Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft
File: LE66ORmVzLAcUT5PjmHtkUKW5sE.mft (raw, json)
Hash identifier: comX+BSg8cLJsd1SaCeJugEYyXMeNY1SNA+753cf7Bo=
Subject key identifier: 4E:FF:DD:AA:AF:43:3D:02:86:7C:15:42:0C:75:B7:4C:DC:B2:2F:F5
Authority key identifier: 2C:4E:BA:39:19:95:CC:B0:1C:51:3E:4F:8E:61:ED:91:42:96:E6:C1
Certificate issuer: /CN=A9129209/serialNumber=2C4EBA391995CCB01C513E4F8E61ED914296E6C1
Certificate serial: 0145
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft
Manifest number: 0143
Signing time: Sat 29 Mar 2025 03:44:54 +0000
Manifest this update: Sat 29 Mar 2025 03:44:53 +0000
Manifest next update: Sat 05 Apr 2025 03:44:53 +0000
Files and hashes: 1: LE66ORmVzLAcUT5PjmHtkUKW5sE.crl (hash: zJc7yw6vWDwhYN5SURrWob9H7zFXhtoqBCLZkBBUon0=)
2: 7CBC92D21C7811EEA8F76D7FC4F9AE02.roa (hash: Hhj/FVhC3GRjMe6osKTGMjiICT7QgTpi9xb1SC1yTh0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 325 (0x145)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129209
Validity
Not Before: Mar 29 03:44:53 2025 GMT
Not After : Apr 5 03:44:53 2025 GMT
Subject: CN=67e76cb6-82e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5a:c7:82:fd:84:ef:23:57:d3:0e:9f:15:d9:
46:47:d5:9c:b2:33:f2:8a:41:72:cb:45:45:62:de:
78:f2:db:df:da:f4:35:26:b3:eb:2c:8f:03:b4:cf:
57:13:51:10:ac:38:12:d1:c7:9b:59:f7:37:9b:b5:
a5:57:be:2e:27:df:7b:dc:b2:3a:1c:84:a9:8d:6c:
07:e2:0f:12:c1:42:6a:cd:8b:e8:9d:62:01:a2:b7:
24:f0:a6:5a:a7:a8:00:66:19:b6:64:5c:80:29:09:
f0:e8:70:dc:2e:8f:d9:45:94:98:62:66:09:63:15:
fd:e3:6e:b9:33:0a:ec:48:16:cc:46:51:5e:72:00:
30:49:29:53:b3:30:95:ac:41:b6:e1:ae:29:c0:b4:
30:b9:21:79:6d:4b:08:66:c1:78:37:f2:cc:c3:4f:
93:0a:35:1a:35:f8:10:07:e4:39:2e:6b:7d:eb:8b:
1f:aa:33:ce:4b:fd:60:24:c7:d7:1a:c9:c3:93:ee:
eb:78:6c:21:03:16:4f:d6:6f:62:65:ef:05:b6:94:
93:88:6f:03:4e:e5:5a:81:86:e3:a8:de:02:3d:63:
20:c6:aa:32:56:8f:41:bd:0e:5b:c2:03:c3:be:73:
16:55:f4:f3:d3:05:a2:02:b6:d4:4a:6a:97:48:ac:
d2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FF:DD:AA:AF:43:3D:02:86:7C:15:42:0C:75:B7:4C:DC:B2:2F:F5
X509v3 Authority Key Identifier:
keyid:2C:4E:BA:39:19:95:CC:B0:1C:51:3E:4F:8E:61:ED:91:42:96:E6:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:b0:92:5e:43:4f:f3:19:f4:fd:8c:2e:be:5d:c1:60:fe:3e:
