Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft
File: NHTJTDbo-aDToNIuHdoQjNNAqyg.mft (raw, json)
Hash identifier: BVgXADVbPX0yiMGZSeE44oiK6jLg7zgqNjRmpz8a4HY=
Subject key identifier: A0:BC:A0:D5:67:43:F3:E3:F2:9A:4A:B9:37:7E:F8:B6:96:20:DE:01
Authority key identifier: 34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28
Certificate issuer: /CN=A9131690/serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28
Certificate serial: 0F83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft
Manifest number: 0F5A
Signing time: Fri 28 Mar 2025 17:41:21 +0000
Manifest this update: Fri 28 Mar 2025 17:41:21 +0000
Manifest next update: Fri 04 Apr 2025 17:41:21 +0000
Files and hashes: 1: NHTJTDbo-aDToNIuHdoQjNNAqyg.crl (hash: jJZp0PDLuXoKCYRdeDcpC8xIbb3W2iT2N6gT0CoqDkU=)
2: B2B24A4221D711EB9CFAC46EC4F9AE02.roa (hash: WopX8EPUj9ND6qcXFWft9CyuoZSX2+UxPu40b2aj+pc=)
3: B3682FEC21D711EB9CFAC46EC4F9AE02.roa (hash: 77t9c6veUMOt4XPOFIwWe8FztnDBdg3DuRHonRmM4pA=)
4: A7BDC50C7A4811EBA907BB5BC4F9AE02.roa (hash: 0RWvLgLQMfYKcMt6aIpCTG3MXhhitrR5pPiP2zQ4NcY=)
5: B47C278021D711EB9CFAC46EC4F9AE02.roa (hash: kt6+dcMSnt8HtFoNHoxve7SwNMn6XsQ5fmhhFuEOZOM=)
6: 5E0253B6232111EB9896B783C4F9AE02.roa (hash: S7XAN9hoPkMQD1dwIo9UheEK0CbHpWptDyxJHPNt49g=)
7: 08CD1510027011EB98FEC44BC4F9AE02.roa (hash: KmlW5cxQJtlnajXFs7j5PHn6wJjQG7ZZKRzUGo5l5KM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3971 (0xf83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131690
Validity
Not Before: Mar 28 17:41:21 2025 GMT
Not After : Apr 4 17:41:21 2025 GMT
Subject: CN=67e6df41-d2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ed:51:33:47:48:99:07:b3:9b:37:b6:f4:ab:
0f:ff:0a:4a:c0:db:ee:90:df:1b:34:5a:ef:0b:73:
b3:9d:d7:ff:86:db:66:36:a9:71:28:a8:e8:28:03:
4f:20:30:1b:bc:24:00:53:56:c2:6c:2b:5f:8d:23:
a7:c9:13:a3:07:f5:82:45:9e:6d:0a:d5:67:4e:b0:
b2:0a:33:64:9c:eb:b9:ba:e1:94:22:7c:13:54:0d:
f3:0d:34:2e:e6:fb:a4:23:f5:4b:42:25:5e:b7:63:
69:28:16:db:a6:46:65:21:4c:46:b0:49:31:6f:85:
c7:b0:9c:32:99:a5:5e:ed:e3:0d:3f:be:8e:01:60:
c6:04:e1:f6:31:9f:b5:88:8c:8d:38:47:55:af:f7:
2f:2e:ab:9e:4c:6c:6d:1b:2a:4c:7b:dc:5e:3e:95:
a1:e4:b0:72:bf:3f:87:61:a9:17:43:8f:03:a2:0c:
c5:84:d5:b3:96:d7:12:32:9f:f1:04:be:0e:93:0f:
cd:f6:93:41:8f:16:e8:91:1a:11:1a:3c:ad:da:ab:
2f:a7:35:e6:6b:2f:2e:5f:1a:38:0d:9f:5d:1f:e4:
6c:c7:be:c8:82:8d:09:f0:b3:90:c6:4d:4b:0b:7e:
63:9f:92:c1:e0:2d:46:2b:b7:89:5a:14:38:36:3b:
1d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BC:A0:D5:67:43:F3:E3:F2:9A:4A:B9:37:7E:F8:B6:96:20:DE:01
