Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft
File: GWzuJffRt-pwjOGIczcUM5LORxw.mft (raw, json)
Hash identifier: moV/kcB7SoCV+ntbQOzTcqN/r0KjqS2q1YjGkIz1QRw=
Subject key identifier: 09:8C:EA:0F:F4:11:2C:E5:CE:24:17:43:13:7C:39:69:D7:EB:A7:7E
Authority key identifier: 19:6C:EE:25:F7:D1:B7:EA:70:8C:E1:88:73:37:14:33:92:CE:47:1C
Certificate issuer: /CN=A9154340/serialNumber=196CEE25F7D1B7EA708CE1887337143392CE471C
Certificate serial: 05EF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft
Manifest number: 05EA
Signing time: Fri 28 Mar 2025 23:01:47 +0000
Manifest this update: Fri 28 Mar 2025 23:01:47 +0000
Manifest next update: Fri 04 Apr 2025 23:01:47 +0000
Files and hashes: 1: GWzuJffRt-pwjOGIczcUM5LORxw.crl (hash: PJVnd01eNDAD4C7BUnZG+yrs9Acp134tgc+RAuKMf84=)
2: 8BF559B2A70111EBBAA7C612C4F9AE02.roa (hash: AG/I9mH1UyZkq9/E12LEwMXOooWRDNpPF8GK9+IXR2o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1519 (0x5ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154340
Validity
Not Before: Mar 28 23:01:47 2025 GMT
Not After : Apr 4 23:01:47 2025 GMT
Subject: CN=67e72a5b-8415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e4:b9:7e:42:b4:ac:ab:8e:b5:48:39:82:49:
53:41:42:a3:69:7a:a0:d9:58:82:bd:ed:ef:3f:a2:
77:22:83:b0:51:34:e3:25:82:ff:08:c2:ab:b0:46:
51:7a:1f:cf:16:60:63:a7:90:a2:7d:ce:45:3f:9b:
15:96:b5:f6:13:79:5c:fd:bd:7f:1e:eb:2d:83:e1:
4e:a7:1c:5d:2d:91:4e:e7:b3:42:5c:27:c0:d2:b0:
fc:14:6e:2f:5d:51:0d:e3:2c:ce:5d:ea:5f:97:e2:
ba:b0:fc:79:95:70:6f:ac:ac:0a:79:c4:92:86:aa:
e3:8c:36:5c:70:16:7c:4c:d2:7e:3c:ff:d9:fe:0b:
1f:41:df:2a:77:ab:a9:59:18:e3:d3:75:c1:03:67:
f7:7f:58:43:55:f1:a2:e9:5b:47:2a:6b:5a:91:0f:
d4:e9:4a:e6:40:13:5c:19:8f:9b:75:ea:71:44:4a:
6b:29:c9:5f:80:89:29:4d:ea:af:14:a0:9d:36:bd:
7f:59:6a:b3:46:da:eb:d1:46:73:5a:8b:f9:66:51:
af:ec:15:44:ed:46:4a:9b:ed:59:68:75:47:02:70:
18:cf:c9:6d:7e:9b:6c:db:08:c1:6e:09:4d:55:08:
57:7c:7d:dc:bf:22:56:d3:33:ba:d2:01:c6:51:dd:
70:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8C:EA:0F:F4:11:2C:E5:CE:24:17:43:13:7C:39:69:D7:EB:A7:7E
X509v3 Authority Key Identifier:
keyid:19:6C:EE:25:F7:D1:B7:EA:70:8C:E1:88:73:37:14:33:92:CE:47:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:6a:d0:8c:db:1f:20:e4:0a:c6:01:e7:37:e7:c6:9f:5b:84:
8f:a2:b5:66:5c:fa:42:76:c2:78:b2:80:e9:c3:13:dd:27:12:
fb:cc:38:85:6d:bf:49:b0:73:01:91:e8:3c:30:47:02:87:bf:
f2:13:f9:91:95:3f:b5:b8:90:20:0d:04:4f:95:30:79:dc:94:
be:7a:8d:c0:f9:86:78:da:fa:9e:4c:61:48:2d:f1:30:6f:ac:
73:29:ca:92:a9:97:a1:a2:68:02:3b:b4:b9:3b:4e:42:71:9c:
f0:2d:a3:01:ad:b5:5d:92:5f:14:3c:e6:c1:1e:ba:8a:a5:a8:
f5:e2:7c:20:17:02:4e:06:8e:68:54:85:70:d6:a6:af:87:12:
fd:c5:49:7b:0d:a3:c4:87:9b:da:80:e4:9f:dd:04:a4:4e:89:
8a:f9:34:e8:38:1f:26:39:0a:fe:c2:db:6d:cc:ab:4a:96:40:
43:8e:6e:7f:a1:0b:42:7e:ae:3f:e3:fc:76:68:46:59:03:04:
14:ba:8d:9b:7d:a9:0b:06:e8:ac:87:37:87:a0:9e:ee:2e:c4:
0a:17:fc:46:19:ef:08:46:ee:92:9a:4b:7c:50:1d:36:e0:2a:
ef:db:b3:a6:bc:c3:17:05:58:8e:b0:ce:bc:55:e1:fa:0e:32:
02:7c:ca:ba
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQzNDAxMTAvBgNVBAUTKDE5NkNFRTI1RjdEMUI3RUE3MDhDRTE4ODczMzcxNDMz
OTJDRTQ3MUMwHhcNMjUwMzI4MjMwMTQ3WhcNMjUwNDA0MjMwMTQ3WjAYMRYwFAYD
VQQDEw02N2U3MmE1Yi04NDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxOS5fkK0rKuOtUg5gklTQUKjaXqg2ViCve3vP6J3IoOwUTTjJYL/CMKrsEZR
eh/PFmBjp5Cifc5FP5sVlrX2E3lc/b1/Hustg+FOpxxdLZFO57NCXCfA0rD8FG4v
XVEN4yzOXepfl+K6sPx5lXBvrKwKecSShqrjjDZccBZ8TNJ+PP/Z/gsfQd8qd6up
WRjj03XBA2f3f1hDVfGi6VtHKmtakQ/U6UrmQBNcGY+bdepxREprKclfgIkpTeqv
FKCdNr1/WWqzRtrr0UZzWov5ZlGv7BVE7UZKm+1ZaHVHAnAYz8ltfpts2wjBbglN
VQhXfH3cvyJW0zO60gHGUd1wZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmM6g/0
ESzlziQXQxN8OWnX66d+MB8GA1UdIwQYMBaAFBls7iX30bfqcIzhiHM3FDOSzkcc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDM0MC9GOEU3NjA3Q0E2
NzcxMUVCOEI0QkIxM0VDNEY5QUUwMi9HV3p1SmZmUnQtcHdqT0dJY3pjVU01TE9S
eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0dXenVKZmZSdC1wd2pPR0ljemNVTTVMT1J4dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NDM0MC9GOEU3NjA3Q0E2NzcxMUVCOEI0QkIxM0VDNEY5QUUwMi9HV3p1SmZmUnQt
cHdqT0dJY3pjVU01TE9SeHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDMatCM2x8g5ArGAec358afW4SPorVmXPpCdsJ4soDpwxPdJxL7zDiF
bb9JsHMBkeg8MEcCh7/yE/mRlT+1uJAgDQRPlTB53JS+eo3A+YZ42vqeTGFILfEw
b6xzKcqSqZehomgCO7S5O05CcZzwLaMBrbVdkl8UPObBHrqKpaj14nwgFwJOBo5o
VIVw1qavhxL9xUl7DaPEh5vagOSf3QSkTomK+TToOB8mOQr+wtttzKtKlkBDjm5/
oQtCfq4/4/x2aEZZAwQUuo2bfakLBuishzeHoJ7uLsQKF/xGGe8IRu6Smkt8UB02
4Crv27OmvMMXBViOsM68VeH6DjICfMq6
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:17:47 2025 by rpki-client