Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft
File: EdT02sf7qLXBIiQwBTm9xhVEXeU.mft (raw, json)
Hash identifier: +P5p8qg9+fwaxIXGh3AacGHsdRKMPaHsmVNT1rCuPKE=
Subject key identifier: 92:92:AA:32:20:D5:0C:CA:9E:70:25:25:30:61:19:71:50:81:0F:8D
Authority key identifier: 11:D4:F4:DA:C7:FB:A8:B5:C1:22:24:30:05:39:BD:C6:15:44:5D:E5
Certificate issuer: /CN=A91F79A2/serialNumber=11D4F4DAC7FBA8B5C12224300539BDC615445DE5
Certificate serial: 7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdT02sf7qLXBIiQwBTm9xhVEXeU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft
Manifest number: 7E
Signing time: Fri 31 Jan 2025 05:47:13 +0000
Manifest this update: Fri 31 Jan 2025 05:47:12 +0000
Manifest next update: Fri 07 Feb 2025 05:47:12 +0000
Files and hashes: 1: EdT02sf7qLXBIiQwBTm9xhVEXeU.crl (hash: m2L1yWbMOpgaz6QP/X0c3ZoSww/1lCnwjBiYehavQnY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F79A2/serialNumber=11D4F4DAC7FBA8B5C12224300539BDC615445DE5
Validity
Not Before: Jan 31 05:47:12 2025 GMT
Not After : Feb 7 05:47:12 2025 GMT
Subject: CN=679c63e1-ab65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3b:40:49:4b:96:f8:b2:8f:32:d3:ba:c2:27:
7a:e5:e7:84:72:67:25:97:3d:98:61:0d:34:61:55:
4e:9d:21:5f:7d:f6:9a:d4:93:49:a8:d1:83:a4:d1:
ec:81:ca:69:4a:46:52:de:7c:ca:ae:be:51:11:4d:
96:f8:ce:61:dc:6c:05:15:3e:ae:2a:6a:c3:53:e8:
96:80:4b:99:94:b2:ed:46:a0:01:b9:94:d8:86:3a:
bd:4a:4e:35:45:23:f0:ba:4a:b8:96:f2:9e:3e:33:
76:f8:97:d8:c0:57:76:39:2e:a1:99:f0:7c:0d:bd:
fa:8b:33:6d:7e:ce:7f:09:53:7f:d4:74:c8:33:30:
71:51:73:26:c2:ca:dd:bd:5c:41:24:01:7f:a8:37:
2d:67:8a:4f:39:26:58:78:2b:8f:13:02:e6:36:8d:
32:4a:cf:52:ae:fe:a9:a9:70:5c:81:df:8b:72:81:
09:a1:e6:6a:86:3b:ff:0f:5b:84:6a:5a:fe:71:3b:
d2:4a:1c:26:a3:00:17:4c:a8:97:3b:ed:ab:13:d8:
a3:38:f4:78:2a:cb:72:73:0a:fa:30:d7:b2:4b:d5:
7e:32:ee:6f:10:ad:1b:a8:3b:53:1a:94:24:47:a9:
87:65:7e:59:71:6c:cd:07:bc:ea:ed:83:35:58:61:
bc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:92:AA:32:20:D5:0C:CA:9E:70:25:25:30:61:19:71:50:81:0F:8D
X509v3 Authority Key Identifier:
keyid:11:D4:F4:DA:C7:FB:A8:B5:C1:22:24:30:05:39:BD:C6:15:44:5D:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdT02sf7qLXBIiQwBTm9xhVEXeU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:23:fc:d8:79:2d:38:0f:74:4c:22:9c:0b:6d:1d:d8:41:d5:
b1:17:0d:e2:d7:63:3c:92:6c:f5:ba:a8:51:82:5d:d8:c0:39:
00:69:74:40:c8:6e:dc:59:9c:2e:55:5a:1c:ea:72:4a:b0:e6:
32:27:93:91:27:0c:02:58:fe:06:b6:70:18:e6:d3:d4:de:50:
28:8c:b8:ba:7c:5a:53:1c:1b:68:15:b8:1d:fa:67:85:df:21:
13:8b:29:02:b6:ad:9d:ef:51:61:d2:32:61:fa:f1:6e:1b:1e:
55:9d:02:da:2e:e9:b4:6f:cb:f1:06:3d:d8:e4:99:93:3a:e7:
02:d3:31:80:0f:18:86:f4:9d:34:df:88:67:71:ac:6d:89:f3:
e2:77:2c:2f:87:39:23:2e:bd:af:03:9c:33:88:ff:e9:ee:b6:
59:b2:63:44:f8:bb:f6:3a:a9:ad:73:6d:db:e9:b4:0d:68:15:
39:34:ae:99:a3:02:16:62:fe:d7:e8:b6:d8:e0:ed:71:4b:b9:
5b:a5:78:4d:7a:d8:2e:81:ac:97:96:67:b8:89:af:b6:4f:bb:
18:69:c6:68:29:52:9e:fe:04:31:ae:0f:76:e6:ff:09:e1:07:
cc:53:c8:01:35:22:66:f7:d4:c3:11:07:f3:57:d2:32:ec:ee:
d7:a4:8a:03
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
NzlBMjExMC8GA1UEBRMoMTFENEY0REFDN0ZCQThCNUMxMjIyNDMwMDUzOUJEQzYx
NTQ0NURFNTAeFw0yNTAxMzEwNTQ3MTJaFw0yNTAyMDcwNTQ3MTJaMBgxFjAUBgNV
BAMTDTY3OWM2M2UxLWFiNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5O0BJS5b4so8y07rCJ3rl54RyZyWXPZhhDTRhVU6dIV999prUk0mo0YOk0eyB
ymlKRlLefMquvlERTZb4zmHcbAUVPq4qasNT6JaAS5mUsu1GoAG5lNiGOr1KTjVF
I/C6SriW8p4+M3b4l9jAV3Y5LqGZ8HwNvfqLM21+zn8JU3/UdMgzMHFRcybCyt29
XEEkAX+oNy1nik85Jlh4K48TAuY2jTJKz1Ku/qmpcFyB34tygQmh5mqGO/8PW4Rq
Wv5xO9JKHCajABdMqJc77asT2KM49Hgqy3JzCvow17JL1X4y7m8QrRuoO1MalCRH
qYdlfllxbM0HvOrtgzVYYby/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkpKqMiDV
DMqecCUlMGEZcVCBD40wHwYDVR0jBBgwFoAUEdT02sf7qLXBIiQwBTm9xhVEXeUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3OUEyL0I4QzBCMEEwMjZB
MDExRUZCOUEzN0UzOUM0RjlBRTAyL0VkVDAyc2Y3cUxYQklpUXdCVG05eGhWRVhl
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRWRUMDJzZjdxTFhCSWlRd0JUbTl4aFZFWGVVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3
OUEyL0I4QzBCMEEwMjZBMDExRUZCOUEzN0UzOUM0RjlBRTAyL0VkVDAyc2Y3cUxY
QklpUXdCVG05eGhWRVhlVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBACUj/Nh5LTgPdEwinAttHdhB1bEXDeLXYzySbPW6qFGCXdjAOQBpdEDI
btxZnC5VWhzqckqw5jInk5EnDAJY/ga2cBjm09TeUCiMuLp8WlMcG2gVuB36Z4Xf
IROLKQK2rZ3vUWHSMmH68W4bHlWdAtou6bRvy/EGPdjkmZM65wLTMYAPGIb0nTTf
iGdxrG2J8+J3LC+HOSMuva8DnDOI/+nutlmyY0T4u/Y6qa1zbdvptA1oFTk0rpmj
AhZi/tfottjg7XFLuVuleE162C6BrJeWZ7iJr7ZPuxhpxmgpUp7+BDGuD3bm/wnh
B8xTyAE1Imb31MMRB/NX0jLs7tekigM=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:20:41 2025 by rpki-client