Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft
File: X5Yo0rAcllh6gccdLsi0HnJdDXM.mft (raw, json)
Hash identifier: x6ozxKalMzqFuxWbNzCdYh1dFGw+Uxme071DV3uskIw=
Subject key identifier: 45:07:1D:E0:EB:A5:5E:FD:49:13:B6:6D:43:A1:AD:A7:BA:D3:B1:F9
Authority key identifier: 5F:96:28:D2:B0:1C:96:58:7A:81:C7:1D:2E:C8:B4:1E:72:5D:0D:73
Certificate issuer: /CN=A91EEA4D/serialNumber=5F9628D2B01C96587A81C71D2EC8B41E725D0D73
Certificate serial: 0AF1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft
Manifest number: 1306
Signing time: Tue 20 May 2025 19:20:33 +0000
Manifest this update: Tue 20 May 2025 19:20:33 +0000
Manifest next update: Tue 27 May 2025 19:20:33 +0000
Files and hashes: 1: X5Yo0rAcllh6gccdLsi0HnJdDXM.crl (hash: roIxcEqGxOOqmFJ0Zh+o8T6lv+fc/xC69wwer5kMXyo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2801 (0xaf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEA4D, serialNumber=5F9628D2B01C96587A81C71D2EC8B41E725D0D73
Validity
Not Before: May 20 19:20:33 2025 GMT
Not After : May 27 19:20:33 2025 GMT
Subject: CN=682cd601-9aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8c:7f:96:6c:29:b6:ca:06:d7:64:aa:8e:a9:
f3:2a:39:c5:41:cd:06:96:26:e7:2b:db:27:94:4c:
0c:bd:cc:f3:ec:b8:f4:0f:bb:71:1e:c4:9f:27:72:
20:44:bf:a3:b2:cf:b0:b1:7a:e6:46:a7:e4:fd:af:
c3:95:73:2e:4e:b7:9e:f2:61:6b:f7:41:d7:fd:fb:
74:8e:bd:be:16:70:13:59:e2:97:37:de:fe:49:1c:
d7:90:1e:b4:df:ae:a8:3a:d9:50:74:27:6c:70:bd:
68:94:06:d4:94:03:a7:7e:5c:97:42:37:e5:b0:ec:
da:0b:f4:7d:f0:0b:1e:84:80:eb:4c:d3:0e:7e:1f:
98:7e:e3:c4:79:f4:0a:f5:0a:6d:8e:d0:44:3c:42:
58:42:36:1b:dd:83:12:a3:7c:98:d4:8f:c5:cd:53:
4a:43:a8:a6:9f:ad:f3:db:95:6a:c9:84:37:45:c8:
b8:37:13:75:99:be:17:a6:93:20:1b:ca:fa:90:18:
25:e3:f2:17:7c:4a:b6:ca:fc:be:48:d9:19:fb:ed:
2f:c6:af:62:11:c6:87:4f:34:66:00:1b:87:db:97:
88:ec:5b:fc:90:6b:d6:9c:f6:7d:f2:f3:48:1c:c9:
a8:c2:72:fc:54:d8:53:8a:aa:7a:a0:8f:f6:57:56:
5a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:07:1D:E0:EB:A5:5E:FD:49:13:B6:6D:43:A1:AD:A7:BA:D3:B1:F9
X509v3 Authority Key Identifier:
keyid:5F:96:28:D2:B0:1C:96:58:7A:81:C7:1D:2E:C8:B4:1E:72:5D:0D:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:57:57:81:17:df:6f:66:07:11:c3:86:c2:57:19:2c:a4:47:
32:b0:70:bb:c4:e4:6d:cb:af:d9:86:14:9c:b5:da:44:1e:ef:
57:31:2f:a3:f7:d9:07:79:45:02:af:5a:da:87:c6:21:9c:51:
27:8f:6c:33:ba:ef:f8:52:1b:e3:23:86:76:12:39:78:1f:48:
8d:b8:41:aa:ce:6b:ee:c8:cb:28:b8:0c:b6:15:4e:e4:97:86:
26:23:55:1c:58:d0:93:58:36:f6:c0:e4:6b:d8:d0:84:6e:a8:
7c:f3:4b:0d:76:29:fe:2f:58:78:84:f8:99:78:7a:1a:80:26:
c7:01:a4:26:7a:5d:1b:75:5d:29:c3:6a:78:46:56:fa:f2:c1:
42:e5:b5:fa:d2:15:c8:05:96:34:63:3c:10:91:7e:9c:59:ab:
c3:0b:df:98:37:7f:5b:08:c6:ff:6d:a7:c4:61:77:fc:ff:c6:
aa:4f:6d:33:9b:1e:2b:5b:df:3e:9d:0e:30:53:36:ac:f6:84:
29:fd:68:91:ee:ca:27:1a:40:2c:52:9d:ec:04:8e:d4:92:84:
7c:28:f3:da:df:f1:a3:f1:9d:e2:35:5b:73:22:c2:83:44:99:
fc:69:08:99:24:6b:4a:6c:db:bd:c4:ce:ac:dc:d6:bb:1e:38:
7a:64:94:19
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUVBNEQxMTAvBgNVBAUTKDVGOTYyOEQyQjAxQzk2NTg3QTgxQzcxRDJFQzhCNDFF
NzI1RDBENzMwHhcNMjUwNTIwMTkyMDMzWhcNMjUwNTI3MTkyMDMzWjAYMRYwFAYD
VQQDEw02ODJjZDYwMS05YWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsox/lmwptsoG12SqjqnzKjnFQc0GlibnK9snlEwMvczz7Lj0D7txHsSfJ3Ig
RL+jss+wsXrmRqfk/a/DlXMuTree8mFr90HX/ft0jr2+FnATWeKXN97+SRzXkB60
366oOtlQdCdscL1olAbUlAOnflyXQjflsOzaC/R98AsehIDrTNMOfh+YfuPEefQK
9QptjtBEPEJYQjYb3YMSo3yY1I/FzVNKQ6imn63z25VqyYQ3Rci4NxN1mb4XppMg
G8r6kBgl4/IXfEq2yvy+SNkZ++0vxq9iEcaHTzRmABuH25eI7Fv8kGvWnPZ98vNI
HMmownL8VNhTiqp6oI/2V1ZalQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEUHHeDr
pV79SRO2bUOhrae607H5MB8GA1UdIwQYMBaAFF+WKNKwHJZYeoHHHS7ItB5yXQ1z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUE0RC82NjFGNzNFQzQ3
MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9YNVlvMHJBY2xsaDZnY2NkTHNpMEhuSmRE
WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1g1WW8wckFjbGxoNmdjY2RMc2kwSG5KZERYTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RUE0RC82NjFGNzNFQzQ3MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9YNVlvMHJBY2xs
aDZnY2NkTHNpMEhuSmREWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC6V1eBF99vZgcRw4bCVxkspEcysHC7xORty6/ZhhSctdpEHu9XMS+j
99kHeUUCr1rah8YhnFEnj2wzuu/4UhvjI4Z2Ejl4H0iNuEGqzmvuyMsouAy2FU7k
l4YmI1UcWNCTWDb2wORr2NCEbqh880sNdin+L1h4hPiZeHoagCbHAaQmel0bdV0p
w2p4Rlb68sFC5bX60hXIBZY0YzwQkX6cWavDC9+YN39bCMb/bafEYXf8/8aqT20z
mx4rW98+nQ4wUzas9oQp/WiR7sonGkAsUp3sBI7UkoR8KPPa3/Gj8Z3iNVtzIsKD
RJn8aQiZJGtKbNu9xM6s3Na7Hjh6ZJQZ
-----END CERTIFICATE-----
Generated at Tue Jun 3 23:19:28 2025 by rpki-client