Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft
File: EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft (raw, json)
Hash identifier: 3+MlfVGiSqIhgaC88nuYz+YpaL6KktbzeXJWpAT1AGc=
Subject key identifier: 54:DA:15:BB:71:AF:6F:B5:6A:0E:13:1B:6A:86:DF:C5:9C:ED:6F:85
Authority key identifier: 10:0D:9A:EE:91:D2:27:FE:47:59:34:F2:97:8C:36:17:D8:CF:A8:EE
Certificate issuer: /CN=A9160C9E/serialNumber=100D9AEE91D227FE475934F2978C3617D8CFA8EE
Certificate serial: 66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft
Manifest number: 62
Signing time: Sat 29 Mar 2025 06:30:07 +0000
Manifest this update: Sat 29 Mar 2025 06:30:07 +0000
Manifest next update: Sat 05 Apr 2025 06:30:07 +0000
Files and hashes: 1: EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl (hash: QA5pXnh3C19sKjR6tdIg+RI75h1ZjfWm+Eg4P/2a2rM=)
2: 44B65A3890FF11EFA6BECB58C4F9AE02.roa (hash: GUv+bR0jB5xe+4YguFwkCK8B685+o0kSH52XBLyO1zw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160C9E
Validity
Not Before: Mar 29 06:30:07 2025 GMT
Not After : Apr 5 06:30:07 2025 GMT
Subject: CN=67e7936f-f332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:02:31:97:43:5f:5e:58:11:9e:ac:81:2c:6a:
8d:62:e2:1f:5f:69:42:10:ea:cf:b1:df:2a:5f:d7:
9d:82:84:11:a5:8c:43:73:73:10:04:76:06:cc:5a:
ce:91:ae:ff:c1:92:76:61:8b:5d:ae:db:bd:69:4f:
be:2b:b8:7d:60:8a:8e:f2:4d:f9:3b:b5:bf:4c:be:
ea:9a:b1:f2:fb:46:4c:b0:ff:3c:0c:46:c0:2d:0e:
fe:c3:eb:b0:6e:66:e2:b8:23:07:ef:23:a7:9c:23:
b8:4f:58:20:ce:ab:f8:03:6b:70:af:4c:25:fb:04:
0f:38:a3:38:ac:e7:7e:44:e1:09:b2:82:63:04:b1:
a3:f5:15:02:b4:22:d6:f2:2c:d5:24:1b:f4:97:d9:
7d:3b:ef:9e:b6:3e:75:33:c4:20:ed:b0:15:05:1f:
fa:1a:52:fb:bf:7d:f9:b9:a3:6d:c5:08:c0:f8:08:
62:c6:43:57:c9:bc:d9:e0:b5:c6:c8:30:a1:52:d7:
80:c1:6e:d8:be:c9:da:09:9a:c2:2a:18:23:71:62:
a7:7c:76:36:ae:7c:f5:cd:c7:0e:c1:88:20:64:ee:
98:73:88:ab:ab:9c:53:4a:22:80:08:a2:f6:ae:a8:
28:b4:58:d5:f2:d2:5e:36:3f:2a:04:35:0b:5c:d0:
dc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DA:15:BB:71:AF:6F:B5:6A:0E:13:1B:6A:86:DF:C5:9C:ED:6F:85
X509v3 Authority Key Identifier:
keyid:10:0D:9A:EE:91:D2:27:FE:47:59:34:F2:97:8C:36:17:D8:CF:A8:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:54:d5:51:d3:e8:88:e0:30:42:05:49:b0:a2:06:4f:03:f5:
21:bf:03:98:f4:27:9b:00:c3:bf:88:04:f8:7c:e2:cc:61:c3:
2d:d1:d5:62:3e:a2:08:43:52:54:20:1e:d9:46:17:92:f6:6c:
28:46:5e:2c:d2:33:af:53:a8:a9:f5:f7:27:44:e2:75:49:29:
36:d3:2d:d2:90:b7:99:77:5d:48:32:bf:71:fd:a0:46:75:8f:
48:75:db:ac:3f:6b:56:e5:b3:d0:56:5b:65:22:b0:60:03:1d:
ce:14:d1:09:69:5c:72:69:94:e5:48:f5:f2:29:ec:14:a3:96:
39:e2:52:98:60:f4:1a:93:f5:5a:12:5f:be:30:d8:c5:08:4f:
f0:a3:f9:d6:99:66:79:d9:31:d0:20:ae:ac:ed:f9:62:12:27:
c6:4c:0f:77:bd:f4:18:fe:8f:a0:eb:be:3c:24:49:59:02:4d:
35:a4:25:fa:2a:b8:58:dd:07:22:d0:54:f6:f8:41:87:64:40:
9f:e7:bf:07:60:e3:0e:0e:59:15:07:df:4d:1a:11:c4:8c:bf:
86:a1:84:73:7b:bd:3e:05:c8:d0:19:10:76:bb:79:5c:f7:65:
d0:24:74:f0:63:3a:ee:b1:65:f7:a4:85:8b:7d:2a:46:c6:af:
ac:0a:c6:d5
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
MEM5RTExMC8GA1UEBRMoMTAwRDlBRUU5MUQyMjdGRTQ3NTkzNEYyOTc4QzM2MTdE
OENGQThFRTAeFw0yNTAzMjkwNjMwMDdaFw0yNTA0MDUwNjMwMDdaMBgxFjAUBgNV
BAMTDTY3ZTc5MzZmLWYzMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDeAjGXQ19eWBGerIEsao1i4h9faUIQ6s+x3ypf152ChBGljENzcxAEdgbMWs6R
rv/BknZhi12u271pT74ruH1gio7yTfk7tb9MvuqasfL7Rkyw/zwMRsAtDv7D67Bu
ZuK4IwfvI6ecI7hPWCDOq/gDa3CvTCX7BA84ozis535E4QmygmMEsaP1FQK0Itby
LNUkG/SX2X077562PnUzxCDtsBUFH/oaUvu/ffm5o23FCMD4CGLGQ1fJvNngtcbI
MKFS14DBbti+ydoJmsIqGCNxYqd8djaufPXNxw7BiCBk7phziKurnFNKIoAIovau
qCi0WNXy0l42PyoENQtc0NwbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVNoVu3Gv
b7VqDhMbaobfxZztb4UwHwYDVR0jBBgwFoAUEA2a7pHSJ/5HWTTyl4w2F9jPqO4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwQzlFLzU3RkY0QkNBOEJD
QTExRUZBQkZDMUEzOUM0RjlBRTAyL0VBMmE3cEhTSl81SFdUVHlsNHcyRjlqUHFP
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRUEyYTdwSFNKXzVIV1RUeWw0dzJGOWpQcU80LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw
QzlFLzU3RkY0QkNBOEJDQTExRUZBQkZDMUEzOUM0RjlBRTAyL0VBMmE3cEhTSl81
SFdUVHlsNHcyRjlqUHFPNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAKFU1VHT6IjgMEIFSbCiBk8D9SG/A5j0J5sAw7+IBPh84sxhwy3R1WI+
oghDUlQgHtlGF5L2bChGXizSM69TqKn19ydE4nVJKTbTLdKQt5l3XUgyv3H9oEZ1
j0h126w/a1bls9BWW2UisGADHc4U0QlpXHJplOVI9fIp7BSjljniUphg9BqT9VoS
X74w2MUIT/Cj+daZZnnZMdAgrqzt+WISJ8ZMD3e99Bj+j6DrvjwkSVkCTTWkJfoq
uFjdByLQVPb4QYdkQJ/nvwdg4w4OWRUH300aEcSMv4ahhHN7vT4FyNAZEHa7eVz3
ZdAkdPBjOu6xZfekhYt9KkbGr6wKxtU=
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:26:04 2025 by rpki-client