Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125F18/6FAACF48DB0911E7878C3185C4F9AE02/nS0PsoYg0aU5gFqMXEhRIXDgfD8.mft
File: nS0PsoYg0aU5gFqMXEhRIXDgfD8.mft (raw, json)
Hash identifier: ZtJf1ZrbsEXBX8pI6KyX+sB7GifYG8h2R0ayDeLuWLk=
Subject key identifier: 7A:86:BE:37:72:E6:7D:07:46:2B:A0:AC:F4:89:4B:AB:EC:93:23:96
Authority key identifier: 9D:2D:0F:B2:86:20:D1:A5:39:80:5A:8C:5C:48:51:21:70:E0:7C:3F
Certificate issuer: /CN=A9125F18/serialNumber=9D2D0FB28620D1A539805A8C5C48512170E07C3F
Certificate serial: 166D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nS0PsoYg0aU5gFqMXEhRIXDgfD8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125F18/6FAACF48DB0911E7878C3185C4F9AE02/nS0PsoYg0aU5gFqMXEhRIXDgfD8.mft
Manifest number: 1665
Signing time: Thu 29 Feb 2024 02:36:32 +0000
Manifest this update: Thu 29 Feb 2024 02:36:31 +0000
Manifest next update: Thu 07 Mar 2024 02:36:31 +0000
Files and hashes: 1: nS0PsoYg0aU5gFqMXEhRIXDgfD8.crl (hash: KF+BY6LBRn6xmTiASjjYV3EwhTVBK+fQL4RDgT5ytG4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5741 (0x166d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125F18/serialNumber=9D2D0FB28620D1A539805A8C5C48512170E07C3F
Validity
Not Before: Feb 29 02:36:31 2024 GMT
Not After : Mar 7 02:36:31 2024 GMT
Subject: CN=65dfedaf-ca4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8c:98:3c:ec:64:d0:75:65:68:47:33:c9:99:
83:d0:92:46:cc:d3:6c:c3:0a:5f:26:d6:10:18:9d:
09:46:b3:ed:f2:d4:ee:d2:4b:26:fa:70:cd:1a:86:
5a:8e:cb:d0:00:ae:88:a5:98:b1:09:b9:47:45:6a:
a5:f5:dd:a8:56:9e:98:4a:9c:a1:aa:dd:15:26:1a:
00:ef:9f:ea:1c:1b:d2:9d:26:29:36:48:ee:a1:89:
7f:ce:e0:cb:d5:f6:d2:b7:0a:8d:f8:ae:06:9f:78:
5a:83:a9:64:0b:8c:d1:bd:c8:08:54:29:9f:35:f3:
8d:0e:f1:59:13:c2:f2:ed:de:82:95:b3:82:38:f9:
57:51:cc:1d:2c:8d:86:93:72:da:ee:c1:57:46:36:
a3:58:7a:b3:15:60:ee:c4:e1:d8:3f:c4:1f:6f:e1:
38:0b:14:29:b6:07:ce:52:f6:02:07:48:d4:40:29:
73:8b:d4:0e:2b:15:70:d7:33:4a:79:83:bc:59:15:
a7:de:5d:40:82:59:06:96:a5:63:dd:89:27:80:b1:
65:e4:a6:4a:91:fb:6f:77:2e:42:fc:21:7b:07:cd:
3b:04:b8:85:2d:7f:37:40:e7:95:3f:b9:39:79:d6:
a7:2b:d0:c8:75:a2:dc:ba:12:16:73:cd:ea:34:fd:
30:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:86:BE:37:72:E6:7D:07:46:2B:A0:AC:F4:89:4B:AB:EC:93:23:96
X509v3 Authority Key Identifier:
keyid:9D:2D:0F:B2:86:20:D1:A5:39:80:5A:8C:5C:48:51:21:70:E0:7C:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125F18/6FAACF48DB0911E7878C3185C4F9AE02/nS0PsoYg0aU5gFqMXEhRIXDgfD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nS0PsoYg0aU5gFqMXEhRIXDgfD8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125F18/6FAACF48DB0911E7878C3185C4F9AE02/nS0PsoYg0aU5gFqMXEhRIXDgfD8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:47:95:74:3c:5d:0c:73:50:d6:df:cb:1b:59:2e:f9:b9:7f:
2f:c3:cc:85:b9:ff:47:e0:73:a1:8d:b2:01:d9:a0:05:c0:7b:
33:38:fc:6f:89:0b:e4:da:95:22:a4:63:cb:90:2e:85:a2:2c:
9f:68:fc:a8:b3:49:63:9a:e0:df:88:4b:f1:f0:b5:a7:d2:26:
4c:52:36:ac:6f:d4:35:96:9a:25:2c:57:3c:18:4d:81:38:ea:
ef:2c:e0:06:df:95:c4:33:68:7f:6d:d7:a4:5c:eb:ce:52:ae:
d0:d6:b0:1b:38:45:10:a5:76:55:c2:fa:0c:34:73:66:b0:41:
37:51:64:22:13:78:36:7f:a5:4e:8d:99:49:eb:df:c0:58:60:
ba:e4:f2:5e:14:46:f0:7b:fc:53:7e:12:79:4f:79:38:fd:ba:
37:39:c8:68:ef:3e:d3:1b:4c:6e:5a:53:89:ef:84:e6:f0:97:
bc:aa:fa:d0:b6:a0:30:6a:39:74:e4:79:dd:41:2b:c1:72:b5:
a2:e7:0e:e8:37:b4:f3:1d:1f:12:a8:50:3b:d4:a6:3a:56:33:
fd:02:b5:6b:61:d6:76:b8:a7:c4:6a:bc:d0:05:b6:06:f7:d4:
ea:fc:2c:50:1b:df:7c:56:af:cf:e2:c2:46:56:04:c1:84:a2:
a3:c9:67:b4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjVGMTgxMTAvBgNVBAUTKDlEMkQwRkIyODYyMEQxQTUzOTgwNUE4QzVDNDg1MTIx
NzBFMDdDM0YwHhcNMjQwMjI5MDIzNjMxWhcNMjQwMzA3MDIzNjMxWjAYMRYwFAYD
VQQDEw02NWRmZWRhZi1jYTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtoyYPOxk0HVlaEczyZmD0JJGzNNswwpfJtYQGJ0JRrPt8tTu0ksm+nDNGoZa
jsvQAK6IpZixCblHRWql9d2oVp6YSpyhqt0VJhoA75/qHBvSnSYpNkjuoYl/zuDL
1fbStwqN+K4Gn3hag6lkC4zRvcgIVCmfNfONDvFZE8Ly7d6ClbOCOPlXUcwdLI2G
k3La7sFXRjajWHqzFWDuxOHYP8Qfb+E4CxQptgfOUvYCB0jUQClzi9QOKxVw1zNK
eYO8WRWn3l1AglkGlqVj3YkngLFl5KZKkftvdy5C/CF7B807BLiFLX83QOeVP7k5
edanK9DIdaLcuhIWc83qNP0wuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHqGvjdy
5n0HRiugrPSJS6vskyOWMB8GA1UdIwQYMBaAFJ0tD7KGINGlOYBajFxIUSFw4Hw/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUYxOC82RkFBQ0Y0OERC
MDkxMUU3ODc4QzMxODVDNEY5QUUwMi9uUzBQc29ZZzBhVTVnRnFNWEVoUklYRGdm
RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25TMFBzb1lnMGFVNWdGcU1YRWhSSVhEZ2ZEOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NUYxOC82RkFBQ0Y0OERCMDkxMUU3ODc4QzMxODVDNEY5QUUwMi9uUzBQc29ZZzBh
VTVnRnFNWEVoUklYRGdmRDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQApR5V0PF0Mc1DW38sbWS75uX8vw8yFuf9H4HOhjbIB2aAFwHszOPxv
iQvk2pUipGPLkC6FoiyfaPyos0ljmuDfiEvx8LWn0iZMUjasb9Q1lpolLFc8GE2B
OOrvLOAG35XEM2h/bdekXOvOUq7Q1rAbOEUQpXZVwvoMNHNmsEE3UWQiE3g2f6VO
jZlJ69/AWGC65PJeFEbwe/xTfhJ5T3k4/bo3Ocho7z7TG0xuWlOJ74Tm8Je8qvrQ
tqAwajl05HndQSvBcrWi5w7oN7TzHR8SqFA71KY6VjP9ArVrYdZ2uKfEarzQBbYG
99Tq/CxQG998Vq/P4sJGVgTBhKKjyWe0
-----END CERTIFICATE-----
Generated at Thu Feb 29 16:39:00 2024 by rpki-client on console-ams.rpki-client.org