Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
File: qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft (raw, json)
Hash identifier: w0kDFgcsOFU8YuIfQ0wI2eAl1/mznAyyE6R3U3qGCIA=
Subject key identifier: 5D:BD:D7:98:F8:B7:48:D2:82:A3:FE:01:47:AD:A7:BA:33:38:09:36
Authority key identifier: A8:73:72:01:FA:4C:64:FA:00:56:40:22:DB:06:F6:0E:7E:E2:CD:0D
Certificate issuer: /CN=A9164164/serialNumber=A8737201FA4C64FA00564022DB06F60E7EE2CD0D
Certificate serial: 48
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
Manifest number: 47
Signing time: Sat 29 Mar 2025 06:40:42 +0000
Manifest this update: Sat 29 Mar 2025 06:40:41 +0000
Manifest next update: Sat 05 Apr 2025 06:40:41 +0000
Files and hashes: 1: qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl (hash: C1wetCzmn5k2AnFAmjFwNbptkXUiTzTtuBIMl5XzM18=)
2: F1487C2AA18211EFA2B7E923C4F9AE02.roa (hash: ow0JlSSKtHwrzhAKotnC4Hb7SPL+BmK/kbudjjYhQGA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72 (0x48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164164
Validity
Not Before: Mar 29 06:40:41 2025 GMT
Not After : Apr 5 06:40:41 2025 GMT
Subject: CN=67e795ea-afac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:21:2c:69:0c:b0:67:c1:4c:d7:88:c1:a2:f5:
d8:e7:87:0d:d7:44:27:ff:c0:29:b1:f0:c1:6e:43:
02:34:3b:45:ab:0a:a8:2d:e7:09:3b:f3:69:55:1a:
d7:40:f4:1e:22:bb:6c:fb:26:1e:6b:cb:b4:b9:a5:
08:d1:24:32:29:7a:c8:06:55:b5:b2:b6:7c:26:fb:
48:87:50:de:90:61:32:12:8a:79:e6:90:e9:b3:e1:
3c:27:b6:4e:7c:6c:3f:42:d0:32:5f:96:c3:15:ca:
d8:41:00:3d:d3:68:11:ac:3c:cb:c6:9d:8b:16:4c:
d6:41:0c:e1:e4:2f:9a:7d:fb:96:40:45:31:50:f7:
8b:6d:5c:c8:5d:47:ee:72:64:77:99:5c:33:d6:0f:
e8:91:99:ac:24:6d:2f:dd:fe:b2:b0:24:4e:a9:6c:
66:c5:f7:c0:47:0a:02:8a:b0:e1:9b:97:4f:64:e5:
35:07:ab:b8:db:c0:5f:7b:f7:02:64:05:f4:c6:10:
d9:a1:ff:ce:d8:e0:ba:73:a7:99:3d:9c:55:8b:62:
b2:52:c5:3c:16:6b:ad:0f:ff:51:a2:7c:33:d3:e3:
25:bf:dd:a6:8c:af:db:fb:0f:cb:ef:6d:5d:ec:79:
b8:83:4c:ae:b1:41:fd:71:b2:d8:22:3d:2b:e7:3c:
b5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BD:D7:98:F8:B7:48:D2:82:A3:FE:01:47:AD:A7:BA:33:38:09:36
X509v3 Authority Key Identifier:
keyid:A8:73:72:01:FA:4C:64:FA:00:56:40:22:DB:06:F6:0E:7E:E2:CD:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:63:0a:66:52:35:5c:5f:bc:3b:f1:b6:27:30:21:94:c0:28:
43:d8:a2:cf:aa:80:c6:63:34:c2:0b:32:2c:c6:c3:73:3e:d1:
d5:a9:5c:22:8c:f3:d5:88:2b:f5:8d:da:f7:1e:ca:44:13:00:
ca:ed:5d:e2:3d:7e:c6:f9:8e:c8:af:68:c3:7f:ce:98:a5:e7:
e0:32:7c:8b:fa:3f:74:52:b6:ce:ef:c7:ad:55:22:9b:d3:44:
cb:12:8e:b2:4d:cf:1b:43:e3:17:68:21:67:7f:59:13:63:7c:
a0:80:40:12:a0:28:cd:25:74:0c:9f:19:32:fa:55:91:21:0a:
87:bf:c9:fe:2e:68:f4:50:9c:27:a0:c3:d8:14:c1:3c:75:aa:
6a:d9:7c:ba:2c:73:64:6f:0b:ab:24:c7:33:8e:35:ec:cf:d3:
aa:7e:37:25:8f:4b:79:43:51:c0:82:86:04:70:16:c6:8b:a4:
9e:d4:92:e0:ca:3e:7c:94:cd:5f:ab:a7:2f:23:3f:6f:f2:cd:
7e:f7:62:9a:73:1e:54:f2:65:06:dd:f4:5c:1b:84:42:c5:f2:
5d:e7:27:fd:41:2d:35:6f:97:3e:a7:27:44:4c:ec:51:d3:ac:
73:1a:75:24:84:b4:71:ce:4a:e6:ae:b5:61:25:ef:ff:5a:71:
20:f3:13:4e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
NDE2NDExMC8GA1UEBRMoQTg3MzcyMDFGQTRDNjRGQTAwNTY0MDIyREIwNkY2MEU3
RUUyQ0QwRDAeFw0yNTAzMjkwNjQwNDFaFw0yNTA0MDUwNjQwNDFaMBgxFjAUBgNV
BAMTDTY3ZTc5NWVhLWFmYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQChISxpDLBnwUzXiMGi9djnhw3XRCf/wCmx8MFuQwI0O0WrCqgt5wk782lVGtdA
9B4iu2z7Jh5ry7S5pQjRJDIpesgGVbWytnwm+0iHUN6QYTISinnmkOmz4Twntk58
bD9C0DJflsMVythBAD3TaBGsPMvGnYsWTNZBDOHkL5p9+5ZARTFQ94ttXMhdR+5y
ZHeZXDPWD+iRmawkbS/d/rKwJE6pbGbF98BHCgKKsOGbl09k5TUHq7jbwF979wJk
BfTGENmh/87Y4Lpzp5k9nFWLYrJSxTwWa60P/1GifDPT4yW/3aaMr9v7D8vvbV3s
ebiDTK6xQf1xstgiPSvnPLUBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXb3XmPi3
SNKCo/4BR62nujM4CTYwHwYDVR0jBBgwFoAUqHNyAfpMZPoAVkAi2wb2Dn7izQ0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0MTY0L0E2OEUyNjRFQTE4
MjExRUY4RjRFMTYyM0M0RjlBRTAyL3FITnlBZnBNWlBvQVZrQWkyd2IyRG43aXpR
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvcUhOeUFmcE1aUG9BVmtBaTJ3YjJEbjdpelEwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0
MTY0L0E2OEUyNjRFQTE4MjExRUY4RjRFMTYyM0M0RjlBRTAyL3FITnlBZnBNWlBv
QVZrQWkyd2IyRG43aXpRMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBACtjCmZSNVxfvDvxticwIZTAKEPYos+qgMZjNMILMizGw3M+0dWpXCKM
89WIK/WN2vceykQTAMrtXeI9fsb5jsivaMN/zpil5+AyfIv6P3RSts7vx61VIpvT
RMsSjrJNzxtD4xdoIWd/WRNjfKCAQBKgKM0ldAyfGTL6VZEhCoe/yf4uaPRQnCeg
w9gUwTx1qmrZfLosc2RvC6skxzOONezP06p+NyWPS3lDUcCChgRwFsaLpJ7UkuDK
PnyUzV+rpy8jP2/yzX73YppzHlTyZQbd9FwbhELF8l3nJ/1BLTVvlz6nJ0RM7FHT
rHMadSSEtHHOSuautWEl7/9acSDzE04=
-----END CERTIFICATE-----
Generated at Fri Apr 11 11:40:30 2025 by rpki-client