Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.mft
File: P3MTY_5HQEYaWciPp2e9ijbsDfY.mft (raw, json)
Hash identifier: cVi1H17XOKKCAHzu2uaLOVs5Roz6z8x54qN8WL670i4=
Subject key identifier: A4:B4:74:E0:8B:9B:D9:95:24:41:47:FE:4A:9E:5A:9A:82:0A:09:A2
Authority key identifier: 3F:73:13:63:FE:47:40:46:1A:59:C8:8F:A7:67:BD:8A:36:EC:0D:F6
Certificate issuer: /CN=A915FD1D/serialNumber=3F731363FE4740461A59C88FA767BD8A36EC0DF6
Certificate serial: 06F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.mft
Manifest number: 06EF
Signing time: Fri 28 Mar 2025 22:17:16 +0000
Manifest this update: Fri 28 Mar 2025 22:17:16 +0000
Manifest next update: Fri 04 Apr 2025 22:17:16 +0000
Files and hashes: 1: P3MTY_5HQEYaWciPp2e9ijbsDfY.crl (hash: AozhA0p+oxSum9Jq8uiKSWHA/CPponPGJy5QHidWI8M=)
2: 7D3B257298C411EC97E3503CC4F9AE02.roa (hash: 6grT2T2iSHeWzKw66g5XN9FJCWiwh1LX3u2dZ5E6lG0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1784 (0x6f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FD1D
Validity
Not Before: Mar 28 22:17:16 2025 GMT
Not After : Apr 4 22:17:16 2025 GMT
Subject: CN=67e71fec-37ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:61:11:55:39:24:18:30:f4:60:18:a5:80:43:
15:10:fe:1f:10:15:57:62:fa:5a:3b:fc:e5:88:67:
dc:0f:fb:11:e3:2f:e2:38:04:8b:6a:d0:a2:95:b1:
dc:d0:de:60:fc:c8:a5:aa:85:5c:c9:c1:2c:fc:99:
e4:ae:f6:ae:0d:f7:c9:63:31:d3:5d:00:15:f4:61:
ed:63:12:70:2c:24:dc:a1:25:d1:c0:d7:f0:8b:45:
82:5d:96:f6:20:42:27:c6:b6:b6:32:46:96:37:e8:
19:f2:71:82:33:02:6e:4f:c9:57:18:3b:37:e5:55:
29:3b:98:5a:54:21:62:ec:f7:31:07:3b:68:f6:e0:
ec:56:ae:a6:1c:6c:23:e8:b2:db:fc:a8:d8:80:d7:
5b:13:74:ab:3e:a6:55:07:0a:c4:2a:95:89:90:0b:
6d:31:35:69:90:44:58:4e:30:10:08:bd:da:45:09:
b3:7f:c3:15:b0:30:37:30:51:7b:ee:14:b2:f0:80:
88:f9:3d:ea:a4:62:80:58:b3:27:76:c9:3d:2a:4f:
e7:cc:4a:7f:68:12:e8:4c:af:5e:b5:b0:78:0a:c0:
6f:47:eb:6f:80:20:e6:8a:6a:56:28:12:1c:49:15:
90:57:c5:b0:05:47:64:9e:e3:60:14:f7:2a:56:fd:
f9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B4:74:E0:8B:9B:D9:95:24:41:47:FE:4A:9E:5A:9A:82:0A:09:A2
X509v3 Authority Key Identifier:
keyid:3F:73:13:63:FE:47:40:46:1A:59:C8:8F:A7:67:BD:8A:36:EC:0D:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:99:d6:4f:ae:51:55:c6:1d:2a:43:b0:6d:d0:94:27:e0:9e:
c1:70:c9:02:b4:db:08:0a:c2:de:64:2b:04:6b:b6:9d:36:3f:
8c:2f:1f:20:ba:15:72:c5:1c:8c:0e:5e:97:64:52:3e:af:84:
ba:5a:0c:fd:57:82:f5:9e:6e:0e:c9:9b:32:d9:f9:7a:63:ce:
9a:fe:53:48:60:5c:a8:90:b0:b4:5c:5a:d6:7c:62:7f:c1:ca:
99:7b:12:20:03:93:2e:fa:88:10:a1:85:f1:7b:a1:36:8b:76:
e3:c2:cf:2d:55:2d:b0:0c:db:44:76:76:74:cf:6e:8f:45:82:
f7:87:14:62:e5:b6:7f:19:06:f0:fb:77:1a:51:59:60:e8:01:
3a:33:63:5c:88:5b:c9:13:9e:21:4f:ca:1e:75:03:3c:b3:64:
cf:90:ec:b4:bd:00:9c:58:e9:1b:ae:48:c5:8b:0e:90:30:33:
bb:ab:b0:ff:69:75:d6:f4:2c:b4:9d:36:9a:0c:f1:08:d8:25:
ac:56:0a:c6:7d:eb:ad:67:eb:48:c4:f5:07:32:32:1d:57:57:
68:e8:5f:44:eb:43:d4:b1:9d:a1:f8:1e:1f:b7:25:74:7d:3b:
49:e6:49:f3:b3:f8:05:03:b7:c5:6e:35:5b:63:35:b4:c6:21:
8f:f4:2c:cf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUZEMUQxMTAvBgNVBAUTKDNGNzMxMzYzRkU0NzQwNDYxQTU5Qzg4RkE3NjdCRDhB
MzZFQzBERjYwHhcNMjUwMzI4MjIxNzE2WhcNMjUwNDA0MjIxNzE2WjAYMRYwFAYD
VQQDEw02N2U3MWZlYy0zN2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4mERVTkkGDD0YBilgEMVEP4fEBVXYvpaO/zliGfcD/sR4y/iOASLatCilbHc
0N5g/MilqoVcycEs/JnkrvauDffJYzHTXQAV9GHtYxJwLCTcoSXRwNfwi0WCXZb2
IEInxra2MkaWN+gZ8nGCMwJuT8lXGDs35VUpO5haVCFi7PcxBzto9uDsVq6mHGwj
6LLb/KjYgNdbE3SrPqZVBwrEKpWJkAttMTVpkERYTjAQCL3aRQmzf8MVsDA3MFF7
7hSy8ICI+T3qpGKAWLMndsk9Kk/nzEp/aBLoTK9etbB4CsBvR+tvgCDmimpWKBIc
SRWQV8WwBUdknuNgFPcqVv35EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKS0dOCL
m9mVJEFH/kqeWpqCCgmiMB8GA1UdIwQYMBaAFD9zE2P+R0BGGlnIj6dnvYo27A32
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkQxRC84QURFMzNGQzQx
MkUxMUVCOUE5NzRDMTZDNEY5QUUwMi9QM01UWV81SFFFWWFXY2lQcDJlOWlqYnNE
ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1AzTVRZXzVIUUVZYVdjaVBwMmU5aWpic0RmWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RkQxRC84QURFMzNGQzQxMkUxMUVCOUE5NzRDMTZDNEY5QUUwMi9QM01UWV81SFFF
WWFXY2lQcDJlOWlqYnNEZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAAmdZPrlFVxh0qQ7Bt0JQn4J7BcMkCtNsICsLeZCsEa7adNj+MLx8g
uhVyxRyMDl6XZFI+r4S6Wgz9V4L1nm4OyZsy2fl6Y86a/lNIYFyokLC0XFrWfGJ/
wcqZexIgA5Mu+ogQoYXxe6E2i3bjws8tVS2wDNtEdnZ0z26PRYL3hxRi5bZ/GQbw
+3caUVlg6AE6M2NciFvJE54hT8oedQM8s2TPkOy0vQCcWOkbrkjFiw6QMDO7q7D/
aXXW9Cy0nTaaDPEI2CWsVgrGfeutZ+tIxPUHMjIdV1do6F9E60PUsZ2h+B4ftyV0
fTtJ5knzs/gFA7fFbjVbYzW0xiGP9CzP
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:26:22 2025 by rpki-client