Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.mft
File: QIyZnDwewBZElFs0d6nyI061eRw.mft (raw, json)
Hash identifier: LPUuqTXLOQZqvKjvvJ50b+bWOh8ArWx6n1qC3rR3JPI=
Subject key identifier: E6:F2:E4:0A:4E:26:9E:66:24:D3:BD:58:B6:99:91:57:E3:47:B0:E7
Authority key identifier: 40:8C:99:9C:3C:1E:C0:16:44:94:5B:34:77:A9:F2:23:4E:B5:79:1C
Certificate issuer: /CN=A91650A5/serialNumber=408C999C3C1EC01644945B3477A9F2234EB5791C
Certificate serial: 2486
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.mft
Manifest number: 2466
Signing time: Fri 28 Mar 2025 15:52:38 +0000
Manifest this update: Fri 28 Mar 2025 15:52:38 +0000
Manifest next update: Fri 04 Apr 2025 15:52:38 +0000
Files and hashes: 1: QIyZnDwewBZElFs0d6nyI061eRw.crl (hash: RD3eUH+EoUz6YS8f2+shw7idC90e2dhhA69StsjxLTQ=)
2: 50A2F64264BC11E8ACC7951EC4F9AE02.roa (hash: mECvLTKiNtfSmorR6F/JjM52Np+0S4zr3je4uTIkUj8=)
3: 2486E806F0E311EAA1C58D62C4F9AE02.roa (hash: dltD8ogNsgEp1LNwu/hSjpxIyXjpYdO8Yd4ZGWGZBuI=)
4: ABA9F4B8AF8411EABF9F844DC4F9AE02.roa (hash: tv9RdWOPyxWE44FO50AuecGDdKWojTS5Z904qdTlAMc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9350 (0x2486)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91650A5
Validity
Not Before: Mar 28 15:52:38 2025 GMT
Not After : Apr 4 15:52:38 2025 GMT
Subject: CN=67e6c5c6-d11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4c:b0:21:10:86:3d:0c:9c:33:90:18:33:61:
a2:1b:e7:a3:eb:10:06:4f:9d:ea:3a:e3:ff:bb:d5:
a1:50:53:3e:e7:d5:99:91:92:55:ac:08:7e:0f:8c:
14:25:ec:6d:a7:a0:ff:aa:18:3e:06:ba:f5:bf:1b:
20:7d:2e:8c:9b:0b:17:5a:95:53:cb:2a:24:7c:24:
7c:ba:ee:00:d2:71:d1:ac:cd:cc:6b:e8:85:9c:65:
6a:8a:b1:47:83:74:f7:35:66:19:94:40:eb:55:9d:
c4:48:15:37:82:0a:36:be:32:dc:97:b1:a5:9d:40:
be:a7:1c:d4:e0:4c:d3:9c:60:ff:03:ad:17:91:de:
ee:57:3d:43:45:4b:ee:41:91:a8:4e:d0:ca:b8:0d:
43:6e:85:06:90:d0:ee:6d:32:59:1b:66:5b:ef:2e:
e4:9b:3e:b2:f6:ad:ba:3d:c6:f7:0d:83:ad:69:e0:
d1:02:1b:d5:a8:29:f2:c2:81:af:c7:e6:f2:14:ed:
be:96:db:bd:b3:9a:99:8b:a1:4d:12:5f:f8:1f:70:
01:1c:0c:b9:94:52:72:6c:46:a5:28:80:40:ae:b7:
3a:d9:65:10:9f:df:32:86:ef:bc:12:94:78:cb:4a:
5b:f7:38:a6:d6:dc:e2:31:a1:28:7f:ae:c0:d8:a1:
89:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F2:E4:0A:4E:26:9E:66:24:D3:BD:58:B6:99:91:57:E3:47:B0:E7
X509v3 Authority Key Identifier:
keyid:40:8C:99:9C:3C:1E:C0:16:44:94:5B:34:77:A9:F2:23:4E:B5:79:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:ca:eb:34:e3:b7:6d:03:94:33:e7:c8:bd:13:89:d4:d9:4d:
