Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft
File: J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft (raw, json)
Hash identifier: Dqt91fgAcqVrhlbx6ScOgA0egKr+v8XKoZFEizqoSoM=
Subject key identifier: 24:CF:EA:25:9E:D5:3C:CE:9A:73:5E:52:86:E3:37:5D:F7:A6:4A:01
Authority key identifier: 27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67
Certificate issuer: /CN=A91697FA/serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67
Certificate serial: 347A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft
Manifest number: 3473
Signing time: Fri 28 Mar 2025 14:22:22 +0000
Manifest this update: Fri 28 Mar 2025 14:22:21 +0000
Manifest next update: Fri 04 Apr 2025 14:22:21 +0000
Files and hashes: 1: J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl (hash: 0h2m+/yb9hFPtrk0FVOJjKbKFHV04yJqIHbh8ft5Nt8=)
2: D5C188B88DBD11E9877F5B11C4F9AE02.roa (hash: 6tW1p4KIiGaRaePQd+Ni/gW4xsAg3egSs1rK2j0NTYU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13434 (0x347a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91697FA
Validity
Not Before: Mar 28 14:22:21 2025 GMT
Not After : Apr 4 14:22:21 2025 GMT
Subject: CN=67e6b09e-bb28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ff:99:f4:3b:ed:08:66:05:69:b6:b0:f4:00:
fd:be:73:df:ad:a5:96:f0:6e:57:9e:6a:f1:c5:f5:
c2:40:00:51:bf:d5:40:8b:db:94:4d:91:46:8a:89:
2b:1b:13:f5:7b:6c:93:8a:8e:68:05:20:76:41:6e:
61:28:18:2e:22:ee:51:c1:57:00:cc:c7:f0:d6:c7:
57:6d:67:4b:ac:b8:f3:4c:a2:0c:ce:87:18:03:ec:
83:8f:92:2c:7e:5a:4d:6f:59:aa:b3:ce:83:35:ec:
14:d9:a2:90:c4:2c:b3:b2:ca:9e:2b:07:01:e9:2d:
3d:06:5d:c5:28:41:4b:30:a0:55:7d:04:28:9c:11:
90:a8:27:3e:8a:e2:c2:27:1c:fd:45:1b:d7:f5:ee:
c9:95:24:f7:ad:05:c6:98:8d:1c:39:27:74:5c:9b:
bd:84:26:3d:90:da:09:df:a3:c1:2b:78:f6:9c:f8:
3c:b4:77:28:39:0a:5b:c9:12:c7:6c:2d:e9:ea:83:
d5:cc:2b:b3:35:3b:2d:26:b3:47:72:2c:b7:7a:ca:
1f:65:e6:99:aa:bd:43:76:e7:04:d7:46:cd:7c:f1:
39:97:f2:5d:51:48:ba:f2:ba:5f:17:eb:a0:92:56:
1a:f8:62:16:63:ca:ee:4b:f2:03:c7:1c:f9:00:19:
4b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CF:EA:25:9E:D5:3C:CE:9A:73:5E:52:86:E3:37:5D:F7:A6:4A:01
X509v3 Authority Key Identifier:
keyid:27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d4:fd:c6:df:b0:11:c4:02:2d:76:21:4e:5c:6c:4f:09:75:
70:97:db:9b:70:6d:9b:f3:60:8e:4e:95:0d:96:a0:aa:a2:ce:
ab:59:6d:b8:f2:b8:36:a6:58:bd:02:7b:83:d4:3e:71:28:61:
4c:13:c5:bc:f8:2d:0e:04:32:20:83:62:87:7c:bf:4f:b8:b3:
2c:d4:52:a4:0e:40:6f:e4:1f:3f:0e:e3:52:ae:5d:2c:10:95:
3f:f2:98:fe:a2:10:89:1c:94:c3:00:df:3a:ff:f3:13:77:45:
92:dc:e7:57:d0:03:4d:14:bb:35:88:f9:50:33:93:1d:71:68:
77:81:b9:13:be:e1:e6:8a:e6:6f:4e:c3:7d:89:66:72:79:54:
ee:67:cc:1d:9f:2d:96:cb:2b:51:00:8a:50:d4:f0:43:b6:4c:
9d:70:5a:42:a5:57:d6:6d:14:46:6c:ab:4f:02:d6:a1:43:56:
2a:23:ab:7f:74:a4:82:0a:b3:c8:5e:91:40:be:60:5c:27:f8:
1a:f5:cf:36:0e:5f:50:4f:52:5a:e5:93:13:f7:bb:55:e3:38:
f7:b5:1a:ce:6f:9d:16:04:c7:a9:bc:8e:88:73:37:fe:a9:f6:
8e:c9:71:de:6c:17:17:58:3c:e1:39:29:d8:98:91:84:54:70:
5c:e0:8d:0e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njk3RkExMTAvBgNVBAUTKDI3NTgwRkUwQUY3RUY1MkM2MzhCNjk2MzJDMjJDOTc2
QTE4NjJENjcwHhcNMjUwMzI4MTQyMjIxWhcNMjUwNDA0MTQyMjIxWjAYMRYwFAYD
VQQDEw02N2U2YjA5ZS1iYjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1/+Z9DvtCGYFabaw9AD9vnPfraWW8G5XnmrxxfXCQABRv9VAi9uUTZFGiokr
GxP1e2yTio5oBSB2QW5hKBguIu5RwVcAzMfw1sdXbWdLrLjzTKIMzocYA+yDj5Is
flpNb1mqs86DNewU2aKQxCyzssqeKwcB6S09Bl3FKEFLMKBVfQQonBGQqCc+iuLC
Jxz9RRvX9e7JlST3rQXGmI0cOSd0XJu9hCY9kNoJ36PBK3j2nPg8tHcoOQpbyRLH
bC3p6oPVzCuzNTstJrNHciy3esofZeaZqr1DducE10bNfPE5l/JdUUi68rpfF+ug
klYa+GIWY8ruS/IDxxz5ABlLiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTP6iWe
1TzOmnNeUobjN133pkoBMB8GA1UdIwQYMBaAFCdYD+CvfvUsY4tpYywiyXahhi1n
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8xOTc4MDQ0QTFE
ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9KMWdQNEs5LTlTeGppMmxqTENMSmRxR0dM
V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0oxZ1A0SzktOVN4amkybGpMQ0xKZHFHR0xXYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OTdGQS8xOTc4MDQ0QTFEODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9KMWdQNEs5LTlT
eGppMmxqTENMSmRxR0dMV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBN1P3G37ARxAItdiFOXGxPCXVwl9ubcG2b82COTpUNlqCqos6rWW24
8rg2pli9AnuD1D5xKGFME8W8+C0OBDIgg2KHfL9PuLMs1FKkDkBv5B8/DuNSrl0s
EJU/8pj+ohCJHJTDAN86//MTd0WS3OdX0ANNFLs1iPlQM5MdcWh3gbkTvuHmiuZv
TsN9iWZyeVTuZ8wdny2WyytRAIpQ1PBDtkydcFpCpVfWbRRGbKtPAtahQ1YqI6t/
dKSCCrPIXpFAvmBcJ/ga9c82Dl9QT1Ja5ZMT97tV4zj3tRrOb50WBMepvI6Iczf+
qfaOyXHebBcXWDzhOSnYmJGEVHBc4I0O
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:12:29 2025 by rpki-client