Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.mft
File: mYWbHvAhS7n86OW_FSbzvRHsKAc.mft (raw, json)
Hash identifier: 2e9EmYzEfutPI4ZpKbJsQN0difvjAS8lP0xjvLEWzoM=
Subject key identifier: 12:1B:FB:62:15:CD:72:EA:75:17:AE:69:C2:B5:38:18:02:3D:90:5F
Authority key identifier: 99:85:9B:1E:F0:21:4B:B9:FC:E8:E5:BF:15:26:F3:BD:11:EC:28:07
Certificate issuer: /CN=A91BF026/serialNumber=99859B1EF0214BB9FCE8E5BF1526F3BD11EC2807
Certificate serial: 16FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mYWbHvAhS7n86OW_FSbzvRHsKAc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.mft
Manifest number: 1F17
Signing time: Fri 31 Jan 2025 16:37:48 +0000
Manifest this update: Fri 31 Jan 2025 16:37:47 +0000
Manifest next update: Fri 07 Feb 2025 16:37:47 +0000
Files and hashes: 1: mYWbHvAhS7n86OW_FSbzvRHsKAc.crl (hash: 01kEtPUXaBgWlUWYHOsWruj3KBYEU1410Id/0a0bYH8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5886 (0x16fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF026/serialNumber=99859B1EF0214BB9FCE8E5BF1526F3BD11EC2807
Validity
Not Before: Jan 31 16:37:47 2025 GMT
Not After : Feb 7 16:37:47 2025 GMT
Subject: CN=679cfc5c-e729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e7:f0:63:2c:6d:59:df:dd:fa:ec:b7:93:ba:
a9:b9:e5:93:85:3d:2c:7f:a4:10:b1:53:41:41:9c:
d4:81:fa:fe:13:1d:28:64:57:df:1b:13:76:a5:e1:
f7:ea:b9:56:a4:ff:94:46:33:e1:8f:6b:21:4b:aa:
5d:d4:52:77:7c:7d:8a:17:f1:e1:63:62:86:52:09:
27:0e:00:f9:87:a8:74:5b:dc:59:f8:77:5d:b3:06:
72:2a:98:f5:3e:28:25:df:5f:06:4e:fe:8e:ed:dd:
96:0a:37:c4:9b:cb:b5:77:d4:44:7c:33:59:59:05:
97:d1:43:31:3f:a6:9b:0d:23:b9:ee:5b:6f:57:67:
17:d8:ea:83:3a:33:6f:d5:3d:56:78:96:1a:93:e8:
e3:34:c3:d4:e5:f2:ba:35:ff:bf:da:ba:7e:01:73:
6a:d2:6d:e1:cd:e8:48:27:f8:70:2d:00:42:c1:70:
6d:ac:56:c7:57:f1:95:ba:e7:39:0e:96:f6:52:4b:
cd:6d:08:39:1d:c9:f4:16:30:ae:49:bc:93:9e:a5:
81:5b:c8:e5:60:87:3d:6a:3c:89:78:32:49:b7:23:
c1:ea:9c:5c:26:be:d5:cb:40:4c:8c:b2:df:16:8a:
07:07:c7:74:f9:1c:99:02:b5:8f:1e:fd:ea:32:63:
9d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1B:FB:62:15:CD:72:EA:75:17:AE:69:C2:B5:38:18:02:3D:90:5F
X509v3 Authority Key Identifier:
keyid:99:85:9B:1E:F0:21:4B:B9:FC:E8:E5:BF:15:26:F3:BD:11:EC:28:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mYWbHvAhS7n86OW_FSbzvRHsKAc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:4e:56:fe:f1:ab:1a:08:5e:02:d7:91:dd:15:6d:a7:69:cf:
