Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft
File: aEWjVwdX5r8sBIWsIXib_1AFHpo.mft (raw, json)
Hash identifier: Kt7PV5dogVxHo5A431u9xVU9yS0aRLlxNKLWu/mZiLU=
Subject key identifier: 54:55:F6:CB:BA:5C:C1:FB:77:52:FF:73:DF:19:F1:45:74:EA:22:28
Authority key identifier: 68:45:A3:57:07:57:E6:BF:2C:04:85:AC:21:78:9B:FF:50:05:1E:9A
Certificate issuer: /CN=A913500A/serialNumber=6845A3570757E6BF2C0485AC21789BFF50051E9A
Certificate serial: 012C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft
Manifest number: 0129
Signing time: Sat 29 Mar 2025 04:01:58 +0000
Manifest this update: Sat 29 Mar 2025 04:01:58 +0000
Manifest next update: Sat 05 Apr 2025 04:01:58 +0000
Files and hashes: 1: aEWjVwdX5r8sBIWsIXib_1AFHpo.crl (hash: 0kDFtVaEap8jGMc8zUlX6UiVFUqTL5JMzzrNK9y8jvM=)
2: 0CE4B8C6474911EEA995D74FC4F9AE02.roa (hash: o8XeNpRnuUBlVWA6mPKxdSovFEQUWjBzrI7Rs+4BJAM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 300 (0x12c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913500A
Validity
Not Before: Mar 29 04:01:58 2025 GMT
Not After : Apr 5 04:01:58 2025 GMT
Subject: CN=67e770b6-0344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:09:f6:5c:9c:a7:b5:ee:c0:a4:eb:63:56:6b:
08:de:fa:df:57:d4:0f:df:44:0b:7d:97:a0:4f:ce:
a0:3b:d4:75:2f:3d:94:db:e4:a0:12:77:3b:4f:71:
03:d8:ac:ff:23:15:ae:30:20:ce:28:ae:cb:09:4c:
3e:aa:cb:ab:2c:5e:07:c4:b8:6b:dd:3d:25:e2:b3:
0d:12:f5:ae:1c:0d:f9:53:d7:fe:d8:84:47:44:74:
bf:2b:5c:45:f4:11:12:1b:b0:01:4d:f0:fe:81:c1:
25:0c:1f:f0:34:e2:2a:95:2a:99:de:6e:19:64:e0:
5b:c2:a2:ff:82:39:49:b1:86:e2:b6:3f:00:e5:4e:
d1:27:eb:9a:46:f3:ed:7e:e3:7e:48:95:29:a5:2f:
13:98:d5:dd:15:ca:95:28:2f:54:74:11:a1:03:8d:
53:ea:9d:d6:c3:3e:ba:c2:1d:84:98:a8:19:b4:d5:
bc:72:c6:74:94:a0:66:dc:9d:25:ad:23:e0:f7:ff:
8b:34:42:c7:64:77:7f:d6:8c:dc:90:b5:3e:dd:4c:
95:78:a0:fa:f2:84:96:87:05:be:fd:93:56:0b:19:
13:49:f8:e6:7b:0a:1d:40:90:3f:c7:8b:22:0d:ed:
5d:8e:2d:30:e2:99:c0:fd:25:b4:0d:58:81:fe:69:
03:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:55:F6:CB:BA:5C:C1:FB:77:52:FF:73:DF:19:F1:45:74:EA:22:28
X509v3 Authority Key Identifier:
keyid:68:45:A3:57:07:57:E6:BF:2C:04:85:AC:21:78:9B:FF:50:05:1E:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:fa:67:af:f3:90:1d:c7:ac:47:f9:38:7b:d8:f2:41:f8:b9:
e5:c0:41:dc:56:95:07:40:41:c5:39:b8:df:ee:a6:55:a9:c0:
94:ae:09:40:f5:2e:4d:e4:3c:01:38:c5:c4:7e:33:da:79:4e:
90:65:ad:88:b7:fe:0a:c1:93:36:d5:f5:d5:4e:c9:84:19:18:
46:92:58:97:08:39:f0:84:7f:b2:6b:0c:d4:f5:7d:f2:5a:55:
04:15:5a:f3:bc:52:8d:fe:e8:16:e7:2d:79:55:96:cc:8f:c3:
1d:ce:21:a2:2c:5e:bc:43:be:0d:9e:86:3d:10:52:ef:f9:8e:
be:24:ed:c5:81:e0:54:12:b1:a4:bb:de:a2:1b:88:e7:e0:bc:
a5:c1:35:2f:04:93:1c:61:f8:e9:86:65:3a:3b:50:71:ff:c9:
b8:d2:88:80:c9:16:06:62:5d:9b:7f:07:5e:db:3d:d9:fb:61:
cb:f2:be:15:13:d9:61:0a:a0:d1:e7:e4:52:5f:30:1b:9b:b0:
c5:63:4a:e1:f3:55:82:ce:cd:22:f7:3f:95:c0:27:85:d9:34:
91:a6:6c:a0:9a:11:70:28:f5:c5:50:c3:9b:c6:4b:11:5e:60:
83:92:af:a2:a9:b3:6e:f8:06:cd:12:25:f8:1a:75:6c:e8:df:
61:cb:19:4f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzUwMEExMTAvBgNVBAUTKDY4NDVBMzU3MDc1N0U2QkYyQzA0ODVBQzIxNzg5QkZG
NTAwNTFFOUEwHhcNMjUwMzI5MDQwMTU4WhcNMjUwNDA1MDQwMTU4WjAYMRYwFAYD
VQQDEw02N2U3NzBiNi0wMzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApwn2XJynte7ApOtjVmsI3vrfV9QP30QLfZegT86gO9R1Lz2U2+SgEnc7T3ED
2Kz/IxWuMCDOKK7LCUw+qsurLF4HxLhr3T0l4rMNEvWuHA35U9f+2IRHRHS/K1xF
9BESG7ABTfD+gcElDB/wNOIqlSqZ3m4ZZOBbwqL/gjlJsYbitj8A5U7RJ+uaRvPt
fuN+SJUppS8TmNXdFcqVKC9UdBGhA41T6p3Wwz66wh2EmKgZtNW8csZ0lKBm3J0l
rSPg9/+LNELHZHd/1ozckLU+3UyVeKD68oSWhwW+/ZNWCxkTSfjmewodQJA/x4si
De1dji0w4pnA/SW0DViB/mkDXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFRV9su6
XMH7d1L/c98Z8UV06iIoMB8GA1UdIwQYMBaAFGhFo1cHV+a/LASFrCF4m/9QBR6a
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAwQS9DQ0EzRUE5MjQ3
M0YxMUVFODdGNDBBN0VDNEY5QUUwMi9hRVdqVndkWDVyOHNCSVdzSVhpYl8xQUZI
cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FFV2pWd2RYNXI4c0JJV3NJWGliXzFBRkhwby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NTAwQS9DQ0EzRUE5MjQ3M0YxMUVFODdGNDBBN0VDNEY5QUUwMi9hRVdqVndkWDVy
OHNCSVdzSVhpYl8xQUZIcG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAa+mev85Adx6xH+Th72PJB+LnlwEHcVpUHQEHFObjf7qZVqcCUrglA
9S5N5DwBOMXEfjPaeU6QZa2It/4KwZM21fXVTsmEGRhGkliXCDnwhH+yawzU9X3y
WlUEFVrzvFKN/ugW5y15VZbMj8MdziGiLF68Q74NnoY9EFLv+Y6+JO3FgeBUErGk
u96iG4jn4LylwTUvBJMcYfjphmU6O1Bx/8m40oiAyRYGYl2bfwde2z3Z+2HL8r4V
E9lhCqDR5+RSXzAbm7DFY0rh81WCzs0i9z+VwCeF2TSRpmygmhFwKPXFUMObxksR
XmCDkq+iqbNu+AbNEiX4GnVs6N9hyxlP
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:30:58 2025 by rpki-client