Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E06B4/5FE8DA04A71311EFA4E06431C4F9AE02/kj1Qf5wmm6IkXVvlR--xv-m0kYs.mft
File: kj1Qf5wmm6IkXVvlR--xv-m0kYs.mft (raw, json)
Hash identifier: 9TK0V48zAcwThoEaZklNf59xi/HknY+mHhT3rybMwjs=
Subject key identifier: 7A:07:B1:89:84:E9:A4:75:5C:58:3F:8B:2C:08:57:2E:01:A2:B0:8B
Authority key identifier: 92:3D:50:7F:9C:26:9B:A2:24:5D:5B:E5:47:EF:B1:BF:E9:B4:91:8B
Certificate issuer: /CN=A91E06B4/serialNumber=923D507F9C269BA2245D5BE547EFB1BFE9B4918B
Certificate serial: 27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj1Qf5wmm6IkXVvlR--xv-m0kYs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E06B4/5FE8DA04A71311EFA4E06431C4F9AE02/kj1Qf5wmm6IkXVvlR--xv-m0kYs.mft
Manifest number: 27
Signing time: Fri 31 Jan 2025 06:50:51 +0000
Manifest this update: Fri 31 Jan 2025 06:50:51 +0000
Manifest next update: Fri 07 Feb 2025 06:50:51 +0000
Files and hashes: 1: kj1Qf5wmm6IkXVvlR--xv-m0kYs.crl (hash: XrmBIJQMWItumr3vrxeekM1ur5GgTuZtikEh78TwZVk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E06B4/serialNumber=923D507F9C269BA2245D5BE547EFB1BFE9B4918B
Validity
Not Before: Jan 31 06:50:51 2025 GMT
Not After : Feb 7 06:50:51 2025 GMT
Subject: CN=679c72cb-0f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c1:db:91:99:04:8c:84:0e:f1:3e:a7:e5:ef:
de:2e:57:1c:07:52:8b:78:44:58:8c:ae:ce:be:ba:
7e:b9:92:10:dc:47:4c:7b:08:fd:74:b6:b1:4b:38:
a7:6e:bb:62:a2:33:07:cd:27:75:dc:b4:ed:a9:34:
97:9f:c4:5b:8a:f8:af:8c:de:8b:94:6d:41:89:9c:
16:5d:ce:0a:d9:f5:3f:6d:d8:31:59:a6:57:2c:51:
3e:a5:f1:75:2c:58:64:67:47:29:cb:63:66:fe:a3:
8d:09:e5:c8:96:91:9a:ea:f6:c2:76:2a:1c:f3:b4:
b9:a8:90:c2:cc:4b:41:d9:65:bb:f2:66:05:a3:cd:
97:b5:f4:87:4d:0e:e2:cb:2e:eb:d6:4b:4f:7b:61:
aa:ee:3b:53:2b:4d:d6:c9:b6:c2:29:83:0d:1e:73:
e6:59:14:4f:77:94:c3:75:db:ae:16:ec:77:0f:be:
26:83:ce:65:85:0c:c7:18:41:8f:b7:95:fe:a6:60:
13:d3:0d:d8:cb:69:aa:ce:98:f9:f7:21:d3:40:b0:
89:4f:e0:ed:45:8b:a6:4f:be:01:b4:94:1c:f3:88:
bc:17:52:8d:90:6a:d5:d2:3a:56:2b:0f:e2:7b:fd:
17:30:46:e5:e1:4b:57:12:af:38:8a:6f:95:ce:7d:
99:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:07:B1:89:84:E9:A4:75:5C:58:3F:8B:2C:08:57:2E:01:A2:B0:8B
X509v3 Authority Key Identifier:
keyid:92:3D:50:7F:9C:26:9B:A2:24:5D:5B:E5:47:EF:B1:BF:E9:B4:91:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E06B4/5FE8DA04A71311EFA4E06431C4F9AE02/kj1Qf5wmm6IkXVvlR--xv-m0kYs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj1Qf5wmm6IkXVvlR--xv-m0kYs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E06B4/5FE8DA04A71311EFA4E06431C4F9AE02/kj1Qf5wmm6IkXVvlR--xv-m0kYs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:87:c6:df:61:c7:02:5c:45:fd:f2:91:f4:94:2a:14:a8:e9:
d1:cf:e8:aa:69:1a:49:63:e1:fd:c5:22:3b:62:8a:51:66:86:
6e:b4:da:2a:46:26:72:fd:5a:c3:46:02:8c:37:6f:4a:1b:95:
ca:d4:3a:c4:a3:81:de:cc:78:5e:3c:a5:85:b7:06:00:c6:48:
58:be:39:8f:6b:39:3a:dc:46:4c:b4:98:76:97:de:b9:90:03:
a3:1c:23:4c:59:a4:60:0c:75:94:32:08:52:a2:4b:af:e3:c5:
31:df:8d:b8:86:2b:17:0f:41:e7:4b:bb:15:db:d8:7b:fe:35:
8a:15:d5:6c:10:99:29:79:de:cd:6e:f2:e9:34:24:ef:9a:a1:
e8:c0:c9:3c:fa:cc:d5:70:5d:7d:5b:73:13:4b:c0:7e:28:de:
bd:2f:a1:58:83:0e:7f:e4:bd:7f:b6:ef:50:e9:81:cc:f2:7b:
6e:d7:c4:cb:ec:38:56:a1:0c:f5:9f:d1:52:ea:e0:8e:a5:4d:
b0:8b:b7:22:85:11:d3:56:97:35:f8:40:55:d3:3d:f4:5b:32:
fa:0c:1d:92:57:f7:5d:4b:be:4d:8a:11:ab:b8:89:e7:cf:36:
e0:6c:ec:60:e1:95:ca:c8:93:4a:75:07:6f:e4:f1:80:32:6d:
e0:0a:a4:62
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
MDZCNDExMC8GA1UEBRMoOTIzRDUwN0Y5QzI2OUJBMjI0NUQ1QkU1NDdFRkIxQkZF
OUI0OTE4QjAeFw0yNTAxMzEwNjUwNTFaFw0yNTAyMDcwNjUwNTFaMBgxFjAUBgNV
BAMTDTY3OWM3MmNiLTBmMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDHwduRmQSMhA7xPqfl794uVxwHUot4RFiMrs6+un65khDcR0x7CP10trFLOKdu
u2KiMwfNJ3XctO2pNJefxFuK+K+M3ouUbUGJnBZdzgrZ9T9t2DFZplcsUT6l8XUs
WGRnRynLY2b+o40J5ciWkZrq9sJ2KhzztLmokMLMS0HZZbvyZgWjzZe19IdNDuLL
LuvWS097YaruO1MrTdbJtsIpgw0ec+ZZFE93lMN1264W7HcPviaDzmWFDMcYQY+3
lf6mYBPTDdjLaarOmPn3IdNAsIlP4O1Fi6ZPvgG0lBzziLwXUo2QatXSOlYrD+J7
/RcwRuXhS1cSrziKb5XOfZnfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUegexiYTp
pHVcWD+LLAhXLgGisIswHwYDVR0jBBgwFoAUkj1Qf5wmm6IkXVvlR++xv+m0kYsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwNkI0LzVGRThEQTA0QTcx
MzExRUZBNEUwNjQzMUM0RjlBRTAyL2tqMVFmNXdtbTZJa1hWdmxSLS14di1tMGtZ
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIva2oxUWY1d21tNklrWFZ2bFItLXh2LW0wa1lzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw
NkI0LzVGRThEQTA0QTcxMzExRUZBNEUwNjQzMUM0RjlBRTAyL2tqMVFmNXdtbTZJ
a1hWdmxSLS14di1tMGtZcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAA+Hxt9hxwJcRf3ykfSUKhSo6dHP6KppGklj4f3FIjtiilFmhm602ipG
JnL9WsNGAow3b0oblcrUOsSjgd7MeF48pYW3BgDGSFi+OY9rOTrcRky0mHaX3rmQ
A6McI0xZpGAMdZQyCFKiS6/jxTHfjbiGKxcPQedLuxXb2Hv+NYoV1WwQmSl53s1u
8uk0JO+aoejAyTz6zNVwXX1bcxNLwH4o3r0voViDDn/kvX+271Dpgczye27XxMvs
OFahDPWf0VLq4I6lTbCLtyKFEdNWlzX4QFXTPfRbMvoMHZJX911Lvk2KEau4iefP
NuBs7GDhlcrIk0p1B2/k8YAybeAKpGI=
-----END CERTIFICATE-----
Generated at Sun Apr 27 14:57:21 2025 by rpki-client