Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft
File: DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft (raw, json)
Hash identifier: dH2R4kyrNSzkLpncKksElInrjNyhGJ7LmrqQf886PWw=
Subject key identifier: 3C:21:27:19:B1:C5:1C:EF:28:A1:05:DF:E4:D7:49:04:5B:ED:D4:ED
Authority key identifier: 0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47
Certificate issuer: /CN=A911DEBE/serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47
Certificate serial: 08E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft
Manifest number: 08DE
Signing time: Fri 28 Mar 2025 20:40:37 +0000
Manifest this update: Fri 28 Mar 2025 20:40:37 +0000
Manifest next update: Fri 04 Apr 2025 20:40:37 +0000
Files and hashes: 1: DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl (hash: TdCERhXX75DkjKekamRCFnT9rdNvEvphpRgGlZH3jhY=)
2: A4955B14A91B11EA924D2D7BC4F9AE02.roa (hash: 7uNxm88C6q373c2vK42wFuybMIcnq4cd4JiVYvjrIkY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2277 (0x8e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DEBE
Validity
Not Before: Mar 28 20:40:37 2025 GMT
Not After : Apr 4 20:40:37 2025 GMT
Subject: CN=67e70945-c968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cc:ae:7a:f3:7a:81:7c:9d:ea:36:94:3e:d2:
a4:77:9d:6a:57:37:be:3e:d9:be:b8:9a:e5:f1:2b:
eb:84:16:6d:76:c3:9c:23:af:a7:d9:c2:25:d2:fc:
39:f4:d7:de:fc:a4:bb:4e:a3:6e:34:23:24:20:55:
43:f7:fb:1e:80:8a:b5:9f:b5:71:3d:ee:68:c5:17:
17:32:aa:e6:9c:cb:e1:2f:8e:79:d1:c7:53:e3:4b:
cc:a7:48:f0:46:e6:ed:3e:c7:a1:37:5b:8a:b9:17:
22:83:27:09:2c:ec:11:84:7c:a0:83:c3:c8:81:16:
3a:b5:af:eb:26:17:87:94:66:6d:f0:f4:14:a5:9d:
00:76:ca:da:02:4e:c1:0f:62:d3:41:8b:1b:46:a3:
11:80:f9:27:8e:55:05:ce:94:3a:b8:06:44:16:ff:
12:3b:c4:3f:5a:35:39:c2:bd:29:69:5f:b6:cf:99:
e7:1c:bb:85:21:9b:e4:db:e0:b0:52:f3:29:3e:bd:
4d:6f:b0:5f:87:ee:d2:c1:99:f4:28:a7:5a:0b:c3:
7c:9c:7b:05:e3:a0:07:d4:35:8d:7b:89:3e:bf:12:
90:8e:fa:65:91:3f:90:c4:f0:b7:33:79:e8:95:3e:
0d:0e:dc:f9:51:ec:4e:f6:d4:e5:65:ff:6e:f4:f3:
7f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:21:27:19:B1:C5:1C:EF:28:A1:05:DF:E4:D7:49:04:5B:ED:D4:ED
X509v3 Authority Key Identifier:
keyid:0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:ff:8c:71:b2:9b:82:35:f6:76:36:69:e0:9e:87:e7:dc:2a:
7d:c3:97:5c:b4:27:fb:aa:40:60:48:02:1e:32:61:e2:ad:af:
13:00:4f:17:58:b3:4b:0c:4d:52:12:2e:1a:c4:d9:c5:a8:5a:
b7:f3:c2:4a:b8:4a:3e:fe:d9:79:f4:61:b3:97:f5:5f:d8:4c:
25:5c:68:3a:99:19:cb:77:c8:fa:ff:c9:82:51:57:ce:10:6f:
01:8b:0d:44:b1:36:31:8e:8e:ee:90:d0:b6:17:ef:2c:72:b5:
03:0a:ae:5b:86:d1:23:71:fe:c5:f2:94:e1:de:12:52:67:51:
a1:b6:d2:3d:9e:ff:40:ab:51:be:b0:5d:3b:ed:02:10:0a:73:
09:d7:99:a5:8c:64:36:0c:ba:ea:5e:9b:14:d4:15:b6:d5:95:
73:fc:a5:f6:ba:06:a7:34:a4:70:16:00:6a:ac:69:59:be:eb:
9b:1a:c2:da:9e:41:e6:92:d6:91:09:82:98:fc:f9:e9:ec:ba:
c9:38:0a:f8:7e:e1:68:62:e4:30:71:8b:a7:cb:76:be:5c:77:
85:3f:d7:77:39:df:e2:a5:c4:e5:9f:08:7e:d9:f0:0b:53:e0:
cb:e9:16:06:19:f5:75:b6:3d:7e:0e:1f:d7:bf:82:9d:01:a2:
f2:0a:7f:d3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MURFQkUxMTAvBgNVBAUTKDBDMDE1QzA2RDFDRDIzNzg0MkI2NzA1N0MxRDU0QTIw
RUYyNzJENDcwHhcNMjUwMzI4MjA0MDM3WhcNMjUwNDA0MjA0MDM3WjAYMRYwFAYD
VQQDEw02N2U3MDk0NS1jOTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvsyuevN6gXyd6jaUPtKkd51qVze+Ptm+uJrl8SvrhBZtdsOcI6+n2cIl0vw5
9Nfe/KS7TqNuNCMkIFVD9/segIq1n7VxPe5oxRcXMqrmnMvhL4550cdT40vMp0jw
RubtPsehN1uKuRcigycJLOwRhHygg8PIgRY6ta/rJheHlGZt8PQUpZ0AdsraAk7B
D2LTQYsbRqMRgPknjlUFzpQ6uAZEFv8SO8Q/WjU5wr0paV+2z5nnHLuFIZvk2+Cw
UvMpPr1Nb7Bfh+7SwZn0KKdaC8N8nHsF46AH1DWNe4k+vxKQjvplkT+QxPC3M3no
lT4NDtz5UexO9tTlZf9u9PN/wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDwhJxmx
xRzvKKEF3+TXSQRb7dTtMB8GA1UdIwQYMBaAFAwBXAbRzSN4QrZwV8HVSiDvJy1H
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREVCRS83OTQzM0ZDQUE5
MTcxMUVBOTQ4MTg2NkZDNEY5QUUwMi9EQUZjQnRITkkzaEN0bkJYd2RWS0lPOG5M
VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RBRmNCdEhOSTNoQ3RuQlh3ZFZLSU84bkxVYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
REVCRS83OTQzM0ZDQUE5MTcxMUVBOTQ4MTg2NkZDNEY5QUUwMi9EQUZjQnRITkkz
aEN0bkJYd2RWS0lPOG5MVWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCY/4xxspuCNfZ2Nmngnofn3Cp9w5dctCf7qkBgSAIeMmHira8TAE8X
WLNLDE1SEi4axNnFqFq388JKuEo+/tl59GGzl/Vf2EwlXGg6mRnLd8j6/8mCUVfO
EG8Biw1EsTYxjo7ukNC2F+8scrUDCq5bhtEjcf7F8pTh3hJSZ1GhttI9nv9Aq1G+
sF077QIQCnMJ15mljGQ2DLrqXpsU1BW21ZVz/KX2uganNKRwFgBqrGlZvuubGsLa
nkHmktaRCYKY/Pnp7LrJOAr4fuFoYuQwcYuny3a+XHeFP9d3Od/ipcTlnwh+2fAL
U+DL6RYGGfV1tj1+Dh/Xv4KdAaLyCn/T
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:12:30 2025 by rpki-client