Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft
File: SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft (raw, json)
Hash identifier: t/DhCluH9HPsdFpA+woC5Gp/SSx/RhZne6J6Why5lDQ=
Subject key identifier: A9:B3:F8:A1:E2:89:02:C9:60:27:A7:61:BC:6A:89:B8:6D:A2:9C:FF
Authority key identifier: 48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35
Certificate issuer: /CN=A9143848/serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135
Certificate serial: 0159
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft
Manifest number: 014A
Signing time: Sat 29 Mar 2025 03:50:27 +0000
Manifest this update: Sat 29 Mar 2025 03:50:27 +0000
Manifest next update: Sat 05 Apr 2025 03:50:27 +0000
Files and hashes: 1: SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl (hash: O9Io+9xRTz/iWVHUd9MSfC6qxIvO0Iu3UrZHpzBOnIU=)
2: 0BC8ADDC2C9E11EE81999C3BC4F9AE02.roa (hash: 1UWFJDrBQYlRda7OvOZMs2uhE2kwiz1cgZhClLagiDU=)
3: 2B68155C2C9D11EEB080623AC4F9AE02.roa (hash: c9nvOfU2KLrLRWXC99EhP9jGlFTmmacQblUfMAlz5U8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 345 (0x159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143848
Validity
Not Before: Mar 29 03:50:27 2025 GMT
Not After : Apr 5 03:50:27 2025 GMT
Subject: CN=67e76e03-7fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c9:49:2e:bb:7f:2c:7e:da:ac:67:3e:8d:11:
37:e9:de:9a:e7:8d:7f:b9:a7:be:ef:93:38:76:cb:
0e:12:78:fd:aa:6c:8a:56:e5:69:09:6b:e9:67:d5:
9f:c1:81:66:41:87:1d:1c:df:1c:e6:7a:21:c9:bf:
3d:3b:6f:0e:09:2a:52:36:27:b9:f6:db:ad:2e:18:
28:95:12:31:95:e0:fd:84:0e:78:19:0a:7f:14:aa:
a6:77:14:53:fa:27:42:9b:2d:e9:f8:a0:95:b1:aa:
3b:69:47:d2:7b:30:d3:3d:81:82:ee:75:df:63:66:
bf:3c:24:9c:a3:39:f8:2c:c1:97:e1:45:e0:3c:20:
7e:df:e6:64:a2:0e:92:02:eb:d0:fc:d7:9d:92:b5:
b2:15:4e:3c:66:6d:33:de:33:c9:f2:f7:a1:ad:9b:
31:18:59:5f:04:1a:83:23:44:74:41:04:16:b7:5e:
c9:22:3d:bd:32:03:4b:f5:07:07:31:c7:b3:3d:f7:
e1:d0:4e:c2:01:a9:e7:37:f4:d4:ab:4f:b2:55:f1:
99:8f:ce:4b:64:fc:ad:af:5c:d3:69:7a:53:3a:86:
72:b1:29:8a:66:df:d1:ed:d7:2a:94:88:ba:a7:0f:
b9:70:26:50:3f:c2:0f:b1:4b:3c:d0:c7:92:a6:63:
40:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B3:F8:A1:E2:89:02:C9:60:27:A7:61:BC:6A:89:B8:6D:A2:9C:FF
X509v3 Authority Key Identifier:
keyid:48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:4b:18:35:d6:c9:31:de:81:96:fd:07:8d:9b:c6:0a:a6:fa:
5a:7d:34:2a:56:bc:3e:ba:fc:db:bb:82:6b:f5:d7:a9:a6:c7:
89:a6:15:46:23:a8:bb:f3:9f:5f:3a:be:62:ca:e3:6f:9c:e9:
3d:f2:ea:0f:52:13:dd:7b:15:1f:ac:a8:08:ea:d2:16:17:37:
9b:b4:87:44:e0:bc:b1:90:7e:68:b1:6d:4f:11:27:2d:86:93:
d8:7e:46:11:74:ce:12:80:11:36:38:41:da:ed:a0:85:59:eb:
b0:48:65:2e:26:de:eb:09:63:4f:a7:40:3f:72:0f:65:38:4c:
f8:5a:0a:d3:2a:a5:d4:f7:3b:f3:23:9a:ea:35:a8:29:8d:f7:
35:9b:f7:bd:35:42:4c:23:c2:38:f5:95:b7:5f:8d:6a:44:28:
4f:70:c8:17:00:73:09:de:16:bd:19:57:ca:8c:04:d0:d0:64:
9d:c5:b1:be:52:c2:7d:72:44:61:92:c3:5f:cb:6c:5e:63:2a:
b7:84:ac:e9:a1:70:6e:ec:3f:83:a2:72:5d:c7:80:c2:a8:a8:
be:f8:d3:d4:6d:b4:6c:ed:46:21:6c:a9:f9:b4:9a:a4:11:be:
54:ee:b1:10:14:3b:6e:26:36:86:f2:b2:10:1e:f4:db:17:cf:
8c:cd:16:0e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDM4NDgxMTAvBgNVBAUTKDQ4MkQzRTcwMEVFNUYxQTRBREE3NTE2RjJFNTY3ODM0
RTcxMEQxMzUwHhcNMjUwMzI5MDM1MDI3WhcNMjUwNDA1MDM1MDI3WjAYMRYwFAYD
VQQDEw02N2U3NmUwMy03ZmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt8lJLrt/LH7arGc+jRE36d6a541/uae+75M4dssOEnj9qmyKVuVpCWvpZ9Wf
wYFmQYcdHN8c5nohyb89O28OCSpSNie59tutLhgolRIxleD9hA54GQp/FKqmdxRT
+idCmy3p+KCVsao7aUfSezDTPYGC7nXfY2a/PCScozn4LMGX4UXgPCB+3+Zkog6S
AuvQ/NedkrWyFU48Zm0z3jPJ8vehrZsxGFlfBBqDI0R0QQQWt17JIj29MgNL9QcH
McezPffh0E7CAannN/TUq0+yVfGZj85LZPytr1zTaXpTOoZysSmKZt/R7dcqlIi6
pw+5cCZQP8IPsUs80MeSpmNAWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmz+KHi
iQLJYCenYbxqibhtopz/MB8GA1UdIwQYMBaAFEgtPnAO5fGkradRby5WeDTnENE1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mzg0OC8xNjE4REI3NDJC
QjYxMUVFQkI3RDUyNkFDNEY5QUUwMi9TQzAtY0E3bDhhU3RwMUZ2TGxaNE5PY1Ew
VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NDMC1jQTdsOGFTdHAxRnZMbFo0Tk9jUTBUVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Mzg0OC8xNjE4REI3NDJCQjYxMUVFQkI3RDUyNkFDNEY5QUUwMi9TQzAtY0E3bDhh
U3RwMUZ2TGxaNE5PY1EwVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBQSxg11skx3oGW/QeNm8YKpvpafTQqVrw+uvzbu4Jr9deppseJphVG
I6i7859fOr5iyuNvnOk98uoPUhPdexUfrKgI6tIWFzebtIdE4LyxkH5osW1PESct
hpPYfkYRdM4SgBE2OEHa7aCFWeuwSGUuJt7rCWNPp0A/cg9lOEz4WgrTKqXU9zvz
I5rqNagpjfc1m/e9NUJMI8I49ZW3X41qRChPcMgXAHMJ3ha9GVfKjATQ0GSdxbG+
UsJ9ckRhksNfy2xeYyq3hKzpoXBu7D+DonJdx4DCqKi++NPUbbRs7UYhbKn5tJqk
Eb5U7rEQFDtuJjaG8rIQHvTbF8+MzRYO
-----END CERTIFICATE-----
Generated at Fri Apr 11 14:10:58 2025 by rpki-client