Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEE1D/9ADADADEC70E11EF8067C466C4F9AE02/itYQrIti8qb8qCWJVdXxJJJ7OgA.mft
File: itYQrIti8qb8qCWJVdXxJJJ7OgA.mft (raw, json)
Hash identifier: nJWYL8u/WpYLqn6bBIkqxxXqjfUZftfCx7xRlFpD3yw=
Subject key identifier: 4B:82:56:30:CB:F7:3A:3B:41:4A:80:2C:5E:1C:47:B3:0D:2A:AC:80
Authority key identifier: 8A:D6:10:AC:8B:62:F2:A6:FC:A8:25:89:55:D5:F1:24:92:7B:3A:00
Certificate issuer: /CN=A91BEE1D/serialNumber=8AD610AC8B62F2A6FCA8258955D5F124927B3A00
Certificate serial: 12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/itYQrIti8qb8qCWJVdXxJJJ7OgA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BEE1D/9ADADADEC70E11EF8067C466C4F9AE02/itYQrIti8qb8qCWJVdXxJJJ7OgA.mft
Manifest number: 12
Signing time: Fri 31 Jan 2025 07:05:26 +0000
Manifest this update: Fri 31 Jan 2025 07:05:26 +0000
Manifest next update: Fri 07 Feb 2025 07:05:26 +0000
Files and hashes: 1: itYQrIti8qb8qCWJVdXxJJJ7OgA.crl (hash: T5DOfpLjNMBIqL9n5zebBbOb84Jfno3KuIkpCYBT2AM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BEE1D/serialNumber=8AD610AC8B62F2A6FCA8258955D5F124927B3A00
Validity
Not Before: Jan 31 07:05:26 2025 GMT
Not After : Feb 7 07:05:26 2025 GMT
Subject: CN=679c7636-e318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f7:d3:17:ff:3e:32:e7:b2:63:7c:e3:ee:c1:
05:e7:ba:70:4b:3a:2d:99:fb:1a:c7:43:ee:ed:24:
9f:05:ec:6b:dc:31:70:53:0a:ec:08:19:6f:c8:97:
f9:fb:4a:6e:2f:17:e1:3a:4d:8f:45:e7:0f:64:07:
0c:a1:b4:f8:0d:fd:ad:c8:93:47:81:e5:3b:d9:e5:
40:8a:22:0c:a0:a4:8f:22:4f:ac:2e:0e:b9:5c:82:
9b:17:1e:fb:dd:29:e8:27:f1:73:9e:b3:f1:09:cc:
e8:8f:f8:af:91:cf:31:c2:d5:4e:5e:da:92:83:56:
93:4d:7c:b9:a8:b9:7b:46:73:c6:81:3e:c2:9d:54:
24:8a:8e:90:ee:4e:f2:09:20:53:75:34:7e:95:20:
d9:d4:a9:18:26:05:c6:92:7b:c8:f2:d7:28:bc:f4:
6a:cd:a7:88:d6:f8:66:3b:73:d4:fd:6a:e8:2a:fc:
a7:e8:44:ab:31:da:b8:87:fc:ac:28:db:fd:d7:ce:
e4:73:59:3e:6f:63:fa:8a:2c:7b:61:15:37:97:e4:
32:bf:d3:9a:d0:d6:9d:7a:be:b1:b4:0b:fb:08:33:
5f:79:3d:6f:55:b7:09:79:19:e7:5a:dc:c5:c4:3b:
67:f5:64:54:90:b9:28:65:5b:a7:93:c4:69:5f:16:
4d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:82:56:30:CB:F7:3A:3B:41:4A:80:2C:5E:1C:47:B3:0D:2A:AC:80
X509v3 Authority Key Identifier:
keyid:8A:D6:10:AC:8B:62:F2:A6:FC:A8:25:89:55:D5:F1:24:92:7B:3A:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BEE1D/9ADADADEC70E11EF8067C466C4F9AE02/itYQrIti8qb8qCWJVdXxJJJ7OgA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/itYQrIti8qb8qCWJVdXxJJJ7OgA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEE1D/9ADADADEC70E11EF8067C466C4F9AE02/itYQrIti8qb8qCWJVdXxJJJ7OgA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:22:8d:c2:a4:0a:48:df:d6:cd:c9:b3:d3:7d:3c:25:2c:72:
ed:8d:37:53:f4:67:c2:ac:4f:ce:1a:93:a5:21:62:84:b7:49:
17:7d:ee:55:d3:11:f9:45:57:7e:0f:d9:cb:e5:4c:7b:2c:bd:
89:8b:b4:63:d3:14:64:2e:13:7a:6f:10:99:56:dd:c8:a7:17:
9b:71:44:2a:5a:3b:75:cf:a3:7e:04:e2:c9:d2:fc:ac:4b:85:
c5:89:f0:41:13:e3:22:8e:3c:be:8b:e1:d2:31:d7:7d:56:a5:
d0:59:9a:2b:a6:99:1e:07:09:7d:8a:1a:e8:28:11:38:99:1e:
0b:97:1a:34:23:65:c9:07:ac:e7:2f:5d:1d:73:17:29:94:52:
e5:33:75:3f:2c:9c:54:ed:4a:da:65:41:69:1a:aa:a5:9c:44:
49:88:c0:23:8f:45:3f:a9:a6:4e:bd:62:73:0f:60:46:92:5f:
b2:0b:f0:c6:ba:4e:2e:88:31:df:89:02:6b:97:bc:45:b8:db:
32:48:0e:92:c1:4c:3f:a4:81:cc:ac:ca:35:6e:65:5a:b0:92:
88:c1:7b:52:39:2f:d1:f6:06:c3:09:ce:3f:4d:44:2c:6c:96:
42:5e:f6:22:68:dc:a5:40:e7:6d:74:0f:38:b8:de:c0:1d:d2:
4d:b3:67:df
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
RUUxRDExMC8GA1UEBRMoOEFENjEwQUM4QjYyRjJBNkZDQTgyNTg5NTVENUYxMjQ5
MjdCM0EwMDAeFw0yNTAxMzEwNzA1MjZaFw0yNTAyMDcwNzA1MjZaMBgxFjAUBgNV
BAMTDTY3OWM3NjM2LWUzMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDT99MX/z4y57JjfOPuwQXnunBLOi2Z+xrHQ+7tJJ8F7GvcMXBTCuwIGW/Il/n7
Sm4vF+E6TY9F5w9kBwyhtPgN/a3Ik0eB5TvZ5UCKIgygpI8iT6wuDrlcgpsXHvvd
Kegn8XOes/EJzOiP+K+RzzHC1U5e2pKDVpNNfLmouXtGc8aBPsKdVCSKjpDuTvIJ
IFN1NH6VINnUqRgmBcaSe8jy1yi89GrNp4jW+GY7c9T9augq/KfoRKsx2riH/Kwo
2/3XzuRzWT5vY/qKLHthFTeX5DK/05rQ1p16vrG0C/sIM195PW9Vtwl5Geda3MXE
O2f1ZFSQuShlW6eTxGlfFk23AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUS4JWMMv3
OjtBSoAsXhxHsw0qrIAwHwYDVR0jBBgwFoAUitYQrIti8qb8qCWJVdXxJJJ7OgAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJFRTFELzlBREFEQURFQzcw
RTExRUY4MDY3QzQ2NkM0RjlBRTAyL2l0WVFySXRpOHFiOHFDV0pWZFh4SkpKN09n
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaXRZUXJJdGk4cWI4cUNXSlZkWHhKSko3T2dBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJF
RTFELzlBREFEQURFQzcwRTExRUY4MDY3QzQ2NkM0RjlBRTAyL2l0WVFySXRpOHFi
OHFDV0pWZFh4SkpKN09nQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAHIijcKkCkjf1s3Js9N9PCUscu2NN1P0Z8KsT84ak6UhYoS3SRd97lXT
EflFV34P2cvlTHssvYmLtGPTFGQuE3pvEJlW3cinF5txRCpaO3XPo34E4snS/KxL
hcWJ8EET4yKOPL6L4dIx131WpdBZmiummR4HCX2KGugoETiZHguXGjQjZckHrOcv
XR1zFymUUuUzdT8snFTtStplQWkaqqWcREmIwCOPRT+ppk69YnMPYEaSX7IL8Ma6
Ti6IMd+JAmuXvEW42zJIDpLBTD+kgcysyjVuZVqwkojBe1I5L9H2BsMJzj9NRCxs
lkJe9iJo3KVA5210Dzi43sAd0k2zZ98=
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:22:24 2025 by rpki-client