Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft
File: 2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft (raw, json)
Hash identifier: amhlvg+CyAduxBVYLewqHn3/IDOzxHMetoDuJeDwGdg=
Subject key identifier: 9E:EF:90:FC:06:F6:CC:4E:B1:B9:D6:C1:02:77:8F:0B:F6:20:C5:63
Authority key identifier: D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3
Certificate issuer: /CN=A914C4ED/serialNumber=D98529148CBA5DDED3B73D6052EE0516C024C4F3
Certificate serial: 01BC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft
Manifest number: 01B8
Signing time: Sat 29 Mar 2025 01:17:16 +0000
Manifest this update: Sat 29 Mar 2025 01:17:16 +0000
Manifest next update: Sat 05 Apr 2025 01:17:16 +0000
Files and hashes: 1: 2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl (hash: 4uiiYalcImW8mG9ra7A6BE33y5h47FVMQoVnsimS4GI=)
2: F060FF0E720D11EDA84BE02EC4F9AE02.roa (hash: GlAc5fAZweTglvbASziU5BwBtzuZgb2Uajdg0QEwpgc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 444 (0x1bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C4ED
Validity
Not Before: Mar 29 01:17:16 2025 GMT
Not After : Apr 5 01:17:16 2025 GMT
Subject: CN=67e74a1c-f6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a0:0c:fa:fc:bc:00:dd:9d:fa:49:52:88:fa:
4e:00:1f:cf:80:ca:b9:34:ba:94:ee:00:40:dc:a4:
d4:fc:1a:bd:f3:83:c9:03:4c:bf:47:01:dd:0a:ff:
49:e5:57:3d:d7:58:7a:f6:95:4f:e0:c7:4f:32:37:
56:09:95:27:7b:85:a5:d0:5f:93:dc:cf:24:33:b7:
fc:ad:8f:cf:2f:43:df:31:8d:8d:7b:fd:a9:4a:ab:
3d:1b:07:6e:74:45:13:86:ee:fd:8c:83:ed:89:f4:
bd:b0:34:34:5d:d5:b6:41:1e:df:c8:c6:b6:0d:9e:
bd:ea:03:0a:ce:2c:50:84:94:fa:73:ea:01:46:77:
07:87:fa:c7:12:64:97:27:04:7c:4f:e0:05:08:78:
d0:62:d6:6b:0b:f1:5d:3c:11:12:9c:66:5e:30:f6:
20:18:78:bb:d0:b3:3e:e9:9b:66:94:0d:d1:4f:b9:
14:c1:ee:37:38:15:bb:df:5a:84:e1:b2:1b:57:7f:
bb:dd:50:e0:d9:d5:bb:7e:46:50:68:77:d3:b7:0c:
74:d6:5f:ae:75:fe:33:09:af:a3:5d:2e:ee:71:0f:
e5:55:c5:e5:e1:2d:c9:a4:98:22:d7:20:a1:ff:ad:
68:d3:f7:96:a9:d1:ac:1f:12:96:fe:82:8f:e6:84:
f4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EF:90:FC:06:F6:CC:4E:B1:B9:D6:C1:02:77:8F:0B:F6:20:C5:63
X509v3 Authority Key Identifier:
keyid:D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:bf:40:4a:f3:16:2b:94:61:f3:57:bd:65:78:77:b1:71:ee:
63:0f:55:d6:40:fb:7e:c6:ea:c8:0f:1f:43:f3:fa:ad:27:12:
39:0c:b9:b1:8c:06:74:36:18:55:a9:c1:6c:03:3f:f0:ee:75:
50:2a:26:29:8a:95:89:38:63:0e:80:58:5a:47:84:ea:8d:1d:
fe:f0:3a:60:4c:53:28:1c:0b:cd:32:c7:18:08:fc:b0:db:12:
56:61:36:0e:7c:64:08:7d:10:bb:03:3b:02:f2:4e:ae:37:d7:
88:5f:6e:ce:27:dd:84:66:ff:a2:c8:47:44:47:d6:f8:7f:8e:
04:67:00:2f:58:ed:e5:64:46:52:48:f4:13:60:f0:42:b1:27:
06:20:6a:6f:b2:86:22:a6:41:26:83:9e:07:32:ea:cf:6e:bb:
39:9d:48:43:af:0e:f4:13:f9:3b:b9:e9:18:41:b5:5b:cc:ec:
fa:af:78:00:1f:96:df:03:75:c2:0d:ef:85:06:2b:13:f9:a9:
5d:f8:57:14:94:2f:39:0d:60:01:4d:2c:0f:db:02:b1:a6:b7:
a5:22:06:2e:01:d9:bd:af:09:0c:17:ba:64:98:33:94:35:e1:
bf:6a:95:22:1d:da:74:ab:9e:96:1f:94:29:64:80:68:ed:13:
8c:f9:57:0e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEM0RUQxMTAvBgNVBAUTKEQ5ODUyOTE0OENCQTVEREVEM0I3M0Q2MDUyRUUwNTE2
QzAyNEM0RjMwHhcNMjUwMzI5MDExNzE2WhcNMjUwNDA1MDExNzE2WjAYMRYwFAYD
VQQDEw02N2U3NGExYy1mNmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuqAM+vy8AN2d+klSiPpOAB/PgMq5NLqU7gBA3KTU/Bq984PJA0y/RwHdCv9J
5Vc911h69pVP4MdPMjdWCZUne4Wl0F+T3M8kM7f8rY/PL0PfMY2Ne/2pSqs9Gwdu
dEUThu79jIPtifS9sDQ0XdW2QR7fyMa2DZ696gMKzixQhJT6c+oBRncHh/rHEmSX
JwR8T+AFCHjQYtZrC/FdPBESnGZeMPYgGHi70LM+6ZtmlA3RT7kUwe43OBW731qE
4bIbV3+73VDg2dW7fkZQaHfTtwx01l+udf4zCa+jXS7ucQ/lVcXl4S3JpJgi1yCh
/61o0/eWqdGsHxKW/oKP5oT0AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7vkPwG
9sxOsbnWwQJ3jwv2IMVjMB8GA1UdIwQYMBaAFNmFKRSMul3e07c9YFLuBRbAJMTz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRFRC83NTk4NDQ0NDcy
MEQxMUVEQjU0NUUwMzBDNEY5QUUwMi8yWVVwRkl5NlhkN1R0ejFnVXU0RkZzQWt4
UE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzJZVXBGSXk2WGQ3VHR6MWdVdTRGRnNBa3hQTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QzRFRC83NTk4NDQ0NDcyMEQxMUVEQjU0NUUwMzBDNEY5QUUwMi8yWVVwRkl5Nlhk
N1R0ejFnVXU0RkZzQWt4UE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAEv0BK8xYrlGHzV71leHexce5jD1XWQPt+xurIDx9D8/qtJxI5DLmx
jAZ0NhhVqcFsAz/w7nVQKiYpipWJOGMOgFhaR4TqjR3+8DpgTFMoHAvNMscYCPyw
2xJWYTYOfGQIfRC7AzsC8k6uN9eIX27OJ92EZv+iyEdER9b4f44EZwAvWO3lZEZS
SPQTYPBCsScGIGpvsoYipkEmg54HMurPbrs5nUhDrw70E/k7uekYQbVbzOz6r3gA
H5bfA3XCDe+FBisT+ald+FcUlC85DWABTSwP2wKxprelIgYuAdm9rwkMF7pkmDOU
NeG/apUiHdp0q56WH5QpZIBo7ROM+VcO
-----END CERTIFICATE-----
Generated at Tue Apr 8 19:18:34 2025 by rpki-client