:bd:28:70:c7:03:c6:38:76:26:82:e5:76:00:f8:
42:da:1e:d8:fb:42:f5:a6:be:e3:4c:22:37:72:32:
be:8c:b4:8e:62:2d:1f:4e:cb:44:7e:e8:ad:17:4a:
82:8f:23:80:8e:ab:26:ef:69:d0:df:5c:81:26:64:
a6:44:de:6b:7e:0c:6b:8d:20:ca:02:70:ac:7f:f1:
79:5d:10:5c:ae:f5:18:0e:10:fd:6a:00:27:3d:52:
b7:9d:3b:b5:1e:45:27:96:68:21:75:b7:40:75:d4:
87:ea:db:97:57:8c:45:9b:65:cf:b9:9e:12:43:2f:
0f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FB:2F:03:35:AE:D2:DA:89:CD:AE:D3:72:27:EA:A0:E3:DB:3C:76
X509v3 Authority Key Identifier:
keyid:23:E9:83:EB:8B:B7:F8:6B:A5:92:35:24:1A:10:16:0C:80:52:C6:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:2a:77:4f:dd:b3:22:bb:1f:a9:e6:45:92:09:d8:e8:b3:66:
8c:e0:87:4b:62:a5:a3:9b:17:fb:8d:bd:75:8b:48:f6:43:a7:
61:ba:6b:41:76:5b:99:59:e0:06:87:bf:13:85:51:ad:62:aa:
67:eb:03:48:f6:44:4f:35:1a:80:b8:db:93:ad:f0:93:c2:cb:
89:f7:45:d8:6b:b9:15:1e:f0:60:93:56:55:1d:ce:9b:8f:7d:
e6:a2:62:62:f8:f6:c4:04:b7:e8:61:6c:c7:7e:b3:9e:21:f1:
fe:35:7b:1e:93:ae:a2:77:68:58:0f:db:0a:c4:04:6d:7b:1d:
d6:c6:31:22:49:f3:7c:8c:a3:c7:24:ae:01:20:1f:ef:77:5e:
bb:8e:6f:0f:b6:ec:ec:e8:65:85:97:33:2e:5e:45:23:ec:55:
e3:27:fa:21:1e:e0:91:69:7f:bd:87:d5:22:ce:46:df:90:76:
0b:e3:f3:58:74:43:d8:9f:f2:e5:35:6f:65:12:41:b9:6c:6d:
4a:51:7a:51:52:38:6c:b1:6e:0d:3b:d1:f9:b6:91:4e:40:57:
e0:5b:e3:fb:16:8d:02:f1:4a:42:95:dd:38:c8:d5:00:dc:60:
3a:41:69:04:ea:52:19:69:2c:98:30:10:4a:b1:4c:d7:3d:f9:
8c:d4:d6:3b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVERTUxMTAvBgNVBAUTKDIzRTk4M0VCOEJCN0Y4NkJBNTkyMzUyNDFBMTAxNjBD
ODA1MkM2NEUwHhcNMjUwMTMxMTUwNDQ0WhcNMjUwMjA3MTUwNDQ0WjAYMRYwFAYD
VQQDEw02NzljZTY4Yy01NDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuThS3TKzFubDTawSiRLMgcQsgeKfxyzNsnjkq9cstGDjooNHKflnug/RQlWd
TCNvdMeIZaAxp5Q6LTjjDNdv9FXn8hq4oAGl1BVyZwjyLI4XK7PaNbjfoHFaeqco
mN18CaNmUr4poIuR/smqJkF/NHCJU3lgki90mcorMB9MCyyvK6yrCra+vShwxwPG
OHYmguV2APhC2h7Y+0L1pr7jTCI3cjK+jLSOYi0fTstEfuitF0qCjyOAjqsm72nQ
31yBJmSmRN5rfgxrjSDKAnCsf/F5XRBcrvUYDhD9agAnPVK3nTu1HkUnlmghdbdA
ddSH6tuXV4xFm2XPuZ4SQy8P5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBb7LwM1
rtLaic2u03In6qDj2zx2MB8GA1UdIwQYMBaAFCPpg+uLt/hrpZI1JBoQFgyAUsZO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RURFNS80QTJCNkNDRTFE
OUUxMUUyOUNBMzA5OEUwOEIwMkNEMi9JLW1ENjR1My1HdWxralVrR2hBV0RJQlN4
azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ktbUQ2NHUzLUd1bGtqVWtHaEFXRElCU3hrNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RURFNS80QTJCNkNDRTFEOUUxMUUyOUNBMzA5OEUwOEIwMkNEMi9JLW1ENjR1My1H
dWxralVrR2hBV0RJQlN4azQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCbKndP3bMiux+p5kWSCdjos2aM4IdLYqWjmxf7jb11i0j2Q6dhumtB
dluZWeAGh78ThVGtYqpn6wNI9kRPNRqAuNuTrfCTwsuJ90XYa7kVHvBgk1ZVHc6b
j33momJi+PbEBLfoYWzHfrOeIfH+NXsek66id2hYD9sKxARtex3WxjEiSfN8jKPH
JK4BIB/vd167jm8Ptuzs6GWFlzMuXkUj7FXjJ/ohHuCRaX+9h9UizkbfkHYL4/NY
dEPYn/LlNW9lEkG5bG1KUXpRUjhssW4NO9H5tpFOQFfgW+P7Fo0C8UpCld04yNUA
3GA6QWkE6lIZaSyYMBBKsUzXPfmM1NY7
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:00:15 2025 by rpki-client