Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.mft
File: 2gQijT7rRR_A8iM2aXFwV_irNmk.mft (raw, json)
Hash identifier: xy9bGcg9sM/v2IZbrIFYsyCGsVvhPTH/gjKwvywJhbI=
Subject key identifier: BA:61:4C:47:AB:D9:16:A9:60:97:F3:B5:EB:53:90:04:59:A6:11:FA
Authority key identifier: DA:04:22:8D:3E:EB:45:1F:C0:F2:23:36:69:71:70:57:F8:AB:36:69
Certificate issuer: /CN=A914B165/serialNumber=DA04228D3EEB451FC0F2233669717057F8AB3669
Certificate serial: 085B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gQijT7rRR_A8iM2aXFwV_irNmk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.mft
Manifest number: 0855
Signing time: Fri 28 Mar 2025 20:59:06 +0000
Manifest this update: Fri 28 Mar 2025 20:59:06 +0000
Manifest next update: Fri 04 Apr 2025 20:59:06 +0000
Files and hashes: 1: 2gQijT7rRR_A8iM2aXFwV_irNmk.crl (hash: jD6RNjFiA8cHO99PeVUds1bKRzcB6Q0Hk0GvZZn+e1g=)
2: 26AECD92C2B211EABBD0ED4AC4F9AE02.roa (hash: 8bFMS7lUFa5a04616nMhBCIyPXjI0vGFlv2YHmEk/tM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2139 (0x85b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B165
Validity
Not Before: Mar 28 20:59:06 2025 GMT
Not After : Apr 4 20:59:06 2025 GMT
Subject: CN=67e70d9a-b9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2b:2a:d8:5c:d6:6b:dd:da:1b:ed:5a:8f:e3:
6b:3d:64:26:f0:53:1e:4d:ba:c6:a7:e2:03:d0:04:
e6:b0:d0:3c:4e:f9:55:8d:11:bd:fc:3f:f0:7c:71:
b7:a4:6a:ce:c5:f0:ca:5d:86:cd:8b:98:39:4c:3e:
27:38:83:6e:24:06:0a:4d:9e:e6:7f:68:01:21:7c:
21:56:30:09:ac:7f:80:dc:fc:a8:37:46:f0:95:06:
49:c3:73:f4:c3:87:b4:c6:1e:63:9b:97:69:e4:1f:
1f:53:45:f4:83:5c:86:d2:0e:ab:2a:d7:e5:22:7e:
f9:79:2f:57:30:51:7c:d5:7a:a8:09:dc:16:ac:21:
01:fc:94:94:aa:87:3c:d7:cf:f5:cc:e2:21:d1:30:
0d:e4:1d:e1:94:9b:91:78:21:43:30:a2:da:28:53:
7f:b0:f1:41:c2:ab:de:b3:92:c8:c8:a3:a3:c2:46:
6a:72:fb:c2:62:bb:46:23:ef:36:cb:5a:c0:75:2e:
dc:db:b7:69:f8:cb:44:2a:5e:ab:1d:ae:e9:13:ed:
36:f4:74:0c:d0:8d:a6:ac:8d:28:5a:df:16:70:13:
47:09:47:32:e5:6f:76:05:eb:2c:3f:8d:7b:47:8e:
7f:e2:25:62:a5:19:b1:27:05:b9:b8:0e:4d:7b:29:
cf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:61:4C:47:AB:D9:16:A9:60:97:F3:B5:EB:53:90:04:59:A6:11:FA
X509v3 Authority Key Identifier:
keyid:DA:04:22:8D:3E:EB:45:1F:C0:F2:23:36:69:71:70:57:F8:AB:36:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gQijT7rRR_A8iM2aXFwV_irNmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:1b:da:f8:97:68:ec:e1:17:7d:6e:30:6a:93:17:ae:8b:ea:
