
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft
File: -c8El8-2fhYnKRCY8R8XhuuJ_1A.mft (raw, json)
Hash identifier: H2GTxI+JCF0y20ikm8dIxQm9KrB9IuCrLhG0yKT88l4=
Subject key identifier: 4D:74:3C:03:77:0A:3C:F2:D3:D5:B6:4B:29:72:64:D2:1F:B1:EF:BE
Authority key identifier: F9:CF:04:97:CF:B6:7E:16:27:29:10:98:F1:1F:17:86:EB:89:FF:50
Certificate issuer: /CN=A91B5073/serialNumber=F9CF0497CFB67E1627291098F11F1786EB89FF50
Certificate serial: 1054
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft
Manifest number: 18AB
Signing time: Fri 31 Jan 2025 17:22:47 +0000
Manifest this update: Fri 31 Jan 2025 17:22:47 +0000
Manifest next update: Fri 07 Feb 2025 17:22:47 +0000
Files and hashes: 1: -c8El8-2fhYnKRCY8R8XhuuJ_1A.crl (hash: ZvPbK2Tza0Z2ydtoHg1/TU4NETRcGuwBBstjpE6eETU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4180 (0x1054)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5073/serialNumber=F9CF0497CFB67E1627291098F11F1786EB89FF50
Validity
Not Before: Jan 31 17:22:47 2025 GMT
Not After : Feb 7 17:22:47 2025 GMT
Subject: CN=679d06e7-898a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:06:43:ba:30:58:79:88:de:fa:c3:44:ea:bc:
dc:85:3f:2f:95:a0:3d:46:9a:78:fb:b9:59:72:d5:
1c:94:67:fd:b0:44:8e:62:9a:c0:1e:0c:a9:85:02:
2e:54:fb:b5:d9:a7:45:5a:9f:46:74:9b:3a:5b:57:
ce:08:ef:a2:60:79:37:45:21:44:d6:f7:7d:64:a8:
aa:9d:8d:13:0f:d3:60:5d:58:a7:1b:f9:3e:d7:17:
4a:5b:54:37:d9:ba:4d:56:dd:ff:91:02:58:b1:e9:
06:1d:49:56:a1:c5:dd:14:c1:78:62:b4:fb:79:fe:
7d:22:90:24:a3:d2:46:56:11:f7:ca:17:16:8a:c8:
fe:40:51:40:ae:9a:ce:93:63:59:c3:53:e2:39:1e:
3e:3a:49:ce:ee:6c:32:7b:55:fa:cb:1b:8c:d8:06:
35:a4:df:e0:29:10:00:25:ba:7a:f9:22:f3:03:71:
8b:03:44:99:db:29:7e:89:6a:5a:e5:ce:04:0e:1c:
27:fc:4f:c0:82:51:46:ec:5a:19:48:f1:79:b5:2c:
fe:7a:d9:61:7b:6a:88:a7:43:1d:6d:1e:29:8f:0d:
c4:9d:d6:34:a4:d6:af:da:de:3e:76:4c:ea:a0:02:
f4:37:e8:88:3a:e9:40:c6:79:73:fc:0c:14:de:06:
99:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:74:3C:03:77:0A:3C:F2:D3:D5:B6:4B:29:72:64:D2:1F:B1:EF:BE
X509v3 Authority Key Identifier:
keyid:F9:CF:04:97:CF:B6:7E:16:27:29:10:98:F1:1F:17:86:EB:89:FF:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:c4:8b:40:6c:31:23:40:79:38:7c:5f:e8:23:35:94:7f:cc:
de:de:f2:7e:42:75:b6:d8:37:76:10:79:e2:7c:f1:86:fa:ec:
cc:e2:32:be:8f:3f:39:fa:7a:db:15:d0:3c:80:84:96:5a:71:
73:95:06:ce:9f:c2:af:ce:07:d5:cd:e3:32:2a:07:9a:4d:f2:
58:1b:c9:0f:29:be:04:0f:83:1a:11:09:e4:c0:2d:f7:e3:3e:
f7:b7:26:46:1d:d2:64:79:e3:65:eb:22:7e:1b:96:41:37:35:
a8:27:b4:c2:a8:b3:c4:82:70:69:84:43:f8:eb:51:0a:93:92:
a6:ce:32:84:6c:c3:4a:74:c7:62:f2:eb:bd:c0:b9:fc:83:5f:
8b:71:ab:68:e1:39:7b:5d:c9:00:cf:cd:92:b9:66:0f:83:78:
f3:52:92:a9:ff:47:25:2d:5a:e5:2a:85:d0:75:88:c2:ef:37:
ba:38:17:9f:1c:e4:1a:d3:41:7b:7f:9d:af:57:ce:18:be:cb:
98:2b:b7:56:f5:d7:d7:03:35:81:81:f1:2a:97:a3:09:9a:80:
ef:da:9a:b8:dd:50:88:ab:6d:f9:5e:98:dd:bf:87:35:36:23:
ce:e2:05:ee:3d:52:02:4e:33:a9:2b:96:4f:1f:b4:a2:c5:63:
8f:aa:eb:1b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjUwNzMxMTAvBgNVBAUTKEY5Q0YwNDk3Q0ZCNjdFMTYyNzI5MTA5OEYxMUYxNzg2
RUI4OUZGNTAwHhcNMjUwMTMxMTcyMjQ3WhcNMjUwMjA3MTcyMjQ3WjAYMRYwFAYD
VQQDEw02NzlkMDZlNy04OThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2AZDujBYeYje+sNE6rzchT8vlaA9Rpp4+7lZctUclGf9sESOYprAHgyphQIu
VPu12adFWp9GdJs6W1fOCO+iYHk3RSFE1vd9ZKiqnY0TD9NgXVinG/k+1xdKW1Q3
2bpNVt3/kQJYsekGHUlWocXdFMF4YrT7ef59IpAko9JGVhH3yhcWisj+QFFArprO
k2NZw1PiOR4+OknO7mwye1X6yxuM2AY1pN/gKRAAJbp6+SLzA3GLA0SZ2yl+iWpa
5c4EDhwn/E/AglFG7FoZSPF5tSz+etlhe2qIp0MdbR4pjw3EndY0pNav2t4+dkzq
oAL0N+iIOulAxnlz/AwU3gaZNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE10PAN3
Cjzy09W2SylyZNIfse++MB8GA1UdIwQYMBaAFPnPBJfPtn4WJykQmPEfF4brif9Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTA3My80M0YxNjI2NDMz
OTUxMUU5QkZCMUMyMUFDNEY5QUUwMi8tYzhFbDgtMmZoWW5LUkNZOFI4WGh1dUpf
MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1jOEVsOC0yZmhZbktSQ1k4UjhYaHV1Sl8xQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NTA3My80M0YxNjI2NDMzOTUxMUU5QkZCMUMyMUFDNEY5QUUwMi8tYzhFbDgtMmZo
WW5LUkNZOFI4WGh1dUpfMUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBBxItAbDEjQHk4fF/oIzWUf8ze3vJ+QnW22Dd2EHnifPGG+uzM4jK+
jz85+nrbFdA8gISWWnFzlQbOn8KvzgfVzeMyKgeaTfJYG8kPKb4ED4MaEQnkwC33
4z73tyZGHdJkeeNl6yJ+G5ZBNzWoJ7TCqLPEgnBphEP461EKk5KmzjKEbMNKdMdi
8uu9wLn8g1+Lcato4Tl7XckAz82SuWYPg3jzUpKp/0clLVrlKoXQdYjC7ze6OBef
HOQa00F7f52vV84YvsuYK7dW9dfXAzWBgfEql6MJmoDv2pq43VCIq235Xpjdv4c1
NiPO4gXuPVICTjOpK5ZPH7SixWOPqusb
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:45:36 2025 by rpki-client