f9:20:5f:db:50:aa:d4:20:1e:8d:6d:dc:d6:42:e6:9a:b3:11:
55:72:36:d6:ea:9b:9a:52:bb:8d:33:96:7d:74:10:a0:98:9e:
31:27:09:0d:42:da:26:ae:ad:b4:59:28:9d:3f:6a:a7:e2:b5:
d0:86:44:8f:ff:73:98:89:93:62:ac:09:05:9e:8f:8a:f0:af:
d7:93:3d:23:f3:51:ef:45:76:a0:2b:96:1b:dc:a7:f1:b0:61:
7d:76:fe:70:6d:df:db:c2:d6:14:36:73:c3:44:6a:d9:6d:28:
ac:89:fb:2e:fb:8d:9a:5c:2a:09:7f:2e:d8:54:90:2b:2d:12:
26:ca:0a:d3:e2:b5:c9:cd:93:d2:d6:e2:97:28:19:dd:2e:51:
c5:b3:b1:be:82:4d:cd:a3:48:43:a0:77:f8:e4:c3:a2:ea:0c:
67:de:6e:46:71:94:81:1a:6a:b2:24:39:a9:76:fe:c3:18:13:
72:6d:a8:7f:da:7b:4d:af:f7:63:c4:e6:32:54:46:c8:49:d3:
5d:6c:cf:5a:d7:e8:79:6f:93:53:3e:8b:98:b1:6c:7b:f4:93:
5d:81:bd:a0:b1:1c:f5:46:5d:6a:73:bd:c0:44:c5:47:05:3d:
9e:3f:46:ff
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICJIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjUwQTUxMTAvBgNVBAUTKDQwOEM5OTlDM0MxRUMwMTY0NDk0NUIzNDc3QTlGMjIz
NEVCNTc5MUMwHhcNMjUwMzI4MTU1MjM4WhcNMjUwNDA0MTU1MjM4WjAYMRYwFAYD
VQQDEw02N2U2YzVjNi1kMTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz0ywIRCGPQycM5AYM2GiG+ej6xAGT53qOuP/u9WhUFM+59WZkZJVrAh+D4wU
Jextp6D/qhg+Brr1vxsgfS6MmwsXWpVTyyokfCR8uu4A0nHRrM3Ma+iFnGVqirFH
g3T3NWYZlEDrVZ3ESBU3ggo2vjLcl7GlnUC+pxzU4EzTnGD/A60Xkd7uVz1DRUvu
QZGoTtDKuA1DboUGkNDubTJZG2Zb7y7kmz6y9q26Pcb3DYOtaeDRAhvVqCnywoGv
x+byFO2+ltu9s5qZi6FNEl/4H3ABHAy5lFJybEalKIBArrc62WUQn98yhu+8EpR4
y0pb9zim1tziMaEof67A2KGJMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOby5ApO
Jp5mJNO9WLaZkVfjR7DnMB8GA1UdIwQYMBaAFECMmZw8HsAWRJRbNHep8iNOtXkc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTBBNS8xN0RGQjM1QTQ2
RTYxMUU1QjA4REExN0JDNEY5QUUwMi9RSXlabkR3ZXdCWkVsRnMwZDZueUkwNjFl
UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FJeVpuRHdld0JaRWxGczBkNm55STA2MWVSdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NTBBNS8xN0RGQjM1QTQ2RTYxMUU1QjA4REExN0JDNEY5QUUwMi9RSXlabkR3ZXdC
WkVsRnMwZDZueUkwNjFlUncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCEyus047dtA5Qz58i9E4nU2U35IF/bUKrUIB6NbdzWQuaasxFVcjbW
6puaUruNM5Z9dBCgmJ4xJwkNQtomrq20WSidP2qn4rXQhkSP/3OYiZNirAkFno+K
8K/Xkz0j81HvRXagK5Yb3KfxsGF9dv5wbd/bwtYUNnPDRGrZbSisifsu+42aXCoJ
fy7YVJArLRImygrT4rXJzZPS1uKXKBndLlHFs7G+gk3No0hDoHf45MOi6gxn3m5G
cZSBGmqyJDmpdv7DGBNybah/2ntNr/djxOYyVEbISdNdbM9a1+h5b5NTPouYsWx7
9JNdgb2gsRz1Rl1qc73ARMVHBT2eP0b/
-----END CERTIFICATE-----
Generated at Fri Apr 11 16:17:12 2025 by rpki-client