Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft
File: q4PFkhuEDFQXM78Ucyl13UlzP_w.mft (raw, json)
Hash identifier: 2hqJSNWlilrgYMb61b7PbitohzNbn9YkLKVdKm5haDg=
Subject key identifier: 95:EC:EB:D2:F7:E8:0F:2E:EB:51:CE:5A:FD:EE:0B:94:F4:95:E5:92
Authority key identifier: AB:83:C5:92:1B:84:0C:54:17:33:BF:14:73:29:75:DD:49:73:3F:FC
Certificate issuer: /CN=A91F523F/serialNumber=AB83C5921B840C541733BF14732975DD49733FFC
Certificate serial: 21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4PFkhuEDFQXM78Ucyl13UlzP_w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft
Manifest number: 21
Signing time: Fri 31 Jan 2025 06:55:59 +0000
Manifest this update: Fri 31 Jan 2025 06:55:59 +0000
Manifest next update: Fri 07 Feb 2025 06:55:59 +0000
Files and hashes: 1: q4PFkhuEDFQXM78Ucyl13UlzP_w.crl (hash: Tt7Kba4pr3QjVIPTxjSTys7HDb7NQShFwlcrO3e/1tA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F523F/serialNumber=AB83C5921B840C541733BF14732975DD49733FFC
Validity
Not Before: Jan 31 06:55:59 2025 GMT
Not After : Feb 7 06:55:59 2025 GMT
Subject: CN=679c73ff-6d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f3:64:f3:d8:c9:ed:f7:fb:57:42:e1:70:b2:
e0:73:d7:65:22:db:e3:bd:97:ca:7c:9d:52:b2:61:
98:8a:a1:4f:d5:5c:3e:64:b1:c8:2b:a5:b3:d5:2a:
e7:b6:39:4b:53:9e:c8:97:2f:12:24:e9:f7:f4:ca:
64:e4:36:0e:8b:5e:c1:4c:db:9b:c9:cd:56:f5:d3:
8d:2c:82:d2:06:79:b2:5c:dc:45:ef:d3:57:88:04:
cd:21:56:f0:bb:b9:6b:b1:86:f3:47:aa:fc:a1:76:
e7:40:74:5f:ad:a1:50:70:0b:40:3b:3b:98:85:c9:
c5:89:22:4c:f7:74:98:04:ae:da:be:d4:af:0f:37:
0e:e9:d9:a7:33:6b:ea:ed:16:37:5f:be:be:88:88:
d3:b6:cf:41:e8:2a:f2:55:fe:7f:09:4f:be:66:cc:
6d:58:ed:0e:ca:d0:49:cf:ed:25:ae:1d:6c:fd:8b:
a4:1d:51:78:e8:5f:2b:55:28:11:56:65:71:1c:ff:
58:69:e8:f9:5f:2e:bf:ac:dc:21:a6:00:f6:df:3e:
12:b5:1f:c2:8a:88:6c:9f:31:2f:e4:eb:6d:c4:3a:
ed:ae:01:97:40:1b:7a:b6:78:cb:ea:01:63:59:d6:
e0:5b:91:8d:a5:4a:9e:d8:61:6a:f1:fe:bc:07:b1:
39:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EC:EB:D2:F7:E8:0F:2E:EB:51:CE:5A:FD:EE:0B:94:F4:95:E5:92
X509v3 Authority Key Identifier:
keyid:AB:83:C5:92:1B:84:0C:54:17:33:BF:14:73:29:75:DD:49:73:3F:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4PFkhuEDFQXM78Ucyl13UlzP_w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:d1:29:ae:19:c0:e0:53:77:fd:06:3d:20:5b:f2:34:51:06:
d4:89:3e:f2:94:f1:63:a1:a3:4c:0c:b2:78:94:6b:b1:89:23:
61:5a:a5:b2:3b:5a:f9:ed:01:f9:52:e5:f5:56:0d:2b:da:33:
2e:f6:af:a6:b0:46:1f:bc:23:82:c1:2a:b8:0f:fc:26:a4:cc:
3f:80:19:1b:34:71:9b:e0:9c:41:52:ab:dc:15:fe:36:b4:02:
c8:5f:e5:11:4e:a4:49:b8:f6:4c:78:3f:4d:74:86:e1:5a:a5:
d6:6a:01:75:17:5d:dc:58:f8:11:eb:b8:8f:31:a2:48:81:94:
a2:0f:a4:de:a3:f2:be:12:4f:83:87:bc:34:8f:49:fd:2a:44:
65:66:1a:07:f7:dc:a0:dc:7e:78:a2:4e:db:35:90:c7:fe:cd:
da:3e:c0:bf:ca:05:e6:b7:6c:f4:dc:83:95:0b:56:99:5c:2e:
41:b3:4d:07:5d:d4:f7:f8:94:3c:b3:4d:ae:3c:74:e2:3f:13:
16:0c:41:43:e4:b0:3e:bd:83:e9:32:af:00:51:79:68:7f:9c:
fa:0e:8b:d5:13:02:97:00:dc:84:5c:9f:86:a0:ab:26:98:af:
bb:d6:35:4b:19:ab:91:58:f0:14:96:ac:13:bb:f0:ea:14:dd:
8c:19:05:68
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
NTIzRjExMC8GA1UEBRMoQUI4M0M1OTIxQjg0MEM1NDE3MzNCRjE0NzMyOTc1REQ0
OTczM0ZGQzAeFw0yNTAxMzEwNjU1NTlaFw0yNTAyMDcwNjU1NTlaMBgxFjAUBgNV
BAMTDTY3OWM3M2ZmLTZkNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDe82Tz2Mnt9/tXQuFwsuBz12Ui2+O9l8p8nVKyYZiKoU/VXD5kscgrpbPVKue2
OUtTnsiXLxIk6ff0ymTkNg6LXsFM25vJzVb1040sgtIGebJc3EXv01eIBM0hVvC7
uWuxhvNHqvyhdudAdF+toVBwC0A7O5iFycWJIkz3dJgErtq+1K8PNw7p2acza+rt
Fjdfvr6IiNO2z0HoKvJV/n8JT75mzG1Y7Q7K0EnP7SWuHWz9i6QdUXjoXytVKBFW
ZXEc/1hp6PlfLr+s3CGmAPbfPhK1H8KKiGyfMS/k623EOu2uAZdAG3q2eMvqAWNZ
1uBbkY2lSp7YYWrx/rwHsTn/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlezr0vfo
Dy7rUc5a/e4LlPSV5ZIwHwYDVR0jBBgwFoAUq4PFkhuEDFQXM78Ucyl13UlzP/ww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1MjNGLzU2QTRDQjhBQjA1
MzExRUY5QzJCOEQzRkM0RjlBRTAyL3E0UEZraHVFREZRWE03OFVjeWwxM1VselBf
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcTRQRmtodUVERlFYTTc4VWN5bDEzVWx6UF93LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1
MjNGLzU2QTRDQjhBQjA1MzExRUY5QzJCOEQzRkM0RjlBRTAyL3E0UEZraHVFREZR
WE03OFVjeWwxM1VselBfdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAFnRKa4ZwOBTd/0GPSBb8jRRBtSJPvKU8WOho0wMsniUa7GJI2FapbI7
WvntAflS5fVWDSvaMy72r6awRh+8I4LBKrgP/CakzD+AGRs0cZvgnEFSq9wV/ja0
Ashf5RFOpEm49kx4P010huFapdZqAXUXXdxY+BHruI8xokiBlKIPpN6j8r4ST4OH
vDSPSf0qRGVmGgf33KDcfniiTts1kMf+zdo+wL/KBea3bPTcg5ULVplcLkGzTQdd
1Pf4lDyzTa48dOI/ExYMQUPksD69g+kyrwBReWh/nPoOi9UTApcA3IRcn4agqyaY
r7vWNUsZq5FY8BSWrBO78OoU3YwZBWg=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:05:03 2025 by rpki-client