
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft
File: cz1KHp8pnM0_jnJKteer9Ci7GV0.mft (raw, json)
Hash identifier: 9HAR0WDFKZ8wPQtTBVps0yK6YA3CjwACGnVbW5qsXzU=
Subject key identifier: 0B:B6:29:DD:B3:79:A9:AF:93:A1:54:65:D3:37:B0:F1:30:A1:A0:29
Authority key identifier: 73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D
Certificate issuer: /CN=A91DE500/serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D
Certificate serial: B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft
Manifest number: B7
Signing time: Fri 31 Jan 2025 05:05:41 +0000
Manifest this update: Fri 31 Jan 2025 05:05:40 +0000
Manifest next update: Fri 07 Feb 2025 05:05:40 +0000
Files and hashes: 1: cz1KHp8pnM0_jnJKteer9Ci7GV0.crl (hash: 2fRlK03njYx4pf1C8bUPsvSybMlsknQ2PR4Hw2fJJhc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183 (0xb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE500/serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D
Validity
Not Before: Jan 31 05:05:40 2025 GMT
Not After : Feb 7 05:05:40 2025 GMT
Subject: CN=679c5a24-93f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:1b:52:d8:f0:86:30:f5:bc:00:b4:c4:0f:
55:89:1a:1c:db:52:de:7f:e0:9b:b4:c7:46:2a:25:
40:69:a8:ef:99:96:41:80:12:9d:80:41:a8:a0:c1:
da:5c:ed:a1:b1:27:3e:9e:81:fb:c7:98:e4:4c:8f:
b8:35:ab:53:ae:80:9a:af:3d:44:6b:97:12:7b:73:
0d:02:7c:8c:c0:5a:c6:30:ee:41:f5:46:ec:05:7d:
df:53:76:2b:f7:32:45:a3:07:32:c0:d0:9b:49:9b:
b7:a6:ad:c0:b2:a3:0a:6d:02:84:9d:d3:11:3f:1a:
69:35:01:03:0c:19:05:96:d3:f8:0c:5b:9e:a5:16:
db:1a:f2:eb:30:84:ef:ce:b3:4a:f4:53:f0:ed:6c:
54:fb:74:9d:30:da:b1:54:a9:83:f9:17:c2:f4:d3:
e5:22:3c:1d:57:be:5e:32:bb:bc:23:dd:08:86:a9:
a1:a3:e3:b9:9e:ff:11:34:c3:c6:0d:b5:35:1f:76:
81:a4:d2:40:87:f5:82:51:c7:f8:74:f1:9f:b1:3f:
f1:4c:c8:8d:c4:a1:7c:19:59:d3:aa:fb:f2:d9:9b:
8a:e5:59:24:d3:49:f5:a1:53:9b:30:1b:d4:e7:aa:
f8:91:b0:9f:68:1e:3e:c7:19:32:b9:71:bf:66:41:
01:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B6:29:DD:B3:79:A9:AF:93:A1:54:65:D3:37:B0:F1:30:A1:A0:29
X509v3 Authority Key Identifier:
keyid:73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:f2:94:c6:01:67:d7:1d:1b:80:8c:9c:b7:d0:82:e3:83:e4:
0a:87:a2:f6:31:c9:24:64:0a:ca:da:8c:29:e0:16:e2:d5:c4:
5a:a0:af:dc:3a:9f:65:06:e5:41:0c:57:ce:a0:70:95:fb:1c:
5f:61:16:d7:a0:ed:09:25:04:68:d9:59:00:93:14:56:0a:a0:
b4:37:e7:a9:fb:69:35:d9:b3:36:52:b1:73:c6:8e:2f:9d:f8:
cd:1f:d7:1d:af:d5:1a:bf:5b:09:9b:44:b5:45:01:19:0a:76:
b2:f0:f7:e1:10:ab:1b:43:d4:37:1a:09:60:9f:eb:f7:04:bf:
b9:72:67:95:18:42:7e:32:dd:18:12:6b:1e:ae:2e:04:ea:28:
d8:18:9d:8d:4c:ed:67:48:66:d0:8a:32:3c:86:44:50:3f:de:
d6:bd:13:57:d4:08:71:05:a6:bc:a4:d5:d7:f3:15:84:93:d8:
01:d4:6b:e0:0f:bb:a1:07:c6:ba:23:e1:c6:b3:7d:42:b5:5c:
2d:bd:45:68:17:c4:4d:a5:b5:5a:20:f9:8a:75:6d:96:c7:83:
2d:3f:12:3e:90:94:76:b5:10:aa:e3:13:62:09:95:19:3a:84:
f8:b0:df:b1:f6:cd:61:e6:b9:1d:db:19:63:fb:95:77:04:5f:
54:45:92:12
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REU1MDAxMTAvBgNVBAUTKDczM0Q0QTFFOUYyOTlDQ0QzRjhFNzI0QUI1RTdBQkY0
MjhCQjE5NUQwHhcNMjUwMTMxMDUwNTQwWhcNMjUwMjA3MDUwNTQwWjAYMRYwFAYD
VQQDEw02NzljNWEyNC05M2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtDEbUtjwhjD1vAC0xA9ViRoc21Lef+CbtMdGKiVAaajvmZZBgBKdgEGooMHa
XO2hsSc+noH7x5jkTI+4NatTroCarz1Ea5cSe3MNAnyMwFrGMO5B9UbsBX3fU3Yr
9zJFowcywNCbSZu3pq3AsqMKbQKEndMRPxppNQEDDBkFltP4DFuepRbbGvLrMITv
zrNK9FPw7WxU+3SdMNqxVKmD+RfC9NPlIjwdV75eMru8I90Ihqmho+O5nv8RNMPG
DbU1H3aBpNJAh/WCUcf4dPGfsT/xTMiNxKF8GVnTqvvy2ZuK5Vkk00n1oVObMBvU
56r4kbCfaB4+xxkyuXG/ZkEBfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAu2Kd2z
eamvk6FUZdM3sPEwoaApMB8GA1UdIwQYMBaAFHM9Sh6fKZzNP45ySrXnq/Qouxld
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC80OUU2RkU0NkM3
MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9jejFLSHA4cG5NMF9qbkpLdGVlcjlDaTdH
VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2N6MUtIcDhwbk0wX2puSkt0ZWVyOUNpN0dWMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RTUwMC80OUU2RkU0NkM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9jejFLSHA4cG5N
MF9qbkpLdGVlcjlDaTdHVjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCC8pTGAWfXHRuAjJy30ILjg+QKh6L2MckkZArK2owp4Bbi1cRaoK/c
Op9lBuVBDFfOoHCV+xxfYRbXoO0JJQRo2VkAkxRWCqC0N+ep+2k12bM2UrFzxo4v
nfjNH9cdr9Uav1sJm0S1RQEZCnay8PfhEKsbQ9Q3Gglgn+v3BL+5cmeVGEJ+Mt0Y
Emseri4E6ijYGJ2NTO1nSGbQijI8hkRQP97WvRNX1AhxBaa8pNXX8xWEk9gB1Gvg
D7uhB8a6I+HGs31CtVwtvUVoF8RNpbVaIPmKdW2Wx4MtPxI+kJR2tRCq4xNiCZUZ
OoT4sN+x9s1h5rkd2xlj+5V3BF9URZIS
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:38:52 2025 by rpki-client