Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft
File: k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft (raw, json)
Hash identifier: jiGGCgj+br5jkTy+9vPIwOxE6H+X5fsHpTbyKoXySgc=
Subject key identifier: 18:BF:74:39:E6:C3:C0:72:E4:C9:C3:E9:8E:06:28:D9:45:63:78:C4
Authority key identifier: 93:4A:DF:B9:4A:39:A0:C3:7B:77:F9:79:03:70:6B:61:F0:BE:FE:E7
Certificate issuer: /CN=A917584F/serialNumber=934ADFB94A39A0C37B77F97903706B61F0BEFEE7
Certificate serial: 0517
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft
Manifest number: 0513
Signing time: Fri 28 Mar 2025 23:51:12 +0000
Manifest this update: Fri 28 Mar 2025 23:51:12 +0000
Manifest next update: Fri 04 Apr 2025 23:51:12 +0000
Files and hashes: 1: k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl (hash: x24+Tu3BEbwZbA6DC7AibR7uzsSOSGStX1weQUzAXcs=)
2: CE00DA34FF4411EBAD3A632AC4F9AE02.roa (hash: gsNxtD+HCrA+T6b9YqONqQ4jv3lalAETh9MJihh24Cg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1303 (0x517)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917584F
Validity
Not Before: Mar 28 23:51:12 2025 GMT
Not After : Apr 4 23:51:12 2025 GMT
Subject: CN=67e735f0-ce80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:81:5d:c7:02:31:89:22:ac:a2:b1:47:e3:da:
92:7f:d2:b1:17:fe:59:85:be:a7:55:b0:8d:d8:2f:
18:e1:3b:ff:fa:48:f3:5f:ad:d1:78:14:9f:af:3d:
de:c7:5c:ba:5e:67:e2:10:44:b8:1a:09:a6:90:7a:
e7:d5:9b:76:9c:91:79:06:28:cc:5c:cf:02:83:14:
e2:a0:3d:59:d3:a9:ce:dd:ab:b8:33:36:67:d8:6c:
ba:44:01:dd:b5:d8:02:80:74:52:8d:73:7c:41:8b:
0a:6e:6b:bc:6a:81:b1:4e:3d:5b:28:53:18:f4:94:
74:4c:01:40:f0:7b:5a:71:fd:00:de:d1:62:0d:c7:
10:52:11:24:32:e8:2e:97:91:0c:61:d9:f2:f5:2c:
7c:2d:6a:9e:bf:1f:3c:35:60:64:a1:b3:1d:d4:64:
dd:0d:e1:77:bb:65:aa:91:87:9f:9f:14:cb:e2:7c:
ca:86:07:2a:aa:21:27:3e:05:52:9d:56:0c:51:8b:
dd:3a:46:9f:dc:f4:d2:ea:b4:5f:b7:d6:60:db:e8:
12:6f:f8:7c:64:00:ed:de:ae:f3:c6:57:4b:64:ba:
29:ef:bc:d2:6b:3f:b8:9d:b7:82:3e:07:1f:c6:06:
c3:3e:d0:2f:30:32:3b:f3:3c:67:a7:11:44:b9:b7:
c0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BF:74:39:E6:C3:C0:72:E4:C9:C3:E9:8E:06:28:D9:45:63:78:C4
X509v3 Authority Key Identifier:
keyid:93:4A:DF:B9:4A:39:A0:C3:7B:77:F9:79:03:70:6B:61:F0:BE:FE:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:00:b6:a3:16:43:93:c0:95:f8:23:b7:09:22:e4:7c:4b:20:
bb:60:71:3a:77:26:c5:8b:11:40:d7:81:17:0d:cc:c8:0e:aa:
73:24:5a:a6:9f:d7:15:fe:90:15:4a:68:66:e8:29:df:64:4a:
a4:73:73:ab:2d:c0:0a:99:c9:13:5e:5f:40:d5:62:c3:cb:d8:
cf:bb:6a:35:5e:16:a8:ab:d5:ba:65:d2:cf:e2:0e:4f:ee:bf:
61:ca:84:44:da:62:96:bd:31:84:ba:0d:07:5e:49:d3:1e:cc:
09:06:d5:34:85:23:ad:08:13:34:a4:0e:05:56:4d:09:77:c9:
9d:08:e5:94:b5:1c:31:bc:2e:80:25:44:e4:61:cb:7b:a7:82:
87:18:44:0e:38:ca:5d:0f:dd:f7:6d:78:d9:3a:fb:03:4e:b7:
bf:82:9e:51:3e:5d:fe:5a:92:73:91:23:fd:86:77:b0:03:7e:
71:30:8c:b8:2d:e7:67:c3:07:5e:9e:2e:75:6c:0d:74:fa:60:
c7:79:cf:b9:c4:48:28:21:55:30:e2:53:9c:3b:68:48:46:f2:
b9:d9:f7:99:82:15:a0:7b:2a:ee:c5:36:5a:30:18:0c:f7:82:
6f:e7:4c:87:85:a3:af:3c:84:6b:55:c0:6d:cd:76:26:d7:2a:
f8:42:d8:43
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzU4NEYxMTAvBgNVBAUTKDkzNEFERkI5NEEzOUEwQzM3Qjc3Rjk3OTAzNzA2QjYx
RjBCRUZFRTcwHhcNMjUwMzI4MjM1MTEyWhcNMjUwNDA0MjM1MTEyWjAYMRYwFAYD
VQQDEw02N2U3MzVmMC1jZTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyIFdxwIxiSKsorFH49qSf9KxF/5Zhb6nVbCN2C8Y4Tv/+kjzX63ReBSfrz3e
x1y6XmfiEES4GgmmkHrn1Zt2nJF5BijMXM8CgxTioD1Z06nO3au4MzZn2Gy6RAHd
tdgCgHRSjXN8QYsKbmu8aoGxTj1bKFMY9JR0TAFA8Htacf0A3tFiDccQUhEkMugu
l5EMYdny9Sx8LWqevx88NWBkobMd1GTdDeF3u2WqkYefnxTL4nzKhgcqqiEnPgVS
nVYMUYvdOkaf3PTS6rRft9Zg2+gSb/h8ZADt3q7zxldLZLop77zSaz+4nbeCPgcf
xgbDPtAvMDI78zxnpxFEubfAPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBi/dDnm
w8By5MnD6Y4GKNlFY3jEMB8GA1UdIwQYMBaAFJNK37lKOaDDe3f5eQNwa2Hwvv7n
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTg0Ri9ERDcyQ0U1OEY5
QzkxMUVCOTU1NUIzNkFDNEY5QUUwMi9rMHJmdVVvNW9NTjdkX2w1QTNCcllmQy1f
dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2swcmZ1VW81b01ON2RfbDVBM0JyWWZDLV91Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTg0Ri9ERDcyQ0U1OEY5QzkxMUVCOTU1NUIzNkFDNEY5QUUwMi9rMHJmdVVvNW9N
TjdkX2w1QTNCcllmQy1fdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAIALajFkOTwJX4I7cJIuR8SyC7YHE6dybFixFA14EXDczIDqpzJFqm
n9cV/pAVSmhm6CnfZEqkc3OrLcAKmckTXl9A1WLDy9jPu2o1Xhaoq9W6ZdLP4g5P
7r9hyoRE2mKWvTGEug0HXknTHswJBtU0hSOtCBM0pA4FVk0Jd8mdCOWUtRwxvC6A
JUTkYct7p4KHGEQOOMpdD933bXjZOvsDTre/gp5RPl3+WpJzkSP9hnewA35xMIy4
Lednwwdeni51bA10+mDHec+5xEgoIVUw4lOcO2hIRvK52feZghWgeyruxTZaMBgM
94Jv50yHhaOvPIRrVcBtzXYm1yr4QthD
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:24:11 2025 by rpki-client