Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft
File: lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft (raw, json)
Hash identifier: WjMTXda2LmrAXf1yCfI70yan+8oLUOj5AC1nf00o3mk=
Subject key identifier: 14:39:58:BC:8D:3C:03:E5:D7:B2:6D:9E:1B:47:3D:5F:53:FD:FA:D8
Authority key identifier: 95:2F:71:2D:F1:18:41:20:8A:3B:4A:87:46:20:C5:9F:EE:D7:70:B0
Certificate issuer: /CN=A9110F1F/serialNumber=952F712DF11841208A3B4A874620C59FEED770B0
Certificate serial: 0231
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft
Manifest number: 022D
Signing time: Sat 29 Mar 2025 02:11:24 +0000
Manifest this update: Sat 29 Mar 2025 02:11:23 +0000
Manifest next update: Sat 05 Apr 2025 02:11:23 +0000
Files and hashes: 1: lS9xLfEYQSCKO0qHRiDFn-7XcLA.crl (hash: 4ERZ1vI+pBCgkx1eXhOXcdRUrSHKDqGQ2dBdTSaM1jg=)
2: AF6A12881EBB11EDB35A2561C4F9AE02.roa (hash: 27aLcYczZ5MYFXDnhdewNPk3kbRzrioX5es/1Wn4iNI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 561 (0x231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110F1F
Validity
Not Before: Mar 29 02:11:23 2025 GMT
Not After : Apr 5 02:11:23 2025 GMT
Subject: CN=67e756cb-909e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bf:c1:e5:cc:7b:9c:b1:d4:6e:72:77:a8:50:
6d:b1:d0:17:7b:a0:04:34:1c:0b:5d:76:56:85:ec:
53:87:d1:e7:c0:f2:7b:d6:39:1f:ec:e9:9a:7d:64:
db:3b:3c:0f:de:e4:b6:e6:1c:83:c4:3d:1b:ae:d6:
5a:c1:03:10:4b:23:88:44:f2:d3:b3:a0:86:c4:5d:
86:a8:a5:51:fa:d8:dd:ec:09:e9:c0:f2:73:0d:8b:
92:9f:3b:28:ca:0c:2a:f6:e4:b1:a7:df:ee:ed:5c:
64:fb:08:88:14:e1:b5:3e:51:ba:a4:9e:1f:5e:2c:
49:40:5d:ae:d0:01:5c:54:3e:05:ba:e8:a9:99:6e:
1d:48:f2:2b:cb:39:4c:bf:1e:97:f0:cd:fe:cb:e9:
f1:7b:12:5a:04:bb:94:1c:98:57:71:b7:4f:98:ad:
d8:01:c3:fd:65:dc:15:83:4a:31:ff:b8:2f:22:15:
f0:c0:0d:59:90:45:4d:e9:6e:c3:73:62:00:22:d1:
48:a5:3f:03:1e:90:69:f8:79:d0:01:f6:69:2e:42:
92:d6:63:e1:35:89:61:7e:d0:58:d5:c4:f2:be:09:
70:96:8e:60:b0:01:83:ab:74:50:cd:23:82:fe:2e:
35:3f:5e:b9:e0:e4:20:82:ed:09:ab:7e:63:fd:b9:
4e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:39:58:BC:8D:3C:03:E5:D7:B2:6D:9E:1B:47:3D:5F:53:FD:FA:D8
X509v3 Authority Key Identifier:
keyid:95:2F:71:2D:F1:18:41:20:8A:3B:4A:87:46:20:C5:9F:EE:D7:70:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:51:2f:38:87:93:48:fd:d9:62:e4:70:39:4d:14:0d:2a:cc:
8f:60:41:14:c4:8e:1a:f5:2e:2a:79:8a:ac:9f:e9:40:e2:cd:
8f:63:d9:42:4f:e1:9f:58:3d:3a:4f:73:08:48:db:e1:57:ff:
b5:d3:6a:ef:86:82:74:8b:51:a9:ef:ac:34:27:dc:dd:eb:33:
8b:4f:c1:fc:31:9c:83:8b:08:f5:3d:53:49:02:91:ac:2f:84:
ff:a3:7f:bc:30:0f:ee:cf:8c:3f:13:a0:54:e4:00:43:1e:e9:
96:cb:42:b1:73:21:4d:ee:3e:71:aa:16:9e:79:49:08:45:c9:
13:b3:7f:99:92:7c:51:52:76:0e:3c:b9:c6:0a:b2:ab:20:a2:
a7:7f:a2:48:a3:80:45:cc:b9:89:18:28:ac:05:4b:3e:cb:38:
1d:0d:d6:61:b6:8d:81:df:79:a6:b4:46:84:d9:1d:a9:91:35:
1e:dc:94:41:0c:15:8e:88:fd:1d:2f:36:30:c5:b0:dd:42:ff:
72:51:c4:b7:e2:e1:d1:97:84:07:39:0a:b5:d7:2b:ac:4e:39:
7d:43:ad:ca:53:c7:fe:1c:b7:f9:75:3e:bd:ac:70:b0:e3:30:
ff:e7:f8:da:93:43:30:99:2c:ea:03:f5:bf:d4:89:51:de:41:
64:73:34:47
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTBGMUYxMTAvBgNVBAUTKDk1MkY3MTJERjExODQxMjA4QTNCNEE4NzQ2MjBDNTlG
RUVENzcwQjAwHhcNMjUwMzI5MDIxMTIzWhcNMjUwNDA1MDIxMTIzWjAYMRYwFAYD
VQQDEw02N2U3NTZjYi05MDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvr/B5cx7nLHUbnJ3qFBtsdAXe6AENBwLXXZWhexTh9HnwPJ71jkf7OmafWTb
OzwP3uS25hyDxD0brtZawQMQSyOIRPLTs6CGxF2GqKVR+tjd7AnpwPJzDYuSnzso
ygwq9uSxp9/u7Vxk+wiIFOG1PlG6pJ4fXixJQF2u0AFcVD4FuuipmW4dSPIryzlM
vx6X8M3+y+nxexJaBLuUHJhXcbdPmK3YAcP9ZdwVg0ox/7gvIhXwwA1ZkEVN6W7D
c2IAItFIpT8DHpBp+HnQAfZpLkKS1mPhNYlhftBY1cTyvglwlo5gsAGDq3RQzSOC
/i41P1654OQggu0Jq35j/blOPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQ5WLyN
PAPl17JtnhtHPV9T/frYMB8GA1UdIwQYMBaAFJUvcS3xGEEgijtKh0YgxZ/u13Cw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEYxRi82QzBGRUY1QTFF
QjkxMUVEOUZDNjg3NjBDNEY5QUUwMi9sUzl4TGZFWVFTQ0tPMHFIUmlERm4tN1hj
TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xTOXhMZkVZUVNDS08wcUhSaURGbi03WGNMQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MEYxRi82QzBGRUY1QTFFQjkxMUVEOUZDNjg3NjBDNEY5QUUwMi9sUzl4TGZFWVFT
Q0tPMHFIUmlERm4tN1hjTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDAUS84h5NI/dli5HA5TRQNKsyPYEEUxI4a9S4qeYqsn+lA4s2PY9lC
T+GfWD06T3MISNvhV/+102rvhoJ0i1Gp76w0J9zd6zOLT8H8MZyDiwj1PVNJApGs
L4T/o3+8MA/uz4w/E6BU5ABDHumWy0KxcyFN7j5xqhaeeUkIRckTs3+ZknxRUnYO
PLnGCrKrIKKnf6JIo4BFzLmJGCisBUs+yzgdDdZhto2B33mmtEaE2R2pkTUe3JRB
DBWOiP0dLzYwxbDdQv9yUcS34uHRl4QHOQq11yusTjl9Q63KU8f+HLf5dT69rHCw
4zD/5/jak0MwmSzqA/W/1IlR3kFkczRH
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:55:45 2025 by rpki-client