Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft
File: fcUQye6vE3-r4XHlViRtskYeJxU.mft (raw, json)
Hash identifier: k9ntrJzz2U6UOim8oXCcZg9AXTz87SB5baEb4EJfogk=
Subject key identifier: 84:84:06:C7:52:94:C1:91:0D:8F:68:E1:D2:2C:EB:8E:C0:6E:2D:E5
Authority key identifier: 7D:C5:10:C9:EE:AF:13:7F:AB:E1:71:E5:56:24:6D:B2:46:1E:27:15
Certificate issuer: /CN=A91645D3/serialNumber=7DC510C9EEAF137FABE171E556246DB2461E2715
Certificate serial: 0779
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcUQye6vE3-r4XHlViRtskYeJxU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft
Manifest number: 0772
Signing time: Fri 28 Mar 2025 21:42:35 +0000
Manifest this update: Fri 28 Mar 2025 21:42:34 +0000
Manifest next update: Fri 04 Apr 2025 21:42:34 +0000
Files and hashes: 1: fcUQye6vE3-r4XHlViRtskYeJxU.crl (hash: WAAUOTecZolJJPpwzh+WngtGkLMt1Tz5U/L5izNIBag=)
2: 58DAB5900FF311EBB0C3265EC4F9AE02.roa (hash: /rykGvLbUlrN0XXQSSOg6Z/Y2O6GIy4F1RxGecU5aLc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1913 (0x779)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91645D3
Validity
Not Before: Mar 28 21:42:34 2025 GMT
Not After : Apr 4 21:42:34 2025 GMT
Subject: CN=67e717cb-f87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d7:fe:e1:e3:ad:f0:63:94:92:28:64:8e:29:
e5:fe:7b:5a:75:05:4f:50:97:5c:54:03:cd:70:fc:
b6:6d:ee:69:19:1e:68:a8:9a:82:d3:d4:1c:05:90:
ef:f2:2f:ae:b5:11:a7:e8:22:5c:8d:df:7f:8c:37:
c4:6a:92:76:fb:f6:fc:0c:76:4c:7f:71:b7:0b:80:
cf:6e:15:a4:2a:16:b3:84:ca:cc:b8:92:34:ba:db:
fc:6f:e8:78:97:48:aa:8e:17:6e:b2:fa:95:17:13:
0b:29:4f:18:50:3c:cf:75:04:c8:7b:89:8e:cc:c7:
4b:35:38:8a:d3:49:05:15:d0:32:8f:2e:fd:df:4c:
22:db:46:7c:cc:cf:cb:8b:2c:19:d3:50:7c:cd:04:
61:62:a9:fa:f2:a4:c1:1d:e1:9e:be:2f:2d:05:8b:
d6:18:ca:f4:06:ca:90:e7:77:e2:ed:cf:5c:5d:0a:
79:7b:96:55:85:24:79:96:f1:a4:98:f6:ee:b3:da:
3c:f9:7d:5b:e6:b2:3a:53:14:23:25:4b:9b:e4:cf:
36:66:90:10:67:f4:df:e7:83:be:6d:eb:2d:21:a8:
25:fb:21:c9:b2:65:15:a9:99:e4:22:ab:94:5d:09:
c0:7f:68:5f:2d:46:d8:1b:89:10:39:62:ef:8f:ed:
ed:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:84:06:C7:52:94:C1:91:0D:8F:68:E1:D2:2C:EB:8E:C0:6E:2D:E5
X509v3 Authority Key Identifier:
keyid:7D:C5:10:C9:EE:AF:13:7F:AB:E1:71:E5:56:24:6D:B2:46:1E:27:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcUQye6vE3-r4XHlViRtskYeJxU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:cb:97:69:43:47:0a:58:7b:a2:04:d2:6c:e3:61:b0:0a:b6:
