Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft
File: y1sC0Pxzbip6stKIoPwzFnpLvO0.mft (raw, json)
Hash identifier: 7r9Hjjj2uMNys74CvAUnj3V40adP4NQWFu6prq529eY=
Subject key identifier: 19:E1:CA:1C:16:6F:87:44:22:7B:4D:F5:A9:75:38:93:C8:DF:96:FB
Authority key identifier: CB:5B:02:D0:FC:73:6E:2A:7A:B2:D2:88:A0:FC:33:16:7A:4B:BC:ED
Certificate issuer: /CN=A9129F1D/serialNumber=CB5B02D0FC736E2A7AB2D288A0FC33167A4BBCED
Certificate serial: 01A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft
Manifest number: 01A3
Signing time: Sat 29 Mar 2025 02:50:15 +0000
Manifest this update: Sat 29 Mar 2025 02:50:15 +0000
Manifest next update: Sat 05 Apr 2025 02:50:15 +0000
Files and hashes: 1: y1sC0Pxzbip6stKIoPwzFnpLvO0.crl (hash: uBR2ZmSgJr+MzubwQzRwyX6eHq9h1XBiyT+uMnaHsqo=)
2: 3E122AE0876011ED84335D46C4F9AE02.roa (hash: bMGYEkxmsNwyimLtEml2g/yxjeK2QwKmxudQ/0mQEOc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 423 (0x1a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129F1D
Validity
Not Before: Mar 29 02:50:15 2025 GMT
Not After : Apr 5 02:50:15 2025 GMT
Subject: CN=67e75fe7-e82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b6:72:de:d2:72:66:6d:a6:71:cc:76:35:01:
c6:00:05:15:e5:bf:0f:44:6e:2c:9f:0e:a4:1a:c5:
0a:43:44:d5:08:fb:2f:38:73:d0:d4:cd:02:a3:48:
90:44:24:23:18:a2:e6:66:2f:fc:6b:a6:68:a6:2c:
9a:e0:5c:36:ba:7f:3e:e3:a7:d8:82:cb:dd:fd:20:
9e:ee:e2:42:7e:6a:b8:e9:3f:fa:6d:92:6f:f5:37:
96:14:d5:7b:04:28:2e:5f:49:e7:31:ef:c3:c1:24:
1f:49:69:9d:6c:af:17:28:4f:ab:c7:d3:6e:de:04:
d4:ce:f0:51:c5:7e:78:c5:9c:bc:64:c8:30:28:be:
25:71:c6:10:3c:aa:53:80:48:95:08:44:e6:fc:b3:
32:92:22:a5:f2:b9:56:b2:9b:b2:1e:89:5a:74:98:
48:85:d8:e4:31:6a:d2:61:bc:87:9d:f4:ea:30:0d:
8f:28:ff:c1:19:3d:02:3f:7f:a1:30:63:c8:21:df:
ed:ab:ec:40:4d:e2:7c:92:5e:06:af:f2:3b:b7:4b:
24:54:b3:c6:ad:4b:d3:50:da:8e:a5:cf:e8:0a:fa:
b8:c2:a9:18:a8:22:42:38:f5:35:60:bf:2c:e1:df:
d6:89:5b:21:37:24:d9:b1:d8:c1:3e:5b:8a:f8:0e:
40:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E1:CA:1C:16:6F:87:44:22:7B:4D:F5:A9:75:38:93:C8:DF:96:FB
X509v3 Authority Key Identifier:
keyid:CB:5B:02:D0:FC:73:6E:2A:7A:B2:D2:88:A0:FC:33:16:7A:4B:BC:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:83:51:22:fa:0d:57:91:3c:09:4c:11:95:cc:96:47:1e:df:
86:b2:e6:8a:6d:8f:6f:b1:75:da:de:63:19:18:7a:0d:3c:8a:
0c:18:4c:ce:f4:16:b4:cd:ef:aa:81:4f:d2:31:88:3d:19:55:
28:d5:9a:c5:27:86:41:e6:5e:85:49:22:e1:d8:79:9c:2d:9b:
5f:34:7d:4b:80:b7:b3:e1:a5:32:db:70:37:6a:e1:03:7f:d6:
dc:a0:6e:5c:b7:7d:54:d1:e1:9a:4e:12:4a:8b:31:80:c3:53:
3a:32:18:2b:b3:21:e1:b0:b0:e3:50:87:e6:26:43:20:fc:65:
d6:6b:c9:3d:d4:c6:39:9a:9c:3f:89:75:41:87:97:f9:f3:5b:
7c:f0:85:dd:38:78:2f:95:da:c4:1f:97:8b:a5:13:cc:3f:b8:
7b:1e:99:46:22:0f:ab:ff:b8:47:49:6e:22:0c:38:ce:1d:66:
0e:a3:af:3f:0c:03:57:56:4b:84:43:d9:08:c7:13:d2:95:15:
f9:14:68:47:37:fe:47:23:6c:8f:a9:3f:93:de:5d:b7:72:c4:
ef:08:2a:73:94:e0:a5:f4:ba:7b:44:06:98:a4:41:d8:b6:63:
ad:e6:cb:fb:ed:7a:3e:57:de:57:79:9e:58:9f:62:24:1f:31:
ea:ac:e4:e3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjlGMUQxMTAvBgNVBAUTKENCNUIwMkQwRkM3MzZFMkE3QUIyRDI4OEEwRkMzMzE2
N0E0QkJDRUQwHhcNMjUwMzI5MDI1MDE1WhcNMjUwNDA1MDI1MDE1WjAYMRYwFAYD
VQQDEw02N2U3NWZlNy1lODJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAurZy3tJyZm2mccx2NQHGAAUV5b8PRG4snw6kGsUKQ0TVCPsvOHPQ1M0Co0iQ
RCQjGKLmZi/8a6Zopiya4Fw2un8+46fYgsvd/SCe7uJCfmq46T/6bZJv9TeWFNV7
BCguX0nnMe/DwSQfSWmdbK8XKE+rx9Nu3gTUzvBRxX54xZy8ZMgwKL4lccYQPKpT
gEiVCETm/LMykiKl8rlWspuyHoladJhIhdjkMWrSYbyHnfTqMA2PKP/BGT0CP3+h
MGPIId/tq+xATeJ8kl4Gr/I7t0skVLPGrUvTUNqOpc/oCvq4wqkYqCJCOPU1YL8s
4d/WiVshNyTZsdjBPluK+A5A1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBnhyhwW
b4dEIntN9al1OJPI35b7MB8GA1UdIwQYMBaAFMtbAtD8c24qerLSiKD8MxZ6S7zt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUYxRC8yMUNBQkE1Qzg3
NUUxMUVEQkRDNjQ5NDZDNEY5QUUwMi95MXNDMFB4emJpcDZzdEtJb1B3ekZucEx2
TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3kxc0MwUHh6YmlwNnN0S0lvUHd6Rm5wTHZPMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OUYxRC8yMUNBQkE1Qzg3NUUxMUVEQkRDNjQ5NDZDNEY5QUUwMi95MXNDMFB4emJp
cDZzdEtJb1B3ekZucEx2TzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAjg1Ei+g1XkTwJTBGVzJZHHt+GsuaKbY9vsXXa3mMZGHoNPIoMGEzO
9Ba0ze+qgU/SMYg9GVUo1ZrFJ4ZB5l6FSSLh2HmcLZtfNH1LgLez4aUy23A3auED
f9bcoG5ct31U0eGaThJKizGAw1M6MhgrsyHhsLDjUIfmJkMg/GXWa8k91MY5mpw/
iXVBh5f581t88IXdOHgvldrEH5eLpRPMP7h7HplGIg+r/7hHSW4iDDjOHWYOo68/
DANXVkuEQ9kIxxPSlRX5FGhHN/5HI2yPqT+T3l23csTvCCpzlOCl9Lp7RAaYpEHY
tmOt5sv77Xo+V95XeZ5Yn2IkHzHqrOTj
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:16:20 2025 by rpki-client