Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft
File: dLH8bMwnd13tH1lSWyh2Yci_6ig.mft (raw, json)
Hash identifier: QgHI4ZS2zYrz3X7nahnfAWalDsobCcv7TomDbcuRHw4=
Subject key identifier: 67:8D:93:F0:1C:FB:FB:37:14:66:68:15:34:B4:27:0F:74:66:A3:41
Authority key identifier: 74:B1:FC:6C:CC:27:77:5D:ED:1F:59:52:5B:28:76:61:C8:BF:EA:28
Certificate issuer: /CN=A91278AF/serialNumber=74B1FC6CCC27775DED1F59525B287661C8BFEA28
Certificate serial: 0628
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft
Manifest number: 0623
Signing time: Fri 28 Mar 2025 22:57:34 +0000
Manifest this update: Fri 28 Mar 2025 22:57:34 +0000
Manifest next update: Fri 04 Apr 2025 22:57:34 +0000
Files and hashes: 1: dLH8bMwnd13tH1lSWyh2Yci_6ig.crl (hash: hDIyc2667poFWBWdd1gY8qNF1WpZ1aTo8HR3lH/zJrA=)
2: 6DB2ADE48D1411EB8DBF4B0CC4F9AE02.roa (hash: 0KvhuFNAv6M3EbEUhMR72j6cAUhyJc8JQFuYhMh83io=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1576 (0x628)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91278AF
Validity
Not Before: Mar 28 22:57:34 2025 GMT
Not After : Apr 4 22:57:34 2025 GMT
Subject: CN=67e7295e-64f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0f:fb:53:25:af:5c:ac:5d:0b:59:ca:f8:d5:
55:c0:36:2b:8e:af:ad:ee:bb:7b:b0:7d:bc:e6:8b:
48:4d:ed:86:af:0f:14:11:4c:36:b9:3e:c2:27:07:
82:4d:c2:e6:66:ff:50:63:ef:ad:fe:45:b5:bb:8d:
f5:fe:47:07:ab:d2:6b:9a:60:3d:f2:76:6f:00:66:
b5:e8:d3:ee:0e:2e:91:54:59:19:2e:54:10:68:05:
13:e9:22:c7:d1:79:1f:be:50:ae:eb:7b:ca:ad:d1:
83:b6:ed:41:c4:ad:3b:f4:f8:71:6d:75:d5:93:16:
8a:be:b8:69:3f:19:f4:87:60:96:d6:23:07:03:6f:
cd:97:93:42:94:eb:38:a2:be:63:07:ef:57:6b:71:
28:94:93:be:cd:a3:24:4c:56:d5:0d:55:ca:26:3c:
f2:95:e0:fc:10:dc:b1:51:d7:bb:11:39:cd:9d:ef:
53:33:a9:75:63:c1:21:15:16:1c:f5:3b:bb:3d:39:
05:80:9d:57:72:94:24:29:e4:ed:d2:42:04:e2:3e:
fc:71:c2:b7:4f:b3:b6:8e:bb:27:0f:27:7b:fb:8e:
f6:5e:68:cf:0e:23:3a:af:ed:56:8d:a2:6b:2d:47:
1f:7d:aa:5e:6b:fc:d7:b6:d3:dd:15:e1:b6:c3:02:
ca:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8D:93:F0:1C:FB:FB:37:14:66:68:15:34:B4:27:0F:74:66:A3:41
X509v3 Authority Key Identifier:
keyid:74:B1:FC:6C:CC:27:77:5D:ED:1F:59:52:5B:28:76:61:C8:BF:EA:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:54:6e:2f:4d:cd:67:de:bd:75:31:98:fd:ba:68:db:2e:6f:
