Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft
File: bCTOJGStN3HjLDMIGNG32gFMaQk.mft (raw, json)
Hash identifier: Z2tIFnnD2LLsaV9qWxkBioTH/+HmDeDaXgynr55PsEM=
Subject key identifier: D9:2B:35:03:2A:CE:25:91:E0:FB:D9:70:E8:D4:E9:75:85:CE:50:8A
Authority key identifier: 6C:24:CE:24:64:AD:37:71:E3:2C:33:08:18:D1:B7:DA:01:4C:69:09
Certificate issuer: /CN=A91DC84C/serialNumber=6C24CE2464AD3771E32C330818D1B7DA014C6909
Certificate serial: BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft
Manifest number: BD
Signing time: Fri 31 Jan 2025 05:02:10 +0000
Manifest this update: Fri 31 Jan 2025 05:02:09 +0000
Manifest next update: Fri 07 Feb 2025 05:02:09 +0000
Files and hashes: 1: bCTOJGStN3HjLDMIGNG32gFMaQk.crl (hash: HIh2T50VYvKieonPGXHxyybx+gpc8jr5WP5+B5zg0Cs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189 (0xbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC84C/serialNumber=6C24CE2464AD3771E32C330818D1B7DA014C6909
Validity
Not Before: Jan 31 05:02:09 2025 GMT
Not After : Feb 7 05:02:09 2025 GMT
Subject: CN=679c5952-e13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:91:42:01:cf:8d:8d:ec:d1:bc:7a:43:33:fd:
80:ec:aa:c6:72:3f:19:0b:eb:55:8e:8c:2d:93:8d:
26:df:93:43:6d:3b:e6:2a:e3:96:66:50:61:49:4e:
8d:91:75:06:cd:34:14:70:d3:30:71:3d:35:ae:78:
da:13:0b:2e:6c:b8:f1:89:c8:c1:2a:63:d5:98:20:
33:61:89:32:05:62:65:b0:0f:a1:0d:3c:9f:43:39:
d8:af:16:74:1c:21:1a:42:d6:99:d2:b6:68:7d:6c:
de:40:55:fd:92:e1:8e:13:97:c2:54:38:ce:1d:33:
fc:18:6c:f8:98:33:1d:c1:86:d1:0a:d0:e8:57:fd:
85:54:13:b2:6c:c4:5a:95:ba:87:77:3a:25:b0:2a:
e3:22:9b:1a:74:8f:56:6b:23:53:ee:6b:db:70:c6:
8b:36:9e:11:ce:d8:5b:42:47:de:3f:d6:21:0b:4b:
e1:45:59:a0:2e:f4:c4:bf:32:6b:16:97:6b:1b:4d:
c6:ce:48:e0:97:fa:ac:56:75:86:a2:f9:d8:75:5a:
ea:66:64:90:c7:da:d6:85:f7:2a:33:23:ed:b5:fe:
3a:56:28:15:7e:ce:bf:a0:7e:8f:c3:16:f7:6a:1d:
e1:d0:04:5c:d9:91:4c:92:e6:9e:8e:52:b5:de:f0:
e3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2B:35:03:2A:CE:25:91:E0:FB:D9:70:E8:D4:E9:75:85:CE:50:8A
X509v3 Authority Key Identifier:
keyid:6C:24:CE:24:64:AD:37:71:E3:2C:33:08:18:D1:B7:DA:01:4C:69:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:ba:81:6a:93:ba:0f:d3:1f:56:b2:03:1e:89:5a:4c:ee:a4:
b1:4d:02:1b:bc:42:3d:36:a4:c7:39:d1:80:81:cb:df:97:d2:
