Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.mft
File: 4Y-ehXQ6vsrARiuP30On20pij_k.mft (raw, json)
Hash identifier: LFDUGbHyLbj5a/fDykZKnXeuRVyjir5/j+hCZB6Ln9M=
Subject key identifier: B5:36:01:CD:B0:AA:5D:D4:03:04:24:DC:CA:94:33:1D:F2:E6:0C:F4
Authority key identifier: E1:8F:9E:85:74:3A:BE:CA:C0:46:2B:8F:DF:43:A7:DB:4A:62:8F:F9
Certificate issuer: /CN=A91C9A8D/serialNumber=E18F9E85743ABECAC0462B8FDF43A7DB4A628FF9
Certificate serial: 03AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Y-ehXQ6vsrARiuP30On20pij_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.mft
Manifest number: 03A5
Signing time: Fri 31 Jan 2025 00:49:49 +0000
Manifest this update: Fri 31 Jan 2025 00:49:48 +0000
Manifest next update: Fri 07 Feb 2025 00:49:48 +0000
Files and hashes: 1: 4Y-ehXQ6vsrARiuP30On20pij_k.crl (hash: EnLUnleQw034IpmcBc4WX8PHL5Jpc7LqeTFt05cIWoQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 938 (0x3aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9A8D/serialNumber=E18F9E85743ABECAC0462B8FDF43A7DB4A628FF9
Validity
Not Before: Jan 31 00:49:48 2025 GMT
Not After : Feb 7 00:49:48 2025 GMT
Subject: CN=679c1e2c-af34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:65:bd:09:82:f7:bf:bc:f5:8c:35:89:b8:42:
ea:3b:e9:bd:71:45:03:f8:27:64:b3:93:c0:c6:8a:
ed:b3:89:2e:b0:4d:2a:7b:05:fc:ba:10:56:84:f3:
8c:67:a5:cd:bb:e9:44:72:ce:a1:6a:b2:25:51:c5:
b9:b3:f6:fb:39:57:90:8c:c6:7b:d1:19:df:d4:4e:
a8:d3:ca:51:94:95:bf:4c:63:cb:18:bf:46:56:87:
35:67:95:ad:4d:21:e5:19:a8:48:21:a3:d6:da:6b:
e2:0d:6e:ab:24:09:96:ce:d3:17:6e:40:88:19:8e:
0b:b1:8b:30:ff:b8:b2:68:15:2f:14:91:58:6f:a3:
ea:ad:3e:e4:4e:00:be:31:e6:b8:ae:f8:c9:59:74:
e5:94:69:4d:af:98:e2:d5:4a:55:4b:2f:f3:ad:de:
a8:77:a4:d7:8d:fc:f0:36:a8:02:f6:cd:e9:f7:ff:
27:e8:c5:ff:cb:1a:29:45:17:53:12:9c:8b:04:f4:
a5:07:d2:93:a0:73:4e:48:c4:f9:fd:d8:dc:e4:48:
36:0c:8c:32:10:5f:41:05:33:41:d0:53:ea:80:ed:
34:5e:b1:2e:f4:2a:54:29:66:50:6c:0e:46:19:bc:
49:66:ed:4e:a7:ee:cc:cd:68:73:85:eb:af:4a:98:
fd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:36:01:CD:B0:AA:5D:D4:03:04:24:DC:CA:94:33:1D:F2:E6:0C:F4
X509v3 Authority Key Identifier:
keyid:E1:8F:9E:85:74:3A:BE:CA:C0:46:2B:8F:DF:43:A7:DB:4A:62:8F:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Y-ehXQ6vsrARiuP30On20pij_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:22:b6:1c:e1:9a:e8:fa:f9:a1:51:48:7d:5c:7b:bc:a5:50:
