Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.mft
File: 6qSDu71coOErPsD25wxbqq40VSs.mft (raw, json)
Hash identifier: NSNHVJYFdUSKNdnNKYwhzecH2kS1+T2ZhYd4br7FZa8=
Subject key identifier: 9F:F5:02:F2:94:75:85:BC:20:73:60:74:CC:9E:BB:78:0B:D8:30:A1
Authority key identifier: EA:A4:83:BB:BD:5C:A0:E1:2B:3E:C0:F6:E7:0C:5B:AA:AE:34:55:2B
Certificate issuer: /CN=A914BAA2/serialNumber=EAA483BBBD5CA0E12B3EC0F6E70C5BAAAE34552B
Certificate serial: 21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qSDu71coOErPsD25wxbqq40VSs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.mft
Manifest number: 19
Signing time: Sat 29 Mar 2025 07:27:12 +0000
Manifest this update: Sat 29 Mar 2025 07:27:12 +0000
Manifest next update: Sat 05 Apr 2025 07:27:12 +0000
Files and hashes: 1: 6qSDu71coOErPsD25wxbqq40VSs.crl (hash: 8y3VyzezthEVEcOnUjL5pMHTZKIkYgSbCEM9SGGimJ4=)
2: 535D1F52069511F090414823C4F9AE02.roa (hash: Z1otMQWN0CbTaPhw5EvbwRe+YB3GZZkedSXo8XkS78Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BAA2
Validity
Not Before: Mar 29 07:27:12 2025 GMT
Not After : Apr 5 07:27:12 2025 GMT
Subject: CN=67e7a0d0-4603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2a:08:62:a0:a9:98:92:18:e7:28:e6:31:c9:
07:75:67:09:07:09:f1:32:62:ed:69:5e:f3:25:36:
57:cf:8b:0b:db:a5:a0:d3:27:51:56:50:93:8b:a5:
2f:4e:18:78:38:84:8d:21:88:fa:f8:48:61:1b:8c:
9b:0c:c1:14:29:6a:d2:cf:63:d7:63:8b:4f:7f:44:
49:3e:62:aa:3f:44:6e:d3:24:a7:3f:0b:20:b2:6b:
10:06:cd:44:74:79:ac:6d:0c:4c:ca:bf:64:43:e9:
32:da:86:7a:fc:1c:c7:7f:31:a8:6d:62:d7:f4:87:
2d:2d:58:20:fd:90:11:9a:c6:5d:42:21:51:4b:bf:
83:a9:09:a8:b0:51:d5:dc:27:a9:d3:18:08:67:32:
bd:18:9b:e7:0e:6f:4a:d0:08:eb:84:3f:29:d8:eb:
03:55:58:2b:98:c4:e9:4e:4d:92:c2:04:db:95:63:
c5:3b:a3:bc:bb:9a:b1:93:ac:5c:5e:4c:1c:62:a6:
b9:6f:ec:d7:bf:77:df:89:51:b6:ff:3c:81:61:48:
7c:b0:24:0f:25:2b:2f:39:81:cd:71:9d:40:1f:2e:
46:82:5e:1a:70:18:f3:da:02:76:32:22:fc:5c:f2:
09:89:90:21:46:b6:86:22:ff:be:78:2b:b2:fa:73:
0f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F5:02:F2:94:75:85:BC:20:73:60:74:CC:9E:BB:78:0B:D8:30:A1
X509v3 Authority Key Identifier:
keyid:EA:A4:83:BB:BD:5C:A0:E1:2B:3E:C0:F6:E7:0C:5B:AA:AE:34:55:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qSDu71coOErPsD25wxbqq40VSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:82:84:cd:8e:a5:95:81:82:84:29:09:dd:71:f0:a5:91:a9:
