Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918801E/EDBCB56676D011EB8A26713BC4F9AE02/32858r33bgaklIQq2L-kHdk2Uw8.mft
File: 32858r33bgaklIQq2L-kHdk2Uw8.mft (raw, json)
Hash identifier: tQStYxXXHsoGp4Ly0vWihpC5mI98xWKTvsctnGL+7Mc=
Subject key identifier: 5E:72:D6:FB:FD:12:2B:F2:ED:A6:5C:6D:D0:6C:E2:85:B9:C1:EA:BF
Authority key identifier: DF:6F:39:F2:BD:F7:6E:06:A4:94:84:2A:D8:BF:A4:1D:D9:36:53:0F
Certificate issuer: /CN=A918801E/serialNumber=DF6F39F2BDF76E06A494842AD8BFA41DD936530F
Certificate serial: 0646
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/32858r33bgaklIQq2L-kHdk2Uw8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918801E/EDBCB56676D011EB8A26713BC4F9AE02/32858r33bgaklIQq2L-kHdk2Uw8.mft
Manifest number: 0639
Signing time: Wed 08 Jan 2025 01:03:53 +0000
Manifest this update: Wed 08 Jan 2025 01:03:53 +0000
Manifest next update: Wed 15 Jan 2025 01:03:53 +0000
Files and hashes: 1: 32858r33bgaklIQq2L-kHdk2Uw8.crl (hash: 1BPolSaiwYGCkyxZb323eEvCrKe5RRtMNHfQlfTURZU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1606 (0x646)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918801E
Validity
Not Before: Jan 8 01:03:53 2025 GMT
Not After : Jan 15 01:03:53 2025 GMT
Subject: CN=677dcef9-17fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:23:f3:af:49:bd:0c:40:85:22:98:9c:d4:a8:
e7:3d:66:38:04:94:fb:82:6a:53:73:77:73:11:55:
7f:ce:c7:24:24:e9:e4:51:20:51:ad:32:5a:fb:3a:
8e:d2:f1:df:b9:50:1b:75:42:09:62:38:7c:37:88:
9c:fc:ee:26:e8:64:36:05:83:50:0f:0b:c0:1f:e8:
1d:66:0f:2b:8c:99:b9:00:e9:5f:bc:73:7c:3b:8a:
42:d6:8f:8c:5b:6f:fd:10:87:a5:64:dd:45:0a:de:
05:c4:aa:93:30:b3:4d:32:16:4a:be:3f:a0:42:01:
af:84:e4:1a:14:85:1a:08:3a:e4:e5:4f:6e:50:16:
29:7e:f4:23:b8:a8:d5:96:4e:a0:c4:43:e6:8c:98:
3e:0c:af:11:b0:cd:3f:c8:5b:82:4c:52:d3:3f:2b:
15:d3:3a:2c:5c:9b:f2:ec:e9:c5:a0:c1:8a:38:ed:
bb:d8:c0:42:c3:de:35:58:47:2d:38:85:dd:1c:21:
1e:0a:1f:56:7b:6f:08:71:7b:a0:51:cf:41:38:7c:
87:f8:8f:13:72:83:3a:02:d3:a3:ca:e1:49:d8:ae:
7c:90:f9:c6:b9:58:81:49:ab:87:bc:79:8b:5a:f5:
e4:c6:03:02:57:f6:87:e3:b4:ec:d3:cd:3a:8a:75:
3c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:72:D6:FB:FD:12:2B:F2:ED:A6:5C:6D:D0:6C:E2:85:B9:C1:EA:BF
X509v3 Authority Key Identifier:
keyid:DF:6F:39:F2:BD:F7:6E:06:A4:94:84:2A:D8:BF:A4:1D:D9:36:53:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918801E/EDBCB56676D011EB8A26713BC4F9AE02/32858r33bgaklIQq2L-kHdk2Uw8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/32858r33bgaklIQq2L-kHdk2Uw8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918801E/EDBCB56676D011EB8A26713BC4F9AE02/32858r33bgaklIQq2L-kHdk2Uw8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e0:5d:ab:56:c5:f1:1e:74:9c:7c:82:63:b6:b2:21:a4:78:
90:c9:0d:fb:80:5a:08:52:37:44:af:69:f0:56:61:68:85:6e:
2a:05:89:26:4a:d2:9f:04:ca:41:7b:4f:de:2c:45:d4:f0:c6:
6d:83:81:f6:9e:e3:d2:e2:a9:39:db:29:3d:64:53:1e:34:02:
79:02:dc:17:c2:74:66:cf:f1:f5:5a:f3:d7:f5:68:5f:13:98:
78:eb:7c:a6:8b:94:a9:f1:06:43:60:c6:d9:74:24:91:3e:24:
d3:e8:ae:ae:19:bf:e4:9f:6d:b3:af:8f:54:e2:97:e7:c7:09:
12:aa:32:e7:37:65:b4:0d:92:03:5d:44:68:a6:02:88:6d:e0:
16:7b:a0:a9:c8:c5:cb:e8:68:2b:a1:28:d6:2a:dc:2b:4e:30:
c2:db:83:9f:72:19:ad:21:dc:83:2a:91:ee:f1:e7:3e:c6:94:
be:cd:81:91:52:4d:45:bc:dd:76:46:c0:a1:8d:a7:e4:15:67:
80:46:1f:5d:65:73:d6:fb:77:dd:32:08:4f:19:e7:83:ef:2d:
e9:dc:98:8d:8c:d6:b5:4a:f0:1c:ca:71:86:1a:7e:07:ba:4b:
a7:64:8b:7d:4a:be:2a:12:6a:5c:c7:e9:27:f5:75:cb:b3:8c:
1c:36:46:f0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODgwMUUxMTAvBgNVBAUTKERGNkYzOUYyQkRGNzZFMDZBNDk0ODQyQUQ4QkZBNDFE
RDkzNjUzMEYwHhcNMjUwMTA4MDEwMzUzWhcNMjUwMTE1MDEwMzUzWjAYMRYwFAYD
VQQDEw02NzdkY2VmOS0xN2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtiPzr0m9DECFIpic1KjnPWY4BJT7gmpTc3dzEVV/zsckJOnkUSBRrTJa+zqO
0vHfuVAbdUIJYjh8N4ic/O4m6GQ2BYNQDwvAH+gdZg8rjJm5AOlfvHN8O4pC1o+M
W2/9EIelZN1FCt4FxKqTMLNNMhZKvj+gQgGvhOQaFIUaCDrk5U9uUBYpfvQjuKjV
lk6gxEPmjJg+DK8RsM0/yFuCTFLTPysV0zosXJvy7OnFoMGKOO272MBCw941WEct
OIXdHCEeCh9We28IcXugUc9BOHyH+I8TcoM6AtOjyuFJ2K58kPnGuViBSauHvHmL
WvXkxgMCV/aH47Ts0806inU8MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF5y1vv9
Eivy7aZcbdBs4oW5weq/MB8GA1UdIwQYMBaAFN9vOfK9924GpJSEKti/pB3ZNlMP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODAxRS9FREJDQjU2Njc2
RDAxMUVCOEEyNjcxM0JDNEY5QUUwMi8zMjg1OHIzM2JnYWtsSVFxMkwta0hkazJV
dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzMyODU4cjMzYmdha2xJUXEyTC1rSGRrMlV3OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
ODAxRS9FREJDQjU2Njc2RDAxMUVCOEEyNjcxM0JDNEY5QUUwMi8zMjg1OHIzM2Jn
YWtsSVFxMkwta0hkazJVdzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBc4F2rVsXxHnScfIJjtrIhpHiQyQ37gFoIUjdEr2nwVmFohW4qBYkm
StKfBMpBe0/eLEXU8MZtg4H2nuPS4qk52yk9ZFMeNAJ5AtwXwnRmz/H1WvPX9Whf
E5h463ymi5Sp8QZDYMbZdCSRPiTT6K6uGb/kn22zr49U4pfnxwkSqjLnN2W0DZID
XURopgKIbeAWe6CpyMXL6GgroSjWKtwrTjDC24OfchmtIdyDKpHu8ec+xpS+zYGR
Uk1FvN12RsChjafkFWeARh9dZXPW+3fdMghPGeeD7y3p3JiNjNa1SvAcynGGGn4H
ukunZIt9Sr4qEmpcx+kn9XXLs4wcNkbw
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:01:42 2025 by rpki-client