Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft
File: _5APJL-aiYLZX4RHqnubtPesRjk.mft (raw, json)
Hash identifier: ReeEc9hjWTodqoyj4OVMd0ERI3jNJTMaybeZKg5vvbI=
Subject key identifier: 6E:F0:81:BA:8C:4A:03:5C:BB:98:BF:62:EB:CA:FA:A2:F4:62:FA:33
Authority key identifier: FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39
Certificate issuer: /CN=A91221EF/serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639
Certificate serial: 0992
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft
Manifest number: 0985
Signing time: Fri 28 Mar 2025 20:23:35 +0000
Manifest this update: Fri 28 Mar 2025 20:23:34 +0000
Manifest next update: Fri 04 Apr 2025 20:23:34 +0000
Files and hashes: 1: _5APJL-aiYLZX4RHqnubtPesRjk.crl (hash: RY0jrF4pCkOADb9GuYt4S4XGdWLV+CYOoXqM/zNsH0M=)
2: D3037D06738E11ED8283FF53C4F9AE02.roa (hash: fmsh1X3Q3HooxV4YfKkoLFlrGgD13/WeDGjBg2CNmMg=)
3: D1A6B6D0738E11ED8283FF53C4F9AE02.roa (hash: WgMRh1pD8v+j2OuHDw2wLrJ+bXBsyv6ChtDmNGRF1/k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2450 (0x992)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91221EF
Validity
Not Before: Mar 28 20:23:34 2025 GMT
Not After : Apr 4 20:23:34 2025 GMT
Subject: CN=67e70546-017c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d0:1c:51:17:6a:29:d3:9e:d6:3a:0f:5b:b1:
71:27:2a:6f:8e:e1:ff:4a:01:0a:23:fa:79:b5:4a:
5a:a0:fb:80:1c:51:b8:60:03:dd:8b:28:fd:f4:ff:
e2:be:4f:52:70:1b:4a:b2:7f:67:76:7f:54:a8:90:
27:2d:8f:f2:34:19:06:ab:7c:f1:04:05:b2:b2:02:
82:e0:f4:0d:29:5e:7b:5a:d4:f7:0e:ec:b6:b9:21:
6d:03:e2:d9:d6:d8:33:03:ac:eb:4c:da:ac:fe:a0:
35:80:ed:76:41:00:8a:41:ad:85:f3:2c:f9:28:52:
7e:d5:a5:fe:f7:02:e5:7f:21:39:eb:15:cd:4c:65:
99:4c:62:1d:b0:30:8a:2a:1c:1f:7d:3b:8c:71:b0:
0d:b4:7b:85:d0:63:95:ea:83:3e:c5:9d:e4:d3:f3:
c0:b7:6b:53:a3:c4:a8:8e:bc:c1:06:e6:99:30:a1:
39:91:0a:b4:4a:e8:69:1b:8e:60:d3:24:7b:a0:81:
e5:3e:f0:10:4c:91:cd:5c:98:c2:8c:66:b6:10:ed:
12:31:a3:ba:a1:7e:f6:95:bb:07:62:49:23:07:c1:
15:65:73:67:2e:0a:f8:77:c0:9c:5f:77:40:6f:a7:
a5:93:2e:27:31:f6:49:4e:d9:93:9e:4e:97:5b:85:
ca:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F0:81:BA:8C:4A:03:5C:BB:98:BF:62:EB:CA:FA:A2:F4:62:FA:33
X509v3 Authority Key Identifier:
keyid:FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:ce:99:ca:1a:35:60:95:f0:72:1a:58:33:cf:de:51:30:80:
fc:d0:23:8c:b1:11:ba:cd:2a:fe:40:8e:53:2f:8e:ae:53:5d:
47:51:4e:37:32:e6:94:df:dc:41:fd:b3:4c:cc:96:ae:ee:e7:
43:a4:28:87:f8:d0:e6:93:cb:cd:f8:68:97:16:84:6d:8c:a5:
d6:2a:b1:d5:8c:28:37:90:8b:59:44:ca:7c:20:49:68:d7:93:
fb:38:20:4e:09:68:71:58:23:de:b6:a2:d5:a5:e0:e5:76:6c:
2b:4c:23:f5:26:4b:d5:96:4d:c3:db:df:6b:74:b1:1a:86:39:
f2:64:a8:8b:a6:ba:85:80:1d:7e:db:47:16:39:95:24:9c:98:
e0:cd:19:41:38:b7:d7:23:01:5c:20:69:a3:49:21:d5:f5:81:
2f:59:56:f7:6f:4c:17:58:61:78:3e:65:15:b2:09:90:7a:e1:
ea:38:70:1d:e9:56:53:6e:64:0a:32:9d:47:71:17:e9:f4:43:
b1:36:a7:57:c7:f9:98:7e:f7:45:f5:bc:e5:ed:95:4a:0c:61:
85:f4:5b:e7:63:6f:29:27:c4:e8:b5:53:b7:f6:e0:ae:98:da:
ba:86:bd:01:6b:82:4a:ee:96:0e:58:72:b1:88:7e:8e:cd:1b:
1c:f1:10:d0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjIxRUYxMTAvBgNVBAUTKEZGOTAwRjI0QkY5QTg5ODJEOTVGODQ0N0FBN0I5QkI0
RjdBQzQ2MzkwHhcNMjUwMzI4MjAyMzM0WhcNMjUwNDA0MjAyMzM0WjAYMRYwFAYD
VQQDEw02N2U3MDU0Ni0wMTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA79AcURdqKdOe1joPW7FxJypvjuH/SgEKI/p5tUpaoPuAHFG4YAPdiyj99P/i
vk9ScBtKsn9ndn9UqJAnLY/yNBkGq3zxBAWysgKC4PQNKV57WtT3Duy2uSFtA+LZ
1tgzA6zrTNqs/qA1gO12QQCKQa2F8yz5KFJ+1aX+9wLlfyE56xXNTGWZTGIdsDCK
KhwffTuMcbANtHuF0GOV6oM+xZ3k0/PAt2tTo8SojrzBBuaZMKE5kQq0SuhpG45g
0yR7oIHlPvAQTJHNXJjCjGa2EO0SMaO6oX72lbsHYkkjB8EVZXNnLgr4d8CcX3dA
b6elky4nMfZJTtmTnk6XW4XKDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG7wgbqM
SgNcu5i/YuvK+qL0YvozMB8GA1UdIwQYMBaAFP+QDyS/momC2V+ER6p7m7T3rEY5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjFFRi82RjJGRUJENjg5
MUYxMUVBODlCNjI3N0NDNEY5QUUwMi9fNUFQSkwtYWlZTFpYNFJIcW51YnRQZXNS
amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL181QVBKTC1haVlMWlg0UkhxbnVidFBlc1Jqay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MjFFRi82RjJGRUJENjg5MUYxMUVBODlCNjI3N0NDNEY5QUUwMi9fNUFQSkwtYWlZ
TFpYNFJIcW51YnRQZXNSamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAlzpnKGjVglfByGlgzz95RMID80COMsRG6zSr+QI5TL46uU11HUU43
MuaU39xB/bNMzJau7udDpCiH+NDmk8vN+GiXFoRtjKXWKrHVjCg3kItZRMp8IElo
15P7OCBOCWhxWCPetqLVpeDldmwrTCP1JkvVlk3D299rdLEahjnyZKiLprqFgB1+
20cWOZUknJjgzRlBOLfXIwFcIGmjSSHV9YEvWVb3b0wXWGF4PmUVsgmQeuHqOHAd
6VZTbmQKMp1HcRfp9EOxNqdXx/mYfvdF9bzl7ZVKDGGF9FvnY28pJ8TotVO39uCu
mNq6hr0Ba4JK7pYOWHKxiH6OzRsc8RDQ
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:35:37 2025 by rpki-client