2a:be:18:eb:25:01:ef:d4:2f:37:4c:6a:79:45:17:71:e4:43:
48:c5:41:89:1a:7e:7a:8a:4d:b5:d0:b1:bc:1a:36:fb:95:8a:
d9:44:c1:3f:27:3c:96:d1:ef:63:0d:0c:8b:12:d3:96:00:ce:
72:89:2a:b7:ec:35:89:e4:0b:45:5f:1d:b4:bf:8b:6f:27:d6:
b8:62:03:a3:01:76:c7:ec:b6:17:25:c6:a6:34:cd:2f:7c:54:
bf:89:67:a3:e2:e9:b8:7c:f5:3b:05:67:29:6a:db:a6:75:65:
32:ba:b8:ab:43:40:6e:a8:ba:af:8e:af:b4:1b:50:6e:0e:95:
4e:7f:6d:e4:02:7e:5c:56:6b:56:a2:0e:1f:8f:1e:0f:8b:e5:
85:28:7c:b5:a2:13:b2:b0:72:68:ec:dc:16:2a:55:c1:2a:f8:
83:a8:28:39:64:93:7f:77:fe:86:73:00:d8:0b:e2:bd:84:ca:
d9:f3:be:67:9b:fd:3e:67:9a:ee:f3:c5:85:ed:b7:72:73:b3:
1a:15:94:e9:49:f7:53:d9:94:60:7a:1d:64:4b:11:1a:50:9b:
e7:7c:6c:95:75:c5:29:4e:7b:89:f4:f9:04:72:1e:d7:a1:cd:
da:8d:3f:ea
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkYwMjYxMTAvBgNVBAUTKDk5ODU5QjFFRjAyMTRCQjlGQ0U4RTVCRjE1MjZGM0JE
MTFFQzI4MDcwHhcNMjUwMTMxMTYzNzQ3WhcNMjUwMjA3MTYzNzQ3WjAYMRYwFAYD
VQQDEw02NzljZmM1Yy1lNzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuOfwYyxtWd/d+uy3k7qpueWThT0sf6QQsVNBQZzUgfr+Ex0oZFffGxN2peH3
6rlWpP+URjPhj2shS6pd1FJ3fH2KF/HhY2KGUgknDgD5h6h0W9xZ+HddswZyKpj1
Pigl318GTv6O7d2WCjfEm8u1d9REfDNZWQWX0UMxP6abDSO57ltvV2cX2OqDOjNv
1T1WeJYak+jjNMPU5fK6Nf+/2rp+AXNq0m3hzehIJ/hwLQBCwXBtrFbHV/GVuuc5
Dpb2UkvNbQg5Hcn0FjCuSbyTnqWBW8jlYIc9ajyJeDJJtyPB6pxcJr7Vy0BMjLLf
FooHB8d0+RyZArWPHv3qMmOdLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIb+2IV
zXLqdReuacK1OBgCPZBfMB8GA1UdIwQYMBaAFJmFmx7wIUu5/OjlvxUm870R7CgH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjAyNi8wMzI4QTg1Q0RE
RTAxMUU3QjI4MTA3NTdDNEY5QUUwMi9tWVdiSHZBaFM3bjg2T1dfRlNienZSSHNL
QWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21ZV2JIdkFoUzduODZPV19GU2J6dlJIc0tBYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RjAyNi8wMzI4QTg1Q0RERTAxMUU3QjI4MTA3NTdDNEY5QUUwMi9tWVdiSHZBaFM3
bjg2T1dfRlNienZSSHNLQWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCPTlb+8asaCF4C15HdFW2nac8qvhjrJQHv1C83TGp5RRdx5ENIxUGJ
Gn56ik210LG8Gjb7lYrZRME/JzyW0e9jDQyLEtOWAM5yiSq37DWJ5AtFXx20v4tv
J9a4YgOjAXbH7LYXJcamNM0vfFS/iWej4um4fPU7BWcpatumdWUyurirQ0BuqLqv
jq+0G1BuDpVOf23kAn5cVmtWog4fjx4Pi+WFKHy1ohOysHJo7NwWKlXBKviDqCg5
ZJN/d/6GcwDYC+K9hMrZ875nm/0+Z5ru88WF7bdyc7MaFZTpSfdT2ZRgeh1kSxEa
UJvnfGyVdcUpTnuJ9PkEch7Xoc3ajT/q
-----END CERTIFICATE-----
Generated at Wed Apr 30 15:41:30 2025 by rpki-client