90:31:e4:52:75:2a:eb:fa:1b:02:81:18:77:03:2e:f5:52:6d:
d2:bd:db:3d:03:b1:be:c4:d5:e0:b9:f9:b6:d5:a7:df:78:ce:
c8:24:2e:97:a1:58:c3:e3:61:73:34:24:40:a2:b5:7f:ac:96:
d5:60:78:d4:20:3e:89:7c:1b:5e:f9:7f:a0:e3:bf:d6:04:c9:
c1:44:a2:24:28:2e:3f:45:f3:d0:f2:b5:f0:16:da:99:e9:8e:
6c:4a:a2:a2:15:ae:35:76:71:b3:eb:7e:89:4a:52:c3:9d:a0:
f2:3d:e9:7c:8d:e2:e0:36:7f:e6:10:74:a5:8b:3a:28:95:42:
52:a1:49:aa:f3:46:51:4f:d5:e8:c1:b3:e5:d0:fe:3f:b2:c4:
9f:3f:70:63:c6:20:b5:98:5e:e2:dd:c1:74:79:11:52:11:9f:
1a:6a:20:97:e1:a9:aa:1c:72:dd:62:60:f7:4d:0a:dd:69:f7:
c0:b3:9b:ae:4b:a0:64:b0:e0:93:ef:9a:ee:be:4d:23:2b:c5:
d6:5a:33:f4:de:21:21:5e:9e:6a:38:6b:d1:18:7c:a4:b0:31:
7f:c3:71:61:04:15:13:4b:7c:e0:9c:45:b4:0d:06:c9:b7:1f:
91:0b:76:6d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjkyMDkxMTAvBgNVBAUTKDJDNEVCQTM5MTk5NUNDQjAxQzUxM0U0RjhFNjFFRDkx
NDI5NkU2QzEwHhcNMjUwMzI5MDM0NDUzWhcNMjUwNDA1MDM0NDUzWjAYMRYwFAYD
VQQDEw02N2U3NmNiNi04MmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA31rHgv2E7yNX0w6fFdlGR9WcsjPyikFyy0VFYt548tvf2vQ1JrPrLI8DtM9X
E1EQrDgS0cebWfc3m7WlV74uJ9973LI6HISpjWwH4g8SwUJqzYvonWIBorck8KZa
p6gAZhm2ZFyAKQnw6HDcLo/ZRZSYYmYJYxX94265MwrsSBbMRlFecgAwSSlTszCV
rEG24a4pwLQwuSF5bUsIZsF4N/LMw0+TCjUaNfgQB+Q5Lmt964sfqjPOS/1gJMfX
GsnDk+7reGwhAxZP1m9iZe8FtpSTiG8DTuVagYbjqN4CPWMgxqoyVo9BvQ5bwgPD
vnMWVfTz0wWiArbUSmqXSKzSvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7/3aqv
Qz0ChnwVQgx1t0zcsi/1MB8GA1UdIwQYMBaAFCxOujkZlcywHFE+T45h7ZFClubB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTIwOS9CODFFMzE4QTFD
NzUxMUVFQUNCRUYwN0NDNEY5QUUwMi9MRTY2T1JtVnpMQWNVVDVQam1IdGtVS1c1
c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xFNjZPUm1WekxBY1VUNVBqbUh0a1VLVzVzRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OTIwOS9CODFFMzE4QTFDNzUxMUVFQUNCRUYwN0NDNEY5QUUwMi9MRTY2T1JtVnpM
QWNVVDVQam1IdGtVS1c1c0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAYsJJeQ0/zGfT9jC6+XcFg/j6QMeRSdSrr+hsCgRh3Ay71Um3Svds9
A7G+xNXgufm21affeM7IJC6XoVjD42FzNCRAorV/rJbVYHjUID6JfBte+X+g47/W
BMnBRKIkKC4/RfPQ8rXwFtqZ6Y5sSqKiFa41dnGz636JSlLDnaDyPel8jeLgNn/m
EHSlizoolUJSoUmq80ZRT9XowbPl0P4/ssSfP3BjxiC1mF7i3cF0eRFSEZ8aaiCX
4amqHHLdYmD3TQrdaffAs5uuS6BksOCT75ruvk0jK8XWWjP03iEhXp5qOGvRGHyk
sDF/w3FhBBUTS3zgnEW0DQbJtx+RC3Zt
-----END CERTIFICATE-----
Generated at Fri Apr 11 06:47:25 2025 by rpki-client