Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft
File: ExIqzTjgGRaZhizKfvJHdjDVcOk.mft (raw, json)
Hash identifier: cocexflzrlKCHYW13uW9YCyIRFlVArkOpqn5y2OZPjs=
Subject key identifier: 9A:64:2A:1A:90:6D:76:7A:76:25:9D:97:64:C0:58:C0:C5:99:93:45
Authority key identifier: 13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9
Certificate issuer: /CN=A9137C94/serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9
Certificate serial: 05A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft
Manifest number: 05A1
Signing time: Fri 28 Mar 2025 23:27:24 +0000
Manifest this update: Fri 28 Mar 2025 23:27:23 +0000
Manifest next update: Fri 04 Apr 2025 23:27:23 +0000
Files and hashes: 1: ExIqzTjgGRaZhizKfvJHdjDVcOk.crl (hash: p41Uqyvm3MFLIKeUC9akqHpvakTi12JpSqHDOw943iw=)
2: DCAC0B64C22011EB9C4C3B31C4F9AE02.roa (hash: aRYWCiFCI9e+UhsWF2EXBC5D+N3vZVlnQx//tGzToMg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1446 (0x5a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137C94
Validity
Not Before: Mar 28 23:27:23 2025 GMT
Not After : Apr 4 23:27:23 2025 GMT
Subject: CN=67e7305b-dcf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:91:c6:05:81:2f:99:d7:fb:44:5a:7d:f4:1a:
d3:ed:b4:8d:b8:85:de:92:51:48:e4:a9:5d:43:7f:
d3:dd:83:9e:20:6c:28:11:d7:79:89:4a:27:cd:72:
0d:03:85:8e:aa:45:64:70:bc:63:52:95:5d:5c:43:
72:50:0c:00:32:89:09:c3:e8:ea:94:94:90:8d:96:
ba:2c:12:b9:e0:18:1b:93:3a:bc:87:f8:5c:f8:69:
e2:52:bf:e2:91:8c:f6:e8:b9:de:3d:07:3b:45:4f:
72:34:e7:d1:ed:93:c4:73:e3:1b:16:b7:93:ce:1a:
c1:73:b9:f2:d0:9f:9f:0d:05:99:9a:9e:c0:7d:ff:
0a:90:0d:39:57:10:4a:c1:cf:40:d1:42:00:1b:05:
8d:bf:50:dd:c6:06:b4:0e:3f:53:8c:65:57:8e:4b:
1b:23:c9:2f:f2:0d:6c:9d:58:85:8a:94:2c:22:32:
e4:95:da:cb:6b:2b:29:df:2c:09:76:b5:1b:fb:4e:
3b:72:2d:42:8d:ff:bd:18:fb:b6:fa:d8:b9:77:fe:
09:e3:e9:93:99:f7:5a:11:87:f8:75:b6:15:d3:a7:
f8:01:b9:de:4c:47:21:da:6b:88:3f:e8:38:a2:9f:
39:a3:ff:4f:a0:04:c3:2c:c9:08:5c:65:49:47:7b:
60:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:64:2A:1A:90:6D:76:7A:76:25:9D:97:64:C0:58:C0:C5:99:93:45
X509v3 Authority Key Identifier:
keyid:13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:d3:ee:d7:ec:d1:63:66:06:58:41:ab:fd:af:21:a1:a2:90:
ed:f0:54:64:84:ad:89:a3:7e:b9:60:c9:b9:3a:ae:62:10:d6:
f1:36:be:78:31:e5:6d:e8:10:39:78:51:fc:81:12:d5:96:30:
8b:77:5c:4e:e3:99:fc:19:45:1c:0c:58:1c:91:f1:60:85:e6:
81:6a:84:f3:aa:09:fe:20:c0:65:fd:35:24:fb:45:ec:d1:23:
49:0b:f0:04:c2:95:6d:20:5f:7b:a5:89:ac:3f:55:54:60:fe:
cb:26:cd:9f:e3:73:43:6c:72:33:0a:8a:9f:2f:e9:82:27:70:
d3:71:a6:0c:c6:28:23:53:f6:83:c9:d1:d9:d4:2e:d8:e8:a2:
8f:89:cc:90:a4:46:70:58:f1:a6:59:ec:1a:d6:d3:d4:3d:83:
98:d4:5d:f6:95:e7:8a:4f:17:ad:49:6d:37:b6:35:88:0c:02:
1a:11:72:97:f8:28:56:34:5d:19:e5:a0:13:69:3f:c7:ae:89:
aa:8c:1f:b5:66:31:d6:0b:28:d4:b5:01:3e:7c:39:b1:b1:27:
a8:f2:9e:e8:0c:01:1e:0c:31:3b:f2:87:aa:de:82:76:97:19:
db:9d:8a:49:ad:61:13:69:6b:cf:df:6a:6c:61:47:99:16:0a:
e9:85:21:54
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdDOTQxMTAvBgNVBAUTKDEzMTIyQUNEMzhFMDE5MTY5OTg2MkNDQTdFRjI0Nzc2
MzBENTcwRTkwHhcNMjUwMzI4MjMyNzIzWhcNMjUwNDA0MjMyNzIzWjAYMRYwFAYD
VQQDEw02N2U3MzA1Yi1kY2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArpHGBYEvmdf7RFp99BrT7bSNuIXeklFI5KldQ3/T3YOeIGwoEdd5iUonzXIN
A4WOqkVkcLxjUpVdXENyUAwAMokJw+jqlJSQjZa6LBK54Bgbkzq8h/hc+GniUr/i
kYz26LnePQc7RU9yNOfR7ZPEc+MbFreTzhrBc7ny0J+fDQWZmp7Aff8KkA05VxBK
wc9A0UIAGwWNv1Ddxga0Dj9TjGVXjksbI8kv8g1snViFipQsIjLkldrLaysp3ywJ
drUb+047ci1Cjf+9GPu2+ti5d/4J4+mTmfdaEYf4dbYV06f4AbneTEch2muIP+g4
op85o/9PoATDLMkIXGVJR3tgtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJpkKhqQ
bXZ6diWdl2TAWMDFmZNFMB8GA1UdIwQYMBaAFBMSKs044BkWmYYsyn7yR3Yw1XDp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0M5NC9CRDBGRDM1Q0My
MUMxMUVCQTUxRUMyMjlDNEY5QUUwMi9FeElxelRqZ0dSYVpoaXpLZnZKSGRqRFZj
T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0V4SXF6VGpnR1JhWmhpektmdkpIZGpEVmNPay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
N0M5NC9CRDBGRDM1Q0MyMUMxMUVCQTUxRUMyMjlDNEY5QUUwMi9FeElxelRqZ0dS
YVpoaXpLZnZKSGRqRFZjT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAB0+7X7NFjZgZYQav9ryGhopDt8FRkhK2Jo365YMm5Oq5iENbxNr54
MeVt6BA5eFH8gRLVljCLd1xO45n8GUUcDFgckfFgheaBaoTzqgn+IMBl/TUk+0Xs
0SNJC/AEwpVtIF97pYmsP1VUYP7LJs2f43NDbHIzCoqfL+mCJ3DTcaYMxigjU/aD
ydHZ1C7Y6KKPicyQpEZwWPGmWewa1tPUPYOY1F32leeKTxetSW03tjWIDAIaEXKX
+ChWNF0Z5aATaT/HromqjB+1ZjHWCyjUtQE+fDmxsSeo8p7oDAEeDDE78oeq3oJ2
lxnbnYpJrWETaWvP32psYUeZFgrphSFU
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:55:57 2025 by rpki-client