Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft
File: o3Aww1ljBAWOL5lPP9FHGjooPrM.mft (raw, json)
Hash identifier: l02cg+1bqDfglDA6nXubxGf6hjbrQPpI1BqIoSYN7T0=
Subject key identifier: CE:EE:DE:CE:46:00:C8:DA:ED:98:57:B1:56:67:6C:10:8B:F8:D0:32
Authority key identifier: A3:70:30:C3:59:63:04:05:8E:2F:99:4F:3F:D1:47:1A:3A:28:3E:B3
Certificate issuer: /CN=A9163695/serialNumber=A37030C3596304058E2F994F3FD1471A3A283EB3
Certificate serial: 0172
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft
Manifest number: 016F
Signing time: Sat 29 Mar 2025 03:20:45 +0000
Manifest this update: Sat 29 Mar 2025 03:20:44 +0000
Manifest next update: Sat 05 Apr 2025 03:20:44 +0000
Files and hashes: 1: o3Aww1ljBAWOL5lPP9FHGjooPrM.crl (hash: 1r1XQ4bHiDx80jm9v1+YLlD/PvE9k7Utsv+EXqQSqWw=)
2: A8006A74DA9511ED8DC28C24C4F9AE02.roa (hash: XonPHnI9n9dqc1tom7Es5BpnOeOt7wPnQuvQZ6j9Tf8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 370 (0x172)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163695
Validity
Not Before: Mar 29 03:20:44 2025 GMT
Not After : Apr 5 03:20:44 2025 GMT
Subject: CN=67e7670c-9f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:25:c1:9c:71:e7:98:72:0f:25:be:c6:a5:56:
e4:bf:b3:73:7c:03:fa:bc:69:7f:12:b8:a2:5c:b8:
03:39:cf:b9:29:6a:c8:ae:4a:6c:79:93:ea:74:d0:
da:2b:45:d2:1d:51:92:c8:6d:c5:49:67:f0:05:99:
5f:c4:ca:e1:a1:cc:1d:4d:f2:ab:e4:de:3e:1f:02:
52:4b:0d:c0:87:76:26:16:d7:ab:89:f6:48:38:99:
78:76:da:38:5a:6c:e0:a1:a3:7c:82:a3:de:c8:60:
1b:9e:d9:89:a0:a8:23:5c:95:eb:d4:ca:6a:32:35:
a6:75:f7:fe:0b:15:83:15:0c:66:8c:38:92:22:24:
b8:b4:6b:d9:33:10:27:91:72:2b:74:c8:62:77:c3:
91:e8:25:ca:ab:0d:1d:a7:79:43:1b:cd:c5:26:9d:
e2:5b:61:e0:b2:bd:16:34:c7:35:ea:3a:e4:e5:a2:
5c:97:10:9a:e2:09:5c:b6:22:36:ce:bd:c6:6b:81:
51:bd:e2:ca:63:81:80:44:24:ae:66:c2:64:80:e1:
f8:49:cf:86:39:7e:e7:f8:86:e0:ef:a2:16:87:a5:
dc:52:0b:4d:47:0a:a5:c2:bc:39:c2:fd:8a:d5:45:
16:d3:82:c6:1f:b4:3f:e2:02:3c:70:83:21:76:0d:
d5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EE:DE:CE:46:00:C8:DA:ED:98:57:B1:56:67:6C:10:8B:F8:D0:32
X509v3 Authority Key Identifier:
keyid:A3:70:30:C3:59:63:04:05:8E:2F:99:4F:3F:D1:47:1A:3A:28:3E:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e8:a2:32:a5:d4:b7:42:bd:87:a4:47:53:66:c7:f8:96:fc:
c5:73:49:43:87:75:ac:5a:a0:0d:43:fa:ba:cb:2d:08:6b:05:
93:15:5a:b5:f9:83:7d:38:fd:85:fa:c1:a0:dd:0d:c2:fb:10:
36:83:16:78:bf:ed:b7:35:3b:1c:a8:d5:06:4b:5d:92:ff:22:
2f:e9:d2:e8:8b:29:e3:d1:03:1f:81:06:45:4a:91:16:25:f8:
9f:9c:2b:2e:e5:5d:8f:72:c0:1b:02:8d:9e:eb:82:4d:56:5f:
e2:57:5f:e3:05:4e:2a:47:06:7a:65:61:59:1b:99:c9:8c:53:
da:ed:01:40:f8:e7:d9:72:16:b9:76:37:91:67:a1:79:86:e8:
d7:d0:1e:64:f6:ad:1a:4a:65:19:c0:ed:01:ef:c7:61:25:65:
c1:27:1d:90:bc:7a:b8:a4:fa:33:96:87:0d:63:1f:2a:1f:28:
9e:ae:d9:0a:39:7c:4a:31:e0:28:b9:b1:45:4e:e5:89:6e:8d:
12:f7:ed:08:12:7a:8f:1c:75:e1:ad:2c:80:cd:9f:49:b4:67:
39:a6:2a:6a:73:ef:c9:c6:fb:3d:16:d0:e6:33:67:cd:93:9a:
dc:62:ef:03:ce:ab:93:80:d2:38:28:58:ab:79:5b:e3:d7:d6:
59:00:c6:4b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjM2OTUxMTAvBgNVBAUTKEEzNzAzMEMzNTk2MzA0MDU4RTJGOTk0RjNGRDE0NzFB
M0EyODNFQjMwHhcNMjUwMzI5MDMyMDQ0WhcNMjUwNDA1MDMyMDQ0WjAYMRYwFAYD
VQQDEw02N2U3NjcwYy05ZjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtSXBnHHnmHIPJb7GpVbkv7NzfAP6vGl/EriiXLgDOc+5KWrIrkpseZPqdNDa
K0XSHVGSyG3FSWfwBZlfxMrhocwdTfKr5N4+HwJSSw3Ah3YmFterifZIOJl4dto4
WmzgoaN8gqPeyGAbntmJoKgjXJXr1MpqMjWmdff+CxWDFQxmjDiSIiS4tGvZMxAn
kXIrdMhid8OR6CXKqw0dp3lDG83FJp3iW2Hgsr0WNMc16jrk5aJclxCa4glctiI2
zr3Ga4FRveLKY4GARCSuZsJkgOH4Sc+GOX7n+Ibg76IWh6XcUgtNRwqlwrw5wv2K
1UUW04LGH7Q/4gI8cIMhdg3VzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7u3s5G
AMja7ZhXsVZnbBCL+NAyMB8GA1UdIwQYMBaAFKNwMMNZYwQFji+ZTz/RRxo6KD6z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzY5NS84NzNBNjgwMERB
OEUxMUVEQkFDRkNBMjRDNEY5QUUwMi9vM0F3dzFsakJBV09MNWxQUDlGSEdqb29Q
ck0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL28zQXd3MWxqQkFXT0w1bFBQOUZIR2pvb1ByTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MzY5NS84NzNBNjgwMERBOEUxMUVEQkFDRkNBMjRDNEY5QUUwMi9vM0F3dzFsakJB
V09MNWxQUDlGSEdqb29Qck0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCz6KIypdS3Qr2HpEdTZsf4lvzFc0lDh3WsWqANQ/q6yy0IawWTFVq1
+YN9OP2F+sGg3Q3C+xA2gxZ4v+23NTscqNUGS12S/yIv6dLoiynj0QMfgQZFSpEW
JfifnCsu5V2PcsAbAo2e64JNVl/iV1/jBU4qRwZ6ZWFZG5nJjFPa7QFA+OfZcha5
djeRZ6F5hujX0B5k9q0aSmUZwO0B78dhJWXBJx2QvHq4pPozlocNYx8qHyiertkK
OXxKMeAoubFFTuWJbo0S9+0IEnqPHHXhrSyAzZ9JtGc5pipqc+/Jxvs9FtDmM2fN
k5rcYu8DzquTgNI4KFireVvj19ZZAMZL
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:23:11 2025 by rpki-client