Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80AB/023DD08C1BC311EC9846045DC4F9AE02/IQxJ-g9E8m3euJCS85ctrrKLAzs.mft
File: IQxJ-g9E8m3euJCS85ctrrKLAzs.mft (raw, json)
Hash identifier: NZ1K6zW+sA5I2zckWYJgRSI9k7f8STXE9f9+rqOqVp0=
Subject key identifier: 08:BD:B7:1E:1A:1D:97:77:25:D8:9C:71:BC:A8:4F:DC:10:16:FB:4D
Authority key identifier: 21:0C:49:FA:0F:44:F2:6D:DE:B8:90:92:F3:97:2D:AE:B2:8B:03:3B
Certificate issuer: /CN=A91B80AB/serialNumber=210C49FA0F44F26DDEB89092F3972DAEB28B033B
Certificate serial: 04A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQxJ-g9E8m3euJCS85ctrrKLAzs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B80AB/023DD08C1BC311EC9846045DC4F9AE02/IQxJ-g9E8m3euJCS85ctrrKLAzs.mft
Manifest number: 049F
Signing time: Thu 30 Jan 2025 23:59:31 +0000
Manifest this update: Thu 30 Jan 2025 23:59:31 +0000
Manifest next update: Thu 06 Feb 2025 23:59:30 +0000
Files and hashes: 1: IQxJ-g9E8m3euJCS85ctrrKLAzs.crl (hash: NKUk5/Dmn+obCBMf4fjm3nqNyoHeMjt/H9WJOAruigw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1184 (0x4a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B80AB, serialNumber=210C49FA0F44F26DDEB89092F3972DAEB28B033B
Validity
Not Before: Jan 30 23:59:31 2025 GMT
Not After : Feb 6 23:59:30 2025 GMT
Subject: CN=679c1263-fdb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ae:63:b8:12:f2:bd:42:3c:b6:4a:31:eb:a8:
35:9e:49:32:ba:66:59:de:ad:24:92:94:5d:7a:d6:
d3:b0:57:07:f8:5a:d2:7f:02:d1:09:58:b4:fc:ce:
57:21:65:5e:8a:53:84:42:4b:cd:51:d3:22:0d:18:
05:a5:1b:67:fa:e8:43:78:7e:81:18:7c:f6:3a:09:
06:7f:09:da:e6:00:32:7c:4f:6e:59:8d:3f:43:3a:
62:c9:90:fc:09:a1:9a:e6:8b:f5:d4:2c:60:78:2d:
62:21:c5:22:4e:fa:b3:34:82:44:84:88:82:de:64:
75:f3:1f:f8:15:75:3b:3e:7d:b6:86:0c:db:f2:4a:
92:fa:0e:87:49:7e:5b:e8:3a:b5:02:d3:41:18:4f:
87:af:8f:25:29:4f:8e:64:5e:19:2e:0b:a2:63:a1:
b3:78:d0:9a:8c:31:0a:c1:d7:e7:1e:09:38:91:a6:
c6:cc:85:12:62:8c:d8:39:d1:0d:ac:04:43:84:86:
1a:3a:73:18:32:e7:c5:dd:46:2d:be:2f:2c:e8:e3:
d8:47:53:9e:a5:e1:5e:6c:24:1c:07:72:45:08:85:
dd:bf:20:50:63:17:08:f6:57:d1:69:87:de:85:df:
d2:b1:94:e3:c1:32:08:ce:55:30:87:62:30:ac:86:
0b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BD:B7:1E:1A:1D:97:77:25:D8:9C:71:BC:A8:4F:DC:10:16:FB:4D
X509v3 Authority Key Identifier:
keyid:21:0C:49:FA:0F:44:F2:6D:DE:B8:90:92:F3:97:2D:AE:B2:8B:03:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B80AB/023DD08C1BC311EC9846045DC4F9AE02/IQxJ-g9E8m3euJCS85ctrrKLAzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQxJ-g9E8m3euJCS85ctrrKLAzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80AB/023DD08C1BC311EC9846045DC4F9AE02/IQxJ-g9E8m3euJCS85ctrrKLAzs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:84:5c:94:b2:f8:1e:f6:01:4f:89:ba:5b:35:d7:38:8e:f5:
25:7b:47:7f:90:5b:80:66:05:c3:df:66:c8:6e:88:58:43:fc:
35:ce:45:8a:68:68:63:82:2e:3d:44:d4:bb:99:9e:98:7e:11:
66:60:9f:06:e6:1d:05:6e:f4:48:2e:d9:c2:47:15:1d:49:59:
c7:ff:0f:e2:ec:36:af:f1:71:8a:a0:b4:a5:e9:dc:15:af:bf:
c5:09:d0:b7:7d:29:18:1e:97:f8:1e:59:84:14:d2:e2:cb:1a:
6b:7e:f5:2d:50:fe:0a:e3:75:cc:9b:10:38:cc:d7:e5:c5:87:
fa:3c:b9:ce:32:78:bd:a9:79:d6:35:d7:a6:c1:b7:c1:d5:8b:
09:83:56:eb:de:2a:c5:6a:c4:54:26:a5:b7:cf:2e:60:55:75:
8b:cd:66:e1:67:72:ae:ed:7b:03:67:3f:ec:7a:65:47:dc:62:
42:10:24:10:1e:dd:49:a6:43:95:a9:c5:83:9c:5b:1a:b5:46:
6d:30:7b:9d:21:78:6a:8b:d3:fb:cf:83:bc:9c:07:62:85:81:
0e:08:60:0b:6a:64:c3:fb:ef:d1:b9:e8:62:88:d8:57:bc:82:
26:de:23:5a:78:3e:9f:b5:c2:62:fd:ce:6f:9a:17:b9:6d:04:
c3:e8:dc:77
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjgwQUIxMTAvBgNVBAUTKDIxMEM0OUZBMEY0NEYyNkRERUI4OTA5MkYzOTcyREFF
QjI4QjAzM0IwHhcNMjUwMTMwMjM1OTMxWhcNMjUwMjA2MjM1OTMwWjAYMRYwFAYD
VQQDEw02NzljMTI2My1mZGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtK5juBLyvUI8tkox66g1nkkyumZZ3q0kkpRdetbTsFcH+FrSfwLRCVi0/M5X
IWVeilOEQkvNUdMiDRgFpRtn+uhDeH6BGHz2OgkGfwna5gAyfE9uWY0/QzpiyZD8
CaGa5ov11CxgeC1iIcUiTvqzNIJEhIiC3mR18x/4FXU7Pn22hgzb8kqS+g6HSX5b
6Dq1AtNBGE+Hr48lKU+OZF4ZLguiY6GzeNCajDEKwdfnHgk4kabGzIUSYozYOdEN
rARDhIYaOnMYMufF3UYtvi8s6OPYR1OepeFebCQcB3JFCIXdvyBQYxcI9lfRaYfe
hd/SsZTjwTIIzlUwh2IwrIYLGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAi9tx4a
HZd3JdiccbyoT9wQFvtNMB8GA1UdIwQYMBaAFCEMSfoPRPJt3riQkvOXLa6yiwM7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODBBQi8wMjNERDA4QzFC
QzMxMUVDOTg0NjA0NURDNEY5QUUwMi9JUXhKLWc5RThtM2V1SkNTODVjdHJyS0xB
enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lReEotZzlFOG0zZXVKQ1M4NWN0cnJLTEF6cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
ODBBQi8wMjNERDA4QzFCQzMxMUVDOTg0NjA0NURDNEY5QUUwMi9JUXhKLWc5RTht
M2V1SkNTODVjdHJyS0xBenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAthFyUsvge9gFPibpbNdc4jvUle0d/kFuAZgXD32bIbohYQ/w1zkWK
aGhjgi49RNS7mZ6YfhFmYJ8G5h0FbvRILtnCRxUdSVnH/w/i7Dav8XGKoLSl6dwV
r7/FCdC3fSkYHpf4HlmEFNLiyxprfvUtUP4K43XMmxA4zNflxYf6PLnOMni9qXnW
NdemwbfB1YsJg1br3irFasRUJqW3zy5gVXWLzWbhZ3Ku7XsDZz/semVH3GJCECQQ
Ht1JpkOVqcWDnFsatUZtMHudIXhqi9P7z4O8nAdihYEOCGALamTD++/RuehiiNhX
vIIm3iNaeD6ftcJi/c5vmhe5bQTD6Nx3
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:07:04 2025 by rpki-client