66:5b:3c:72:b0:fe:e1:71:b8:02:af:ea:82:a8:13:31:a9:22:
10:03:4b:e8:0f:8c:5c:fe:e4:f5:52:fe:d0:a5:77:aa:67:45:
10:55:25:7a:f5:b3:5b:37:05:23:83:a7:e3:19:c9:87:bd:27:
61:03:d2:d4:bd:27:d6:20:a1:30:75:a9:0e:af:fa:62:f6:3d:
4b:d3:5b:f3:48:c7:17:16:32:d2:50:1d:99:16:22:ae:da:82:
5a:ed:51:46:ed:d2:57:91:92:19:25:04:bd:a9:26:43:a8:77:
04:87:bc:9a:67:f2:20:c4:d5:6a:06:42:2f:10:88:54:07:80:
d7:e4:33:2a:02:a6:25:35:57:75:39:7b:ed:5c:3c:58:24:f9:
a6:70:fa:55:f0:f4:73:e2:14:b6:c4:44:1e:a6:b9:d5:1b:27:
0e:cf:ee:cf:53:dc:e0:f5:dc:31:57:80:f1:82:18:ef:dd:e0:
78:1d:64:37:14:7e:cb:13:85:fe:00:e7:02:59:64:4a:eb:ab:
7d:1b:d1:ab:17:7d:0d:3c:bf:7b:0d:d9:f5:3f:91:08:45:a9:
49:ad:eb:e7:9a:3c:25:25:c2:bc:ce:22:5e:11:01:ce:66:41:
85:b4:49:3a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc4QUYxMTAvBgNVBAUTKDc0QjFGQzZDQ0MyNzc3NURFRDFGNTk1MjVCMjg3NjYx
QzhCRkVBMjgwHhcNMjUwMzI4MjI1NzM0WhcNMjUwNDA0MjI1NzM0WjAYMRYwFAYD
VQQDEw02N2U3Mjk1ZS02NGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3Q/7UyWvXKxdC1nK+NVVwDYrjq+t7rt7sH285otITe2Grw8UEUw2uT7CJweC
TcLmZv9QY++t/kW1u431/kcHq9JrmmA98nZvAGa16NPuDi6RVFkZLlQQaAUT6SLH
0XkfvlCu63vKrdGDtu1BxK079PhxbXXVkxaKvrhpPxn0h2CW1iMHA2/Nl5NClOs4
or5jB+9Xa3EolJO+zaMkTFbVDVXKJjzyleD8ENyxUde7ETnNne9TM6l1Y8EhFRYc
9Tu7PTkFgJ1XcpQkKeTt0kIE4j78ccK3T7O2jrsnDyd7+472XmjPDiM6r+1WjaJr
LUcffapea/zXttPdFeG2wwLK8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGeNk/Ac
+/s3FGZoFTS0Jw90ZqNBMB8GA1UdIwQYMBaAFHSx/GzMJ3dd7R9ZUlsodmHIv+oo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzhBRi8xNkJCRDdCNDhE
MTMxMUVCQTUxODNEMEJDNEY5QUUwMi9kTEg4Yk13bmQxM3RIMWxTV3loMlljaV82
aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RMSDhiTXduZDEzdEgxbFNXeWgyWWNpXzZpZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzhBRi8xNkJCRDdCNDhEMTMxMUVCQTUxODNEMEJDNEY5QUUwMi9kTEg4Yk13bmQx
M3RIMWxTV3loMlljaV82aWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCtVG4vTc1n3r11MZj9umjbLm9mWzxysP7hcbgCr+qCqBMxqSIQA0vo
D4xc/uT1Uv7QpXeqZ0UQVSV69bNbNwUjg6fjGcmHvSdhA9LUvSfWIKEwdakOr/pi
9j1L01vzSMcXFjLSUB2ZFiKu2oJa7VFG7dJXkZIZJQS9qSZDqHcEh7yaZ/IgxNVq
BkIvEIhUB4DX5DMqAqYlNVd1OXvtXDxYJPmmcPpV8PRz4hS2xEQeprnVGycOz+7P
U9zg9dwxV4Dxghjv3eB4HWQ3FH7LE4X+AOcCWWRK66t9G9GrF30NPL97Ddn1P5EI
RalJrevnmjwlJcK8ziJeEQHOZkGFtEk6
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:26:35 2025 by rpki-client