Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
File: lQfxHRNjrFs5Lzb17zgixc_NaPk.mft (raw, json)
Hash identifier: eQAH7DFIAgq+auwB148jsdc7YXiDbExCUSiGQ5FrrBU=
Subject key identifier: 0A:66:CD:DD:A4:58:A6:87:BB:5F:9C:0B:E8:0E:F7:E4:B8:5A:5F:7B
Authority key identifier: 95:07:F1:1D:13:63:AC:5B:39:2F:36:F5:EF:38:22:C5:CF:CD:68:F9
Certificate issuer: /CN=A91EE8AC/serialNumber=9507F11D1363AC5B392F36F5EF3822C5CFCD68F9
Certificate serial: 0196
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQfxHRNjrFs5Lzb17zgixc_NaPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
Manifest number: 0234
Signing time: Fri 31 Jan 2025 02:48:07 +0000
Manifest this update: Fri 31 Jan 2025 02:48:06 +0000
Manifest next update: Fri 07 Feb 2025 02:48:06 +0000
Files and hashes: 1: lQfxHRNjrFs5Lzb17zgixc_NaPk.crl (hash: lOfEmpWaLY8w6opfXHOk0mD2vbRAgjbZ3Arh02c/OKg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 406 (0x196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE8AC/serialNumber=9507F11D1363AC5B392F36F5EF3822C5CFCD68F9
Validity
Not Before: Jan 31 02:48:06 2025 GMT
Not After : Feb 7 02:48:06 2025 GMT
Subject: CN=679c39e6-ac5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f3:03:ad:53:27:83:47:84:74:91:12:5d:6a:
9e:12:a3:32:d3:ed:2a:b9:e6:fe:9f:b2:5b:62:a3:
4f:f6:c5:30:fc:54:41:eb:8a:2b:92:42:1b:ca:e7:
0f:49:4c:48:79:60:88:72:c7:c2:be:30:d0:a3:81:
57:44:d0:5d:ad:83:6f:20:f9:78:43:24:eb:be:e1:
f7:82:93:36:51:b5:19:36:c0:15:ac:64:f7:f0:a7:
97:43:70:79:aa:c5:d6:3d:9a:23:94:6f:6e:dc:f8:
c3:a0:78:d0:c8:cb:8f:4c:a4:af:72:41:e4:f8:d4:
0c:a6:b2:d5:31:d9:13:ee:99:32:38:61:e4:1c:62:
1b:dd:fd:59:3f:df:68:6d:c7:b5:23:8f:a6:11:e2:
b5:74:2d:89:d0:25:13:76:5d:b0:bb:b4:cf:30:24:
1c:a6:13:d6:77:f6:ac:2d:26:03:fc:84:a7:1b:e2:
91:6f:55:75:19:c8:24:ae:a5:07:f1:7d:1e:c2:d9:
be:f4:c2:e9:6c:35:9f:e8:bd:48:d3:87:6f:6d:5c:
9f:68:77:b7:ff:44:f8:4d:11:e1:e2:ee:28:6a:4e:
26:c7:33:db:79:68:b2:96:b9:6b:b9:cf:d1:9c:0b:
ee:a2:bc:c7:20:6f:fd:ba:3f:be:d4:af:83:2b:31:
fb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:66:CD:DD:A4:58:A6:87:BB:5F:9C:0B:E8:0E:F7:E4:B8:5A:5F:7B
X509v3 Authority Key Identifier:
keyid:95:07:F1:1D:13:63:AC:5B:39:2F:36:F5:EF:38:22:C5:CF:CD:68:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQfxHRNjrFs5Lzb17zgixc_NaPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b6:38:95:41:3a:47:dc:aa:f2:6c:b3:b9:c9:99:fb:01:15:
2f:fe:21:43:4b:fc:78:df:5e:75:8f:a1:b3:66:68:87:a8:f3:
6e:3b:0b:24:7b:eb:64:c1:ef:d8:17:41:f7:56:6a:4d:af:c1:
d2:18:76:0b:27:25:e1:dc:aa:01:5f:f2:96:54:c6:b9:80:c9:
c0:62:a0:d0:21:07:3c:1e:ad:4a:7e:7a:d6:cb:cc:46:df:a8:
69:3a:f6:70:e3:f8:bf:a2:84:b1:a6:65:69:d6:fc:24:db:02:
7e:e1:84:8e:c1:12:90:54:94:27:12:87:32:61:f1:3f:af:1e:
57:03:fb:82:1c:8a:d2:1d:fe:63:d4:42:29:75:26:a6:55:ff:
1e:96:3c:34:f6:c8:91:ff:c7:df:0d:21:a3:d3:03:00:da:86:
e2:c1:bd:e9:9a:94:d1:65:c6:7a:de:05:a8:5e:7e:e8:d2:03:
be:f5:e9:dd:47:e7:c4:17:cf:82:15:ba:c6:39:d4:db:fb:b2:
64:0f:61:c0:18:cc:90:6d:a8:7f:6e:c2:43:c2:d9:ff:3b:f1:
6d:c6:3a:a7:66:fb:97:46:63:35:a8:55:3e:b8:36:7d:41:e9:
2f:6a:a7:e5:c5:76:f1:06:47:17:5b:b7:9d:fa:69:f0:cd:77:
1d:55:dd:a8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUU4QUMxMTAvBgNVBAUTKDk1MDdGMTFEMTM2M0FDNUIzOTJGMzZGNUVGMzgyMkM1
Q0ZDRDY4RjkwHhcNMjUwMTMxMDI0ODA2WhcNMjUwMjA3MDI0ODA2WjAYMRYwFAYD
VQQDEw02NzljMzllNi1hYzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv/MDrVMng0eEdJESXWqeEqMy0+0queb+n7JbYqNP9sUw/FRB64orkkIbyucP
SUxIeWCIcsfCvjDQo4FXRNBdrYNvIPl4QyTrvuH3gpM2UbUZNsAVrGT38KeXQ3B5
qsXWPZojlG9u3PjDoHjQyMuPTKSvckHk+NQMprLVMdkT7pkyOGHkHGIb3f1ZP99o
bce1I4+mEeK1dC2J0CUTdl2wu7TPMCQcphPWd/asLSYD/ISnG+KRb1V1GcgkrqUH
8X0ewtm+9MLpbDWf6L1I04dvbVyfaHe3/0T4TRHh4u4oak4mxzPbeWiylrlruc/R
nAvuorzHIG/9uj++1K+DKzH7JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFApmzd2k
WKaHu1+cC+gO9+S4Wl97MB8GA1UdIwQYMBaAFJUH8R0TY6xbOS829e84IsXPzWj5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRThBQy81MDM4RUM4QzdE
RUIxMUVEQTdDQTRBN0VDNEY5QUUwMi9sUWZ4SFJOanJGczVMemIxN3pnaXhjX05h
UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xRZnhIUk5qckZzNUx6YjE3emdpeGNfTmFQay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RThBQy81MDM4RUM4QzdERUIxMUVEQTdDQTRBN0VDNEY5QUUwMi9sUWZ4SFJOanJG
czVMemIxN3pnaXhjX05hUGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAstjiVQTpH3KrybLO5yZn7ARUv/iFDS/x43151j6GzZmiHqPNuOwsk
e+tkwe/YF0H3VmpNr8HSGHYLJyXh3KoBX/KWVMa5gMnAYqDQIQc8Hq1KfnrWy8xG
36hpOvZw4/i/ooSxpmVp1vwk2wJ+4YSOwRKQVJQnEocyYfE/rx5XA/uCHIrSHf5j
1EIpdSamVf8eljw09siR/8ffDSGj0wMA2obiwb3pmpTRZcZ63gWoXn7o0gO+9end
R+fEF8+CFbrGOdTb+7JkD2HAGMyQbah/bsJDwtn/O/FtxjqnZvuXRmM1qFU+uDZ9
QekvaqflxXbxBkcXW7ed+mnwzXcdVd2o
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:10:58 2025 by rpki-client