Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft
File: DPzMWYD1fmvITfEbTFcZNdJdrMo.mft (raw, json)
Hash identifier: +HAo4KWTx49ZH4N0z8N0TlQbCu9BzacJ+VxRTAxb7vk=
Subject key identifier: 1C:86:C4:93:71:EF:AE:00:1C:18:10:E2:C4:50:32:81:DB:32:ED:8A
Authority key identifier: 0C:FC:CC:59:80:F5:7E:6B:C8:4D:F1:1B:4C:57:19:35:D2:5D:AC:CA
Certificate issuer: /CN=A91415AA/serialNumber=0CFCCC5980F57E6BC84DF11B4C571935D25DACCA
Certificate serial: 4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DPzMWYD1fmvITfEbTFcZNdJdrMo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft
Manifest number: 12E1
Signing time: Fri 28 Mar 2025 19:56:00 +0000
Manifest this update: Fri 28 Mar 2025 19:55:59 +0000
Manifest next update: Fri 04 Apr 2025 19:55:59 +0000
Files and hashes: 1: DPzMWYD1fmvITfEbTFcZNdJdrMo.crl (hash: k/g9o3w8rnD02YmluoJ2zbEZmP2yXg3MR5Ymp+Eo5Oo=)
2: CB04F4409BE611EF8AFF947CC4F9AE02.roa (hash: xCoGLzXH0o2fU2zmUG8/SFNRjo0IkmsetsLkqXjuT7s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91415AA
Validity
Not Before: Mar 28 19:55:59 2025 GMT
Not After : Apr 4 19:55:59 2025 GMT
Subject: CN=67e6fecf-25ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:59:c4:35:3a:08:78:24:6a:14:e5:19:7b:92:
d2:d8:dd:cc:94:1a:c7:2d:ba:7a:a2:b3:3b:18:19:
fc:64:7a:2b:d2:ee:04:ef:90:db:bd:26:c9:72:75:
28:ca:cb:6c:46:d2:66:c5:7d:17:94:97:34:eb:95:
1d:8e:5a:a5:d5:7a:28:5f:4f:93:17:f4:a8:c1:16:
2d:2e:a1:a0:9a:5f:ee:f7:92:2f:de:fb:08:75:0e:
af:74:9b:d3:38:f4:d1:89:ef:5a:cc:78:fe:2a:3c:
b6:b7:9a:89:a5:55:7d:41:b1:c8:73:2f:e2:be:a3:
db:74:36:7b:5c:45:58:20:0e:69:91:12:4a:27:47:
cc:24:ec:ae:12:4b:85:51:15:25:aa:10:b9:03:c1:
c3:24:70:8b:86:f0:32:ec:eb:c7:5b:de:6d:6f:19:
e6:a0:7f:e0:9a:d3:84:db:d1:d2:a9:da:27:0f:9b:
12:5b:8e:dd:57:8d:59:f8:9c:a7:f3:8b:b8:89:97:
25:56:b1:d9:3c:2b:25:11:e9:4a:06:81:d5:96:91:
39:ce:11:00:dc:f9:85:22:b6:0e:61:29:d5:91:a3:
d8:06:9b:c5:43:b3:41:b0:12:ed:65:02:c6:49:32:
ae:ea:7d:02:b2:cb:53:12:8a:a4:23:c6:36:8a:6d:
47:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:86:C4:93:71:EF:AE:00:1C:18:10:E2:C4:50:32:81:DB:32:ED:8A
X509v3 Authority Key Identifier:
keyid:0C:FC:CC:59:80:F5:7E:6B:C8:4D:F1:1B:4C:57:19:35:D2:5D:AC:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DPzMWYD1fmvITfEbTFcZNdJdrMo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:bd:07:e5:23:0f:30:c4:88:b9:3d:b3:5f:e8:29:48:aa:a7:
b5:c8:c2:a1:19:46:82:a7:ea:95:c2:57:c2:8d:26:2e:dd:f3:
c7:e6:75:e7:0f:10:d3:b8:d8:c1:0f:de:9a:63:f8:d9:ba:9c:
6a:58:dc:98:cd:0c:e6:0e:6b:7c:78:5c:06:93:bc:84:d6:24:
48:68:b6:0a:7f:24:85:e9:37:d3:6c:ca:32:13:05:9e:7c:1a:
09:fc:f7:8e:3f:44:2b:30:68:e1:24:99:92:2e:5a:61:1c:4d:
74:f2:da:56:45:6c:e0:db:c6:96:2b:44:f1:91:b4:72:e2:a1:
c8:82:6b:4d:44:19:59:eb:86:3c:cf:6b:9e:e6:fb:47:76:12:
27:83:79:b3:22:91:46:7c:3d:a8:fd:9d:e8:4a:ee:e1:14:0e:
8a:3c:8d:fa:ef:98:fb:ce:39:0b:a1:cc:47:38:20:3f:37:5f:
f7:7a:a5:e6:17:d4:79:71:4b:ce:9e:d2:9c:5c:6f:ec:79:2c:
9c:cb:83:68:85:de:7e:ff:fb:72:f1:28:39:c7:07:53:94:8b:
8a:b7:50:27:ec:4b:0e:84:05:46:9d:37:90:91:04:8f:4a:ec:
16:77:e9:8b:e8:21:2d:c2:2f:53:0c:4a:c9:90:d7:46:50:0b:
20:81:b5:37
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
MTVBQTExMC8GA1UEBRMoMENGQ0NDNTk4MEY1N0U2QkM4NERGMTFCNEM1NzE5MzVE
MjVEQUNDQTAeFw0yNTAzMjgxOTU1NTlaFw0yNTA0MDQxOTU1NTlaMBgxFjAUBgNV
BAMTDTY3ZTZmZWNmLTI1ZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCqWcQ1Ogh4JGoU5Rl7ktLY3cyUGsctunqiszsYGfxkeivS7gTvkNu9JslydSjK
y2xG0mbFfReUlzTrlR2OWqXVeihfT5MX9KjBFi0uoaCaX+73ki/e+wh1Dq90m9M4
9NGJ71rMeP4qPLa3momlVX1BschzL+K+o9t0NntcRVggDmmREkonR8wk7K4SS4VR
FSWqELkDwcMkcIuG8DLs68db3m1vGeagf+Ca04Tb0dKp2icPmxJbjt1XjVn4nKfz
i7iJlyVWsdk8KyUR6UoGgdWWkTnOEQDc+YUitg5hKdWRo9gGm8VDs0GwEu1lAsZJ
Mq7qfQKyy1MSiqQjxjaKbUflAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHIbEk3Hv
rgAcGBDixFAygdsy7YowHwYDVR0jBBgwFoAUDPzMWYD1fmvITfEbTFcZNdJdrMow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxNUFBLzNFRkEyNDE0NjJF
MDExRUFBNkQ1OUEyQ0M0RjlBRTAyL0RQek1XWUQxZm12SVRmRWJURmNaTmRKZHJN
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRFB6TVdZRDFmbXZJVGZFYlRGY1pOZEpkck1vLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx
NUFBLzNFRkEyNDE0NjJFMDExRUFBNkQ1OUEyQ0M0RjlBRTAyL0RQek1XWUQxZm12
SVRmRWJURmNaTmRKZHJNby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAIm9B+UjDzDEiLk9s1/oKUiqp7XIwqEZRoKn6pXCV8KNJi7d88fmdecP
ENO42MEP3ppj+Nm6nGpY3JjNDOYOa3x4XAaTvITWJEhotgp/JIXpN9NsyjITBZ58
Ggn8944/RCswaOEkmZIuWmEcTXTy2lZFbODbxpYrRPGRtHLiociCa01EGVnrhjzP
a57m+0d2EieDebMikUZ8Paj9nehK7uEUDoo8jfrvmPvOOQuhzEc4ID83X/d6peYX
1HlxS86e0pxcb+x5LJzLg2iF3n7/+3LxKDnHB1OUi4q3UCfsSw6EBUadN5CRBI9K
7BZ36YvoIS3CL1MMSsmQ10ZQCyCBtTc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:42:04 2025 by rpki-client