Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.mft
File: f3UA8ZRiBwd03Is7S5avThubtUU.mft (raw, json)
Hash identifier: 9G8tGVN42c2llmFlumbR85hY/dDzEHsf4K/R7+AhAbg=
Subject key identifier: 5E:36:0B:28:61:F6:E0:28:A9:11:97:B0:96:71:B5:E5:72:BD:8A:9C
Authority key identifier: 7F:75:00:F1:94:62:07:07:74:DC:8B:3B:4B:96:AF:4E:1B:9B:B5:45
Certificate issuer: /CN=A91A840E/serialNumber=7F7500F19462070774DC8B3B4B96AF4E1B9BB545
Certificate serial: 2DD0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f3UA8ZRiBwd03Is7S5avThubtUU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.mft
Manifest number: 2DD0
Signing time: Fri 31 Jan 2025 15:31:48 +0000
Manifest this update: Fri 31 Jan 2025 15:31:47 +0000
Manifest next update: Fri 07 Feb 2025 15:31:47 +0000
Files and hashes: 1: f3UA8ZRiBwd03Is7S5avThubtUU.crl (hash: i59DnxpMcJUazVWYktWA2jjHYMJpopOOKfFoB4Q4y98=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11728 (0x2dd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A840E/serialNumber=7F7500F19462070774DC8B3B4B96AF4E1B9BB545
Validity
Not Before: Jan 31 15:31:47 2025 GMT
Not After : Feb 7 15:31:47 2025 GMT
Subject: CN=679cece4-c648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:95:2a:f6:e7:3f:a8:6b:f5:5e:dd:b7:96:28:
8f:76:6a:ba:93:9e:71:ed:46:a0:9d:14:24:55:5c:
ad:9a:98:23:65:1f:e5:ee:21:85:0e:37:20:99:44:
99:8d:18:6c:f5:d3:bf:f4:d3:61:df:34:64:ba:a1:
42:ad:ce:ee:9f:3e:30:98:a1:4c:27:f9:f6:94:c7:
60:92:be:77:62:e8:fc:81:fe:29:bb:cf:84:31:1a:
6f:81:f7:8f:97:dc:6f:0b:ec:f1:41:98:41:88:97:
15:17:fd:ca:70:45:18:42:c9:c1:85:47:2c:a1:95:
1c:53:0b:6c:9c:d2:61:7c:08:8b:a1:65:a6:ea:91:
68:ec:9f:c7:91:36:69:01:3c:3f:a0:35:5d:49:41:
c0:7b:a2:8d:2d:85:9c:c7:f1:9f:75:53:e7:cf:22:
be:f1:8a:8b:73:25:05:b8:ce:e6:83:4e:62:c3:c8:
b5:8f:18:f2:e4:07:8f:c8:11:88:b7:d0:ec:08:ef:
65:b6:2d:8d:65:39:86:eb:4e:b8:39:03:d3:8c:d8:
39:1f:97:3a:53:8c:c9:01:3d:da:30:63:ee:b3:ba:
95:56:fd:54:79:3e:67:63:87:77:9d:7c:da:d7:4a:
04:d5:d3:d5:6f:5e:c2:dd:6c:7a:bb:c9:b7:8d:f8:
b3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:36:0B:28:61:F6:E0:28:A9:11:97:B0:96:71:B5:E5:72:BD:8A:9C
X509v3 Authority Key Identifier:
keyid:7F:75:00:F1:94:62:07:07:74:DC:8B:3B:4B:96:AF:4E:1B:9B:B5:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f3UA8ZRiBwd03Is7S5avThubtUU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:1c:4f:2f:52:8e:d8:0a:07:da:d5:de:4f:fe:4f:46:7f:bd:
5d:a0:24:61:9d:68:08:18:4a:22:b7:1a:c1:17:28:3a:46:1b:
51:ad:68:b4:d0:86:7a:1a:0a:51:8c:bb:e7:0a:93:9e:a0:90:
f1:5a:2f:dd:68:84:c5:7a:9b:54:56:e1:5f:41:2d:e3:49:ff:
c2:39:60:70:c2:dd:ce:6c:60:b8:11:99:ee:eb:a6:ae:5a:60:
f2:09:05:d2:0d:c1:c2:f5:61:9c:b1:13:2a:1d:f6:3a:59:60:
59:d1:21:87:49:0d:90:7e:04:fe:a1:68:38:ff:96:4d:d1:3b:
43:19:2c:82:ef:1a:bb:fa:65:9b:61:50:94:8c:71:51:c1:f5:
41:c0:34:bd:a8:64:71:1c:32:f7:64:6c:be:92:2a:a0:52:69:
ef:7f:1f:60:d2:23:ba:17:80:3e:41:27:69:9e:6a:2b:4a:2b:
b1:0d:f5:d6:34:71:02:f3:c4:07:ff:b6:57:e9:7e:80:f3:08:
55:33:28:95:58:9d:13:1f:ba:db:58:2a:4c:a5:11:18:9b:bc:
d8:a7:4d:8a:94:25:d9:19:f3:3f:36:36:ae:cd:41:a4:4b:8a:
ac:7e:d6:a1:e7:bb:20:5a:e7:ed:a9:7b:e0:05:11:72:7e:4b:
87:44:db:89
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICLdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTg0MEUxMTAvBgNVBAUTKDdGNzUwMEYxOTQ2MjA3MDc3NERDOEIzQjRCOTZBRjRF
MUI5QkI1NDUwHhcNMjUwMTMxMTUzMTQ3WhcNMjUwMjA3MTUzMTQ3WjAYMRYwFAYD
VQQDEw02NzljZWNlNC1jNjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmpUq9uc/qGv1Xt23liiPdmq6k55x7UagnRQkVVytmpgjZR/l7iGFDjcgmUSZ
jRhs9dO/9NNh3zRkuqFCrc7unz4wmKFMJ/n2lMdgkr53Yuj8gf4pu8+EMRpvgfeP
l9xvC+zxQZhBiJcVF/3KcEUYQsnBhUcsoZUcUwtsnNJhfAiLoWWm6pFo7J/HkTZp
ATw/oDVdSUHAe6KNLYWcx/GfdVPnzyK+8YqLcyUFuM7mg05iw8i1jxjy5AePyBGI
t9DsCO9lti2NZTmG6064OQPTjNg5H5c6U4zJAT3aMGPus7qVVv1UeT5nY4d3nXza
10oE1dPVb17C3Wx6u8m3jfiz4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF42Cyhh
9uAoqRGXsJZxteVyvYqcMB8GA1UdIwQYMBaAFH91APGUYgcHdNyLO0uWr04bm7VF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODQwRS9EQTEwRkY2NjYy
RUUxMUUzQUFEOTlGODM1OTExRUEzMi9mM1VBOFpSaUJ3ZDAzSXM3UzVhdlRodWJ0
VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2YzVUE4WlJpQndkMDNJczdTNWF2VGh1YnRVVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
ODQwRS9EQTEwRkY2NjYyRUUxMUUzQUFEOTlGODM1OTExRUEzMi9mM1VBOFpSaUJ3
ZDAzSXM3UzVhdlRodWJ0VVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBHHE8vUo7YCgfa1d5P/k9Gf71doCRhnWgIGEoitxrBFyg6RhtRrWi0
0IZ6GgpRjLvnCpOeoJDxWi/daITFeptUVuFfQS3jSf/COWBwwt3ObGC4EZnu66au
WmDyCQXSDcHC9WGcsRMqHfY6WWBZ0SGHSQ2QfgT+oWg4/5ZN0TtDGSyC7xq7+mWb
YVCUjHFRwfVBwDS9qGRxHDL3ZGy+kiqgUmnvfx9g0iO6F4A+QSdpnmorSiuxDfXW
NHEC88QH/7ZX6X6A8whVMyiVWJ0TH7rbWCpMpREYm7zYp02KlCXZGfM/NjauzUGk
S4qsftah57sgWuftqXvgBRFyfkuHRNuJ
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:32:26 2025 by rpki-client