Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft
File: ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft (raw, json)
Hash identifier: K/QUj3A0LR2SERmGG1KbN1iPrld17EU8QceoFjtYYHk=
Subject key identifier: 45:72:1A:D3:67:F3:20:5E:F9:A6:8C:FD:91:BE:3F:83:39:C4:A6:07
Authority key identifier: 66:C5:B1:90:4B:35:C4:7D:94:50:8E:C0:A1:AC:DA:83:68:DE:F4:A9
Certificate issuer: /CN=A91A12C4/serialNumber=66C5B1904B35C47D94508EC0A1ACDA8368DEF4A9
Certificate serial: 4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft
Manifest number: 4D
Signing time: Fri 31 Jan 2025 06:21:19 +0000
Manifest this update: Fri 31 Jan 2025 06:21:19 +0000
Manifest next update: Fri 07 Feb 2025 06:21:19 +0000
Files and hashes: 1: ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl (hash: yPmo2JIUapp2xoyMS0Pzag0MhEWONqiObugkoyPutaY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A12C4/serialNumber=66C5B1904B35C47D94508EC0A1ACDA8368DEF4A9
Validity
Not Before: Jan 31 06:21:19 2025 GMT
Not After : Feb 7 06:21:19 2025 GMT
Subject: CN=679c6bdf-8703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:63:a0:21:21:d7:88:67:4e:eb:e4:ff:32:9f:
3e:93:06:86:02:19:68:a7:de:7b:fe:f6:2c:4a:09:
c0:9f:6c:42:9b:13:ef:0e:42:31:9a:11:fc:09:73:
69:b1:67:0c:35:ec:27:ac:94:d4:94:05:b0:90:5b:
70:dd:e3:a1:1c:2b:20:b7:6f:0b:a2:03:0e:98:53:
f5:1a:fb:6d:27:26:98:8b:db:e1:81:e3:dc:0e:4c:
1d:8d:36:8d:e5:d2:e9:a8:ff:53:1b:33:7f:9e:d0:
0c:4f:e7:a5:c4:06:44:a6:4b:2b:04:6c:04:6b:eb:
a5:6c:42:fa:95:b2:20:0a:ff:42:c3:2b:d5:47:57:
da:5d:ae:18:c7:e3:a0:77:d3:6f:d9:d8:5f:42:61:
4a:d0:c4:9a:c7:56:25:95:2f:1e:70:ae:81:24:cf:
e8:8d:df:9d:24:5d:57:82:cf:95:42:20:65:b7:98:
1b:9d:ee:11:6b:22:4e:73:b4:f2:62:67:96:90:a7:
2c:ce:f4:1a:35:15:ba:4e:f1:91:4a:8a:d4:ec:6e:
6f:e1:78:c7:d0:35:41:28:e9:fe:e3:a3:68:ef:c7:
b3:c5:a9:f4:81:80:b4:04:cc:21:8c:28:87:5b:f6:
fa:07:5b:0b:ad:5b:b5:7f:a8:a5:5a:f4:2b:d7:2c:
3c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:72:1A:D3:67:F3:20:5E:F9:A6:8C:FD:91:BE:3F:83:39:C4:A6:07
X509v3 Authority Key Identifier:
keyid:66:C5:B1:90:4B:35:C4:7D:94:50:8E:C0:A1:AC:DA:83:68:DE:F4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e4:10:10:e9:54:c8:66:f7:fd:67:ac:aa:ad:c5:ac:e8:17:a0:
80:ba:33:09:91:05:22:55:5f:d8:e8:e1:aa:a8:61:e9:c6:3d:
69:14:fd:49:50:fd:84:67:80:17:9d:16:c4:95:dc:45:62:62:
66:39:5b:b0:e0:97:af:eb:f7:69:7d:2a:e3:ee:c3:8a:f9:9d:
3b:47:f1:52:b5:0c:2b:94:ae:36:26:90:7a:8f:3b:80:b5:99:
07:1c:1e:b0:10:d2:4c:0f:fa:ed:19:3f:71:b8:ac:9e:5b:ee:
f1:f0:cf:64:1f:f4:ef:0c:92:5a:4b:ad:1b:91:4a:e6:e5:fa:
36:cd:65:7e:49:6b:53:31:40:d4:dd:be:5e:d4:c7:fe:02:54:
41:0a:3f:8c:8b:af:8f:ee:03:3d:ce:67:78:cf:3a:5c:d9:72:
f1:51:35:cb:dc:57:f0:ef:42:13:66:b7:11:13:08:7a:58:b7:
ee:9a:1f:70:ad:96:91:85:79:f1:7a:19:d0:78:93:df:58:1d:
f3:68:f5:fd:a4:01:cc:9b:f9:23:8e:89:a6:da:82:66:6c:de:
c4:f8:db:24:76:de:10:0d:21:76:02:86:ce:f0:ae:71:e6:b2:
05:7a:b8:c4:51:41:5a:bf:28:6a:8d:7c:c2:19:94:51:c7:e6:
72:aa:0d:14
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
MTJDNDExMC8GA1UEBRMoNjZDNUIxOTA0QjM1QzQ3RDk0NTA4RUMwQTFBQ0RBODM2
OERFRjRBOTAeFw0yNTAxMzEwNjIxMTlaFw0yNTAyMDcwNjIxMTlaMBgxFjAUBgNV
BAMTDTY3OWM2YmRmLTg3MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCbY6AhIdeIZ07r5P8ynz6TBoYCGWin3nv+9ixKCcCfbEKbE+8OQjGaEfwJc2mx
Zww17CeslNSUBbCQW3Dd46EcKyC3bwuiAw6YU/Ua+20nJpiL2+GB49wOTB2NNo3l
0umo/1MbM3+e0AxP56XEBkSmSysEbARr66VsQvqVsiAK/0LDK9VHV9pdrhjH46B3
02/Z2F9CYUrQxJrHViWVLx5wroEkz+iN350kXVeCz5VCIGW3mBud7hFrIk5ztPJi
Z5aQpyzO9Bo1FbpO8ZFKitTsbm/heMfQNUEo6f7jo2jvx7PFqfSBgLQEzCGMKIdb
9voHWwutW7V/qKVa9CvXLDwVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURXIa02fz
IF75poz9kb4/gznEpgcwHwYDVR0jBBgwFoAUZsWxkEs1xH2UUI7Aoazag2je9Kkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUExMkM0L0ZCRjE0RTcyNkMx
NzExRUZCREJGRDUwQkM0RjlBRTAyL1pzV3hrRXMxeEgyVVVJN0FvYXphZzJqZTlL
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWnNXeGtFczF4SDJVVUk3QW9hemFnMmplOUtrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEx
MkM0L0ZCRjE0RTcyNkMxNzExRUZCREJGRDUwQkM0RjlBRTAyL1pzV3hrRXMxeEgy
VVVJN0FvYXphZzJqZTlLay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAOQQEOlUyGb3/Wesqq3FrOgXoIC6MwmRBSJVX9jo4aqoYenGPWkU/UlQ
/YRngBedFsSV3EViYmY5W7Dgl6/r92l9KuPuw4r5nTtH8VK1DCuUrjYmkHqPO4C1
mQccHrAQ0kwP+u0ZP3G4rJ5b7vHwz2Qf9O8MklpLrRuRSubl+jbNZX5Ja1MxQNTd
vl7Ux/4CVEEKP4yLr4/uAz3OZ3jPOlzZcvFRNcvcV/DvQhNmtxETCHpYt+6aH3Ct
lpGFefF6GdB4k99YHfNo9f2kAcyb+SOOiabagmZs3sT42yR23hANIXYChs7wrnHm
sgV6uMRRQVq/KGqNfMIZlFHH5nKqDRQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:34:13 2025 by rpki-client