Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft
File: AZoGU7P4x3djt9819lZFFY3wWoo.mft (raw, json)
Hash identifier: zIWB9o5OjM6h2y5L4RblrfzvmT0wr6HGjM7QKjwcVLI=
Subject key identifier: C4:A6:EE:E7:64:E8:61:C9:46:28:C8:A8:3F:52:4C:53:BB:E0:34:50
Authority key identifier: 01:9A:06:53:B3:F8:C7:77:63:B7:DF:35:F6:56:45:15:8D:F0:5A:8A
Certificate issuer: /CN=A91233F8/serialNumber=019A0653B3F8C77763B7DF35F65645158DF05A8A
Certificate serial: 04C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZoGU7P4x3djt9819lZFFY3wWoo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft
Manifest number: 065F
Signing time: Sat 29 Mar 2025 00:06:48 +0000
Manifest this update: Sat 29 Mar 2025 00:06:47 +0000
Manifest next update: Sat 05 Apr 2025 00:06:47 +0000
Files and hashes: 1: AZoGU7P4x3djt9819lZFFY3wWoo.crl (hash: cxDphiO9o2VT+aqWcaCffGTrjtMNTRlJmIOWUqcV8fs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1222 (0x4c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91233F8
Validity
Not Before: Mar 29 00:06:47 2025 GMT
Not After : Apr 5 00:06:47 2025 GMT
Subject: CN=67e73997-311b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9f:45:54:7f:8b:07:c9:cc:40:63:fe:d8:f7:
e7:83:63:8e:44:08:ec:cf:7d:70:fe:14:69:9d:27:
db:a9:d8:c6:e3:6a:8e:2c:56:b2:72:e9:e4:c5:f1:
d9:a9:48:54:3f:ba:e5:9f:90:f9:d7:3d:4c:42:c9:
a0:71:68:4e:f9:e4:12:30:86:f0:d9:59:6f:26:8d:
d8:cd:b7:58:7e:b9:fc:06:e5:5d:b0:11:b6:d4:4f:
df:02:87:70:0b:9b:70:07:46:24:fd:9a:4f:30:4b:
f0:66:e6:09:23:18:cb:da:82:08:b8:92:be:22:2d:
e7:77:20:01:d7:ad:52:31:3e:8a:07:7b:98:df:2c:
0c:63:91:33:88:2e:91:0e:87:b5:4f:b0:f7:6d:e7:
ea:dd:68:40:1c:14:ca:cf:9d:73:f2:7f:9c:c8:46:
33:35:f3:20:17:13:5c:ca:6d:02:be:a1:d8:fe:d5:
6b:fb:0e:06:58:f4:47:a3:6b:0b:8c:2b:c6:ee:33:
66:5d:65:f0:66:9b:ab:77:b2:42:db:40:66:67:bc:
6e:6b:1c:65:a9:c4:62:11:b4:44:d7:df:62:6c:d4:
5b:1c:69:7d:de:20:7c:a6:0e:1a:14:4f:d4:3b:27:
f0:57:92:d9:60:92:4f:05:39:be:0a:b1:da:61:10:
e2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A6:EE:E7:64:E8:61:C9:46:28:C8:A8:3F:52:4C:53:BB:E0:34:50
X509v3 Authority Key Identifier:
keyid:01:9A:06:53:B3:F8:C7:77:63:B7:DF:35:F6:56:45:15:8D:F0:5A:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZoGU7P4x3djt9819lZFFY3wWoo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:c7:1f:13:97:6e:61:63:27:3e:03:e3:79:4c:4d:ad:ca:4c:
42:07:fd:27:17:c6:65:6f:65:34:6a:a3:8c:7e:24:1a:e5:68:
18:e2:4f:1e:eb:ba:f9:ec:b5:59:81:30:35:1f:e9:8b:1c:7a:
24:03:01:bf:00:3f:e5:c1:41:a8:2a:ca:09:13:b5:d5:fc:5a:
c1:be:ac:57:d8:84:c9:c0:89:95:ef:1e:82:f6:28:36:4b:f0:
c8:10:63:03:a8:78:9c:5e:80:9b:c6:8f:91:5c:52:e5:b9:e0:
48:70:ac:c5:c9:e8:22:95:fb:15:03:1a:57:c5:fe:90:79:31:
e6:bf:99:e4:31:ef:4a:95:a7:29:9d:71:21:a9:4f:22:5e:9d:
fe:f2:b5:ec:10:69:b9:e3:26:ea:38:89:3b:91:f0:15:13:8c:
77:be:70:9a:e5:32:bf:01:f7:27:f7:99:47:19:ba:d5:d1:23:
92:da:33:5f:64:9e:b8:4c:9d:94:93:99:b1:82:57:92:1c:aa:
b0:45:f4:fc:44:fe:34:77:01:84:90:3b:16:1a:f3:2e:74:b6:
26:65:77:4e:36:ca:f3:b3:83:44:bf:8c:32:86:e0:5c:5d:49:
f5:92:28:f6:3a:54:e6:02:c8:1b:70:14:0f:42:29:ca:9d:70:
96:c4:e2:e1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjMzRjgxMTAvBgNVBAUTKDAxOUEwNjUzQjNGOEM3Nzc2M0I3REYzNUY2NTY0NTE1
OERGMDVBOEEwHhcNMjUwMzI5MDAwNjQ3WhcNMjUwNDA1MDAwNjQ3WjAYMRYwFAYD
VQQDEw02N2U3Mzk5Ny0zMTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwp9FVH+LB8nMQGP+2Pfng2OORAjsz31w/hRpnSfbqdjG42qOLFaycunkxfHZ
qUhUP7rln5D51z1MQsmgcWhO+eQSMIbw2VlvJo3YzbdYfrn8BuVdsBG21E/fAodw
C5twB0Yk/ZpPMEvwZuYJIxjL2oIIuJK+Ii3ndyAB161SMT6KB3uY3ywMY5EziC6R
Doe1T7D3befq3WhAHBTKz51z8n+cyEYzNfMgFxNcym0CvqHY/tVr+w4GWPRHo2sL
jCvG7jNmXWXwZpurd7JC20BmZ7xuaxxlqcRiEbRE199ibNRbHGl93iB8pg4aFE/U
OyfwV5LZYJJPBTm+CrHaYRDiJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMSm7udk
6GHJRijIqD9STFO74DRQMB8GA1UdIwQYMBaAFAGaBlOz+Md3Y7ffNfZWRRWN8FqK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzNGOC9GMDkwMTlENjFC
QjcxMUVDOTAzRDhBNENDNEY5QUUwMi9BWm9HVTdQNHgzZGp0OTgxOWxaRkZZM3dX
b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Fab0dVN1A0eDNkanQ5ODE5bFpGRlkzd1dvby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MzNGOC9GMDkwMTlENjFCQjcxMUVDOTAzRDhBNENDNEY5QUUwMi9BWm9HVTdQNHgz
ZGp0OTgxOWxaRkZZM3dXb28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCRxx8Tl25hYyc+A+N5TE2tykxCB/0nF8Zlb2U0aqOMfiQa5WgY4k8e
67r57LVZgTA1H+mLHHokAwG/AD/lwUGoKsoJE7XV/FrBvqxX2ITJwImV7x6C9ig2
S/DIEGMDqHicXoCbxo+RXFLlueBIcKzFyegilfsVAxpXxf6QeTHmv5nkMe9Klacp
nXEhqU8iXp3+8rXsEGm54ybqOIk7kfAVE4x3vnCa5TK/Afcn95lHGbrV0SOS2jNf
ZJ64TJ2Uk5mxgleSHKqwRfT8RP40dwGEkDsWGvMudLYmZXdONsrzs4NEv4wyhuBc
XUn1kij2OlTmAsgbcBQPQinKnXCWxOLh
-----END CERTIFICATE-----
Generated at Fri Apr 11 19:50:33 2025 by rpki-client