Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft
File: Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft (raw, json)
Hash identifier: zlC7i3tJuwENdUsLa0nPcrSUJQ+ZhN4dsSqGQU98jqI=
Subject key identifier: BC:8F:CB:95:77:77:82:2C:20:25:5F:7B:1C:38:77:1E:CF:9A:F0:10
Authority key identifier: 16:08:BF:46:24:A7:E1:B7:23:22:8B:46:61:DD:66:1E:70:AE:F3:F4
Certificate issuer: /CN=A91444E5/serialNumber=1608BF4624A7E1B723228B4661DD661E70AEF3F4
Certificate serial: 04C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft
Manifest number: 04C2
Signing time: Sat 29 Mar 2025 00:06:39 +0000
Manifest this update: Sat 29 Mar 2025 00:06:39 +0000
Manifest next update: Sat 05 Apr 2025 00:06:39 +0000
Files and hashes: 1: Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl (hash: FsHeR+x+x0duoijvZLWZ/dx+sjSN+OebFmMvW/jwIKY=)
2: 90AB89E4547511EEB44F391AC4F9AE02.roa (hash: xx0/0c099Z+DcfDq5KxpcRvexWoXtqPp/xhoiOnuqgg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1225 (0x4c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91444E5
Validity
Not Before: Mar 29 00:06:39 2025 GMT
Not After : Apr 5 00:06:39 2025 GMT
Subject: CN=67e7398f-0294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:08:07:4f:26:d5:dd:52:0f:eb:3a:3f:bd:c6:
eb:ad:bd:de:ce:36:eb:36:6c:38:32:9e:6b:6c:4d:
3e:72:6e:ca:47:89:01:de:6a:f4:56:a0:b1:2c:64:
b8:04:9e:15:be:f5:97:29:c8:fd:9c:14:7a:7d:45:
3a:8c:ad:e5:0a:c8:0a:84:0b:7f:47:d7:78:e2:2f:
42:2e:af:86:00:2d:37:0f:2b:40:40:8b:45:f3:23:
9f:bc:ab:c3:87:ef:cd:ab:25:9d:57:6b:4d:76:0b:
c4:a3:fd:53:94:bd:e0:65:8f:a9:c3:12:87:04:93:
47:5a:1c:8f:82:87:8b:96:c6:b3:44:0f:40:97:50:
88:74:af:0d:42:90:dc:f1:b4:2b:c8:c0:23:d1:6b:
92:10:61:3b:e3:10:6f:71:64:7b:5b:d5:90:d1:30:
71:bf:a0:20:92:b1:bf:7f:76:3b:8c:34:58:ae:71:
c6:20:bc:43:fc:9a:3e:4b:73:34:55:e5:d6:e5:ee:
9c:4b:64:f3:97:ac:bc:a3:f9:2d:b8:a7:6c:f3:d1:
25:db:1a:5b:01:18:ba:e4:01:c1:d7:99:41:1d:35:
75:d5:14:0c:62:6b:4b:6a:13:38:f7:0c:d1:99:0d:
88:9a:a6:c4:5e:a5:81:d3:87:b4:4b:39:5f:33:9c:
64:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8F:CB:95:77:77:82:2C:20:25:5F:7B:1C:38:77:1E:CF:9A:F0:10
X509v3 Authority Key Identifier:
keyid:16:08:BF:46:24:A7:E1:B7:23:22:8B:46:61:DD:66:1E:70:AE:F3:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:1c:71:d1:1e:38:56:ee:51:cf:4e:5b:8e:7f:22:b2:9d:2c:
3f:2b:ad:68:8f:e1:f8:f2:86:5f:80:0a:cd:35:3d:a0:02:59:
bb:50:70:c6:d4:7d:d8:d8:92:0d:0a:da:78:62:e0:b8:4d:08:
f2:f3:5d:2c:60:8a:61:16:d4:a9:6c:c6:5e:00:a3:3b:4e:ed:
30:a1:ce:5a:95:82:92:d6:49:e8:78:c7:93:c7:65:aa:0f:a1:
7e:96:7d:e3:cd:28:92:a8:21:73:37:30:2a:3e:32:3b:66:89:
0c:ec:70:b2:0d:88:0f:19:eb:10:2a:de:63:57:c9:46:a4:52:
99:7f:e1:a5:1c:17:ba:8c:c6:c5:ad:2e:3b:93:c1:8b:76:61:
88:85:f9:30:8f:86:c5:ec:4f:4e:6e:71:e6:1f:1b:a0:44:c5:
d2:28:b2:c1:f1:7a:a7:35:d0:76:bc:a0:99:b0:ff:1e:85:b5:
f1:b3:44:2c:22:8c:c2:90:20:81:1b:e8:1a:a5:24:b2:3a:db:
0f:64:bf:c1:35:3e:e7:98:d6:9d:6a:37:46:b8:f3:28:df:11:
bb:f4:90:cf:c7:82:85:ac:89:13:7d:8b:5c:c4:0d:18:36:bf:
64:2b:13:1d:ee:24:32:e5:a0:bb:db:78:9d:77:b7:66:19:ad:
ca:f5:6b:52
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDQ0RTUxMTAvBgNVBAUTKDE2MDhCRjQ2MjRBN0UxQjcyMzIyOEI0NjYxREQ2NjFF
NzBBRUYzRjQwHhcNMjUwMzI5MDAwNjM5WhcNMjUwNDA1MDAwNjM5WjAYMRYwFAYD
VQQDEw02N2U3Mzk4Zi0wMjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtggHTybV3VIP6zo/vcbrrb3ezjbrNmw4Mp5rbE0+cm7KR4kB3mr0VqCxLGS4
BJ4VvvWXKcj9nBR6fUU6jK3lCsgKhAt/R9d44i9CLq+GAC03DytAQItF8yOfvKvD
h+/NqyWdV2tNdgvEo/1TlL3gZY+pwxKHBJNHWhyPgoeLlsazRA9Al1CIdK8NQpDc
8bQryMAj0WuSEGE74xBvcWR7W9WQ0TBxv6AgkrG/f3Y7jDRYrnHGILxD/Jo+S3M0
VeXW5e6cS2Tzl6y8o/ktuKds89El2xpbARi65AHB15lBHTV11RQMYmtLahM49wzR
mQ2ImqbEXqWB04e0SzlfM5xkXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLyPy5V3
d4IsICVfexw4dx7PmvAQMB8GA1UdIwQYMBaAFBYIv0Ykp+G3IyKLRmHdZh5wrvP0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDRFNS8yRTgyMkRBQTFC
OTExMUVDOUU3QTMxMTRDNEY5QUUwMi9GZ2lfUmlTbjRiY2pJb3RHWWQxbUhuQ3U4
X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZnaV9SaVNuNGJjaklvdEdZZDFtSG5DdThfUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NDRFNS8yRTgyMkRBQTFCOTExMUVDOUU3QTMxMTRDNEY5QUUwMi9GZ2lfUmlTbjRi
Y2pJb3RHWWQxbUhuQ3U4X1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBUHHHRHjhW7lHPTluOfyKynSw/K61oj+H48oZfgArNNT2gAlm7UHDG
1H3Y2JINCtp4YuC4TQjy810sYIphFtSpbMZeAKM7Tu0woc5alYKS1knoeMeTx2Wq
D6F+ln3jzSiSqCFzNzAqPjI7ZokM7HCyDYgPGesQKt5jV8lGpFKZf+GlHBe6jMbF
rS47k8GLdmGIhfkwj4bF7E9ObnHmHxugRMXSKLLB8XqnNdB2vKCZsP8ehbXxs0Qs
IozCkCCBG+gapSSyOtsPZL/BNT7nmNadajdGuPMo3xG79JDPx4KFrIkTfYtcxA0Y
Nr9kKxMd7iQy5aC723idd7dmGa3K9WtS
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:53:31 2025 by rpki-client