d1:d3:88:8b:63:62:50:d5:62:92:db:6a:5c:c3:6a:2a:56:4c:
a5:78:84:47:cb:3a:ba:4d:fa:64:d4:0b:5b:b9:52:9b:5a:e4:
3c:59:92:7d:18:6f:1e:20:26:44:9a:03:f8:ca:d0:e2:cc:75:
67:46:56:ae:23:ed:74:de:97:98:26:e5:dc:7f:d3:83:71:56:
4f:6f:1e:f6:4f:e5:08:89:1f:f9:83:a6:08:3f:ce:15:e8:6e:
cd:43:2c:0b:70:e2:69:ae:63:6d:75:12:d3:c3:04:70:74:cb:
0f:00:c2:22:c3:82:15:db:47:4f:0a:2f:b9:91:e7:f0:0f:b9:
0b:fd:1f:33:26:66:b5:e8:4c:88:a4:60:73:3a:f1:cb:12:2b:
7c:58:f5:5a:e8:bd:d6:0b:05:ee:92:41:b8:7b:c6:c6:85:98:
75:1e:05:8c:3c:0f:68:95:5c:cd:ee:cc:6e:5d:6f:16:ec:68:
39:cf:ca:bb:0a:b2:ae:1a:d5:ac:5a:d8:0d:8c:f9:39:f9:79:
1a:db:60:1e:9d:73:0e:88:25:c3:ec:29:62:81:4b:8b:85:a4:
bf:22:cb:b8:34:24:f7:4f:d5:2d:ed:4a:8c:a2:6e:d1:89:42:
4b:66:f0:c9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjQ1RDMxMTAvBgNVBAUTKDdEQzUxMEM5RUVBRjEzN0ZBQkUxNzFFNTU2MjQ2REIy
NDYxRTI3MTUwHhcNMjUwMzI4MjE0MjM0WhcNMjUwNDA0MjE0MjM0WjAYMRYwFAYD
VQQDEw02N2U3MTdjYi1mODdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAstf+4eOt8GOUkihkjinl/ntadQVPUJdcVAPNcPy2be5pGR5oqJqC09QcBZDv
8i+utRGn6CJcjd9/jDfEapJ2+/b8DHZMf3G3C4DPbhWkKhazhMrMuJI0utv8b+h4
l0iqjhdusvqVFxMLKU8YUDzPdQTIe4mOzMdLNTiK00kFFdAyjy7930wi20Z8zM/L
iywZ01B8zQRhYqn68qTBHeGevi8tBYvWGMr0BsqQ53fi7c9cXQp5e5ZVhSR5lvGk
mPbus9o8+X1b5rI6UxQjJUub5M82ZpAQZ/Tf54O+bestIagl+yHJsmUVqZnkIquU
XQnAf2hfLUbYG4kQOWLvj+3tCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISEBsdS
lMGRDY9o4dIs647Abi3lMB8GA1UdIwQYMBaAFH3FEMnurxN/q+Fx5VYkbbJGHicV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDVEMy83NjIwQkMwQzBD
MjAxMUVCOEFFNjM5NERDNEY5QUUwMi9mY1VReWU2dkUzLXI0WEhsVmlSdHNrWWVK
eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZjVVF5ZTZ2RTMtcjRYSGxWaVJ0c2tZZUp4VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NDVEMy83NjIwQkMwQzBDMjAxMUVCOEFFNjM5NERDNEY5QUUwMi9mY1VReWU2dkUz
LXI0WEhsVmlSdHNrWWVKeFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBBy5dpQ0cKWHuiBNJs42GwCrbR04iLY2JQ1WKS22pcw2oqVkyleIRH
yzq6Tfpk1AtbuVKbWuQ8WZJ9GG8eICZEmgP4ytDizHVnRlauI+103peYJuXcf9OD
cVZPbx72T+UIiR/5g6YIP84V6G7NQywLcOJprmNtdRLTwwRwdMsPAMIiw4IV20dP
Ci+5kefwD7kL/R8zJma16EyIpGBzOvHLEit8WPVa6L3WCwXukkG4e8bGhZh1HgWM
PA9olVzN7sxuXW8W7Gg5z8q7CrKuGtWsWtgNjPk5+Xka22AenXMOiCXD7CligUuL
haS/Isu4NCT3T9Ut7UqMom7RiUJLZvDJ
-----END CERTIFICATE-----
Generated at Thu Apr 10 16:42:59 2025 by rpki-client