Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft
File: KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft (raw, json)
Hash identifier: 96LuMec55wEoYSK04znsN8QHnriHpZb18d+cxUqd57E=
Subject key identifier: 8C:3E:7E:4C:08:78:AD:3D:8A:5D:20:D6:48:2C:09:90:87:35:74:01
Authority key identifier: 28:1D:DA:09:71:75:C0:43:29:43:FD:E5:7C:A3:3D:28:E5:07:3B:C4
Certificate issuer: /CN=A91A7F56/serialNumber=281DDA097175C0432943FDE57CA33D28E5073BC4
Certificate serial: C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft
Manifest number: C7
Signing time: Fri 31 Jan 2025 04:51:48 +0000
Manifest this update: Fri 31 Jan 2025 04:51:47 +0000
Manifest next update: Fri 07 Feb 2025 04:51:47 +0000
Files and hashes: 1: KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl (hash: NUfL5vO6qUruTnhwg8wkjgMPYQyN/oJKrrZe22huMsQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199 (0xc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7F56/serialNumber=281DDA097175C0432943FDE57CA33D28E5073BC4
Validity
Not Before: Jan 31 04:51:47 2025 GMT
Not After : Feb 7 04:51:47 2025 GMT
Subject: CN=679c56e3-d688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:12:68:12:53:ae:98:43:b8:dc:70:58:51:54:
b3:f6:81:b4:ab:02:00:1c:fc:89:a5:23:aa:24:28:
90:d1:7c:19:e5:49:ce:dd:dc:22:79:03:2f:e8:8b:
fd:7d:95:d0:f4:17:90:a4:20:dc:be:3e:e8:8f:37:
10:d0:3f:e4:59:c0:ec:61:c4:90:3d:c3:d5:36:2a:
4f:97:e7:a5:ab:28:f1:5a:59:ed:cb:c8:1a:78:97:
82:8f:fc:43:ab:5c:cd:d8:b6:52:2d:d6:a9:45:26:
95:59:9d:b1:18:ea:9e:0f:de:9c:80:59:13:6f:fe:
f0:86:9b:8a:15:91:12:3e:51:ae:1b:fa:4d:80:c8:
d4:e7:da:93:28:93:91:24:7f:22:2e:c7:b7:5a:bc:
fd:f0:b1:ae:7a:0a:a6:0b:2b:39:27:d2:01:6b:32:
fb:b3:03:12:72:66:38:75:7d:20:00:7b:da:15:9e:
87:e5:9d:c9:32:9c:36:4a:70:95:af:71:4f:68:5f:
5f:06:52:c3:e2:0b:f1:59:17:62:06:e1:20:8f:9c:
57:5d:18:33:c3:07:75:6c:e7:2d:a9:62:2f:62:8c:
a5:89:7a:6d:43:62:46:0e:f1:79:da:34:61:79:57:
1f:0b:1d:01:f2:2f:08:59:ae:13:0f:4a:6a:fb:3c:
1b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3E:7E:4C:08:78:AD:3D:8A:5D:20:D6:48:2C:09:90:87:35:74:01
X509v3 Authority Key Identifier:
keyid:28:1D:DA:09:71:75:C0:43:29:43:FD:E5:7C:A3:3D:28:E5:07:3B:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:7e:41:6b:b5:33:70:c9:c3:79:77:0e:c0:a1:4c:27:e2:3a:
a7:ad:1a:9b:da:df:82:b3:5e:84:f3:40:d0:82:98:a0:ba:fe:
06:1e:ea:52:89:d2:71:b5:53:b0:67:65:55:ca:1c:de:0e:9e:
71:ad:f8:c7:34:6f:cf:74:67:ed:71:db:ac:58:e3:a2:64:7d:
71:15:e6:2c:e7:27:d8:ab:dd:04:af:42:b3:bc:1d:5c:fa:c9:
ce:75:c7:53:32:87:d1:d2:d9:20:99:86:da:d7:a3:a8:e7:b0:
fe:c5:89:3b:8d:02:15:4d:52:53:69:cc:b6:72:ac:a2:09:f5:
75:e1:83:73:cc:db:d2:d3:ca:d8:8c:a7:77:b2:65:85:92:b2:
d8:2b:ee:d9:1c:cc:49:33:c8:fc:d5:a3:21:79:99:a8:17:7c:
78:1a:22:50:bf:05:c6:fe:d5:b1:f7:67:18:80:10:e6:73:55:
76:be:53:9d:89:ec:be:47:6f:25:69:53:87:14:95:f1:4d:59:
46:4b:73:f7:cb:57:75:3f:17:41:2a:95:cf:18:f3:25:cf:5d:
99:37:4d:6c:84:77:a9:53:37:ea:9c:8a:63:82:2e:dc:81:65:
5a:32:6c:55:e3:78:a6:55:c7:39:a0:85:4d:00:50:d3:a6:31:
3c:ef:7b:31
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTdGNTYxMTAvBgNVBAUTKDI4MUREQTA5NzE3NUMwNDMyOTQzRkRFNTdDQTMzRDI4
RTUwNzNCQzQwHhcNMjUwMTMxMDQ1MTQ3WhcNMjUwMjA3MDQ1MTQ3WjAYMRYwFAYD
VQQDEw02NzljNTZlMy1kNjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArhJoElOumEO43HBYUVSz9oG0qwIAHPyJpSOqJCiQ0XwZ5UnO3dwieQMv6Iv9
fZXQ9BeQpCDcvj7ojzcQ0D/kWcDsYcSQPcPVNipPl+elqyjxWlnty8gaeJeCj/xD
q1zN2LZSLdapRSaVWZ2xGOqeD96cgFkTb/7whpuKFZESPlGuG/pNgMjU59qTKJOR
JH8iLse3Wrz98LGuegqmCys5J9IBazL7swMScmY4dX0gAHvaFZ6H5Z3JMpw2SnCV
r3FPaF9fBlLD4gvxWRdiBuEgj5xXXRgzwwd1bOctqWIvYoyliXptQ2JGDvF52jRh
eVcfCx0B8i8IWa4TD0pq+zwbqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIw+fkwI
eK09il0g1kgsCZCHNXQBMB8GA1UdIwQYMBaAFCgd2glxdcBDKUP95XyjPSjlBzvE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0Y1Ni85RTFDODlBNkFD
Q0QxMUVFODEwNjkwNTBDNEY5QUUwMi9LQjNhQ1hGMXdFTXBRXzNsZktNOUtPVUhP
OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tCM2FDWEYxd0VNcFFfM2xmS005S09VSE84US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
N0Y1Ni85RTFDODlBNkFDQ0QxMUVFODEwNjkwNTBDNEY5QUUwMi9LQjNhQ1hGMXdF
TXBRXzNsZktNOUtPVUhPOFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB7fkFrtTNwycN5dw7AoUwn4jqnrRqb2t+Cs16E80DQgpiguv4GHupS
idJxtVOwZ2VVyhzeDp5xrfjHNG/PdGftcdusWOOiZH1xFeYs5yfYq90Er0KzvB1c
+snOdcdTMofR0tkgmYba16Oo57D+xYk7jQIVTVJTacy2cqyiCfV14YNzzNvS08rY
jKd3smWFkrLYK+7ZHMxJM8j81aMheZmoF3x4GiJQvwXG/tWx92cYgBDmc1V2vlOd
iey+R28laVOHFJXxTVlGS3P3y1d1PxdBKpXPGPMlz12ZN01shHepUzfqnIpjgi7c
gWVaMmxV43imVcc5oIVNAFDTpjE873sx
-----END CERTIFICATE-----
Generated at Sun Apr 27 15:44:08 2025 by rpki-client