90:a6:8e:ef:db:85:f7:03:08:aa:04:98:85:e4:21:e3:ca:96:
60:ea:69:a0:fa:e1:69:8b:b4:44:25:d8:52:1b:0d:98:db:e9:
dd:af:76:9f:74:20:1f:aa:12:1f:eb:ac:e2:25:99:c3:60:7e:
47:82:b2:fd:4a:1f:ba:3d:aa:33:57:16:d2:3c:63:8d:06:bb:
63:a9:bd:1f:37:ec:e9:16:f7:1a:68:cb:60:7c:a7:e0:19:75:
7c:07:8a:71:40:e8:e9:e5:61:fb:62:8e:95:56:4e:bc:2b:b5:
8f:9b:35:5a:61:c6:46:21:95:2d:b5:47:ad:fa:3e:d6:a8:3f:
78:78:3c:f9:2b:dd:6d:19:48:c8:52:39:3e:aa:3c:51:8e:9f:
8d:a0:84:a0:71:26:d9:90:b8:e0:3f:fb:f0:09:bb:18:b9:f7:
07:2e:cc:6c:24:fd:1d:19:39:2a:ec:cc:80:9f:94:45:c0:bd:
fe:72:45:fa:4b:a8:b2:e2:fd:49:9a:18:20:3d:e0:43:84:72:
a1:d6:b5:cc:f9:75:3c:f0:b5:ac:c8:3c:b5:8b:fe:c4:d7:da:
47:6f:99:21:32:3c:ee:3c:dd:b6:16:e3:0b:17:e8:56:8d:43:
f7:a9:d0:34
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEIxNjUxMTAvBgNVBAUTKERBMDQyMjhEM0VFQjQ1MUZDMEYyMjMzNjY5NzE3MDU3
RjhBQjM2NjkwHhcNMjUwMzI4MjA1OTA2WhcNMjUwNDA0MjA1OTA2WjAYMRYwFAYD
VQQDEw02N2U3MGQ5YS1iOWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxysq2FzWa93aG+1aj+NrPWQm8FMeTbrGp+ID0ATmsNA8TvlVjRG9/D/wfHG3
pGrOxfDKXYbNi5g5TD4nOINuJAYKTZ7mf2gBIXwhVjAJrH+A3PyoN0bwlQZJw3P0
w4e0xh5jm5dp5B8fU0X0g1yG0g6rKtflIn75eS9XMFF81XqoCdwWrCEB/JSUqoc8
18/1zOIh0TAN5B3hlJuReCFDMKLaKFN/sPFBwqves5LIyKOjwkZqcvvCYrtGI+82
y1rAdS7c27dp+MtEKl6rHa7pE+029HQM0I2mrI0oWt8WcBNHCUcy5W92BessP417
R45/4iVipRmxJwW5uA5NeynPXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLphTEer
2RapYJfztetTkARZphH6MB8GA1UdIwQYMBaAFNoEIo0+60UfwPIjNmlxcFf4qzZp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjE2NS82QTNFQjhCNkMy
QjExMUVBOTIwQkI5NEFDNEY5QUUwMi8yZ1FpalQ3clJSX0E4aU0yYVhGd1ZfaXJO
bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJnUWlqVDdyUlJfQThpTTJhWEZ3Vl9pck5tay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QjE2NS82QTNFQjhCNkMyQjExMUVBOTIwQkI5NEFDNEY5QUUwMi8yZ1FpalQ3clJS
X0E4aU0yYVhGd1ZfaXJObWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCVG9r4l2js4Rd9bjBqkxeui+qQpo7v24X3AwiqBJiF5CHjypZg6mmg
+uFpi7REJdhSGw2Y2+ndr3afdCAfqhIf66ziJZnDYH5HgrL9Sh+6PaozVxbSPGON
Brtjqb0fN+zpFvcaaMtgfKfgGXV8B4pxQOjp5WH7Yo6VVk68K7WPmzVaYcZGIZUt
tUet+j7WqD94eDz5K91tGUjIUjk+qjxRjp+NoISgcSbZkLjgP/vwCbsYufcHLsxs
JP0dGTkq7MyAn5RFwL3+ckX6S6iy4v1JmhggPeBDhHKh1rXM+XU88LWsyDy1i/7E
19pHb5khMjzuPN22FuMLF+hWjUP3qdA0
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:52:40 2025 by rpki-client