Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft
File: xQo91YIWmexaCS_v5V5AfVvQy6U.mft (raw, json)
Hash identifier: hC6sdSIFpOTtq4fVtKy1Q2C2EmMplilPygsqbElNiFY=
Subject key identifier: DE:ED:93:71:AA:D1:7A:6C:87:E8:FE:4A:90:2A:C0:BE:91:98:0C:22
Authority key identifier: C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5
Certificate issuer: /CN=A91C2E41/serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5
Certificate serial: 3444
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft
Manifest number: 3442
Signing time: Fri 31 Jan 2025 15:12:54 +0000
Manifest this update: Fri 31 Jan 2025 15:12:54 +0000
Manifest next update: Fri 07 Feb 2025 15:12:54 +0000
Files and hashes: 1: xQo91YIWmexaCS_v5V5AfVvQy6U.crl (hash: NGW2bCl8nzr4IWeXOuXO+dDrISUrBle3djVtRzJjsa8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13380 (0x3444)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2E41/serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5
Validity
Not Before: Jan 31 15:12:54 2025 GMT
Not After : Feb 7 15:12:54 2025 GMT
Subject: CN=679ce876-69c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f9:ab:21:fe:b7:39:b3:83:9f:1d:98:98:f8:
0c:1c:d7:bf:6d:d2:36:d3:2f:c8:de:c5:d7:95:de:
22:aa:22:f3:73:83:c3:dd:b5:db:53:37:ad:c6:df:
19:e4:a4:bd:c1:cf:ed:53:f4:3e:36:63:ad:67:93:
11:2c:de:be:7e:26:0d:f4:c1:b8:13:7a:aa:1e:fb:
fd:b2:7b:f5:6b:5a:b2:6a:8f:88:f9:21:15:35:29:
75:c7:97:78:8f:91:eb:07:eb:d2:d2:a5:df:1e:dc:
cd:c4:4f:09:b7:46:3f:74:11:98:d7:4e:1c:1b:b3:
ae:3a:15:36:7d:60:c4:29:88:72:d5:3e:1c:6f:be:
57:4b:f9:df:cb:3e:e8:25:bc:e8:10:ca:70:67:f0:
27:88:e9:2c:d7:63:4a:f5:0e:7d:35:ad:0e:29:89:
17:15:45:b6:c7:db:98:2c:c5:f2:32:28:6a:59:ae:
6d:a9:19:fb:7f:1d:4e:57:78:49:5e:69:f8:3d:bb:
4f:33:b5:38:fd:3c:af:23:a4:88:df:62:bd:da:98:
87:97:b2:1e:8c:d8:40:19:11:d9:4b:c3:4a:9c:1f:
b1:ae:34:ee:11:a5:92:c3:dd:9d:65:3b:aa:17:e7:
9e:ea:7a:33:54:33:3d:19:ee:9e:de:58:af:6b:99:
5d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:ED:93:71:AA:D1:7A:6C:87:E8:FE:4A:90:2A:C0:BE:91:98:0C:22
X509v3 Authority Key Identifier:
keyid:C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:e6:55:81:41:d6:f3:a9:92:47:5b:18:e8:b9:03:35:f3:57:
7c:96:be:35:63:55:e2:cd:d7:1b:87:0f:8c:ea:f6:57:33:3e:
c4:f2:70:96:d8:87:f8:03:05:5c:83:c9:05:4e:ae:25:6c:52:
61:d8:66:2e:f0:d7:94:5d:23:a9:06:95:b8:46:75:67:81:e1:
34:40:ce:ce:1c:c2:21:13:bd:1c:e7:45:a8:f8:9a:8d:94:a1:
ac:51:5e:1e:31:37:74:a2:79:9f:bc:48:ed:60:77:2c:ca:e6:
fd:b4:bb:60:f5:e0:fd:6e:2d:ed:dc:77:48:17:2b:8f:e8:8f:
7e:c9:69:aa:fb:5c:e0:66:3f:25:22:fc:6f:ed:14:26:88:5b:
e7:96:5c:7c:2d:f5:40:1e:a8:ab:4a:c2:2c:c3:82:93:dc:85:
95:9f:ca:e3:93:65:09:b8:cd:4f:0f:3d:3a:fa:d1:45:70:ca:
3e:93:02:fd:d9:95:e3:dc:56:71:8b:dd:1f:d8:1a:8b:17:07:
2a:ce:d0:ac:23:0e:fc:dc:20:16:02:8c:c7:66:83:22:46:1b:
5c:de:7f:da:cc:80:3d:f3:07:8f:84:24:ee:74:17:01:ce:13:
22:73:2f:e8:6c:84:d4:54:a0:9b:e5:bd:f1:ba:ea:d9:9d:3c:
11:a0:3c:32
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzJFNDExMTAvBgNVBAUTKEM1MEEzREQ1ODIxNjk5RUM1QTA5MkZFRkU1NUU0MDdE
NUJEMENCQTUwHhcNMjUwMTMxMTUxMjU0WhcNMjUwMjA3MTUxMjU0WjAYMRYwFAYD
VQQDEw02NzljZTg3Ni02OWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwPmrIf63ObODnx2YmPgMHNe/bdI20y/I3sXXld4iqiLzc4PD3bXbUzetxt8Z
5KS9wc/tU/Q+NmOtZ5MRLN6+fiYN9MG4E3qqHvv9snv1a1qyao+I+SEVNSl1x5d4
j5HrB+vS0qXfHtzNxE8Jt0Y/dBGY104cG7OuOhU2fWDEKYhy1T4cb75XS/nfyz7o
JbzoEMpwZ/AniOks12NK9Q59Na0OKYkXFUW2x9uYLMXyMihqWa5tqRn7fx1OV3hJ
Xmn4PbtPM7U4/TyvI6SI32K92piHl7IejNhAGRHZS8NKnB+xrjTuEaWSw92dZTuq
F+ee6nozVDM9Ge6e3liva5ld0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7tk3Gq
0Xpsh+j+SpAqwL6RmAwiMB8GA1UdIwQYMBaAFMUKPdWCFpnsWgkv7+VeQH1b0Mul
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkU0MS84NzU3NTE4RTFE
QTQxMUUyQjkyMTlFOUEwOEIwMkNEMi94UW85MVlJV21leGFDU192NVY1QWZWdlF5
NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hRbzkxWUlXbWV4YUNTX3Y1VjVBZlZ2UXk2VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MkU0MS84NzU3NTE4RTFEQTQxMUUyQjkyMTlFOUEwOEIwMkNEMi94UW85MVlJV21l
eGFDU192NVY1QWZWdlF5NlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCS5lWBQdbzqZJHWxjouQM181d8lr41Y1Xizdcbhw+M6vZXMz7E8nCW
2If4AwVcg8kFTq4lbFJh2GYu8NeUXSOpBpW4RnVngeE0QM7OHMIhE70c50Wo+JqN
lKGsUV4eMTd0onmfvEjtYHcsyub9tLtg9eD9bi3t3HdIFyuP6I9+yWmq+1zgZj8l
Ivxv7RQmiFvnllx8LfVAHqirSsIsw4KT3IWVn8rjk2UJuM1PDz06+tFFcMo+kwL9
2ZXj3FZxi90f2BqLFwcqztCsIw783CAWAozHZoMiRhtc3n/azIA98wePhCTudBcB
zhMicy/obITUVKCb5b3xuurZnTwRoDwy
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:04:23 2025 by rpki-client