73:6a:05:46:32:ee:dd:63:e8:65:99:b4:a8:b0:40:83:da:d3:
ec:17:15:aa:49:8c:e6:3d:24:e9:0d:ec:49:75:7b:b4:85:df:
ac:ec:67:df:0d:d0:8f:8c:f6:6c:6a:69:68:31:b7:7d:d1:14:
02:5d:0e:4a:8d:35:82:39:49:01:72:a8:50:0c:be:d3:bf:73:
2c:36:9b:67:b5:9c:32:eb:cc:cd:d3:f7:eb:5d:13:52:1a:01:
98:d1:ce:51:ef:fb:8f:07:fd:3a:4c:96:7b:55:6a:31:8b:28:
1f:3e:7c:88:51:b3:91:28:85:fa:10:01:c5:e6:64:72:cd:7d:
95:bd:83:a9:f0:5b:d7:c9:7b:77:e3:0f:af:54:91:05:a0:8f:
ac:0c:de:39:dc:5d:62:8e:35:de:e4:3d:77:59:d6:6d:c5:bf:
28:bc:78:29:d6:f8:95:67:35:e6:2c:c0:80:57:e2:f0:22:a7:
4d:c9:2a:97:b8:b1:fa:06:f3:c7:6d:60:04:4f:92:92:f7:86:
6e:1c:c4:35:fb:7e:bb:0f:8f:e9:de:d0:73:da:0c:5e:b8:f2:
07:af:37:21:ab:5c:47:ad:a6:ef:6a:4d:fe:c2:f1:11:9c:f8:
32:97:1a:42
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
QkFBMjExMC8GA1UEBRMoRUFBNDgzQkJCRDVDQTBFMTJCM0VDMEY2RTcwQzVCQUFB
RTM0NTUyQjAeFw0yNTAzMjkwNzI3MTJaFw0yNTA0MDUwNzI3MTJaMBgxFjAUBgNV
BAMTDTY3ZTdhMGQwLTQ2MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC6KghioKmYkhjnKOYxyQd1ZwkHCfEyYu1pXvMlNlfPiwvbpaDTJ1FWUJOLpS9O
GHg4hI0hiPr4SGEbjJsMwRQpatLPY9dji09/REk+Yqo/RG7TJKc/CyCyaxAGzUR0
eaxtDEzKv2RD6TLahnr8HMd/MahtYtf0hy0tWCD9kBGaxl1CIVFLv4OpCaiwUdXc
J6nTGAhnMr0Ym+cOb0rQCOuEPynY6wNVWCuYxOlOTZLCBNuVY8U7o7y7mrGTrFxe
TBxiprlv7Ne/d9+JUbb/PIFhSHywJA8lKy85gc1xnUAfLkaCXhpwGPPaAnYyIvxc
8gmJkCFGtoYi/754K7L6cw9vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUn/UC8pR1
hbwgc2B0zJ67eAvYMKEwHwYDVR0jBBgwFoAU6qSDu71coOErPsD25wxbqq40VSsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCQUEyLzRERUNEMDgwRkU2
NjExRUY4OTJFNTIxNEM0RjlBRTAyLzZxU0R1NzFjb09FclBzRDI1d3hicXE0MFZT
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNnFTRHU3MWNvT0VyUHNEMjV3eGJxcTQwVlNzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRC
QUEyLzRERUNEMDgwRkU2NjExRUY4OTJFNTIxNEM0RjlBRTAyLzZxU0R1NzFjb09F
clBzRDI1d3hicXE0MFZTcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBACuChM2OpZWBgoQpCd1x8KWRqXNqBUYy7t1j6GWZtKiwQIPa0+wXFapJ
jOY9JOkN7El1e7SF36zsZ98N0I+M9mxqaWgxt33RFAJdDkqNNYI5SQFyqFAMvtO/
cyw2m2e1nDLrzM3T9+tdE1IaAZjRzlHv+48H/TpMlntVajGLKB8+fIhRs5EohfoQ
AcXmZHLNfZW9g6nwW9fJe3fjD69UkQWgj6wM3jncXWKONd7kPXdZ1m3Fvyi8eCnW
+JVnNeYswIBX4vAip03JKpe4sfoG88dtYARPkpL3hm4cxDX7frsPj+ne0HPaDF64
8gevNyGrXEetpu9qTf7C8RGc+DKXGkI=
-----END CERTIFICATE-----
Generated at Mon Apr 7 21:17:12 2025 by rpki-client