Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft
File: ygBwrFIB1vandapSXVPY4zDjIJY.mft (raw, json)
Hash identifier: 9FyclNaiz7X8ZbnvE1L9u39g3xOYYfU4I/Netmo4eGE=
Subject key identifier: 08:33:01:00:A2:8F:BD:90:7D:5A:2A:69:6D:5D:14:9E:5D:24:54:61
Authority key identifier: CA:00:70:AC:52:01:D6:F6:A7:75:AA:52:5D:53:D8:E3:30:E3:20:96
Certificate issuer: /CN=A9116907/serialNumber=CA0070AC5201D6F6A775AA525D53D8E330E32096
Certificate serial: 01BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft
Manifest number: 01B4
Signing time: Sat 29 Mar 2025 02:45:32 +0000
Manifest this update: Sat 29 Mar 2025 02:45:31 +0000
Manifest next update: Sat 05 Apr 2025 02:45:31 +0000
Files and hashes: 1: ygBwrFIB1vandapSXVPY4zDjIJY.crl (hash: xLCT6JMecyy+fQYubO6Hcv3rQZtw/L9+1GViykuzq/E=)
2: 9DE3DEAEAC9E11EFBAC6A027C4F9AE02.roa (hash: TvtT1Oa3KekcpLOO3lB33TtpOxnVn3h062NADWWRlOE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 444 (0x1bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116907
Validity
Not Before: Mar 29 02:45:31 2025 GMT
Not After : Apr 5 02:45:31 2025 GMT
Subject: CN=67e75ecc-897a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e2:d7:ca:0c:21:59:bb:58:c8:ed:4d:15:b7:
04:39:46:8f:ae:ea:ef:11:2d:b4:69:1e:af:90:af:
6e:e0:18:60:d3:ef:b4:ff:20:bd:70:a2:52:a9:ae:
ab:73:db:ec:cd:e8:f6:83:92:8b:e4:43:a7:db:0e:
9b:df:9b:dd:02:65:53:40:77:4a:24:1e:07:3e:3e:
b2:2f:61:5e:24:9a:0d:10:bd:a4:63:c1:c1:13:ec:
97:ce:c0:db:ff:ad:0d:38:4f:cd:ae:ce:37:c2:ad:
2d:b4:dc:bb:2c:d6:48:81:f4:e2:64:b4:9e:a8:0a:
45:4c:7d:aa:95:82:c9:06:15:13:8e:10:84:6d:9a:
ab:51:26:b4:f6:70:2f:a9:f2:26:18:ee:ad:45:32:
e2:aa:6d:49:8f:80:07:60:77:80:61:b2:62:87:76:
73:73:af:79:3e:0f:8d:c3:99:fe:13:2f:7b:dd:47:
bf:fd:38:ea:c1:25:a2:78:b4:5b:97:69:99:eb:8c:
99:24:ff:3f:28:ab:20:f0:d0:b5:61:37:81:a1:08:
31:a5:25:80:fd:2a:6b:5a:82:6d:49:d9:82:73:ab:
f9:37:85:79:b6:f1:40:9d:72:e1:0e:df:6c:93:a1:
d2:e8:a4:32:7b:5e:ee:40:c6:50:47:69:56:e2:f3:
26:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:33:01:00:A2:8F:BD:90:7D:5A:2A:69:6D:5D:14:9E:5D:24:54:61
X509v3 Authority Key Identifier:
keyid:CA:00:70:AC:52:01:D6:F6:A7:75:AA:52:5D:53:D8:E3:30:E3:20:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:f5:44:32:93:f5:c9:f3:65:45:d6:fa:d5:25:4c:29:42:aa:
6f:cd:df:bd:39:ae:86:85:68:7d:54:25:ac:ee:b9:74:87:e6:
61:cc:f0:92:84:28:11:08:45:9d:d9:76:d0:38:0b:a7:90:74:
f9:d3:17:40:19:44:34:02:a6:55:07:26:03:47:35:a3:fd:55:
6b:89:86:11:42:f6:25:3f:0d:23:6c:3f:82:c6:4b:08:e1:e8:
2b:cd:5d:d8:ba:31:51:06:2b:0f:33:a1:c6:ba:e6:d9:57:fb:
1a:c4:f3:8e:16:55:9d:61:3a:1b:93:15:db:46:1b:68:ed:fb:
56:f5:ea:2f:33:bd:1a:d7:ce:be:b9:12:65:d1:e1:ff:41:b6:
91:bc:5f:52:3f:3e:d0:af:56:9c:af:de:b1:52:0a:75:e7:0b:
8a:3b:f1:ba:ad:95:39:07:e7:25:6b:03:26:a0:b9:e1:3f:56:
a7:bc:44:22:8f:ef:7e:4d:54:08:e9:89:d3:e1:3b:8b:21:fa:
c3:39:18:e8:49:45:55:58:ff:9c:2e:7c:04:ab:7c:8e:af:1a:
ef:27:b1:e2:da:e9:e7:4d:de:69:ac:3b:3d:b9:a2:cc:49:37:
45:64:40:6d:24:13:77:75:51:c9:f6:57:08:d7:d6:4e:d3:b5:
d9:f6:82:15
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTY5MDcxMTAvBgNVBAUTKENBMDA3MEFDNTIwMUQ2RjZBNzc1QUE1MjVENTNEOEUz
MzBFMzIwOTYwHhcNMjUwMzI5MDI0NTMxWhcNMjUwNDA1MDI0NTMxWjAYMRYwFAYD
VQQDEw02N2U3NWVjYy04OTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5OLXygwhWbtYyO1NFbcEOUaPrurvES20aR6vkK9u4Bhg0++0/yC9cKJSqa6r
c9vszej2g5KL5EOn2w6b35vdAmVTQHdKJB4HPj6yL2FeJJoNEL2kY8HBE+yXzsDb
/60NOE/Nrs43wq0ttNy7LNZIgfTiZLSeqApFTH2qlYLJBhUTjhCEbZqrUSa09nAv
qfImGO6tRTLiqm1Jj4AHYHeAYbJih3Zzc695Pg+Nw5n+Ey973Ue//TjqwSWieLRb
l2mZ64yZJP8/KKsg8NC1YTeBoQgxpSWA/SprWoJtSdmCc6v5N4V5tvFAnXLhDt9s
k6HS6KQye17uQMZQR2lW4vMmPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAgzAQCi
j72QfVoqaW1dFJ5dJFRhMB8GA1UdIwQYMBaAFMoAcKxSAdb2p3WqUl1T2OMw4yCW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjkwNy9CNTZBN0NCMDdB
QjcxMUVEOUI5NTM1NjlDNEY5QUUwMi95Z0J3ckZJQjF2YW5kYXBTWFZQWTR6RGpJ
SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lnQndyRklCMXZhbmRhcFNYVlBZNHpEaklKWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjkwNy9CNTZBN0NCMDdBQjcxMUVEOUI5NTM1NjlDNEY5QUUwMi95Z0J3ckZJQjF2
YW5kYXBTWFZQWTR6RGpJSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBZ9UQyk/XJ82VF1vrVJUwpQqpvzd+9Oa6GhWh9VCWs7rl0h+ZhzPCS
hCgRCEWd2XbQOAunkHT50xdAGUQ0AqZVByYDRzWj/VVriYYRQvYlPw0jbD+CxksI
4egrzV3YujFRBisPM6HGuubZV/saxPOOFlWdYTobkxXbRhto7ftW9eovM70a186+
uRJl0eH/QbaRvF9SPz7Qr1acr96xUgp15wuKO/G6rZU5B+clawMmoLnhP1anvEQi
j+9+TVQI6YnT4TuLIfrDORjoSUVVWP+cLnwEq3yOrxrvJ7Hi2unnTd5prDs9uaLM
STdFZEBtJBN3dVHJ9lcI19ZO07XZ9oIV
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:20:04 2025 by rpki-client