Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
File: 6VdtMs2hm7hvPBYuyf020_0lucE.mft (raw, json)
Hash identifier: UcMHFQGmxpqgqCl/Ti07gEdeyFd6DCmRYDL6G5hfwVw=
Subject key identifier: AA:AF:23:C9:AC:D9:53:E1:89:82:2F:6C:31:50:30:79:B4:65:32:6E
Authority key identifier: E9:57:6D:32:CD:A1:9B:B8:6F:3C:16:2E:C9:FD:36:D3:FD:25:B9:C1
Certificate issuer: /CN=A9131359/serialNumber=E9576D32CDA19BB86F3C162EC9FD36D3FD25B9C1
Certificate serial: 01BC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
Manifest number: 01B8
Signing time: Sat 29 Mar 2025 02:36:23 +0000
Manifest this update: Sat 29 Mar 2025 02:36:23 +0000
Manifest next update: Sat 05 Apr 2025 02:36:23 +0000
Files and hashes: 1: 6VdtMs2hm7hvPBYuyf020_0lucE.crl (hash: ClSz/pVrVJjv+MQNEl6A8BMDfThNN+SJrW6jobMZsTk=)
2: 01C299E0662611ED94A8DA42C4F9AE02.roa (hash: Cbvoa7LrgmapG4r7FY0TXw9PoDEC05XNI+g2GTtN22E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 444 (0x1bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131359
Validity
Not Before: Mar 29 02:36:23 2025 GMT
Not After : Apr 5 02:36:23 2025 GMT
Subject: CN=67e75ca7-0922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:46:d0:fa:13:31:95:95:2e:35:5a:aa:31:8e:
0f:c3:7b:18:d3:90:75:c7:8f:7e:ba:70:41:96:f1:
db:30:eb:b8:92:3a:4e:40:bf:5e:98:ab:29:a5:58:
61:6c:c6:7c:e9:d5:a4:bc:b0:af:b9:58:98:49:8b:
e8:e7:a8:c2:f0:ab:42:4b:eb:36:bc:c2:a7:54:b9:
4d:25:7a:2b:2d:98:cb:8d:fb:bb:8d:68:ba:4c:ff:
d5:2e:01:c5:3b:81:48:3d:ef:98:0e:d2:1c:6b:a7:
2b:96:70:f1:79:69:71:fa:5a:41:d2:b3:ad:a6:dc:
48:ca:13:09:bc:84:6f:0f:bc:9d:01:13:23:1a:c2:
31:c1:70:f9:ea:47:51:04:44:bb:c3:22:e4:0c:64:
b9:7e:8d:a4:7b:fc:39:79:fd:e2:b6:bd:25:d2:e0:
d4:b2:ec:07:36:d3:da:22:c8:10:1e:ec:a1:1a:39:
3a:07:74:bf:5b:b7:24:ac:df:58:e5:34:fe:63:24:
50:84:e7:69:28:58:73:65:e6:66:5e:c5:57:e4:84:
c4:0b:8d:a1:9c:68:af:28:eb:aa:a1:e5:e6:3a:4d:
03:0c:67:9f:66:10:92:90:b6:63:c3:4d:38:1b:78:
33:e0:46:6c:f3:73:3c:5d:cb:43:1c:60:f2:9a:95:
e0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AF:23:C9:AC:D9:53:E1:89:82:2F:6C:31:50:30:79:B4:65:32:6E
X509v3 Authority Key Identifier:
keyid:E9:57:6D:32:CD:A1:9B:B8:6F:3C:16:2E:C9:FD:36:D3:FD:25:B9:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:da:ba:58:fa:1c:c4:35:02:28:c0:65:e0:3c:ad:8b:e8:97:
79:97:7a:a5:8c:d2:6a:c5:9b:0a:37:90:61:c5:16:3a:90:5d:
22:21:2d:f3:ce:80:db:cf:d9:8a:1a:99:5c:b9:cb:7b:3b:b5:
49:a7:dc:af:c4:73:a1:03:55:48:3b:31:37:f7:fd:6f:92:92:
42:ec:e6:8f:cd:d5:83:9e:10:e5:a3:cf:3b:a1:2b:9b:eb:e8:
b1:65:e7:cc:c9:8e:95:48:a9:7a:21:ba:59:6c:46:70:f3:43:
b3:3a:a3:e7:74:d2:92:ac:76:6e:9e:79:0d:b0:40:7b:41:7d:
16:f5:3f:d2:25:f6:5b:cd:b1:84:97:80:18:67:40:eb:af:d1:
c1:28:e4:49:ab:ce:d1:a7:1d:65:b2:ff:0a:2e:d9:ba:60:03:
95:90:94:f5:03:dd:6e:17:c6:7a:44:ad:87:9a:df:d3:06:b3:
f0:56:c1:f8:0a:88:72:ad:2e:d3:c4:fc:30:96:41:ab:3f:88:
06:3b:34:d9:45:a7:be:da:25:c8:b3:98:c0:4f:17:02:de:2a:
f7:3c:50:45:5c:65:7e:1c:5a:81:ab:55:ca:2e:8d:f9:e5:a4:
a1:b2:78:e7:3f:a3:86:81:52:88:d1:59:1f:00:90:75:8b:23:
e3:38:66:4c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzEzNTkxMTAvBgNVBAUTKEU5NTc2RDMyQ0RBMTlCQjg2RjNDMTYyRUM5RkQzNkQz
RkQyNUI5QzEwHhcNMjUwMzI5MDIzNjIzWhcNMjUwNDA1MDIzNjIzWjAYMRYwFAYD
VQQDEw02N2U3NWNhNy0wOTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA60bQ+hMxlZUuNVqqMY4Pw3sY05B1x49+unBBlvHbMOu4kjpOQL9emKsppVhh
bMZ86dWkvLCvuViYSYvo56jC8KtCS+s2vMKnVLlNJXorLZjLjfu7jWi6TP/VLgHF
O4FIPe+YDtIca6crlnDxeWlx+lpB0rOtptxIyhMJvIRvD7ydARMjGsIxwXD56kdR
BES7wyLkDGS5fo2ke/w5ef3itr0l0uDUsuwHNtPaIsgQHuyhGjk6B3S/W7ckrN9Y
5TT+YyRQhOdpKFhzZeZmXsVX5ITEC42hnGivKOuqoeXmOk0DDGefZhCSkLZjw004
G3gz4EZs83M8XctDHGDympXg5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKqvI8ms
2VPhiYIvbDFQMHm0ZTJuMB8GA1UdIwQYMBaAFOlXbTLNoZu4bzwWLsn9NtP9JbnB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTM1OS9DQTlBMzRCNjY2
MjMxMUVEOTE4NTVENDJDNEY5QUUwMi82VmR0TXMyaG03aHZQQll1eWYwMjBfMGx1
Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzZWZHRNczJobTdodlBCWXV5ZjAyMF8wbHVjRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTM1OS9DQTlBMzRCNjY2MjMxMUVEOTE4NTVENDJDNEY5QUUwMi82VmR0TXMyaG03
aHZQQll1eWYwMjBfMGx1Y0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCo2rpY+hzENQIowGXgPK2L6Jd5l3qljNJqxZsKN5BhxRY6kF0iIS3z
zoDbz9mKGplcuct7O7VJp9yvxHOhA1VIOzE39/1vkpJC7OaPzdWDnhDlo887oSub
6+ixZefMyY6VSKl6IbpZbEZw80OzOqPndNKSrHZunnkNsEB7QX0W9T/SJfZbzbGE
l4AYZ0Drr9HBKORJq87Rpx1lsv8KLtm6YAOVkJT1A91uF8Z6RK2Hmt/TBrPwVsH4
CohyrS7TxPwwlkGrP4gGOzTZRae+2iXIs5jATxcC3ir3PFBFXGV+HFqBq1XKLo35
5aShsnjnP6OGgVKI0VkfAJB1iyPjOGZM
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:46:49 2025 by rpki-client