Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft
File: s-hiKkEGGf2XI_nR28U1fhX6fcw.mft (raw, json)
Hash identifier: VKL7xBTBI9L2C2tGTob/vHfglQzRhOuyDNBqj9lv74A=
Subject key identifier: 6A:0B:22:CE:11:C6:42:57:C0:42:53:5A:63:2D:08:2B:AF:AF:80:9B
Authority key identifier: B3:E8:62:2A:41:06:19:FD:97:23:F9:D1:DB:C5:35:7E:15:FA:7D:CC
Certificate issuer: /CN=A91A85CF/serialNumber=B3E8622A410619FD9723F9D1DBC5357E15FA7DCC
Certificate serial: 10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft
Manifest number: 10
Signing time: Fri 31 Jan 2025 07:06:18 +0000
Manifest this update: Fri 31 Jan 2025 07:06:17 +0000
Manifest next update: Fri 07 Feb 2025 07:06:17 +0000
Files and hashes: 1: s-hiKkEGGf2XI_nR28U1fhX6fcw.crl (hash: BVMRw450E5ibqim6WIdMHYnWgQm02HgazqSGO8MpNxw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A85CF/serialNumber=B3E8622A410619FD9723F9D1DBC5357E15FA7DCC
Validity
Not Before: Jan 31 07:06:17 2025 GMT
Not After : Feb 7 07:06:17 2025 GMT
Subject: CN=679c766a-622f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:37:cd:c9:c0:96:6d:79:11:e1:f1:52:ae:94:
5d:d0:30:37:84:28:b7:12:24:1f:d3:73:40:ee:6a:
24:07:df:8b:75:08:ff:18:a9:11:48:e9:23:38:d5:
06:15:4f:fb:b6:90:e8:bd:cd:22:96:57:21:51:01:
86:54:80:f7:fd:ad:32:e6:8e:cb:f1:8b:bf:e5:ec:
c4:cf:1c:c9:1b:57:ed:95:3a:a6:fe:29:ed:e3:b9:
b6:0e:a1:c7:d8:d3:92:40:a5:d8:11:1e:03:d0:d9:
15:bb:00:00:1c:89:38:bc:fe:72:bf:fa:8a:73:16:
96:fa:f1:b4:ed:10:38:3f:eb:18:08:bf:46:13:1a:
33:01:e7:d8:e0:10:be:a6:74:e6:7f:08:3c:22:d9:
e2:85:f1:0a:9b:07:d1:48:3d:24:a4:4e:a8:4d:0c:
54:b1:22:a1:f8:f2:a6:c9:19:d2:5a:fb:92:10:08:
ee:8f:5b:bb:41:4b:2a:2f:72:3d:5f:f3:98:c4:b0:
44:a7:3a:5d:44:b4:61:dd:bf:84:4d:80:61:71:74:
fa:42:05:ca:20:35:38:3e:b5:19:1b:65:9f:ea:01:
fd:76:77:0a:b7:4f:b1:1d:4b:df:c9:45:0f:3e:d2:
f7:fb:d7:c3:3c:02:43:d2:ec:d1:8f:6a:d0:a4:25:
47:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0B:22:CE:11:C6:42:57:C0:42:53:5A:63:2D:08:2B:AF:AF:80:9B
X509v3 Authority Key Identifier:
keyid:B3:E8:62:2A:41:06:19:FD:97:23:F9:D1:DB:C5:35:7E:15:FA:7D:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e6:69:31:0a:92:ea:df:9b:a8:31:9b:8e:74:fb:b5:b0:5a:c5:
3f:07:21:9b:45:85:2a:dc:76:a1:46:a8:54:c2:5a:6c:47:f7:
f2:5a:b1:ac:d7:c8:71:ec:04:f7:64:f4:b0:14:97:10:70:43:
14:73:9c:97:cb:13:db:62:28:32:c1:82:f4:82:82:a3:de:91:
e4:33:fa:e6:1e:de:2a:ef:28:48:e9:70:f2:71:f1:94:e2:fa:
5f:90:a6:af:45:b4:4c:4a:02:f2:98:1e:31:b5:e8:f4:36:28:
44:a5:f5:00:1a:92:ea:0f:2f:92:98:52:ea:d6:d5:9a:99:4a:
c7:df:5b:a5:a2:1a:13:23:3c:94:0e:b8:75:42:ae:63:97:b7:
c6:ed:6b:e5:66:5b:ce:8c:77:71:14:28:e0:da:60:bf:40:c5:
35:28:ac:b4:e0:be:66:60:dc:6b:59:17:95:60:02:c2:25:2a:
aa:42:46:b8:4e:d2:e6:64:07:5d:17:35:2c:5a:79:a0:3d:1f:
ec:69:a8:0c:cd:8c:03:6c:04:c1:d8:a8:97:83:b3:0a:86:42:
a6:48:89:dc:27:53:84:05:93:47:cd:ee:16:22:f4:ca:86:cf:
d1:b1:58:2a:ac:09:71:45:96:7d:e0:de:69:f4:0e:da:d8:86:
a1:60:7d:87
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
ODVDRjExMC8GA1UEBRMoQjNFODYyMkE0MTA2MTlGRDk3MjNGOUQxREJDNTM1N0Ux
NUZBN0RDQzAeFw0yNTAxMzEwNzA2MTdaFw0yNTAyMDcwNzA2MTdaMBgxFjAUBgNV
BAMTDTY3OWM3NjZhLTYyMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDSN83JwJZteRHh8VKulF3QMDeEKLcSJB/Tc0DuaiQH34t1CP8YqRFI6SM41QYV
T/u2kOi9zSKWVyFRAYZUgPf9rTLmjsvxi7/l7MTPHMkbV+2VOqb+Ke3jubYOocfY
05JApdgRHgPQ2RW7AAAciTi8/nK/+opzFpb68bTtEDg/6xgIv0YTGjMB59jgEL6m
dOZ/CDwi2eKF8QqbB9FIPSSkTqhNDFSxIqH48qbJGdJa+5IQCO6PW7tBSyovcj1f
85jEsESnOl1EtGHdv4RNgGFxdPpCBcogNTg+tRkbZZ/qAf12dwq3T7EdS9/JRQ8+
0vf718M8AkPS7NGPatCkJUdpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUagsizhHG
QlfAQlNaYy0IK6+vgJswHwYDVR0jBBgwFoAUs+hiKkEGGf2XI/nR28U1fhX6fcww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4NUNGL0YwMDA5Nzc0Q0FF
MjExRUZBRjhGMTAxMUM0RjlBRTAyL3MtaGlLa0VHR2YyWElfblIyOFUxZmhYNmZj
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcy1oaUtrRUdHZjJYSV9uUjI4VTFmaFg2ZmN3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4
NUNGL0YwMDA5Nzc0Q0FFMjExRUZBRjhGMTAxMUM0RjlBRTAyL3MtaGlLa0VHR2Yy
WElfblIyOFUxZmhYNmZjdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAOZpMQqS6t+bqDGbjnT7tbBaxT8HIZtFhSrcdqFGqFTCWmxH9/JasazX
yHHsBPdk9LAUlxBwQxRznJfLE9tiKDLBgvSCgqPekeQz+uYe3irvKEjpcPJx8ZTi
+l+Qpq9FtExKAvKYHjG16PQ2KESl9QAakuoPL5KYUurW1ZqZSsffW6WiGhMjPJQO
uHVCrmOXt8bta+VmW86Md3EUKODaYL9AxTUorLTgvmZg3GtZF5VgAsIlKqpCRrhO
0uZkB10XNSxaeaA9H+xpqAzNjANsBMHYqJeDswqGQqZIidwnU4QFk0fN7hYi9MqG
z9GxWCqsCXFFln3g3mn0DtrYhqFgfYc=
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:59:55 2025 by rpki-client