Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft
File: I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft (raw, json)
Hash identifier: 5A2otLv7XClbC8rF4n4FGMFZX4OYRX3T/mCXkQPG23s=
Subject key identifier: A2:24:99:EB:05:72:53:6C:84:62:DC:6D:09:DE:0C:51:E1:46:1C:B0
Authority key identifier: 23:B3:3B:90:16:E3:11:EE:A6:B7:21:C8:B9:39:39:FB:1A:87:0B:EC
Certificate issuer: /CN=A9135F3C/serialNumber=23B33B9016E311EEA6B721C8B93939FB1A870BEC
Certificate serial: 068B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft
Manifest number: 0682
Signing time: Fri 28 Mar 2025 22:34:07 +0000
Manifest this update: Fri 28 Mar 2025 22:34:07 +0000
Manifest next update: Fri 04 Apr 2025 22:34:07 +0000
Files and hashes: 1: I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl (hash: WhT0n5uyEZyAsiU8P3SSKlH7sWejdSA8xT4fRjR5PAs=)
2: 1396BBE630E811EEAE1F1212C4F9AE02.roa (hash: XjK0DsWTt9iTXDA89UqXS5hBINy5fzGd49slH38OEAs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1675 (0x68b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135F3C
Validity
Not Before: Mar 28 22:34:07 2025 GMT
Not After : Apr 4 22:34:07 2025 GMT
Subject: CN=67e723df-139a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b8:fb:2e:c6:6d:a0:ef:74:97:37:77:15:3a:
d5:6c:71:26:49:a0:88:2d:ae:8b:a9:f1:29:62:3b:
c8:58:d3:18:a1:d2:d5:4f:54:02:c5:cc:4e:61:ae:
06:4e:e6:be:ae:78:53:69:f6:70:f4:a7:1d:47:71:
b8:a8:71:49:b3:24:31:03:22:ec:0a:7a:53:07:7e:
83:b5:c2:3a:34:b5:41:4d:6f:4a:cf:a8:1a:b1:45:
35:aa:2d:d8:f9:ee:89:ad:a7:a6:1b:da:6b:d5:41:
87:91:2d:c6:a8:6f:08:19:5a:56:7e:d1:b6:d7:9f:
26:ff:dc:98:7f:11:a7:8f:3a:74:8f:37:59:f6:95:
cd:4c:ca:8c:57:95:54:15:f5:4f:0e:c4:78:8c:6c:
72:78:03:94:ef:e9:4a:a8:db:2e:ee:17:3b:68:50:
98:68:33:c7:d1:da:a0:a2:79:95:70:f2:13:6e:85:
75:01:3c:14:78:a3:6b:e7:2f:1c:a3:7c:27:d5:b4:
c1:82:ab:4c:39:d9:d2:2f:91:89:82:ea:c4:56:63:
16:11:43:56:56:f8:c3:6c:f0:c0:c2:e1:cf:1d:bb:
b1:94:15:b1:e9:07:be:e4:d2:cc:59:22:57:51:21:
39:ac:9a:96:62:cf:37:f5:f6:e9:62:c9:6e:e1:2e:
8f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:24:99:EB:05:72:53:6C:84:62:DC:6D:09:DE:0C:51:E1:46:1C:B0
X509v3 Authority Key Identifier:
keyid:23:B3:3B:90:16:E3:11:EE:A6:B7:21:C8:B9:39:39:FB:1A:87:0B:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:80:71:25:97:d6:fb:b3:03:9f:ac:5a:87:e7:b1:4a:05:2c:
77:36:5d:36:6b:28:ab:cd:7c:7e:c8:18:e2:17:61:db:36:aa:
d3:a3:c3:9f:7b:b9:d9:ae:7d:1c:61:74:fc:03:b1:e6:be:c2:
33:b4:b6:d9:aa:3e:50:d6:5a:d1:1d:30:45:5e:c3:c0:85:0e:
35:f3:c2:01:60:b6:1e:52:df:99:98:a9:a3:16:90:d3:39:03:
0a:03:7c:5d:4b:09:c1:a7:69:9a:c8:c3:83:10:7c:fc:cc:de:
19:e6:45:cc:d1:ae:ea:ec:ae:90:8a:d8:25:da:02:73:2d:a4:
6c:ac:55:81:62:05:9e:ab:e0:51:c2:5e:1a:50:26:41:fc:6f:
0d:30:bf:0b:b7:04:ad:65:50:32:34:41:d1:91:bc:cb:e2:52:
87:51:8b:95:b4:92:d1:4b:d6:e8:e2:ec:f5:11:cd:df:5f:33:
b2:d9:29:47:64:86:42:4e:55:7b:38:1f:72:ce:b6:8c:ed:a0:
27:00:86:af:f1:18:53:38:00:1f:03:9b:13:6b:b8:b9:9f:1f:
7e:fd:06:41:d8:9c:d1:a3:75:80:c6:2b:0a:00:71:cd:41:4f:
71:1d:0d:58:65:99:2a:af:29:70:e1:5f:95:d7:a2:6c:86:95:
5f:aa:0b:7a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzVGM0MxMTAvBgNVBAUTKDIzQjMzQjkwMTZFMzExRUVBNkI3MjFDOEI5MzkzOUZC
MUE4NzBCRUMwHhcNMjUwMzI4MjIzNDA3WhcNMjUwNDA0MjIzNDA3WjAYMRYwFAYD
VQQDEw02N2U3MjNkZi0xMzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAobj7LsZtoO90lzd3FTrVbHEmSaCILa6LqfEpYjvIWNMYodLVT1QCxcxOYa4G
Tua+rnhTafZw9KcdR3G4qHFJsyQxAyLsCnpTB36DtcI6NLVBTW9Kz6gasUU1qi3Y
+e6JraemG9pr1UGHkS3GqG8IGVpWftG2158m/9yYfxGnjzp0jzdZ9pXNTMqMV5VU
FfVPDsR4jGxyeAOU7+lKqNsu7hc7aFCYaDPH0dqgonmVcPITboV1ATwUeKNr5y8c
o3wn1bTBgqtMOdnSL5GJgurEVmMWEUNWVvjDbPDAwuHPHbuxlBWx6Qe+5NLMWSJX
USE5rJqWYs839fbpYslu4S6PIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKIkmesF
clNshGLcbQneDFHhRhywMB8GA1UdIwQYMBaAFCOzO5AW4xHuprchyLk5Ofsahwvs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUYzQy80Nzg2ODM2QTZB
QzkxMUVCODZDQjZCMjBDNEY5QUUwMi9JN003a0JiakVlNm10eUhJdVRrNS14cUhD
LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0k3TTdrQmJqRWU2bXR5SEl1VGs1LXhxSEMtdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NUYzQy80Nzg2ODM2QTZBQzkxMUVCODZDQjZCMjBDNEY5QUUwMi9JN003a0JiakVl
Nm10eUhJdVRrNS14cUhDLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCFgHEll9b7swOfrFqH57FKBSx3Nl02ayirzXx+yBjiF2HbNqrTo8Of
e7nZrn0cYXT8A7HmvsIztLbZqj5Q1lrRHTBFXsPAhQ4188IBYLYeUt+ZmKmjFpDT
OQMKA3xdSwnBp2mayMODEHz8zN4Z5kXM0a7q7K6Qitgl2gJzLaRsrFWBYgWeq+BR
wl4aUCZB/G8NML8LtwStZVAyNEHRkbzL4lKHUYuVtJLRS9bo4uz1Ec3fXzOy2SlH
ZIZCTlV7OB9yzraM7aAnAIav8RhTOAAfA5sTa7i5nx9+/QZB2JzRo3WAxisKAHHN
QU9xHQ1YZZkqrylw4V+V16JshpVfqgt6
-----END CERTIFICATE-----
Generated at Thu Apr 10 16:57:47 2025 by rpki-client