Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E092/DF22B4FA18B811EAB06CA785C4F9AE02/oYEl0dO-TmDP2cgh_PWszk7aZUQ.mft
File: oYEl0dO-TmDP2cgh_PWszk7aZUQ.mft (raw, json)
Hash identifier: +NJlgAdZb1Dge0Qd5A0gmCWaxl+Nloq745bAwjZFKDU=
Subject key identifier: C2:F4:80:F3:B6:9E:18:C0:A7:CA:39:19:A9:01:56:33:10:4B:3F:34
Authority key identifier: A1:81:25:D1:D3:BE:4E:60:CF:D9:C8:21:FC:F5:AC:CE:4E:DA:65:44
Certificate issuer: /CN=A912E092/serialNumber=A18125D1D3BE4E60CFD9C821FCF5ACCE4EDA6544
Certificate serial: 0BCB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYEl0dO-TmDP2cgh_PWszk7aZUQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E092/DF22B4FA18B811EAB06CA785C4F9AE02/oYEl0dO-TmDP2cgh_PWszk7aZUQ.mft
Manifest number: 0BB7
Signing time: Thu 06 Feb 2025 18:37:53 +0000
Manifest this update: Thu 06 Feb 2025 18:37:52 +0000
Manifest next update: Thu 13 Feb 2025 18:37:52 +0000
Files and hashes: 1: oYEl0dO-TmDP2cgh_PWszk7aZUQ.crl (hash: crRdJauDT+dyL+p7GJ8QJjPyCJnPYVnIlmTt3/7coNs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3019 (0xbcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E092, serialNumber=A18125D1D3BE4E60CFD9C821FCF5ACCE4EDA6544
Validity
Not Before: Feb 6 18:37:52 2025 GMT
Not After : Feb 13 18:37:52 2025 GMT
Subject: CN=67a50180-0418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8c:1e:f2:11:1d:02:e2:fa:89:f7:66:b8:4d:
e1:9b:57:34:a5:38:43:fa:70:c5:a0:c9:11:10:9c:
35:a0:b1:72:2c:88:af:e3:5d:08:9a:0e:6c:02:58:
f7:d2:7c:2f:a9:a2:82:10:7b:e1:dc:74:94:73:f1:
3d:06:3f:41:25:06:4f:0f:bd:ec:f9:3e:d8:09:17:
9c:c9:8f:97:f3:ab:cc:2c:fc:19:68:b5:f6:96:e0:
b3:2a:fb:bf:24:5e:6e:f5:96:8e:18:fb:be:c4:34:
70:c5:e7:8d:cd:d3:c3:43:1c:b4:b5:48:89:7c:ff:
55:a8:b0:72:bc:05:44:15:1f:52:07:5c:1e:c2:31:
14:53:85:c5:22:ee:a0:cb:76:1e:b4:ae:ef:73:7d:
5e:43:f1:b0:cf:84:bc:ad:17:04:56:25:ce:2f:7f:
59:90:63:5c:bf:f3:e3:7a:08:42:54:9e:53:dd:9a:
27:5d:35:cc:ba:03:c1:ef:ff:98:96:91:61:04:27:
0f:1e:12:0e:a6:55:c7:ea:96:ac:bb:da:14:94:76:
68:0e:ba:44:8c:55:ee:f4:ec:b8:5d:37:4e:7c:a2:
73:be:db:ac:9d:47:03:c4:a7:a7:94:d5:6a:98:df:
3a:e4:71:b3:7a:f1:55:e6:f6:f1:1e:33:80:bd:95:
91:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F4:80:F3:B6:9E:18:C0:A7:CA:39:19:A9:01:56:33:10:4B:3F:34
X509v3 Authority Key Identifier:
keyid:A1:81:25:D1:D3:BE:4E:60:CF:D9:C8:21:FC:F5:AC:CE:4E:DA:65:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E092/DF22B4FA18B811EAB06CA785C4F9AE02/oYEl0dO-TmDP2cgh_PWszk7aZUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYEl0dO-TmDP2cgh_PWszk7aZUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E092/DF22B4FA18B811EAB06CA785C4F9AE02/oYEl0dO-TmDP2cgh_PWszk7aZUQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:84:b5:82:ee:19:6e:75:9c:e4:fc:a7:8b:e3:21:d9:7b:fa:
67:9c:c9:a6:af:21:23:8d:09:cb:e4:f5:9e:41:7f:37:db:57:
6d:2f:38:24:02:31:f8:6d:bc:62:86:4d:8d:88:2c:96:7d:44:
1f:0b:74:13:92:80:9e:b0:af:f2:b7:14:b7:42:dc:15:90:0e:
1b:f0:21:75:02:22:90:0a:47:9e:d3:71:05:7c:e8:eb:61:ff:
8f:cf:a7:c5:d1:39:c5:1d:85:e1:c7:2d:86:cc:53:aa:ba:a3:
e2:17:67:3d:19:2d:39:39:67:6a:86:3d:7c:c4:ef:65:c1:36:
43:a1:76:3d:4b:18:1f:b4:e1:bf:ec:fb:fe:cc:2b:4e:8d:96:
74:07:c6:b7:bb:2f:26:b7:1d:58:f0:9d:5f:6f:16:5c:e1:98:
11:bd:19:b2:e3:f6:0a:12:ca:fa:63:0f:34:87:a7:0b:eb:2f:
7a:f7:4d:25:53:1c:b8:50:89:90:ee:46:8d:eb:d0:9e:b9:c7:
d8:f4:31:24:31:c7:1a:ea:df:01:78:6f:0c:76:79:dd:87:e9:
f2:aa:12:3c:ac:fe:07:b5:0b:a4:1e:3d:ce:f0:b7:50:d0:08:
85:e0:b2:c5:f6:45:ad:53:f8:2c:dc:8b:b5:91:aa:09:21:3d:
94:48:20:3f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkUwOTIxMTAvBgNVBAUTKEExODEyNUQxRDNCRTRFNjBDRkQ5QzgyMUZDRjVBQ0NF
NEVEQTY1NDQwHhcNMjUwMjA2MTgzNzUyWhcNMjUwMjEzMTgzNzUyWjAYMRYwFAYD
VQQDEw02N2E1MDE4MC0wNDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzIwe8hEdAuL6ifdmuE3hm1c0pThD+nDFoMkREJw1oLFyLIiv410Img5sAlj3
0nwvqaKCEHvh3HSUc/E9Bj9BJQZPD73s+T7YCRecyY+X86vMLPwZaLX2luCzKvu/
JF5u9ZaOGPu+xDRwxeeNzdPDQxy0tUiJfP9VqLByvAVEFR9SB1wewjEUU4XFIu6g
y3YetK7vc31eQ/Gwz4S8rRcEViXOL39ZkGNcv/PjeghCVJ5T3ZonXTXMugPB7/+Y
lpFhBCcPHhIOplXH6pasu9oUlHZoDrpEjFXu9Oy4XTdOfKJzvtusnUcDxKenlNVq
mN865HGzevFV5vbxHjOAvZWRxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFML0gPO2
nhjAp8o5GakBVjMQSz80MB8GA1UdIwQYMBaAFKGBJdHTvk5gz9nIIfz1rM5O2mVE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTA5Mi9ERjIyQjRGQTE4
QjgxMUVBQjA2Q0E3ODVDNEY5QUUwMi9vWUVsMGRPLVRtRFAyY2doX1BXc3prN2Fa
VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29ZRWwwZE8tVG1EUDJjZ2hfUFdzems3YVpVUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RTA5Mi9ERjIyQjRGQTE4QjgxMUVBQjA2Q0E3ODVDNEY5QUUwMi9vWUVsMGRPLVRt
RFAyY2doX1BXc3prN2FaVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBrhLWC7hludZzk/KeL4yHZe/pnnMmmryEjjQnL5PWeQX8321dtLzgk
AjH4bbxihk2NiCyWfUQfC3QTkoCesK/ytxS3QtwVkA4b8CF1AiKQCkee03EFfOjr
Yf+Pz6fF0TnFHYXhxy2GzFOquqPiF2c9GS05OWdqhj18xO9lwTZDoXY9SxgftOG/
7Pv+zCtOjZZ0B8a3uy8mtx1Y8J1fbxZc4ZgRvRmy4/YKEsr6Yw80h6cL6y96900l
Uxy4UImQ7kaN69CeucfY9DEkMcca6t8BeG8Mdnndh+nyqhI8rP4HtQukHj3O8LdQ
0AiF4LLF9kWtU/gs3Iu1kaoJIT2USCA/
-----END CERTIFICATE-----
Generated at Thu Jun 5 19:59:25 2025 by rpki-client