Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft
File: qWaisn_hSTe-NtJ9tfTXaICEfdc.mft (raw, json)
Hash identifier: Hw/p3hTrN6vaIL+rhXgapYpwN65S82TeWXw+IEsHvh0=
Subject key identifier: EA:B1:C9:AD:50:FA:E5:E8:F9:33:38:4D:2F:7A:A3:7A:FC:24:79:D6
Authority key identifier: A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7
Certificate issuer: /CN=A91536E1/serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7
Certificate serial: 076D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft
Manifest number: 0767
Signing time: Fri 28 Mar 2025 21:45:49 +0000
Manifest this update: Fri 28 Mar 2025 21:45:49 +0000
Manifest next update: Fri 04 Apr 2025 21:45:49 +0000
Files and hashes: 1: qWaisn_hSTe-NtJ9tfTXaICEfdc.crl (hash: Vv06f3eVwHL2BhkbWp+pCQ43H75qs+ikOYXuysPmdi8=)
2: 41C97D600EA811EB8E9A770CC4F9AE02.roa (hash: o8ES5sVXjZZWJ8HjjyGv8mKYMdzoHknglpOG5+B569s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1901 (0x76d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91536E1
Validity
Not Before: Mar 28 21:45:49 2025 GMT
Not After : Apr 4 21:45:49 2025 GMT
Subject: CN=67e7188d-b0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:42:4f:c9:06:1e:09:52:bd:81:99:5f:72:b3:
c3:42:11:3c:b4:35:56:c0:db:e7:2c:9c:a0:01:fb:
0c:1e:48:21:44:b1:08:1c:52:7b:f1:f8:21:77:32:
0a:61:d4:d0:36:f6:c7:2c:3a:e9:42:9b:6c:bc:ee:
29:a4:21:c9:a5:37:ab:de:f1:84:07:ee:b9:d0:89:
49:f3:97:e5:dd:99:02:9e:7d:4e:38:f5:34:50:02:
f7:d8:27:00:59:ba:ee:8b:de:0e:9a:74:ed:ab:c6:
cb:3e:ac:f9:f7:e2:39:8a:66:66:91:5d:8f:d3:2f:
4c:49:96:36:e2:df:1e:d6:3e:6b:1c:f9:1c:57:10:
b7:45:0b:23:f2:48:79:25:66:58:bb:e0:1d:17:5d:
a6:9c:b0:44:de:d9:ff:6f:7e:e9:76:a2:a5:ed:33:
64:30:a0:8f:d5:65:05:12:ee:92:32:4c:b4:57:30:
4b:5b:5a:75:e0:4c:2b:99:85:a2:b0:1b:c7:c4:aa:
b5:79:b5:41:75:f7:ab:0d:e4:ad:ae:42:ff:f4:b0:
54:03:09:0c:35:49:56:03:8c:67:a8:0b:91:0c:6a:
1a:00:5f:b7:62:6f:7f:93:ad:f3:76:76:8a:80:e4:
c1:d2:95:54:6d:ad:3a:09:72:18:07:18:26:77:fe:
6c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B1:C9:AD:50:FA:E5:E8:F9:33:38:4D:2F:7A:A3:7A:FC:24:79:D6
X509v3 Authority Key Identifier:
keyid:A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:e2:af:d5:85:65:3a:dd:35:5b:48:d1:ca:99:10:67:c9:76:
1a:8d:f3:e1:24:22:bc:93:ee:69:a6:4b:3a:e5:f9:8f:d2:58:
28:cf:9f:f3:38:fc:b3:86:67:67:ab:69:aa:ff:79:e1:53:00:
f3:d2:e1:ea:15:3f:cf:35:af:e2:35:74:a4:e0:cf:2a:a3:00:
18:87:03:d4:27:f1:88:ea:94:85:f7:3f:73:38:eb:bc:50:f7:
84:e4:51:8a:8f:57:d1:2e:fd:6d:4c:bf:9b:50:12:1e:32:16:
49:b0:70:89:10:2d:59:9c:0b:97:93:08:30:6f:3e:36:34:bc:
df:0c:be:c7:9e:4c:9d:9a:65:68:4c:b6:32:99:ec:eb:a1:5a:
dc:43:15:dd:f0:53:67:0c:87:f8:f7:81:d4:48:65:fa:8b:63:
1c:c4:cc:60:f4:65:f6:6a:ef:27:40:27:3c:c9:46:5d:fe:ac:
0c:b8:75:a4:06:75:05:99:fd:9d:cd:4f:0b:2d:17:73:a5:62:
ee:12:0d:85:68:36:f4:6f:5e:46:30:bf:6a:47:0d:22:3b:31:
70:cd:66:50:db:df:26:13:18:d4:96:3e:ed:e6:44:ce:8d:11:
9c:d8:c5:54:0c:ab:02:a5:ac:ff:28:12:ec:fb:d6:0e:7a:85:
31:2c:e7:48
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM2RTExMTAvBgNVBAUTKEE5NjZBMkIyN0ZFMTQ5MzdCRTM2RDI3REI1RjRENzY4
ODA4NDdERDcwHhcNMjUwMzI4MjE0NTQ5WhcNMjUwNDA0MjE0NTQ5WjAYMRYwFAYD
VQQDEw02N2U3MTg4ZC1iMGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu0JPyQYeCVK9gZlfcrPDQhE8tDVWwNvnLJygAfsMHkghRLEIHFJ78fghdzIK
YdTQNvbHLDrpQptsvO4ppCHJpTer3vGEB+650IlJ85fl3ZkCnn1OOPU0UAL32CcA
Wbrui94OmnTtq8bLPqz59+I5imZmkV2P0y9MSZY24t8e1j5rHPkcVxC3RQsj8kh5
JWZYu+AdF12mnLBE3tn/b37pdqKl7TNkMKCP1WUFEu6SMky0VzBLW1p14EwrmYWi
sBvHxKq1ebVBdferDeStrkL/9LBUAwkMNUlWA4xnqAuRDGoaAF+3Ym9/k63zdnaK
gOTB0pVUba06CXIYBxgmd/5sdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOqxya1Q
+uXo+TM4TS96o3r8JHnWMB8GA1UdIwQYMBaAFKlmorJ/4Uk3vjbSfbX012iAhH3X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzZFMS85ODlGM0EwQTBF
QTYxMUVCQjI2NzI3ODZDNEY5QUUwMi9xV2Fpc25faFNUZS1OdEo5dGZUWGFJQ0Vm
ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FXYWlzbl9oU1RlLU50Sjl0ZlRYYUlDRWZkYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MzZFMS85ODlGM0EwQTBFQTYxMUVCQjI2NzI3ODZDNEY5QUUwMi9xV2Fpc25faFNU
ZS1OdEo5dGZUWGFJQ0VmZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDC4q/VhWU63TVbSNHKmRBnyXYajfPhJCK8k+5ppks65fmP0lgoz5/z
OPyzhmdnq2mq/3nhUwDz0uHqFT/PNa/iNXSk4M8qowAYhwPUJ/GI6pSF9z9zOOu8
UPeE5FGKj1fRLv1tTL+bUBIeMhZJsHCJEC1ZnAuXkwgwbz42NLzfDL7HnkydmmVo
TLYymezroVrcQxXd8FNnDIf494HUSGX6i2McxMxg9GX2au8nQCc8yUZd/qwMuHWk
BnUFmf2dzU8LLRdzpWLuEg2FaDb0b15GML9qRw0iOzFwzWZQ298mExjUlj7t5kTO
jRGc2MVUDKsCpaz/KBLs+9YOeoUxLOdI
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:41:31 2025 by rpki-client