Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft
File: cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft (raw, json)
Hash identifier: 8Bb1PQe3j/B6vx9aKH2Q2krtLsekgk+geKutcugNH+0=
Subject key identifier: A6:2E:CF:6F:F1:AD:BB:62:F1:4C:46:90:39:98:61:50:6B:B3:EA:71
Authority key identifier: 70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C
Certificate issuer: /CN=A917B540/serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C
Certificate serial: 0164
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft
Manifest number: 0160
Signing time: Sat 29 Mar 2025 03:30:49 +0000
Manifest this update: Sat 29 Mar 2025 03:30:49 +0000
Manifest next update: Sat 05 Apr 2025 03:30:49 +0000
Files and hashes: 1: cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl (hash: hTNg61fgz+BtqodSDfcM4AOxcx8HAvuLRUwrlxCr+p8=)
2: 1966C856FB9E11ED8309FC1DC4F9AE02.roa (hash: jsmEuKgoeYiJY/PhkO97a7NHRngriTFFOmRBgoLfjbw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 356 (0x164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B540
Validity
Not Before: Mar 29 03:30:49 2025 GMT
Not After : Apr 5 03:30:49 2025 GMT
Subject: CN=67e76969-310c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7d:45:68:ff:01:ea:24:0d:f0:00:db:1a:3b:
54:9f:3b:8d:b0:91:67:87:e2:0e:9a:95:a1:8d:cb:
ab:63:83:e0:ab:61:8b:47:70:40:ea:aa:d8:4e:a6:
22:6f:3c:fa:11:0e:ee:21:07:3f:71:bb:31:06:b8:
c9:d5:d1:d9:57:c5:e3:64:73:f2:58:57:41:c0:47:
d4:3e:4a:c2:9a:71:74:38:d6:cb:7c:08:9e:e1:46:
9d:8e:9b:35:c1:8f:02:47:91:7f:4b:97:2f:39:d2:
83:8c:23:61:2f:93:3c:85:ec:76:74:a0:3b:0f:3c:
8b:27:79:34:6e:66:1a:f5:f0:51:63:a6:6d:ab:b2:
d4:8a:a7:e1:03:14:a4:c3:f6:a4:a9:e0:1a:3a:78:
80:83:06:79:72:2a:11:1c:25:04:d5:a1:b7:62:79:
4d:56:2b:1b:91:a5:66:1c:6a:fd:28:00:2c:ff:89:
e3:d3:0d:10:2a:92:f5:76:ef:34:e8:94:f9:0b:39:
bd:10:1c:64:b2:29:32:6b:ad:e9:27:7c:2d:02:a3:
25:45:eb:a4:40:93:04:80:b5:3a:b3:05:b0:3f:37:
0a:f1:56:3b:e9:0b:10:59:c7:db:ab:19:4b:db:98:
cd:8f:0b:3b:b6:85:90:30:6c:ba:b3:d7:37:f6:7b:
79:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2E:CF:6F:F1:AD:BB:62:F1:4C:46:90:39:98:61:50:6B:B3:EA:71
X509v3 Authority Key Identifier:
keyid:70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:16:60:ae:fc:b5:cb:b2:46:20:af:39:af:bc:25:3b:13:73:
55:97:0c:2e:cb:30:a7:89:54:be:ac:b0:d8:85:98:01:03:c1:
c5:17:47:1f:dd:e4:1e:2b:d1:eb:69:8e:6e:9d:dd:5e:28:c6:
52:60:48:9e:df:0c:42:90:88:65:12:fc:91:cc:e6:26:f8:69:
35:50:c5:1a:98:3c:0c:3f:f6:4b:17:fb:e8:55:ac:7d:4e:09:
39:16:a6:3c:71:24:46:0e:df:aa:6b:65:76:80:f1:ce:8e:23:
be:cc:5b:71:ca:85:4f:6c:bf:2f:c6:36:eb:9b:bf:ca:d1:51:
a8:b9:c1:3d:c1:37:11:a6:0c:2e:a3:a6:7a:51:43:5d:eb:5b:
ac:ba:9f:08:28:7b:7c:a8:7c:5c:58:53:d5:27:73:a7:6f:dd:
8d:20:04:c6:b7:de:26:b8:de:3d:d5:65:db:71:68:df:17:4e:
d7:32:21:a1:34:95:05:64:61:01:84:67:d7:55:1c:02:cb:4e:
62:52:72:b9:a6:63:64:ac:3f:4a:e0:f3:95:14:80:ef:14:56:
1e:f1:78:62:97:16:7a:d1:bd:6d:f9:a2:12:cb:88:a4:6e:bb:
1b:12:b7:37:78:05:08:ba:69:75:10:4e:0e:78:0e:62:6e:03:
18:77:95:f2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0I1NDAxMTAvBgNVBAUTKDcwMkZBMUFFOTY4MkIyQjIyRUNERDlBNTMwMTJGMEU2
RjFCQTFCOUMwHhcNMjUwMzI5MDMzMDQ5WhcNMjUwNDA1MDMzMDQ5WjAYMRYwFAYD
VQQDEw02N2U3Njk2OS0zMTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx31FaP8B6iQN8ADbGjtUnzuNsJFnh+IOmpWhjcurY4Pgq2GLR3BA6qrYTqYi
bzz6EQ7uIQc/cbsxBrjJ1dHZV8XjZHPyWFdBwEfUPkrCmnF0ONbLfAie4Uadjps1
wY8CR5F/S5cvOdKDjCNhL5M8hex2dKA7DzyLJ3k0bmYa9fBRY6Ztq7LUiqfhAxSk
w/akqeAaOniAgwZ5cioRHCUE1aG3YnlNVisbkaVmHGr9KAAs/4nj0w0QKpL1du80
6JT5Czm9EBxksikya63pJ3wtAqMlReukQJMEgLU6swWwPzcK8VY76QsQWcfbqxlL
25jNjws7toWQMGy6s9c39nt5twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKYuz2/x
rbti8UxGkDmYYVBrs+pxMB8GA1UdIwQYMBaAFHAvoa6WgrKyLs3ZpTAS8Obxuhuc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjU0MC9EOTdBOTVCQ0Y4
ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3NySXV6ZG1sTUJMdzV2RzZH
NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NDLWhycGFDc3JJdXpkbWxNQkx3NXZHNkc1dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QjU0MC9EOTdBOTVCQ0Y4ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3Ny
SXV6ZG1sTUJMdzV2RzZHNXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB2FmCu/LXLskYgrzmvvCU7E3NVlwwuyzCniVS+rLDYhZgBA8HFF0cf
3eQeK9HraY5und1eKMZSYEie3wxCkIhlEvyRzOYm+Gk1UMUamDwMP/ZLF/voVax9
Tgk5FqY8cSRGDt+qa2V2gPHOjiO+zFtxyoVPbL8vxjbrm7/K0VGoucE9wTcRpgwu
o6Z6UUNd61usup8IKHt8qHxcWFPVJ3Onb92NIATGt94muN491WXbcWjfF07XMiGh
NJUFZGEBhGfXVRwCy05iUnK5pmNkrD9K4POVFIDvFFYe8XhilxZ60b1t+aISy4ik
brsbErc3eAUIuml1EE4OeA5ibgMYd5Xy
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:45:24 2025 by rpki-client