Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft
File: sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft (raw, json)
Hash identifier: CGAPcfvAFPDDi28+Gt30Mp6iKhbBY/5PB19OC0bdfHY=
Subject key identifier: 1B:21:68:06:22:FA:D2:F7:E8:1B:DA:93:A4:E3:30:36:D2:27:2D:51
Authority key identifier: B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50
Certificate issuer: /CN=A9142209/serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50
Certificate serial: 1EF3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft
Manifest number: 1EE3
Signing time: Fri 28 Mar 2025 16:08:37 +0000
Manifest this update: Fri 28 Mar 2025 16:08:36 +0000
Manifest next update: Fri 04 Apr 2025 16:08:36 +0000
Files and hashes: 1: sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl (hash: 1TAqqHOENHX6T74VS6JHtQQoiS3Br+mwchEjzg3QEwQ=)
2: 74F3F11098BB11EA9B1BD75CC4F9AE02.roa (hash: BczHzIbLkzNL4updWdbsFHqnEhXAUmCVG50paNnAJDQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7923 (0x1ef3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142209
Validity
Not Before: Mar 28 16:08:36 2025 GMT
Not After : Apr 4 16:08:36 2025 GMT
Subject: CN=67e6c985-bece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9b:02:bf:28:52:03:43:e5:e5:b5:bc:91:31:
2c:9c:4c:49:07:bb:2b:80:e9:40:bf:34:82:00:79:
63:10:d2:e7:67:d8:47:0b:ad:87:f3:75:b7:72:ee:
f6:4c:9d:83:4a:73:ce:4d:94:86:e7:43:5a:b2:b0:
84:b2:fd:62:a1:a2:ba:2e:8e:f7:0f:80:89:ef:45:
56:03:c7:cd:55:40:a7:b3:7f:74:d5:be:82:14:ef:
c4:a1:e6:0b:f6:9c:20:d2:df:2d:24:a5:4c:a8:93:
95:2f:51:7d:29:0c:77:4b:df:c2:6f:84:13:2d:bf:
e1:c4:15:f8:68:c0:47:c7:1b:c7:00:92:e1:7f:b5:
05:ec:68:3f:f2:10:15:5a:26:49:90:8e:c0:f7:08:
de:78:c2:20:76:79:ea:9a:be:78:0e:31:de:bc:16:
73:ed:ce:77:50:d3:82:b5:94:80:06:c7:d6:12:40:
55:74:3c:9d:3a:52:20:9e:f9:9b:55:36:f7:1d:df:
6e:f9:fa:83:0a:31:ba:79:03:9e:d9:f8:f6:e2:35:
ee:f7:ea:a8:d8:ed:24:88:20:d8:4e:c3:60:7d:5b:
a6:23:8f:f5:c4:72:cc:be:34:0d:cb:1c:7e:80:50:
ab:0c:2e:24:b3:3a:ba:40:1a:5a:8d:09:5d:64:b6:
4f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:21:68:06:22:FA:D2:F7:E8:1B:DA:93:A4:E3:30:36:D2:27:2D:51
X509v3 Authority Key Identifier:
keyid:B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:29:29:2d:40:a0:94:6c:df:72:f2:bd:f1:5e:f8:38:86:65:
8e:5e:18:c7:15:8b:3d:be:9f:82:0e:9e:6f:52:08:46:ea:e4:
6c:04:aa:41:16:97:fd:fc:26:00:63:01:9b:7e:26:55:b5:68:
2d:da:5b:1a:34:f0:ac:f1:34:8e:ee:9c:04:4d:9b:f4:5f:69:
1c:36:86:92:e0:78:1a:27:33:89:b8:2e:19:af:aa:ff:5f:f1:
d3:82:14:16:1b:98:34:e1:09:48:cf:85:54:d7:33:8c:26:8b:
56:aa:ea:46:8b:28:9a:91:97:76:b3:2e:6e:3d:2c:47:fa:8f:
83:fe:8e:a0:9e:74:e0:94:b7:eb:df:a1:39:da:8e:aa:0a:5a:
c1:d5:e2:a9:e3:38:2a:75:ad:b1:e6:ab:26:1c:7b:07:fa:7c:
bd:e1:39:6d:05:6c:c8:4b:88:49:35:e5:b6:a2:bf:43:98:65:
a7:9f:f7:42:ea:f4:a3:eb:ad:13:be:05:f6:bf:37:9e:8d:9c:
44:1a:f6:c7:a7:94:2c:b3:6d:7b:bc:97:40:04:08:21:d3:2c:
cf:42:6d:9c:a2:7a:85:6b:66:8c:5f:45:b3:5b:58:b8:5e:18:
f6:7c:3c:56:47:ae:33:12:e8:79:37:96:9b:97:65:fa:27:13:
49:be:02:9e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDIyMDkxMTAvBgNVBAUTKEIxNDA1MjlDNjlCMjU5MEZGNzY5RDZBQUVFRjk5RjI2
NjEwNENENTAwHhcNMjUwMzI4MTYwODM2WhcNMjUwNDA0MTYwODM2WjAYMRYwFAYD
VQQDEw02N2U2Yzk4NS1iZWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxZsCvyhSA0Pl5bW8kTEsnExJB7srgOlAvzSCAHljENLnZ9hHC62H83W3cu72
TJ2DSnPOTZSG50NasrCEsv1ioaK6Lo73D4CJ70VWA8fNVUCns3901b6CFO/EoeYL
9pwg0t8tJKVMqJOVL1F9KQx3S9/Cb4QTLb/hxBX4aMBHxxvHAJLhf7UF7Gg/8hAV
WiZJkI7A9wjeeMIgdnnqmr54DjHevBZz7c53UNOCtZSABsfWEkBVdDydOlIgnvmb
VTb3Hd9u+fqDCjG6eQOe2fj24jXu9+qo2O0kiCDYTsNgfVumI4/1xHLMvjQNyxx+
gFCrDC4kszq6QBpajQldZLZP3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBshaAYi
+tL36Bvak6TjMDbSJy1RMB8GA1UdIwQYMBaAFLFAUpxpslkP92nWqu75nyZhBM1Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjIwOS9BNkI1Njc4NDU4
OUYxMUU2QkRERkYxMjFDNEY5QUUwMi9zVUJTbkdteVdRXzNhZGFxN3ZtZkptRUV6
VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NVQlNuR215V1FfM2FkYXE3dm1mSm1FRXpWQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjIwOS9BNkI1Njc4NDU4OUYxMUU2QkRERkYxMjFDNEY5QUUwMi9zVUJTbkdteVdR
XzNhZGFxN3ZtZkptRUV6VkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA6KSktQKCUbN9y8r3xXvg4hmWOXhjHFYs9vp+CDp5vUghG6uRsBKpB
Fpf9/CYAYwGbfiZVtWgt2lsaNPCs8TSO7pwETZv0X2kcNoaS4HgaJzOJuC4Zr6r/
X/HTghQWG5g04QlIz4VU1zOMJotWqupGiyiakZd2sy5uPSxH+o+D/o6gnnTglLfr
36E52o6qClrB1eKp4zgqda2x5qsmHHsH+ny94TltBWzIS4hJNeW2or9DmGWnn/dC
6vSj660TvgX2vzeejZxEGvbHp5Qss217vJdABAgh0yzPQm2conqFa2aMX0WzW1i4
Xhj2fDxWR64zEuh5N5abl2X6JxNJvgKe
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:35:54 2025 by rpki-client