Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft
File: hDJHwKwYH8NmZqRDchryHZ2mUNo.mft (raw, json)
Hash identifier: 3xmxFR2JPPRCLGZVPVlKlcMqLxXwV+fiijbPZ/SAP5I=
Subject key identifier: 8C:B2:31:DA:B8:A9:81:47:C9:59:3C:54:97:CF:8D:68:C5:FA:28:BE
Authority key identifier: 84:32:47:C0:AC:18:1F:C3:66:66:A4:43:72:1A:F2:1D:9D:A6:50:DA
Certificate issuer: /CN=A91CEAE0/serialNumber=843247C0AC181FC36666A443721AF21D9DA650DA
Certificate serial: 8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDJHwKwYH8NmZqRDchryHZ2mUNo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft
Manifest number: 89
Signing time: Fri 31 Jan 2025 05:40:28 +0000
Manifest this update: Fri 31 Jan 2025 05:40:27 +0000
Manifest next update: Fri 07 Feb 2025 05:40:27 +0000
Files and hashes: 1: hDJHwKwYH8NmZqRDchryHZ2mUNo.crl (hash: LWqVv2cynTqk0lmQK5tZFkl2iUxSteaxjfUBVFZqIws=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEAE0/serialNumber=843247C0AC181FC36666A443721AF21D9DA650DA
Validity
Not Before: Jan 31 05:40:27 2025 GMT
Not After : Feb 7 05:40:27 2025 GMT
Subject: CN=679c624c-81c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d0:80:f9:05:c6:7a:bc:26:f6:1d:1b:55:ac:
13:83:53:f1:67:ab:1a:bf:ef:08:6a:eb:1b:bd:3c:
56:43:83:ac:31:07:25:8d:f0:5b:d6:19:d7:2e:7f:
b0:6f:c9:b6:80:fa:38:83:d9:f4:35:10:0c:cd:cc:
17:28:1c:09:a0:a9:6b:29:72:20:23:22:b8:e4:bc:
15:57:84:16:0c:5e:7f:a7:73:53:bb:65:20:6d:8c:
c6:e7:a7:7d:e0:39:d2:14:0a:d4:2d:34:f2:ac:58:
c3:c6:52:5c:0b:2c:19:3b:45:9e:71:02:3b:83:1c:
be:49:62:6b:d8:b9:d6:89:d0:b9:5f:a3:8e:a2:1b:
c7:48:da:9e:1b:e6:22:2b:b5:57:91:5f:09:e8:31:
d0:e4:c9:e5:56:22:71:67:8f:9e:22:b1:bf:ee:bc:
2a:64:35:90:26:c1:3a:05:9d:12:23:27:53:42:1a:
95:1b:0e:0a:40:95:3a:54:ad:6e:58:17:b0:09:68:
f7:02:5a:54:df:84:bb:f7:f0:75:6a:02:c5:9c:56:
06:26:40:f2:a1:5d:a3:31:ab:7a:8c:7c:43:27:ad:
06:c7:4f:5f:d5:fd:73:a0:53:0a:69:ed:43:43:92:
1f:0a:6b:32:47:5c:5b:59:83:a2:f7:b9:af:45:90:
52:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B2:31:DA:B8:A9:81:47:C9:59:3C:54:97:CF:8D:68:C5:FA:28:BE
X509v3 Authority Key Identifier:
keyid:84:32:47:C0:AC:18:1F:C3:66:66:A4:43:72:1A:F2:1D:9D:A6:50:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDJHwKwYH8NmZqRDchryHZ2mUNo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:d3:62:9c:46:50:b0:53:60:af:88:51:aa:f3:59:47:f9:29:
9c:20:a6:3f:f2:0f:98:31:b1:95:8a:cc:45:81:85:11:03:ae:
9c:c9:db:18:2f:bc:5c:ba:90:aa:e7:88:af:14:89:fb:00:ab:
99:31:dc:49:a7:2c:30:98:d5:6f:3e:f2:ce:e3:09:47:59:df:
5f:dc:b9:a9:e3:e4:84:cb:c7:7d:9a:4b:f7:81:4d:50:8f:6c:
1b:75:68:6a:03:4f:34:c1:a2:f9:7e:07:a1:80:af:82:fc:f1:
e2:ad:18:29:62:5b:eb:9a:83:3e:e4:3a:7c:18:0e:7e:3f:70:
1a:80:54:50:ec:26:6f:c3:4b:8c:2c:c9:d5:63:20:ed:49:6e:
10:e7:80:02:a0:6f:f1:b3:23:4e:4d:12:4a:e2:89:d7:7e:0e:
a7:fb:5c:ec:77:b6:fb:33:a3:2c:6d:40:8f:1a:60:3b:b7:f3:
e8:81:bf:0c:6e:58:e1:3c:52:29:7a:6f:2a:42:9c:bc:40:8b:
fd:bf:c6:87:6f:75:e7:2c:5e:f6:af:4b:d6:45:d2:24:0a:87:
2b:4d:c1:35:d2:52:d3:51:f6:d5:97:f0:bc:2b:70:53:1c:d3:
bf:1f:2b:d2:11:59:3d:c2:5e:8e:51:8a:22:f9:b0:3e:fa:88:
63:f7:34:22
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0VBRTAxMTAvBgNVBAUTKDg0MzI0N0MwQUMxODFGQzM2NjY2QTQ0MzcyMUFGMjFE
OURBNjUwREEwHhcNMjUwMTMxMDU0MDI3WhcNMjUwMjA3MDU0MDI3WjAYMRYwFAYD
VQQDEw02NzljNjI0Yy04MWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuNCA+QXGerwm9h0bVawTg1PxZ6sav+8IausbvTxWQ4OsMQcljfBb1hnXLn+w
b8m2gPo4g9n0NRAMzcwXKBwJoKlrKXIgIyK45LwVV4QWDF5/p3NTu2UgbYzG56d9
4DnSFArULTTyrFjDxlJcCywZO0WecQI7gxy+SWJr2LnWidC5X6OOohvHSNqeG+Yi
K7VXkV8J6DHQ5MnlViJxZ4+eIrG/7rwqZDWQJsE6BZ0SIydTQhqVGw4KQJU6VK1u
WBewCWj3AlpU34S79/B1agLFnFYGJkDyoV2jMat6jHxDJ60Gx09f1f1zoFMKae1D
Q5IfCmsyR1xbWYOi97mvRZBSHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIyyMdq4
qYFHyVk8VJfPjWjF+ii+MB8GA1UdIwQYMBaAFIQyR8CsGB/DZmakQ3Ia8h2dplDa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFFMC9CQzUyMUE1NDE5
MEExMUVGQTkwRUM5MjlDNEY5QUUwMi9oREpId0t3WUg4Tm1acVJEY2hyeUhaMm1V
Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hESkh3S3dZSDhObVpxUkRjaHJ5SFoybVVOby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RUFFMC9CQzUyMUE1NDE5MEExMUVGQTkwRUM5MjlDNEY5QUUwMi9oREpId0t3WUg4
Tm1acVJEY2hyeUhaMm1VTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBE02KcRlCwU2CviFGq81lH+SmcIKY/8g+YMbGVisxFgYURA66cydsY
L7xcupCq54ivFIn7AKuZMdxJpywwmNVvPvLO4wlHWd9f3Lmp4+SEy8d9mkv3gU1Q
j2wbdWhqA080waL5fgehgK+C/PHirRgpYlvrmoM+5Dp8GA5+P3AagFRQ7CZvw0uM
LMnVYyDtSW4Q54ACoG/xsyNOTRJK4onXfg6n+1zsd7b7M6MsbUCPGmA7t/Pogb8M
bljhPFIpem8qQpy8QIv9v8aHb3XnLF72r0vWRdIkCocrTcE10lLTUfbVl/C8K3BT
HNO/HyvSEVk9wl6OUYoi+bA++ohj9zQi
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:21:06 2025 by rpki-client