X509v3 Authority Key Identifier:
keyid:34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:cb:49:e7:1f:a5:aa:4d:ad:e5:45:6a:e3:ad:77:4b:47:01:
58:5e:bc:b7:0f:0e:4e:65:a9:0b:37:42:51:d2:4e:cc:22:f9:
67:de:e1:02:32:15:95:0e:f1:16:49:18:15:64:c4:c7:ff:7d:
b2:06:e9:60:e5:b3:72:8c:1a:ff:0d:16:c4:a1:3d:e3:7f:ff:
ee:7d:18:66:0e:6f:30:1d:31:68:9e:cd:ee:b3:f1:e4:57:12:
85:84:c8:6b:e5:94:bb:8e:9a:b0:51:0c:0c:5e:8d:99:66:c2:
4f:9c:50:f9:9d:37:1d:35:12:1a:3e:00:08:41:b7:6a:aa:70:
40:a7:16:bf:51:0e:ca:f0:4a:1a:06:12:6b:7a:c2:38:e5:fd:
7c:bb:a0:0e:ac:54:cf:99:8f:40:d3:64:d6:62:30:a0:04:41:
7d:74:7a:b9:0f:06:ef:b0:c7:8a:ad:17:fb:17:9b:96:f0:da:
10:00:a5:81:05:49:05:04:d1:aa:10:ad:d5:2d:2d:25:8b:ec:
11:a9:5c:6c:4c:27:c3:71:1f:9c:50:d0:78:25:b4:23:15:fd:
9e:41:a8:56:fb:df:36:f3:46:64:16:a3:d4:8a:a8:40:4a:2f:
17:98:9b:a4:c4:58:62:60:61:be:62:05:12:d6:c3:8d:50:38:
e4:38:d6:c5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICD4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzE2OTAxMTAvBgNVBAUTKDM0NzRDOTRDMzZFOEY5QTBEM0EwRDIyRTFEREExMDhD
RDM0MEFCMjgwHhcNMjUwMzI4MTc0MTIxWhcNMjUwNDA0MTc0MTIxWjAYMRYwFAYD
VQQDEw02N2U2ZGY0MS1kMmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz+1RM0dImQezmze29KsP/wpKwNvukN8bNFrvC3Ozndf/httmNqlxKKjoKANP
IDAbvCQAU1bCbCtfjSOnyROjB/WCRZ5tCtVnTrCyCjNknOu5uuGUInwTVA3zDTQu
5vukI/VLQiVet2NpKBbbpkZlIUxGsEkxb4XHsJwymaVe7eMNP76OAWDGBOH2MZ+1
iIyNOEdVr/cvLqueTGxtGypMe9xePpWh5LByvz+HYakXQ48DogzFhNWzltcSMp/x
BL4Okw/N9pNBjxbokRoRGjyt2qsvpzXmay8uXxo4DZ9dH+Rsx77Igo0J8LOQxk1L
C35jn5LB4C1GK7eJWhQ4NjsdQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKC8oNVn
Q/Pj8ppKuTd++LaWIN4BMB8GA1UdIwQYMBaAFDR0yUw26Pmg06DSLh3aEIzTQKso
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTY5MC8xNUI0MUI4ODYz
RjMxMUU5QTA4NTRDNDdDNEY5QUUwMi9OSFRKVERiby1hRFRvTkl1SGRvUWpOTkFx
eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05IVEpURGJvLWFEVG9OSXVIZG9Rak5OQXF5Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTY5MC8xNUI0MUI4ODYzRjMxMUU5QTA4NTRDNDdDNEY5QUUwMi9OSFRKVERiby1h
RFRvTkl1SGRvUWpOTkFxeWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCOy0nnH6WqTa3lRWrjrXdLRwFYXry3Dw5OZakLN0JR0k7MIvln3uEC
MhWVDvEWSRgVZMTH/32yBulg5bNyjBr/DRbEoT3jf//ufRhmDm8wHTFons3us/Hk
VxKFhMhr5ZS7jpqwUQwMXo2ZZsJPnFD5nTcdNRIaPgAIQbdqqnBApxa/UQ7K8Eoa
BhJresI45f18u6AOrFTPmY9A02TWYjCgBEF9dHq5DwbvsMeKrRf7F5uW8NoQAKWB
BUkFBNGqEK3VLS0li+wRqVxsTCfDcR+cUNB4JbQjFf2eQahW+98280ZkFqPUiqhA
Si8XmJukxFhiYGG+YgUS1sONUDjkONbF
-----END CERTIFICATE-----
Generated at Fri Apr 11 18:55:03 2025 by rpki-client