Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
File: dCWq4W3bRko-K0ecekDJkCODa6A.mft (raw, json)
Hash identifier: TdasfoE7OKLd8XE6FbaYvRD575mxCozqVExu3vZVbMQ=
Subject key identifier: CB:A3:B0:C7:B0:9A:5F:17:F9:69:C8:95:5A:2D:5B:F1:ED:57:26:18
Authority key identifier: 74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0
Certificate issuer: /CN=A9163998/serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0
Certificate serial: 0294
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
Manifest number: 0281
Signing time: Sat 29 Mar 2025 01:58:54 +0000
Manifest this update: Sat 29 Mar 2025 01:58:53 +0000
Manifest next update: Sat 05 Apr 2025 01:58:53 +0000
Files and hashes: 1: dCWq4W3bRko-K0ecekDJkCODa6A.crl (hash: EjpBaln/aOKk3QaYdrTJfe8o//BpnQXozKxu8dITEGg=)
2: 9BA94A4A0D8911ED999D4F3BC4F9AE02.roa (hash: 3ruifajEVogMGDVqmBhX4TyUtEK7KOQSDN0iwkW6PFQ=)
3: A3C1A64E020811EF900CC60CC4F9AE02.roa (hash: a5M8jT5qH+Rv8PZuWCtzl1JNud/MgUW6Ycrm/NIQszY=)
4: 1EA5984A0BE111ED9E3AA135C4F9AE02.roa (hash: VJmNEduqkZiEGi1xGAFyFFiL246WcTWspaksMGhusvM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660 (0x294)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163998
Validity
Not Before: Mar 29 01:58:53 2025 GMT
Not After : Apr 5 01:58:53 2025 GMT
Subject: CN=67e753de-5c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:55:65:55:54:9c:64:06:20:ef:01:85:6a:ec:
60:a9:62:24:b7:73:58:4e:a1:14:06:e1:91:63:50:
ad:47:1f:3d:35:94:a7:db:92:bf:73:ca:f2:79:97:
c2:45:8e:e3:e5:a1:e9:19:21:79:97:6f:e7:81:ce:
ba:52:b1:16:73:66:d8:5b:a4:90:91:51:8b:58:c2:
f6:0b:f0:e7:86:1d:a3:bc:d0:43:b3:21:f5:5c:79:
71:50:50:d9:f3:7e:5f:9e:1d:98:ac:96:e6:af:4c:
82:23:08:16:4c:17:cb:aa:8d:e8:67:d9:bc:fe:ba:
8d:97:d6:62:bf:f5:85:60:7a:5a:8b:aa:31:31:41:
3d:81:68:bd:09:0a:41:d0:7b:a6:d1:f7:11:eb:55:
28:07:c9:db:a0:4f:46:19:43:ae:fe:73:76:a9:6e:
83:e9:b1:2f:4b:1a:8e:e2:f4:fb:d6:29:60:65:66:
d8:86:d2:37:41:19:56:4a:19:1e:3d:57:67:2a:68:
b6:c5:c2:89:73:11:c0:bb:50:9f:8d:8f:3b:da:5c:
26:22:6f:8f:7a:e5:90:0a:00:fd:7a:c9:5d:f7:32:
91:9f:b6:02:fe:83:f8:bb:24:0a:0e:38:09:b7:ff:
60:05:16:8e:99:14:ec:4b:34:70:55:18:37:07:c5:
d0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A3:B0:C7:B0:9A:5F:17:F9:69:C8:95:5A:2D:5B:F1:ED:57:26:18
X509v3 Authority Key Identifier:
keyid:74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:a9:5b:d5:2b:21:de:d5:ab:7f:73:21:c3:b1:92:98:9b:9b:
