Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
File: OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft (raw, json)
Hash identifier: lKHUJ36/r5HWxN16TcqEOglLG4hqqDLwyk3cN5hlslE=
Subject key identifier: F2:62:EE:B0:D5:86:2A:E2:AE:47:03:0F:CE:33:FD:07:70:59:BD:79
Authority key identifier: 39:D1:D5:95:54:18:91:35:30:94:58:36:18:D6:CC:07:9C:83:0C:E1
Certificate issuer: /CN=A9110C7C/serialNumber=39D1D595541891353094583618D6CC079C830CE1
Certificate serial: 1E80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
Manifest number: 1E74
Signing time: Fri 28 Mar 2025 16:10:13 +0000
Manifest this update: Fri 28 Mar 2025 16:10:13 +0000
Manifest next update: Fri 04 Apr 2025 16:10:13 +0000
Files and hashes: 1: OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl (hash: p5Z7phsg0tC+qlbZYtjYhcqUj4rSs4i5wmSSU7RE3Po=)
2: BFF7726E6EF711E69FBC340BC4F9AE02.roa (hash: W0ZWmGkhW06fRZVPw8jscLCIBobXeY3y+SwBDvJ1Z0s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7808 (0x1e80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110C7C
Validity
Not Before: Mar 28 16:10:13 2025 GMT
Not After : Apr 4 16:10:13 2025 GMT
Subject: CN=67e6c9e5-f832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ab:ea:b9:ce:37:14:c8:eb:9b:ed:77:42:cf:
ed:3a:74:a0:bb:5c:88:2e:86:ac:68:6c:a6:01:a7:
ab:9e:a5:2a:ad:5c:df:4f:da:98:e6:37:8d:4a:87:
e9:fb:0a:7e:d5:a2:43:f2:5e:fa:be:df:e5:88:96:
d6:a0:ed:ca:d9:b2:3b:c2:4d:70:63:3b:07:2c:bb:
8b:7f:2d:fb:b8:4e:24:35:cb:86:3c:96:f5:9b:aa:
6a:1e:e6:e1:d1:2a:55:6b:55:12:ef:5f:2f:a8:b8:
59:ab:08:85:e5:51:3c:07:bc:42:d4:92:65:35:59:
58:2e:31:fe:ee:28:d4:cb:92:fb:6d:b9:07:6b:23:
4c:75:ac:8c:ec:7a:8e:37:2c:d4:58:eb:8b:df:77:
34:f6:99:96:f7:7b:cc:34:7b:05:e5:ee:45:d1:f8:
46:54:31:cb:7e:6d:e4:10:f2:25:a7:32:88:03:8d:
cc:af:21:38:3d:83:d6:28:11:fe:f3:68:a0:25:63:
91:10:82:db:73:4c:6c:9c:f4:3e:cd:7e:f9:8d:4c:
b5:07:6b:d6:a9:57:60:ef:a0:d3:73:0f:0e:47:cb:
17:17:a2:2b:65:93:2d:e0:8c:f2:84:32:94:07:9e:
c6:9e:bb:31:ee:80:8f:9b:9a:d5:a3:86:43:83:ae:
c7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:62:EE:B0:D5:86:2A:E2:AE:47:03:0F:CE:33:FD:07:70:59:BD:79
X509v3 Authority Key Identifier:
keyid:39:D1:D5:95:54:18:91:35:30:94:58:36:18:D6:CC:07:9C:83:0C:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:97:29:5a:63:66:69:ab:4e:91:54:62:23:df:da:3b:17:99:
6b:31:73:6a:3f:37:40:05:9d:24:30:77:72:13:f0:b6:33:40:
57:25:de:12:47:d1:25:f1:97:73:e1:ea:59:95:cc:92:85:98:
53:c9:f4:eb:c7:42:01:35:02:51:8f:41:1a:72:9f:c6:c6:79:
b9:ce:9a:f9:c8:f6:3a:3d:a8:2f:73:b7:31:f1:e9:07:7a:59:
74:eb:4a:b2:33:58:5b:88:09:86:e9:ff:24:96:2a:af:39:31:
84:a7:95:b0:7c:c5:1f:0e:72:94:6f:27:d0:a3:b5:17:dc:6b:
b7:b7:c2:a0:3c:3e:79:a3:7f:18:7d:a5:fe:68:73:2c:4a:44:
be:b5:e0:88:f9:e1:8b:50:88:c2:d0:6c:7f:43:33:3d:63:f1:
50:ed:eb:50:6a:7f:1b:d3:7d:33:e9:3d:70:32:da:3c:7d:9c:
da:51:6f:7f:1c:30:c0:48:ee:64:54:8a:0e:27:e9:3a:b3:f1:
fe:94:66:f0:d3:f8:be:df:36:d1:1a:c5:7a:5d:ae:09:fd:b8:
88:8c:47:d2:2a:fd:e2:f1:51:d3:63:c4:8a:1c:08:3c:da:73:
4c:9e:43:d4:af:75:df:ac:2b:92:b2:18:c0:c5:45:f3:17:8b:
30:4b:c6:f9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTBDN0MxMTAvBgNVBAUTKDM5RDFENTk1NTQxODkxMzUzMDk0NTgzNjE4RDZDQzA3
OUM4MzBDRTEwHhcNMjUwMzI4MTYxMDEzWhcNMjUwNDA0MTYxMDEzWjAYMRYwFAYD
VQQDEw02N2U2YzllNS1mODMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9Kvquc43FMjrm+13Qs/tOnSgu1yILoasaGymAaernqUqrVzfT9qY5jeNSofp
+wp+1aJD8l76vt/liJbWoO3K2bI7wk1wYzsHLLuLfy37uE4kNcuGPJb1m6pqHubh
0SpVa1US718vqLhZqwiF5VE8B7xC1JJlNVlYLjH+7ijUy5L7bbkHayNMdayM7HqO
NyzUWOuL33c09pmW93vMNHsF5e5F0fhGVDHLfm3kEPIlpzKIA43MryE4PYPWKBH+
82igJWOREILbc0xsnPQ+zX75jUy1B2vWqVdg76DTcw8OR8sXF6IrZZMt4IzyhDKU
B57Gnrsx7oCPm5rVo4ZDg67HUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJi7rDV
hirirkcDD84z/QdwWb15MB8GA1UdIwQYMBaAFDnR1ZVUGJE1MJRYNhjWzAecgwzh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEM3Qy8yOUY3QTA0MDZF
RjcxMUU2OUUzMjY3MEFDNEY5QUUwMi9PZEhWbFZRWWtUVXdsRmcyR05iTUI1eURE
T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09kSFZsVlFZa1RVd2xGZzJHTmJNQjV5RERPRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MEM3Qy8yOUY3QTA0MDZFRjcxMUU2OUUzMjY3MEFDNEY5QUUwMi9PZEhWbFZRWWtU
VXdsRmcyR05iTUI1eURET0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC3lylaY2Zpq06RVGIj39o7F5lrMXNqPzdABZ0kMHdyE/C2M0BXJd4S
R9El8Zdz4epZlcyShZhTyfTrx0IBNQJRj0Eacp/Gxnm5zpr5yPY6Pagvc7cx8ekH
ell060qyM1hbiAmG6f8kliqvOTGEp5WwfMUfDnKUbyfQo7UX3Gu3t8KgPD55o38Y
faX+aHMsSkS+teCI+eGLUIjC0Gx/QzM9Y/FQ7etQan8b030z6T1wMto8fZzaUW9/
HDDASO5kVIoOJ+k6s/H+lGbw0/i+3zbRGsV6Xa4J/biIjEfSKv3i8VHTY8SKHAg8
2nNMnkPUr3XfrCuSshjAxUXzF4swS8b5
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:33:41 2025 by rpki-client