Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft
File: rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft (raw, json)
Hash identifier: +7Hb8VMapqo5jZGn5bfkcC+j5cOyLnmyQspEPvEj+Gc=
Subject key identifier: 58:FF:11:69:AE:11:93:C1:6E:8B:3D:BE:89:55:E1:59:DC:ED:79:B2
Authority key identifier: AD:6A:85:68:97:7E:AF:58:EE:AF:1C:8A:97:D6:37:7C:2E:25:E4:B0
Certificate issuer: /CN=A91A95AB/serialNumber=AD6A8568977EAF58EEAF1C8A97D6377C2E25E4B0
Certificate serial: 345C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft
Manifest number: 3C62
Signing time: Fri 31 Jan 2025 15:16:31 +0000
Manifest this update: Fri 31 Jan 2025 15:16:31 +0000
Manifest next update: Fri 07 Feb 2025 15:16:31 +0000
Files and hashes: 1: rWqFaJd-r1jurxyKl9Y3fC4l5LA.crl (hash: meHC3ZYtK3TyAD2+6LzuDAOx3evMGA9PbbkiF77c6TI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13404 (0x345c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A95AB/serialNumber=AD6A8568977EAF58EEAF1C8A97D6377C2E25E4B0
Validity
Not Before: Jan 31 15:16:31 2025 GMT
Not After : Feb 7 15:16:31 2025 GMT
Subject: CN=679ce94f-82f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:01:13:5e:f8:9b:11:de:7b:91:94:6c:9f:3f:
a5:21:66:b8:4d:83:1f:dd:2f:32:c5:c8:cc:4a:1d:
f2:ea:a8:b8:e5:af:10:1b:03:31:20:8d:ac:78:19:
a2:e5:2b:95:8c:dd:20:d1:4d:ea:26:6b:d3:5e:37:
a2:a0:38:ed:bf:97:a8:99:7a:0d:20:16:e9:fb:8a:
38:8e:fe:10:f6:53:6e:1d:08:e9:52:9b:c8:90:cc:
7d:9f:47:9e:52:9b:cc:7a:6a:23:c3:34:eb:ea:3f:
06:30:2d:8c:ea:f9:8f:21:56:5b:f3:eb:4f:81:b5:
8d:0f:07:0c:fe:e6:c8:cd:10:94:10:c1:a9:a1:48:
50:c1:d8:2d:e1:44:71:8c:b1:4d:bc:43:49:d3:45:
12:2e:4d:1f:42:b3:be:91:fc:09:f9:ba:0e:1b:75:
df:3d:37:48:ee:f9:a0:2b:28:ad:d3:a4:b0:76:68:
8d:11:6a:f3:40:dc:34:17:7f:f1:fe:dc:1a:4f:77:
cd:29:2b:59:02:aa:33:b0:3e:46:26:4c:36:59:b9:
48:ec:da:61:4e:53:31:61:7e:25:d7:a7:20:e5:89:
2c:f9:8d:e1:fb:03:07:24:c7:3b:df:4c:e6:2f:66:
f8:e0:35:4c:08:b8:f5:35:7c:44:e3:6f:2f:4b:cd:
ca:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FF:11:69:AE:11:93:C1:6E:8B:3D:BE:89:55:E1:59:DC:ED:79:B2
X509v3 Authority Key Identifier:
keyid:AD:6A:85:68:97:7E:AF:58:EE:AF:1C:8A:97:D6:37:7C:2E:25:E4:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f8:96:7c:cf:8c:2a:62:13:3a:bc:b6:cc:f2:73:bd:f6:46:
10:86:4e:af:75:bf:6c:14:15:27:13:6a:1b:52:c5:52:f8:f2:
61:b4:29:7f:ed:c6:38:46:5a:42:92:05:6e:e3:24:c2:12:13:
e7:8d:a1:8e:8f:cd:c3:0c:22:e9:bc:7a:5f:7e:0a:08:8f:51:
3d:34:35:e7:93:ba:fa:48:ea:13:7c:fd:1e:23:e5:80:29:d3:
95:5f:88:d7:a2:7b:0b:95:e8:75:76:21:f5:f5:b6:f9:5d:76:
47:18:91:4c:ef:5f:98:24:74:bc:67:7f:89:27:f1:67:fc:08:
41:1d:6d:9a:91:91:82:e3:c9:a4:02:93:c1:f4:0e:50:d8:56:
2b:ba:a9:b2:f0:7b:01:26:47:34:aa:5b:bc:18:87:d4:e8:e8:
5f:24:04:03:a4:5f:7e:35:0c:8d:cd:0d:04:28:3d:7e:6f:75:
cd:c6:a5:7d:40:60:fd:92:33:2f:9c:ae:4e:a8:27:22:55:94:
84:36:0a:51:ad:7d:b3:10:ea:95:72:84:f0:44:3e:1c:39:46:
8b:0e:a5:d8:c7:2c:33:ff:13:8d:9a:d2:7b:36:c0:4e:0b:98:
1c:67:09:56:23:c2:ef:f0:2d:66:8b:8f:2c:91:ac:28:18:e9:
19:28:62:fa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTk1QUIxMTAvBgNVBAUTKEFENkE4NTY4OTc3RUFGNThFRUFGMUM4QTk3RDYzNzdD
MkUyNUU0QjAwHhcNMjUwMTMxMTUxNjMxWhcNMjUwMjA3MTUxNjMxWjAYMRYwFAYD
VQQDEw02NzljZTk0Zi04MmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxgETXvibEd57kZRsnz+lIWa4TYMf3S8yxcjMSh3y6qi45a8QGwMxII2seBmi
5SuVjN0g0U3qJmvTXjeioDjtv5eomXoNIBbp+4o4jv4Q9lNuHQjpUpvIkMx9n0ee
UpvMemojwzTr6j8GMC2M6vmPIVZb8+tPgbWNDwcM/ubIzRCUEMGpoUhQwdgt4URx
jLFNvENJ00USLk0fQrO+kfwJ+boOG3XfPTdI7vmgKyit06SwdmiNEWrzQNw0F3/x
/twaT3fNKStZAqozsD5GJkw2WblI7NphTlMxYX4l16cg5Yks+Y3h+wMHJMc730zm
L2b44DVMCLj1NXxE428vS83K+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFj/EWmu
EZPBbos9volV4Vnc7XmyMB8GA1UdIwQYMBaAFK1qhWiXfq9Y7q8cipfWN3wuJeSw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTVBQi8yQUFGRjU3ODFE
QTcxMUUyQTFGMkNDQTAwOEIwMkNEMi9yV3FGYUpkLXIxanVyeHlLbDlZM2ZDNGw1
TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JXcUZhSmQtcjFqdXJ4eUtsOVkzZkM0bDVMQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTVBQi8yQUFGRjU3ODFEQTcxMUUyQTFGMkNDQTAwOEIwMkNEMi9yV3FGYUpkLXIx
anVyeHlLbDlZM2ZDNGw1TEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAr+JZ8z4wqYhM6vLbM8nO99kYQhk6vdb9sFBUnE2obUsVS+PJhtCl/
7cY4RlpCkgVu4yTCEhPnjaGOj83DDCLpvHpffgoIj1E9NDXnk7r6SOoTfP0eI+WA
KdOVX4jXonsLleh1diH19bb5XXZHGJFM71+YJHS8Z3+JJ/Fn/AhBHW2akZGC48mk
ApPB9A5Q2FYruqmy8HsBJkc0qlu8GIfU6OhfJAQDpF9+NQyNzQ0EKD1+b3XNxqV9
QGD9kjMvnK5OqCciVZSENgpRrX2zEOqVcoTwRD4cOUaLDqXYxywz/xONmtJ7NsBO
C5gcZwlWI8Lv8C1mi48skawoGOkZKGL6
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:42:33 2025 by rpki-client