Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.mft
File: G96wwnXJDoG_o6r-IT5OcSHrc0o.mft (raw, json)
Hash identifier: vE9nGw4APxfbh5Pht4UJJm7BLT7SGuQkilAp4yj/Sek=
Subject key identifier: 83:08:C4:9D:45:1C:31:EF:B6:6C:AD:CC:99:10:FB:76:9D:7B:50:28
Authority key identifier: 1B:DE:B0:C2:75:C9:0E:81:BF:A3:AA:FE:21:3E:4E:71:21:EB:73:4A
Certificate issuer: /CN=A9142E1E/serialNumber=1BDEB0C275C90E81BFA3AAFE213E4E7121EB734A
Certificate serial: 64
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G96wwnXJDoG_o6r-IT5OcSHrc0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.mft
Manifest number: 61
Signing time: Sat 29 Mar 2025 06:24:37 +0000
Manifest this update: Sat 29 Mar 2025 06:24:36 +0000
Manifest next update: Sat 05 Apr 2025 06:24:36 +0000
Files and hashes: 1: G96wwnXJDoG_o6r-IT5OcSHrc0o.crl (hash: C9vKt4Hiv2ik9NZD3oTXet0LqODuEVvKNdNiQ7R/i74=)
2: 31B5D564824311EF9C69B985C4F9AE02.roa (hash: IVX22Sj0l4iAKc50j77MELQdp1CwcB3skhe7+xJHsEQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100 (0x64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142E1E
Validity
Not Before: Mar 29 06:24:36 2025 GMT
Not After : Apr 5 06:24:36 2025 GMT
Subject: CN=67e79224-68ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6b:f9:59:9a:5a:2e:72:75:e6:d2:8d:e6:34:
35:54:d7:6d:d9:d8:a6:3c:f8:86:c3:08:b4:f6:9d:
a8:bb:8c:e6:64:b2:8d:a4:64:1a:96:90:43:2c:90:
33:88:13:13:97:dc:63:e0:3f:80:f7:ae:2a:b2:fc:
36:96:6f:29:d9:d6:e5:b6:9a:f7:82:7c:a5:26:71:
b7:8a:20:23:8b:dd:34:da:7d:44:d1:0d:30:29:4c:
72:88:dc:e1:d2:a4:80:2e:92:d8:a7:89:91:5b:68:
e1:73:c2:b7:50:a8:85:2f:4f:57:a8:5b:83:b7:a2:
e4:45:10:d6:92:bd:7a:02:b8:2f:6e:69:62:49:3b:
40:08:b0:4a:cd:ba:c1:b1:02:7e:9a:23:67:71:66:
24:bd:0d:47:75:02:07:8e:2d:2d:fb:0f:82:29:83:
60:37:ab:6b:06:91:95:9f:35:b7:b6:10:a3:99:47:
4b:b3:e4:37:fa:38:bb:ee:19:10:c8:2c:36:f3:fb:
8c:14:e2:9d:ac:98:75:54:66:0b:5c:d0:27:62:5d:
01:31:25:53:5f:a6:4a:6c:63:22:aa:e4:ca:2e:7a:
3f:34:c9:50:97:e5:12:b4:fe:ef:ba:4c:c1:2b:8f:
fb:f1:60:97:51:4e:ed:4d:c1:25:c0:0b:f4:c0:0c:
30:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:08:C4:9D:45:1C:31:EF:B6:6C:AD:CC:99:10:FB:76:9D:7B:50:28
X509v3 Authority Key Identifier:
keyid:1B:DE:B0:C2:75:C9:0E:81:BF:A3:AA:FE:21:3E:4E:71:21:EB:73:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G96wwnXJDoG_o6r-IT5OcSHrc0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:aa:09:6e:e1:59:dd:2f:a0:67:de:33:18:1f:8a:f5:22:76:
f5:39:9d:5e:8e:77:f7:e0:2f:24:b1:46:d0:f6:2e:46:9f:09:
27:17:ab:26:90:92:41:a0:b8:d1:a4:39:27:f6:9d:8d:b9:27:
dd:a1:b6:bf:da:f3:69:3b:12:45:cc:6f:af:9d:0d:ef:bc:4b:
44:2a:03:e3:8b:c0:9d:6f:3d:c4:aa:f3:ce:d8:db:c3:0a:0f:
72:b8:2a:e8:b0:d5:23:28:d1:d7:19:41:4a:0a:0e:4f:f9:6a:
1f:19:ae:f7:24:c7:e3:04:d4:63:7d:0f:4a:a3:40:43:5a:3f:
f4:fb:7e:b5:f4:67:d2:14:ed:4b:61:2c:53:7b:a9:47:94:ef:
36:7e:0d:9d:dd:0b:d4:da:da:4a:c9:17:6e:b2:00:dd:b3:69:
3e:30:39:40:f6:6d:82:6c:af:85:4b:1a:e6:c3:14:0f:f7:24:
32:50:8f:21:c7:70:1e:0f:a2:e9:60:2b:f6:39:3f:0a:2c:9f:
77:23:7c:ca:4b:4f:63:a8:d0:47:b9:29:75:21:c4:34:11:32:
a6:53:de:95:5a:d6:16:5e:d6:e9:70:77:3b:cd:aa:7b:97:4a:
7f:86:ab:95:11:ca:12:1f:32:8c:b8:95:e6:96:2c:77:2c:a3:
b9:39:ff:13
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
MkUxRTExMC8GA1UEBRMoMUJERUIwQzI3NUM5MEU4MUJGQTNBQUZFMjEzRTRFNzEy
MUVCNzM0QTAeFw0yNTAzMjkwNjI0MzZaFw0yNTA0MDUwNjI0MzZaMBgxFjAUBgNV
BAMTDTY3ZTc5MjI0LTY4ZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/a/lZmloucnXm0o3mNDVU123Z2KY8+IbDCLT2nai7jOZkso2kZBqWkEMskDOI
ExOX3GPgP4D3riqy/DaWbynZ1uW2mveCfKUmcbeKICOL3TTafUTRDTApTHKI3OHS
pIAuktiniZFbaOFzwrdQqIUvT1eoW4O3ouRFENaSvXoCuC9uaWJJO0AIsErNusGx
An6aI2dxZiS9DUd1AgeOLS37D4Ipg2A3q2sGkZWfNbe2EKOZR0uz5Df6OLvuGRDI
LDbz+4wU4p2smHVUZgtc0CdiXQExJVNfpkpsYyKq5Mouej80yVCX5RK0/u+6TMEr
j/vxYJdRTu1NwSXAC/TADDC/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgwjEnUUc
Me+2bK3MmRD7dp17UCgwHwYDVR0jBBgwFoAUG96wwnXJDoG/o6r+IT5OcSHrc0ow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyRTFFLzEzRDgwNjA4ODI0
MjExRUZBRDNEODE4MUM0RjlBRTAyL0c5Nnd3blhKRG9HX282ci1JVDVPY1NIcmMw
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvRzk2d3duWEpEb0dfbzZyLUlUNU9jU0hyYzBvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy
RTFFLzEzRDgwNjA4ODI0MjExRUZBRDNEODE4MUM0RjlBRTAyL0c5Nnd3blhKRG9H
X282ci1JVDVPY1NIcmMwby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAIGqCW7hWd0voGfeMxgfivUidvU5nV6Od/fgLySxRtD2LkafCScXqyaQ
kkGguNGkOSf2nY25J92htr/a82k7EkXMb6+dDe+8S0QqA+OLwJ1vPcSq887Y28MK
D3K4Kuiw1SMo0dcZQUoKDk/5ah8Zrvckx+ME1GN9D0qjQENaP/T7frX0Z9IU7Uth
LFN7qUeU7zZ+DZ3dC9Ta2krJF26yAN2zaT4wOUD2bYJsr4VLGubDFA/3JDJQjyHH
cB4PoulgK/Y5Pwosn3cjfMpLT2Oo0Ee5KXUhxDQRMqZT3pVa1hZe1ulwdzvNqnuX
Sn+Gq5URyhIfMoy4leaWLHcso7k5/xM=
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:12:28 2025 by rpki-client