fc:41:d0:d4:92:5f:85:5c:38:a0:be:e4:23:9e:95:0c:92:1b:
6e:f6:43:f3:9d:7f:03:aa:a7:04:2c:f8:24:6d:25:7d:e4:66:
e6:e0:c1:2d:09:7a:3f:26:c6:61:4f:74:9e:8f:c2:3f:86:00:
74:42:08:aa:8f:34:6a:c0:2b:8e:f2:b7:bf:86:d7:68:c1:d4:
64:0e:1d:2d:90:07:65:f8:c1:ac:3b:7b:f5:35:75:9d:64:5e:
7a:f1:5f:19:39:f0:c9:d7:af:c4:c0:ba:8c:d4:3f:bd:08:81:
f2:bb:b8:43:44:59:ab:fb:70:8d:13:9c:c6:8a:cd:17:c2:fa:
76:d1:c1:7f:36:92:44:95:e3:22:71:9a:e6:19:89:69:da:c9:
19:29:6b:dd:71:2b:d2:02:d8:1f:e9:9d:a2:75:92:c0:17:0d:
eb:33:a8:8f:a5:d7:38:4c:b7:5d:34:6b:92:c0:69:a0:8d:e9:
7d:eb:3e:fe:a2:96:44:1c:38:44:21:f1:2a:b5:f8:c5:43:17:
41:1e:de:9c:88:68:a0:1a:fe:7a:65:5f:d0:6e:48:f8:fd:74:
86:cb:62:29:7e:72:90:79:73:37:2d:a0:0c:27:53:3e:23:98:
e0:a8:7a:18
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzlBOEQxMTAvBgNVBAUTKEUxOEY5RTg1NzQzQUJFQ0FDMDQ2MkI4RkRGNDNBN0RC
NEE2MjhGRjkwHhcNMjUwMTMxMDA0OTQ4WhcNMjUwMjA3MDA0OTQ4WjAYMRYwFAYD
VQQDEw02NzljMWUyYy1hZjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt2W9CYL3v7z1jDWJuELqO+m9cUUD+Cdks5PAxorts4kusE0qewX8uhBWhPOM
Z6XNu+lEcs6harIlUcW5s/b7OVeQjMZ70Rnf1E6o08pRlJW/TGPLGL9GVoc1Z5Wt
TSHlGahIIaPW2mviDW6rJAmWztMXbkCIGY4LsYsw/7iyaBUvFJFYb6PqrT7kTgC+
Mea4rvjJWXTllGlNr5ji1UpVSy/zrd6od6TXjfzwNqgC9s3p9/8n6MX/yxopRRdT
EpyLBPSlB9KToHNOSMT5/djc5Eg2DIwyEF9BBTNB0FPqgO00XrEu9CpUKWZQbA5G
GbxJZu1Op+7MzWhzheuvSpj97QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLU2Ac2w
ql3UAwQk3MqUMx3y5gz0MB8GA1UdIwQYMBaAFOGPnoV0Or7KwEYrj99Dp9tKYo/5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUE4RC8zMkYxRjRDMjgz
RTkxMUVDQjg3M0M4NzFDNEY5QUUwMi80WS1laFhRNnZzckFSaXVQMzBPbjIwcGlq
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRZLWVoWFE2dnNyQVJpdVAzME9uMjBwaWpfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OUE4RC8zMkYxRjRDMjgzRTkxMUVDQjg3M0M4NzFDNEY5QUUwMi80WS1laFhRNnZz
ckFSaXVQMzBPbjIwcGlqX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCQIrYc4Zro+vmhUUh9XHu8pVD8QdDUkl+FXDigvuQjnpUMkhtu9kPz
nX8DqqcELPgkbSV95Gbm4MEtCXo/JsZhT3Sej8I/hgB0QgiqjzRqwCuO8re/htdo
wdRkDh0tkAdl+MGsO3v1NXWdZF568V8ZOfDJ16/EwLqM1D+9CIHyu7hDRFmr+3CN
E5zGis0Xwvp20cF/NpJEleMicZrmGYlp2skZKWvdcSvSAtgf6Z2idZLAFw3rM6iP
pdc4TLddNGuSwGmgjel96z7+opZEHDhEIfEqtfjFQxdBHt6ciGigGv56ZV/Qbkj4
/XSGy2IpfnKQeXM3LaAMJ1M+I5jgqHoY
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:00:02 2025 by rpki-client