Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/RSYt0mlcTSfoRBtno2XoZrW2qOU.mft
File: RSYt0mlcTSfoRBtno2XoZrW2qOU.mft (raw, json)
Hash identifier: 7krCPq1haUqwy5+ErPPl/AOKIvejIz4ym0O4zuNEqlg=
Subject key identifier: 61:EA:EA:CE:31:FB:91:2D:73:08:A5:37:EE:A8:9A:42:84:71:AA:E2
Authority key identifier: 45:26:2D:D2:69:5C:4D:27:E8:44:1B:67:A3:65:E8:66:B5:B6:A8:E5
Certificate issuer: /CN=A918EDB2/serialNumber=45262DD2695C4D27E8441B67A365E866B5B6A8E5
Certificate serial: 3209
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/RSYt0mlcTSfoRBtno2XoZrW2qOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/RSYt0mlcTSfoRBtno2XoZrW2qOU.mft
Manifest number: 49F4
Signing time: Mon 08 Jan 2024 15:39:21 +0000
Manifest this update: Mon 08 Jan 2024 15:39:21 +0000
Manifest next update: Mon 15 Jan 2024 15:39:21 +0000
Files and hashes: 1: RSYt0mlcTSfoRBtno2XoZrW2qOU.crl (hash: DSgD5RMeGoiCtQ+h3pMB1gs3/XnEUNAzHLHCXh8pbLg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12809 (0x3209)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=45262DD2695C4D27E8441B67A365E866B5B6A8E5
Validity
Not Before: Jan 8 15:39:21 2024 GMT
Not After : Jan 15 15:39:21 2024 GMT
Subject: CN=659c1729-0a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4f:4a:6a:b7:9d:46:da:e7:eb:25:a6:5d:dd:
ce:44:29:9b:93:74:0d:b3:74:0c:b1:4a:0a:8a:28:
b9:62:f3:b6:63:d6:f0:c1:9b:3f:01:b9:2a:84:57:
28:de:65:4e:f4:33:3c:89:44:ce:90:13:4a:5b:ef:
ff:86:75:bd:8c:6e:12:2e:4b:a9:92:09:f4:45:ff:
b3:fe:bc:99:b0:3e:55:9a:9d:cd:95:5b:8b:43:5a:
73:f1:d7:bb:09:b7:27:39:bf:fa:ad:f5:45:53:e1:
d0:89:d2:58:4e:15:55:99:5a:75:6a:d1:b6:fb:9c:
33:bb:6c:2d:34:cd:c4:ea:09:b3:f0:0d:00:9e:30:
f3:d0:9e:60:63:f4:bc:52:5a:66:58:a9:d5:4b:12:
7b:9a:e9:5e:10:fa:30:47:1c:a1:95:04:90:4f:f0:
94:3c:a9:55:63:8e:fa:2d:cc:4f:58:a2:4e:f6:d6:
f5:c9:e5:0c:4b:73:a7:03:55:85:af:bf:8d:d1:ad:
26:58:51:e2:1c:69:62:df:3c:9a:26:a8:3e:cb:d5:
06:24:cf:4d:0c:38:be:88:e3:29:00:62:96:05:45:
f8:ff:a6:b4:26:a7:1e:a7:38:6c:8e:17:32:45:dc:
82:7d:5e:10:36:c4:ae:db:8e:43:7c:62:fd:0d:66:
72:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EA:EA:CE:31:FB:91:2D:73:08:A5:37:EE:A8:9A:42:84:71:AA:E2
X509v3 Authority Key Identifier:
keyid:45:26:2D:D2:69:5C:4D:27:E8:44:1B:67:A3:65:E8:66:B5:B6:A8:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/RSYt0mlcTSfoRBtno2XoZrW2qOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/RSYt0mlcTSfoRBtno2XoZrW2qOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/RSYt0mlcTSfoRBtno2XoZrW2qOU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:33:90:44:e9:c8:25:d1:36:76:41:10:a5:6e:90:f3:19:a1:
2e:f8:fd:74:5f:51:de:39:4c:38:9c:21:9b:b9:af:60:e8:a6:
7a:6d:85:8c:91:ca:11:1b:4e:87:ce:37:35:0a:21:de:49:c5:
e1:4b:a5:67:e9:06:78:6c:f2:98:49:d7:a5:e9:e7:5c:b2:ee:
65:07:ce:cd:7d:b7:41:65:21:01:28:d8:9a:6f:22:5a:fb:9a:
a7:bd:7c:b7:3e:5a:a6:75:fa:d1:de:cc:da:ce:de:4b:0c:10:
56:d0:34:cd:48:b3:bb:59:db:37:89:dc:e1:08:0d:23:8b:19:
ef:f2:5c:11:19:20:78:13:10:2b:35:5d:86:e9:7e:60:52:a3:
2b:e0:de:ad:31:cb:39:ae:ba:38:ea:72:63:1a:76:1d:ab:cd:
63:d6:59:fb:26:d0:1f:03:8a:c2:b2:77:7a:39:1d:2b:dd:e6:
dd:e1:41:f6:0b:7f:48:86:21:25:aa:26:90:78:0d:fd:5f:ea:
93:e0:0b:6d:f1:b0:02:36:0d:3a:30:20:a9:c6:e2:86:1d:79:
52:c7:a0:cd:88:6c:b7:fd:2e:be:c9:29:af:ce:50:ac:06:0b:
54:82:eb:dc:5b:a8:f2:64:8c:60:ba:a9:22:3f:b7:2f:97:22:
06:66:e4:5a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICMgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDQ1MjYyREQyNjk1QzREMjdFODQ0MUI2N0EzNjVFODY2
QjVCNkE4RTUwHhcNMjQwMTA4MTUzOTIxWhcNMjQwMTE1MTUzOTIxWjAYMRYwFAYD
VQQDEw02NTljMTcyOS0wYTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuU9KaredRtrn6yWmXd3ORCmbk3QNs3QMsUoKiii5YvO2Y9bwwZs/AbkqhFco
3mVO9DM8iUTOkBNKW+//hnW9jG4SLkupkgn0Rf+z/ryZsD5Vmp3NlVuLQ1pz8de7
CbcnOb/6rfVFU+HQidJYThVVmVp1atG2+5wzu2wtNM3E6gmz8A0AnjDz0J5gY/S8
UlpmWKnVSxJ7muleEPowRxyhlQSQT/CUPKlVY476LcxPWKJO9tb1yeUMS3OnA1WF
r7+N0a0mWFHiHGli3zyaJqg+y9UGJM9NDDi+iOMpAGKWBUX4/6a0Jqcepzhsjhcy
RdyCfV4QNsSu245DfGL9DWZyVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHq6s4x
+5EtcwilN+6omkKEcariMB8GA1UdIwQYMBaAFEUmLdJpXE0n6EQbZ6Nl6Ga1tqjl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8wREYzQjI1RTcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9SU1l0MG1sY1RTZm9SQnRubzJYb1pyVzJx
T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy
RkQxRkYyL1JTWXQwbWxjVFNmb1JCdG5vMlhvWnJXMnFPVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RURCMi8wREYzQjI1RTcwRTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9SU1l0MG1sY1RT
Zm9SQnRubzJYb1pyVzJxT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAnM5BE6cgl0TZ2QRClbpDzGaEu+P10X1HeOUw4nCGbua9g6KZ6bYWM
kcoRG06Hzjc1CiHeScXhS6Vn6QZ4bPKYSdel6edcsu5lB87NfbdBZSEBKNiabyJa
+5qnvXy3PlqmdfrR3szazt5LDBBW0DTNSLO7Wds3idzhCA0jixnv8lwRGSB4ExAr
NV2G6X5gUqMr4N6tMcs5rro46nJjGnYdq81j1ln7JtAfA4rCsnd6OR0r3ebd4UH2
C39IhiElqiaQeA39X+qT4Att8bACNg06MCCpxuKGHXlSx6DNiGy3/S6+ySmvzlCs
BgtUguvcW6jyZIxguqkiP7cvlyIGZuRa
-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:02 2024 by rpki-client on console.sobornost.net