Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft
File: H7fzr2-da5fjcg7FSsv1iTrGk2g.mft (raw, json)
Hash identifier: CAyFy7TWHH16SMnIUt+pmTuaD2JA8av4PpRboKYOErE=
Subject key identifier: D6:C2:9A:AF:94:90:0E:D1:57:8D:6A:B6:8F:A3:9B:B5:29:B0:60:72
Authority key identifier: 1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68
Certificate issuer: /CN=A9117DD2/serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368
Certificate serial: 0178
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft
Manifest number: 0175
Signing time: Sat 29 Mar 2025 03:17:14 +0000
Manifest this update: Sat 29 Mar 2025 03:17:14 +0000
Manifest next update: Sat 05 Apr 2025 03:17:14 +0000
Files and hashes: 1: H7fzr2-da5fjcg7FSsv1iTrGk2g.crl (hash: +W/kHfMovVngfSZoXZhbxwfKFDpkfniXeQ6CPKoBFcc=)
2: 2871DB9ED1CB11EDBE2F0D7EC4F9AE02.roa (hash: qsnpQrMFH1PY3Ac5AGcGsg4fbvmr0wt6eeqt7tZf76E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 376 (0x178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117DD2
Validity
Not Before: Mar 29 03:17:14 2025 GMT
Not After : Apr 5 03:17:14 2025 GMT
Subject: CN=67e7663a-b4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1d:90:58:09:2e:cf:5a:6a:bf:b3:77:6c:c3:
4e:0c:bb:0d:ee:06:d9:b7:cd:25:08:54:ac:55:f9:
25:9a:6e:97:c3:f9:3d:62:74:ff:36:4c:47:f8:2f:
e0:e3:b0:ed:b7:7d:c4:c5:fd:ed:8b:c1:10:5b:e0:
e5:3f:e2:a8:80:52:11:4a:44:56:81:d5:2a:be:c0:
b9:fc:ff:e3:28:db:4b:16:1b:6e:44:45:08:f1:b1:
d5:bc:a1:0e:7f:b5:05:75:46:4c:6f:5e:c0:b2:d0:
38:a9:f1:d1:28:63:e4:3f:6f:45:7a:a1:50:cf:0f:
5b:e9:d8:43:c4:8e:a0:94:6b:f0:6d:ed:6e:3c:ba:
d9:e0:73:38:a6:68:36:2b:e4:33:82:60:a7:9d:b0:
bd:cc:a7:46:50:7a:51:7e:e7:f7:5d:19:52:2a:15:
4f:1e:9e:6f:f3:f3:f9:8e:63:99:e8:a5:f7:19:f0:
78:3e:4f:6e:c6:21:06:66:d2:9b:39:bb:68:d2:f0:
5f:d7:48:73:81:55:5e:61:fa:55:ff:66:c9:0c:a8:
35:86:17:3c:b2:be:c1:94:54:d1:4f:4e:b0:14:dd:
67:10:0b:b6:30:1d:10:26:b5:39:13:54:f2:70:29:
49:cf:47:46:ed:8b:20:0f:da:11:a4:e3:27:53:b3:
fe:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C2:9A:AF:94:90:0E:D1:57:8D:6A:B6:8F:A3:9B:B5:29:B0:60:72
X509v3 Authority Key Identifier:
keyid:1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:c9:75:96:6d:2c:55:74:9c:44:f5:85:e5:63:60:3e:70:d4:
55:ed:b4:f9:01:53:a4:86:5d:0e:57:6c:1b:22:6c:ef:5a:78:
50:e4:f2:3c:2c:0f:ae:d7:12:6e:a6:82:1a:71:69:57:d3:70:
b8:67:6e:e5:10:78:89:1c:cb:46:82:d7:fc:61:8d:df:60:73:
e8:f5:03:e9:72:55:b0:b6:b3:ae:7c:95:47:25:ed:af:5a:af:
f4:b9:0c:37:f0:41:d4:62:dc:64:1a:12:5d:0f:26:29:1d:9a:
32:3c:50:e5:e9:e0:5a:8c:3b:58:d6:45:de:44:d7:9b:2f:54:
33:2e:2e:6d:96:ec:39:e3:77:e4:aa:ec:c5:3e:aa:91:99:d5:
56:95:87:27:31:67:a9:01:13:39:15:a2:da:bf:1c:11:b3:7f:
ec:d5:c1:3f:89:87:6a:43:db:4c:69:17:83:4a:e7:7c:db:40:
7f:94:a9:b7:ec:e5:1f:4c:2b:2f:29:4a:e6:d2:a7:75:a9:a7:
45:e1:cd:8d:1f:c0:b9:c5:ca:9e:71:5c:46:f3:78:5c:48:76:
1e:0e:37:31:77:12:c5:c7:5b:a8:d7:03:2d:e7:20:ba:24:f7:
aa:59:86:cb:16:d8:00:cb:c2:0a:2d:fc:e3:a7:87:88:5b:5a:
8c:ca:e5:a1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTdERDIxMTAvBgNVBAUTKDFGQjdGM0FGNkY5RDZCOTdFMzcyMEVDNTRBQ0JGNTg5
M0FDNjkzNjgwHhcNMjUwMzI5MDMxNzE0WhcNMjUwNDA1MDMxNzE0WjAYMRYwFAYD
VQQDEw02N2U3NjYzYS1iNGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxR2QWAkuz1pqv7N3bMNODLsN7gbZt80lCFSsVfklmm6Xw/k9YnT/NkxH+C/g
47Dtt33Exf3ti8EQW+DlP+KogFIRSkRWgdUqvsC5/P/jKNtLFhtuREUI8bHVvKEO
f7UFdUZMb17AstA4qfHRKGPkP29FeqFQzw9b6dhDxI6glGvwbe1uPLrZ4HM4pmg2
K+QzgmCnnbC9zKdGUHpRfuf3XRlSKhVPHp5v8/P5jmOZ6KX3GfB4Pk9uxiEGZtKb
Obto0vBf10hzgVVeYfpV/2bJDKg1hhc8sr7BlFTRT06wFN1nEAu2MB0QJrU5E1Ty
cClJz0dG7YsgD9oRpOMnU7P+uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbCmq+U
kA7RV41qto+jm7UpsGByMB8GA1UdIwQYMBaAFB+3869vnWuX43IOxUrL9Yk6xpNo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0REMi8xMDFFREFFQUQx
QzgxMUVEQUNDODFCN0NDNEY5QUUwMi9IN2Z6cjItZGE1ZmpjZzdGU3N2MWlUckdr
MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0g3ZnpyMi1kYTVmamNnN0ZTc3YxaVRyR2syZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
N0REMi8xMDFFREFFQUQxQzgxMUVEQUNDODFCN0NDNEY5QUUwMi9IN2Z6cjItZGE1
ZmpjZzdGU3N2MWlUckdrMmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCYyXWWbSxVdJxE9YXlY2A+cNRV7bT5AVOkhl0OV2wbImzvWnhQ5PI8
LA+u1xJupoIacWlX03C4Z27lEHiJHMtGgtf8YY3fYHPo9QPpclWwtrOufJVHJe2v
Wq/0uQw38EHUYtxkGhJdDyYpHZoyPFDl6eBajDtY1kXeRNebL1QzLi5tluw543fk
quzFPqqRmdVWlYcnMWepARM5FaLavxwRs3/s1cE/iYdqQ9tMaReDSud820B/lKm3
7OUfTCsvKUrm0qd1qadF4c2NH8C5xcqecVxG83hcSHYeDjcxdxLFx1uo1wMt5yC6
JPeqWYbLFtgAy8IKLfzjp4eIW1qMyuWh
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:21:00 2025 by rpki-client