3e:a8:45:59:71:ae:52:46:87:e3:78:52:5b:c6:f8:0c:ca:c6:
89:2c:82:3a:cd:cf:19:dd:b0:a5:ab:85:81:ee:ae:e8:3a:b4:
db:8e:d7:7b:1e:57:0c:87:6e:76:a2:77:81:62:e3:fe:37:f2:
76:a9:8f:63:6d:de:0b:0b:78:84:ac:25:40:f9:17:a8:99:15:
00:7e:7a:d1:23:b2:04:02:50:e5:ab:19:14:e6:54:dc:3d:31:
d3:f4:d9:d6:66:80:d4:41:64:76:42:6d:02:d6:d8:aa:34:78:
c3:d4:29:8e:65:63:37:0c:1a:bd:76:ab:23:3b:ad:a4:bf:36:
f8:31:d2:69:3d:e1:de:0c:fe:25:16:10:5b:3f:a8:62:0b:c4:
2d:3f:6f:80:50:ec:5d:d2:ab:d0:26:c9:6e:c1:6c:64:a4:54:
f0:d9:b6:e4:f4:19:bb:0b:54:7f:01:8d:17:95:89:03:6c:18:
03:7b:0c:a3:69:dc:69:a1:a2:0a:46:ae:27:d6:88:9e:cb:95:
ef:c8:ff:bb:58:3a:e5:80:c4:eb:17:9e:6e:d5:fb:da:24:f3:
8c:9f:95:42:d7:03:65:fe:59:26:83:36:e1:c0:39:59:9d:70:
29:26:d8:90
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICApQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjM5OTgxMTAvBgNVBAUTKDc0MjVBQUUxNkREQjQ2NEEzRTJCNDc5QzdBNDBDOTkw
MjM4MzZCQTAwHhcNMjUwMzI5MDE1ODUzWhcNMjUwNDA1MDE1ODUzWjAYMRYwFAYD
VQQDEw02N2U3NTNkZS01YzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArlVlVVScZAYg7wGFauxgqWIkt3NYTqEUBuGRY1CtRx89NZSn25K/c8ryeZfC
RY7j5aHpGSF5l2/ngc66UrEWc2bYW6SQkVGLWML2C/Dnhh2jvNBDsyH1XHlxUFDZ
835fnh2YrJbmr0yCIwgWTBfLqo3oZ9m8/rqNl9Ziv/WFYHpai6oxMUE9gWi9CQpB
0Hum0fcR61UoB8nboE9GGUOu/nN2qW6D6bEvSxqO4vT71ilgZWbYhtI3QRlWShke
PVdnKmi2xcKJcxHAu1CfjY872lwmIm+PeuWQCgD9esld9zKRn7YC/oP4uyQKDjgJ
t/9gBRaOmRTsSzRwVRg3B8XQRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMujsMew
ml8X+WnIlVotW/HtVyYYMB8GA1UdIwQYMBaAFHQlquFt20ZKPitHnHpAyZAjg2ug
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzk5OC8zMENDMDg0QTA4
REMxMUVEQkVERTYxMkJDNEY5QUUwMi9kQ1dxNFczYlJrby1LMGVjZWtESmtDT0Rh
NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2RDV3E0VzNiUmtvLUswZWNla0RKa0NPRGE2QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
Mzk5OC8zMENDMDg0QTA4REMxMUVEQkVERTYxMkJDNEY5QUUwMi9kQ1dxNFczYlJr
by1LMGVjZWtESmtDT0RhNkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCIqVvVKyHe1at/cyHDsZKYm5s+qEVZca5SRofjeFJbxvgMysaJLII6
zc8Z3bClq4WB7q7oOrTbjtd7HlcMh252oneBYuP+N/J2qY9jbd4LC3iErCVA+Reo
mRUAfnrRI7IEAlDlqxkU5lTcPTHT9NnWZoDUQWR2Qm0C1tiqNHjD1CmOZWM3DBq9
dqsjO62kvzb4MdJpPeHeDP4lFhBbP6hiC8QtP2+AUOxd0qvQJsluwWxkpFTw2bbk
9Bm7C1R/AY0XlYkDbBgDewyjadxpoaIKRq4n1oiey5XvyP+7WDrlgMTrF55u1fva
JPOMn5VC1wNl/lkmgzbhwDlZnXApJtiQ
-----END CERTIFICATE-----
Generated at Fri Apr 11 01:15:47 2025 by rpki-client