Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft
File: -AbfRcmATdTJ0eUsYuDig8D4DFM.mft (raw, json)
Hash identifier: 9/msJD5lGhtMQjjDQbmNRy5Zy+2GJr4YrNt2GgBxLJY=
Subject key identifier: CF:F8:8F:F9:01:C1:59:0B:4E:72:DB:E6:9D:20:82:D9:D1:44:50:AE
Authority key identifier: F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53
Certificate issuer: /CN=A91FD292/serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53
Certificate serial: 09EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft
Manifest number: 09EA
Signing time: Thu 30 Jan 2025 19:59:06 +0000
Manifest this update: Thu 30 Jan 2025 19:59:05 +0000
Manifest next update: Thu 06 Feb 2025 19:59:05 +0000
Files and hashes: 1: -AbfRcmATdTJ0eUsYuDig8D4DFM.crl (hash: Lb4aMSwxTk+oQkbOnDh7003/6BkItj1JsM8KI0xpUHM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2538 (0x9ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD292/serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53
Validity
Not Before: Jan 30 19:59:05 2025 GMT
Not After : Feb 6 19:59:05 2025 GMT
Subject: CN=679bda09-4dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:62:10:b4:8c:81:6d:33:8b:9f:c1:34:32:25:
6b:e9:9c:1e:a6:23:bc:bd:e9:34:32:a8:a1:3d:06:
44:1d:b0:06:b0:0c:8c:ae:86:01:b5:35:e2:97:5a:
c6:09:77:20:eb:11:9e:f1:c0:ce:1c:0d:2b:83:6e:
f1:05:c5:e9:8c:65:2e:38:98:db:36:31:c0:37:5e:
9a:2f:59:88:c3:c0:c2:c4:a0:fd:91:d9:88:3d:a7:
63:d1:2e:35:ec:98:13:e6:82:e7:0e:30:74:bf:99:
2f:72:e8:db:57:44:d6:d7:64:83:f1:3b:4a:fc:c6:
ca:59:d6:78:c7:a3:85:79:83:53:14:af:7b:44:7e:
a5:25:08:ab:0a:6f:e9:8e:17:c8:38:8e:30:fb:25:
11:d4:e8:2e:74:07:78:26:8b:35:21:c7:42:71:17:
24:13:f9:34:c8:9c:09:b0:4e:a9:6d:18:66:35:51:
96:14:77:4e:9f:04:c0:1f:b1:e1:11:ee:69:30:1b:
35:4d:06:72:e3:20:62:83:4a:89:73:d2:90:06:c1:
00:7f:69:66:ae:03:9a:56:90:cd:55:96:77:fb:25:
bf:b2:24:de:2e:2a:84:63:be:d5:b4:fb:c0:e1:0c:
24:67:c6:9b:e6:62:27:d8:f4:09:69:e8:88:aa:43:
32:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F8:8F:F9:01:C1:59:0B:4E:72:DB:E6:9D:20:82:D9:D1:44:50:AE
X509v3 Authority Key Identifier:
keyid:F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:e8:71:5b:5e:0e:ff:20:55:56:b3:57:b7:4e:b1:60:ec:2a:
36:70:97:7e:13:c4:71:e8:10:b8:65:2f:06:af:d9:82:c8:f6:
d1:f1:57:77:a3:d4:9d:66:72:cc:28:e4:9b:fd:f9:a4:cc:37:
29:c0:67:4a:e9:b4:a5:fe:be:60:91:d2:f4:b8:67:94:d3:c8:
ff:d4:85:bb:e3:7c:5b:40:fb:ca:e9:8c:31:f4:88:81:8f:0e:
82:f4:3f:97:53:ff:b6:a5:5e:4e:0d:60:da:43:3f:0d:27:c8:
1b:6e:2b:de:c5:a9:6f:5d:6f:a2:a1:aa:8a:e8:f1:c0:9e:dd:
74:64:4d:66:de:c5:12:a8:32:56:74:1c:a7:19:c0:a6:ac:88:
48:f7:90:aa:c5:4e:68:ab:da:9a:f4:6f:b5:45:a5:32:07:d3:
80:7a:ae:43:22:82:39:4b:6f:0f:5f:51:75:6e:95:46:36:bf:
67:a6:e7:51:f2:ed:ca:32:08:50:9d:3a:ef:41:63:b1:fc:41:
51:c5:29:17:46:80:79:b8:75:56:dc:ac:09:0e:8f:b4:e5:ee:
97:2c:63:20:0c:f5:09:23:f1:7f:6b:7a:4e:45:d3:6f:5e:43:
ca:c8:55:93:04:63:ca:1a:d4:b6:df:3b:2f:56:71:61:80:dc:
d0:9f:c4:48
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkQyOTIxMTAvBgNVBAUTKEY4MDZERjQ1Qzk4MDRERDRDOUQxRTUyQzYyRTBFMjgz
QzBGODBDNTMwHhcNMjUwMTMwMTk1OTA1WhcNMjUwMjA2MTk1OTA1WjAYMRYwFAYD
VQQDEw02NzliZGEwOS00ZGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7GIQtIyBbTOLn8E0MiVr6ZwepiO8vek0MqihPQZEHbAGsAyMroYBtTXil1rG
CXcg6xGe8cDOHA0rg27xBcXpjGUuOJjbNjHAN16aL1mIw8DCxKD9kdmIPadj0S41
7JgT5oLnDjB0v5kvcujbV0TW12SD8TtK/MbKWdZ4x6OFeYNTFK97RH6lJQirCm/p
jhfIOI4w+yUR1OgudAd4Jos1IcdCcRckE/k0yJwJsE6pbRhmNVGWFHdOnwTAH7Hh
Ee5pMBs1TQZy4yBig0qJc9KQBsEAf2lmrgOaVpDNVZZ3+yW/siTeLiqEY77VtPvA
4QwkZ8ab5mIn2PQJaeiIqkMymQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/4j/kB
wVkLTnLb5p0ggtnRRFCuMB8GA1UdIwQYMBaAFPgG30XJgE3UydHlLGLg4oPA+AxT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDI5Mi9EMTYxOUE2NDZD
QzUxMUVBQTgzNTk5NTNDNEY5QUUwMi8tQWJmUmNtQVRkVEowZVVzWXVEaWc4RDRE
Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1BYmZSY21BVGRUSjBlVXNZdURpZzhENERGTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RDI5Mi9EMTYxOUE2NDZDQzUxMUVBQTgzNTk5NTNDNEY5QUUwMi8tQWJmUmNtQVRk
VEowZVVzWXVEaWc4RDRERk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBQ6HFbXg7/IFVWs1e3TrFg7Co2cJd+E8Rx6BC4ZS8Gr9mCyPbR8Vd3
o9SdZnLMKOSb/fmkzDcpwGdK6bSl/r5gkdL0uGeU08j/1IW743xbQPvK6Ywx9IiB
jw6C9D+XU/+2pV5ODWDaQz8NJ8gbbivexalvXW+ioaqK6PHAnt10ZE1m3sUSqDJW
dBynGcCmrIhI95CqxU5oq9qa9G+1RaUyB9OAeq5DIoI5S28PX1F1bpVGNr9npudR
8u3KMghQnTrvQWOx/EFRxSkXRoB5uHVW3KwJDo+05e6XLGMgDPUJI/F/a3pORdNv
XkPKyFWTBGPKGtS23zsvVnFhgNzQn8RI
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:43:34 2025 by rpki-client