Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft
File: _HkvHWLyld9EH6IejzvPJ8phBjA.mft (raw, json)
Hash identifier: jv2mRMjuf41JNQ7MLjh5sOwJXfjj2PTwUN8yzd3T88Q=
Subject key identifier: CD:DC:B9:03:32:5A:43:D1:DB:68:51:84:BA:08:F2:0C:00:FC:CB:C2
Authority key identifier: FC:79:2F:1D:62:F2:95:DF:44:1F:A2:1E:8F:3B:CF:27:CA:61:06:30
Certificate issuer: /CN=A913DAC6/serialNumber=FC792F1D62F295DF441FA21E8F3BCF27CA610630
Certificate serial: 74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HkvHWLyld9EH6IejzvPJ8phBjA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft
Manifest number: 73
Signing time: Sat 29 Mar 2025 06:07:50 +0000
Manifest this update: Sat 29 Mar 2025 06:07:50 +0000
Manifest next update: Sat 05 Apr 2025 06:07:50 +0000
Files and hashes: 1: _HkvHWLyld9EH6IejzvPJ8phBjA.crl (hash: 9/WetW332ZNq0U16mKwvaMY139jHvzXA33welHa2Kdo=)
2: B01E86045EC511EFA4479F42C4F9AE02.roa (hash: yDqC4T9k/RQEkfG5fQ7+DRcSfQmuJV8SSd24ypWwq18=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DAC6
Validity
Not Before: Mar 29 06:07:50 2025 GMT
Not After : Apr 5 06:07:50 2025 GMT
Subject: CN=67e78e36-7707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0f:6b:11:3d:73:2d:82:b3:f0:5e:83:46:9d:
75:1a:02:cc:ea:15:a1:d4:a3:32:38:6c:96:4e:f8:
96:ba:f0:df:b2:89:5e:f4:7e:93:d6:75:37:ad:bd:
0d:29:a7:6c:ab:f2:90:3c:a1:45:09:0a:0a:a7:a8:
1c:48:b6:46:92:7c:8f:d2:78:d8:6b:d2:e1:ac:6a:
3f:38:ba:d0:7f:73:ba:04:80:bc:d8:d6:38:48:65:
ba:e1:8b:08:6b:f5:d3:76:c2:9f:6b:5e:7d:d1:38:
22:f5:d5:cc:77:c2:3e:a0:af:9b:28:9a:75:a5:e8:
89:e5:82:14:22:50:c9:93:ff:e8:54:df:69:70:36:
b9:d0:a2:1f:de:8e:3d:7f:48:91:e2:b9:c0:70:4f:
99:5f:dd:98:4d:b9:30:72:d1:15:24:63:d0:ed:a6:
66:ab:48:da:7e:c8:71:ab:08:9c:67:f6:c1:5a:38:
5f:d7:c2:6f:5b:a2:71:2b:7a:0d:26:be:cc:b4:57:
70:99:79:f4:94:76:99:68:e7:73:9a:44:96:23:ca:
24:46:16:4a:8f:e8:5f:ae:ad:93:68:eb:3e:c2:58:
1b:8e:01:7d:d9:c6:61:6a:db:79:61:66:e7:28:ec:
e9:b7:12:e9:4a:8e:f9:89:ec:0b:e3:93:2f:51:c5:
25:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DC:B9:03:32:5A:43:D1:DB:68:51:84:BA:08:F2:0C:00:FC:CB:C2
X509v3 Authority Key Identifier:
keyid:FC:79:2F:1D:62:F2:95:DF:44:1F:A2:1E:8F:3B:CF:27:CA:61:06:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HkvHWLyld9EH6IejzvPJ8phBjA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:f4:a7:00:12:24:30:52:49:a7:31:d0:69:d7:23:b4:c0:79:
76:51:08:d1:fd:a2:85:39:0a:e7:6b:33:8a:66:da:33:ea:c3:
c5:e7:ee:84:6d:0a:60:dd:60:f0:28:b8:3b:81:90:6b:93:81:
5f:b3:dc:a2:7f:fb:f4:62:29:be:81:6a:83:28:aa:54:f7:28:
9f:e2:39:2a:dc:d7:a3:03:b8:5a:11:fb:8e:32:2a:9e:2f:c0:
55:b8:54:41:1d:bc:80:44:94:ea:7f:bc:b7:76:0a:8b:d6:f7:
4b:72:32:c3:c9:ed:47:ba:7a:3c:cb:66:34:7c:4b:33:a5:fb:
9e:29:a4:64:69:34:cb:5a:b9:ae:17:7e:b4:57:1c:9f:8e:82:
21:6f:dc:75:3b:77:f4:88:7b:7e:17:d7:28:e9:e1:25:99:77:
67:58:91:ae:c7:3d:1f:c2:f7:fd:a8:7b:1d:60:5d:c0:29:5f:
5a:56:19:4a:3f:9a:d1:52:d8:3d:56:13:05:68:98:f6:c0:e5:
e9:77:6a:8e:e5:89:35:d8:9b:41:c3:70:f7:0c:2b:57:bd:40:
0f:24:3b:72:e7:88:4c:62:12:a9:2b:df:a7:3d:62:3a:ce:db:
bd:81:fb:2e:f5:8e:7a:18:02:c3:94:44:84:1f:2b:a6:fc:a2:
1c:fd:98:d9
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
REFDNjExMC8GA1UEBRMoRkM3OTJGMUQ2MkYyOTVERjQ0MUZBMjFFOEYzQkNGMjdD
QTYxMDYzMDAeFw0yNTAzMjkwNjA3NTBaFw0yNTA0MDUwNjA3NTBaMBgxFjAUBgNV
BAMTDTY3ZTc4ZTM2LTc3MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDND2sRPXMtgrPwXoNGnXUaAszqFaHUozI4bJZO+Ja68N+yiV70fpPWdTetvQ0p
p2yr8pA8oUUJCgqnqBxItkaSfI/SeNhr0uGsaj84utB/c7oEgLzY1jhIZbrhiwhr
9dN2wp9rXn3ROCL11cx3wj6gr5somnWl6InlghQiUMmT/+hU32lwNrnQoh/ejj1/
SJHiucBwT5lf3ZhNuTBy0RUkY9DtpmarSNp+yHGrCJxn9sFaOF/Xwm9bonEreg0m
vsy0V3CZefSUdplo53OaRJYjyiRGFkqP6F+urZNo6z7CWBuOAX3ZxmFq23lhZuco
7Om3EulKjvmJ7Avjky9RxSWvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzdy5AzJa
Q9HbaFGEugjyDAD8y8IwHwYDVR0jBBgwFoAU/HkvHWLyld9EH6IejzvPJ8phBjAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNEQUM2LzU5RUJFMkFFNUVD
NTExRUZCNDNBMTg0MkM0RjlBRTAyL19Ia3ZIV0x5bGQ5RUg2SWVqenZQSjhwaEJq
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvX0hrdkhXTHlsZDlFSDZJZWp6dlBKOHBoQmpBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE
QUM2LzU5RUJFMkFFNUVDNTExRUZCNDNBMTg0MkM0RjlBRTAyL19Ia3ZIV0x5bGQ5
RUg2SWVqenZQSjhwaEJqQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBACD0pwASJDBSSacx0GnXI7TAeXZRCNH9ooU5CudrM4pm2jPqw8Xn7oRt
CmDdYPAouDuBkGuTgV+z3KJ/+/RiKb6BaoMoqlT3KJ/iOSrc16MDuFoR+44yKp4v
wFW4VEEdvIBElOp/vLd2CovW90tyMsPJ7Ue6ejzLZjR8SzOl+54ppGRpNMtaua4X
frRXHJ+OgiFv3HU7d/SIe34X1yjp4SWZd2dYka7HPR/C9/2oex1gXcApX1pWGUo/
mtFS2D1WEwVomPbA5el3ao7liTXYm0HDcPcMK1e9QA8kO3LniExiEqkr36c9YjrO
272B+y71jnoYAsOURIQfK6b8ohz9mNk=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:31:20 2025 by rpki-client