fd:63:36:62:c7:26:37:76:85:06:7b:82:b6:12:6a:f6:11:03:
4f:a1:a7:66:39:ea:45:7f:1f:2c:51:7c:6b:7d:86:ec:dd:ae:
f0:a6:87:df:0b:18:6a:1c:ba:8f:87:aa:97:78:83:48:b5:b7:
35:62:02:e3:a9:88:e4:a2:23:75:c3:1d:c0:32:a8:6c:02:58:
af:5f:c8:77:02:3b:30:92:82:f7:2a:66:5e:90:d8:2a:7d:d5:
05:0d:a6:1e:e1:49:98:66:54:da:73:6b:cd:d4:30:e6:5d:a3:
af:50:37:cf:4c:20:9e:9e:c8:c8:ce:28:b2:f5:6c:2c:12:cf:
59:0a:1c:5c:40:bf:81:8f:54:3a:88:d1:90:f0:3b:24:39:a6:
cc:e1:a4:e1:32:58:d4:34:26:cd:f8:2c:1d:bb:af:8f:52:de:
71:ef:7d:1b:a2:d7:1a:82:86:00:c1:fc:5d:1f:23:d0:71:5b:
6a:ed:c1:ee:81:aa:19:75:34:b6:af:2c:b6:b5:b0:74:dd:47:
2e:ba:43:6d:7c:94:56:74:b1:d9:fd:32:4c:05:38:ca:bc:fd:
66:74:31:21
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REM4NEMxMTAvBgNVBAUTKDZDMjRDRTI0NjRBRDM3NzFFMzJDMzMwODE4RDFCN0RB
MDE0QzY5MDkwHhcNMjUwMTMxMDUwMjA5WhcNMjUwMjA3MDUwMjA5WjAYMRYwFAYD
VQQDEw02NzljNTk1Mi1lMTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2ZFCAc+NjezRvHpDM/2A7KrGcj8ZC+tVjowtk40m35NDbTvmKuOWZlBhSU6N
kXUGzTQUcNMwcT01rnjaEwsubLjxicjBKmPVmCAzYYkyBWJlsA+hDTyfQznYrxZ0
HCEaQtaZ0rZofWzeQFX9kuGOE5fCVDjOHTP8GGz4mDMdwYbRCtDoV/2FVBOybMRa
lbqHdzolsCrjIpsadI9WayNT7mvbcMaLNp4RzthbQkfeP9YhC0vhRVmgLvTEvzJr
FpdrG03Gzkjgl/qsVnWGovnYdVrqZmSQx9rWhfcqMyPttf46VigVfs6/oH6Pwxb3
ah3h0ARc2ZFMkuaejlK13vDj+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNkrNQMq
ziWR4PvZcOjU6XWFzlCKMB8GA1UdIwQYMBaAFGwkziRkrTdx4ywzCBjRt9oBTGkJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzg0Qy9GMzVCMzA1RUJG
MzExMUVFQTc5QzhFM0RDNEY5QUUwMi9iQ1RPSkdTdE4zSGpMRE1JR05HMzJnRk1h
UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JDVE9KR1N0TjNIakxETUlHTkczMmdGTWFRay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
Qzg0Qy9GMzVCMzA1RUJGMzExMUVFQTc5QzhFM0RDNEY5QUUwMi9iQ1RPSkdTdE4z
SGpMRE1JR05HMzJnRk1hUWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDGuoFqk7oP0x9WsgMeiVpM7qSxTQIbvEI9NqTHOdGAgcvfl9L9YzZi
xyY3doUGe4K2Emr2EQNPoadmOepFfx8sUXxrfYbs3a7wpoffCxhqHLqPh6qXeINI
tbc1YgLjqYjkoiN1wx3AMqhsAlivX8h3AjswkoL3KmZekNgqfdUFDaYe4UmYZlTa
c2vN1DDmXaOvUDfPTCCensjIziiy9WwsEs9ZChxcQL+Bj1Q6iNGQ8DskOabM4aTh
MljUNCbN+Cwdu6+PUt5x730botcagoYAwfxdHyPQcVtq7cHugaoZdTS2ryy2tbB0
3UcuukNtfJRWdLHZ/TJMBTjKvP1mdDEh
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:10:54 2025 by rpki-client