Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft
File: 8iRPqPsPyfURGt76wZeZwp88iFs.mft (raw, json)
Hash identifier: 9DN0WNbFYgmQYc3IUfbKaQv3mM+L21zqWAGP/ZtU9Qs=
Subject key identifier: 71:E5:21:B9:10:84:AB:ED:7D:DC:37:0B:36:DE:43:DB:E9:20:AF:5B
Authority key identifier: F2:24:4F:A8:FB:0F:C9:F5:11:1A:DE:FA:C1:97:99:C2:9F:3C:88:5B
Certificate issuer: /CN=A9148C20/serialNumber=F2244FA8FB0FC9F5111ADEFAC19799C29F3C885B
Certificate serial: 0180
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iRPqPsPyfURGt76wZeZwp88iFs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft
Manifest number: 017A
Signing time: Sat 29 Mar 2025 03:15:43 +0000
Manifest this update: Sat 29 Mar 2025 03:15:42 +0000
Manifest next update: Sat 05 Apr 2025 03:15:42 +0000
Files and hashes: 1: 8iRPqPsPyfURGt76wZeZwp88iFs.crl (hash: QtlQAyTQlytnySZ43vUhypHOou7bADAD0e2z82wY8RM=)
2: A8CCF2D4CC7A11EDA9430E31C4F9AE02.roa (hash: aeO1Mj/elW/xh7ym1J+KF848UMK5HdQa3I9hteU56q0=)
3: A9862EACCC7A11EDA9430E31C4F9AE02.roa (hash: pPZ9JIadC5wyaOareOX2satHOT6x5cmd8WRCUuxQZvg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 384 (0x180)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148C20
Validity
Not Before: Mar 29 03:15:42 2025 GMT
Not After : Apr 5 03:15:42 2025 GMT
Subject: CN=67e765de-a78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:75:82:37:e1:ae:fa:e3:31:bd:47:82:77:5d:
bb:38:3e:b2:1a:db:49:a2:71:9f:77:28:ca:32:78:
74:12:16:03:c8:a9:0b:c4:93:c1:ef:7e:f1:78:bc:
84:12:d3:5f:57:bc:7a:8e:fd:f2:b7:13:e9:36:36:
ed:6e:25:66:8f:4d:e0:89:8e:80:1e:4b:59:6c:c0:
f2:63:1c:13:88:c9:8f:7f:b0:5c:c0:3d:15:15:93:
20:e6:ef:b1:79:58:11:07:2a:13:fb:ef:13:91:43:
42:9e:c2:fa:09:e2:b5:aa:a1:67:93:3c:b0:75:90:
d6:5d:d3:06:47:a5:51:bb:b7:7f:98:f2:53:dc:2a:
4c:70:49:35:2e:55:8f:c6:d5:7b:a2:0b:06:4f:ee:
fc:5c:27:53:90:43:3e:1d:b0:cf:44:d7:da:ff:94:
cb:b9:07:43:66:df:6a:6d:f3:af:41:05:aa:44:87:
42:f6:e8:8f:5e:1f:67:3b:cb:c0:16:c6:a4:55:fa:
58:32:89:e5:9c:93:bd:cb:5d:84:4b:76:35:38:50:
1d:d3:53:70:80:b1:f5:05:1a:bf:bd:67:3d:4e:ad:
f7:94:c7:c5:cb:0d:fc:b1:c8:14:78:9f:2c:c8:cf:
fa:aa:22:46:c3:12:a9:1b:f0:7a:90:d7:fc:2f:78:
ae:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E5:21:B9:10:84:AB:ED:7D:DC:37:0B:36:DE:43:DB:E9:20:AF:5B
X509v3 Authority Key Identifier:
keyid:F2:24:4F:A8:FB:0F:C9:F5:11:1A:DE:FA:C1:97:99:C2:9F:3C:88:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iRPqPsPyfURGt76wZeZwp88iFs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:fb:cf:db:10:df:f4:fc:20:b4:fb:0d:71:3b:ad:9d:27:c8:
31:0c:38:ae:b0:9c:54:ec:ab:4d:9f:43:8e:f4:fc:c6:78:56:
89:06:2b:3b:ab:4f:d1:97:5b:ee:8e:fd:c8:0b:66:8e:07:a1:
c9:15:94:01:bb:7a:2e:54:ed:71:17:94:2b:e4:37:18:91:b3:
40:f3:56:30:23:07:df:fb:74:ba:bb:83:51:d8:5f:cb:f8:a2:
d0:02:a1:fb:68:ad:40:4a:3e:0a:85:2c:40:46:25:82:6b:6f:
0c:a0:09:aa:bd:c0:bb:dc:95:e8:84:f2:04:90:17:e4:c6:5f:
c0:5b:d8:ef:4d:c1:19:c1:d3:c1:60:ac:c4:49:3d:c2:a2:41:
a6:54:0b:65:a5:ee:5c:7b:b2:df:ac:00:c7:5e:d5:61:9d:e4:
f8:55:c4:6c:f2:55:b2:f8:ed:d2:38:73:50:98:cb:78:c6:5f:
fb:7f:10:a7:7a:93:37:3c:e2:c6:36:95:bc:8a:c3:33:fb:b3:
1f:4f:e0:e0:60:19:3d:5f:c1:3f:ea:56:a7:d9:e3:56:59:57:
e5:71:88:4b:d4:bc:c8:29:13:6e:60:a7:c2:8c:b2:48:c1:b6:
32:50:e5:f4:1d:1f:1b:2c:b5:cb:84:4c:00:cd:de:57:70:48:
63:3f:b1:5f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhDMjAxMTAvBgNVBAUTKEYyMjQ0RkE4RkIwRkM5RjUxMTFBREVGQUMxOTc5OUMy
OUYzQzg4NUIwHhcNMjUwMzI5MDMxNTQyWhcNMjUwNDA1MDMxNTQyWjAYMRYwFAYD
VQQDEw02N2U3NjVkZS1hNzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzXWCN+Gu+uMxvUeCd127OD6yGttJonGfdyjKMnh0EhYDyKkLxJPB737xeLyE
EtNfV7x6jv3ytxPpNjbtbiVmj03giY6AHktZbMDyYxwTiMmPf7BcwD0VFZMg5u+x
eVgRByoT++8TkUNCnsL6CeK1qqFnkzywdZDWXdMGR6VRu7d/mPJT3CpMcEk1LlWP
xtV7ogsGT+78XCdTkEM+HbDPRNfa/5TLuQdDZt9qbfOvQQWqRIdC9uiPXh9nO8vA
FsakVfpYMonlnJO9y12ES3Y1OFAd01NwgLH1BRq/vWc9Tq33lMfFyw38scgUeJ8s
yM/6qiJGwxKpG/B6kNf8L3iuWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHHlIbkQ
hKvtfdw3CzbeQ9vpIK9bMB8GA1UdIwQYMBaAFPIkT6j7D8n1ERre+sGXmcKfPIhb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEMyMC9BNUE0Q0QxMEND
NzYxMUVEOTNDRUFEN0VDNEY5QUUwMi84aVJQcVBzUHlmVVJHdDc2d1plWndwODhp
RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhpUlBxUHNQeWZVUkd0NzZ3WmVad3A4OGlGcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OEMyMC9BNUE0Q0QxMENDNzYxMUVEOTNDRUFEN0VDNEY5QUUwMi84aVJQcVBzUHlm
VVJHdDc2d1plWndwODhpRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCA+8/bEN/0/CC0+w1xO62dJ8gxDDiusJxU7KtNn0OO9PzGeFaJBis7
q0/Rl1vujv3IC2aOB6HJFZQBu3ouVO1xF5Qr5DcYkbNA81YwIwff+3S6u4NR2F/L
+KLQAqH7aK1ASj4KhSxARiWCa28MoAmqvcC73JXohPIEkBfkxl/AW9jvTcEZwdPB
YKzEST3CokGmVAtlpe5ce7LfrADHXtVhneT4VcRs8lWy+O3SOHNQmMt4xl/7fxCn
epM3POLGNpW8isMz+7MfT+DgYBk9X8E/6lan2eNWWVflcYhL1LzIKRNuYKfCjLJI
wbYyUOX0HR8bLLXLhEwAzd5XcEhjP7Ff
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:11:33 2025 by rpki-client