Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
File: aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft (raw, json)
Hash identifier: 0avMJicCqMhYO/Eotu9G0em4buucnGGqJ8eF/RAJSOg=
Subject key identifier: AB:5D:A8:BA:BD:9E:DD:D6:79:81:FC:4C:DB:2A:F0:0C:48:36:0E:E1
Authority key identifier: 69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6
Certificate issuer: /CN=A917BED0/serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6
Certificate serial: 01B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
Manifest number: 01AB
Signing time: Sat 29 Mar 2025 02:48:17 +0000
Manifest this update: Sat 29 Mar 2025 02:48:16 +0000
Manifest next update: Sat 05 Apr 2025 02:48:16 +0000
Files and hashes: 1: aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl (hash: VoQOQYjlCdEPJ4o8PdarScR00FJjVJLGOeoph7j+ET0=)
2: 24AC43889DE011EDA182F455C4F9AE02.roa (hash: VEixjX/Xe+G6aJHNRJCpYadqa0JmMvyZd3MR6Kj/fCY=)
3: 236FAC269DE011EDA182F455C4F9AE02.roa (hash: DvFHTfUMj5djbvwopTj+xsfhSJgyhsfDlJJptgV29ak=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434 (0x1b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BED0
Validity
Not Before: Mar 29 02:48:16 2025 GMT
Not After : Apr 5 02:48:16 2025 GMT
Subject: CN=67e75f71-be1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:13:fa:1d:ea:d4:1e:76:31:79:79:a7:d8:64:
04:b1:34:ed:2b:0f:78:dd:18:b2:a7:46:d4:c9:5b:
79:25:1a:e5:a4:15:5f:cc:7d:a6:9f:bf:6a:69:f1:
5d:9a:b0:00:71:f8:0c:14:7f:3b:d9:7f:bb:34:4f:
2d:70:38:7c:e2:23:e8:61:7b:9a:1b:a9:f6:46:aa:
51:cb:03:85:79:2f:81:51:11:78:19:d5:e7:41:d0:
38:ff:00:18:e1:5f:68:89:e4:c1:29:2b:a7:f4:5f:
75:bf:4f:18:4c:5d:8f:e9:c0:2c:ea:98:19:b7:7e:
da:fb:75:2d:97:54:12:5c:07:9e:74:67:31:de:38:
50:23:05:69:62:cf:92:1a:39:9e:a7:43:fe:2e:0e:
76:6f:09:1a:78:b4:71:1e:58:0d:a4:43:86:06:7d:
16:65:40:29:12:46:da:c7:14:f4:58:1c:07:0f:43:
51:ea:a6:f2:b4:23:9c:9a:47:5f:07:a5:a9:7a:3b:
e0:43:a8:a8:4d:68:95:0f:6c:8e:7d:06:39:53:0b:
7e:2b:5a:c3:a7:9b:b9:c9:09:61:9a:3d:06:32:7c:
b3:60:bb:5b:34:84:37:73:14:b8:88:fd:57:56:0d:
16:bc:9a:cb:e2:8c:77:28:40:9f:7b:bc:f9:7e:b8:
ab:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5D:A8:BA:BD:9E:DD:D6:79:81:FC:4C:DB:2A:F0:0C:48:36:0E:E1
X509v3 Authority Key Identifier:
keyid:69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:9c:4b:87:aa:d1:e5:37:ad:db:1c:4b:10:c1:31:0a:7c:66:
8d:56:99:ed:19:2e:c3:ba:9f:f3:04:70:04:e1:d1:1e:f7:f2:
84:52:cc:57:1e:bb:55:f7:e1:3b:16:6d:fd:b2:fa:83:35:ea:
53:7c:6f:c8:f2:66:f7:f4:88:7b:c6:63:00:47:74:e0:0a:ec:
68:b9:af:71:e5:01:c1:90:4c:31:c4:f9:15:44:d1:b2:0f:e2:
4f:b0:c7:f5:32:d2:43:04:17:95:32:ae:dc:9f:2f:3b:f9:b8:
26:35:1e:09:a3:37:90:39:91:37:4a:1d:0f:4d:3a:aa:96:10:
00:1d:7f:c8:74:5c:60:a8:b1:98:81:6a:1a:c9:92:aa:77:6b:
96:b1:8f:24:09:e2:43:39:6c:de:33:f8:06:85:fb:f4:a4:aa:
f9:3a:ca:54:58:17:f9:da:b8:55:20:05:7b:ca:2e:2e:9c:04:
b7:0f:e0:9b:5c:36:bb:d6:33:a7:47:17:3f:50:de:6d:7e:2d:
20:07:79:0d:97:5f:5f:51:06:d6:32:b9:38:ac:ec:04:3d:46:
84:5c:6b:dc:2f:23:4e:92:f6:bc:18:5c:50:fe:f1:d7:ca:4b:
78:66:49:de:ac:63:60:69:74:43:28:cd:4f:6d:81:16:81:75:
a1:0b:62:34
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0JFRDAxMTAvBgNVBAUTKDY5MkVCRDNEMDNGMjU4NzQ2RTY4NDNCNjEyOEREMjA5
QzUxMjIyRTYwHhcNMjUwMzI5MDI0ODE2WhcNMjUwNDA1MDI0ODE2WjAYMRYwFAYD
VQQDEw02N2U3NWY3MS1iZTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAthP6HerUHnYxeXmn2GQEsTTtKw943Riyp0bUyVt5JRrlpBVfzH2mn79qafFd
mrAAcfgMFH872X+7NE8tcDh84iPoYXuaG6n2RqpRywOFeS+BURF4GdXnQdA4/wAY
4V9oieTBKSun9F91v08YTF2P6cAs6pgZt37a+3Utl1QSXAeedGcx3jhQIwVpYs+S
Gjmep0P+Lg52bwkaeLRxHlgNpEOGBn0WZUApEkbaxxT0WBwHD0NR6qbytCOcmkdf
B6WpejvgQ6ioTWiVD2yOfQY5Uwt+K1rDp5u5yQlhmj0GMnyzYLtbNIQ3cxS4iP1X
Vg0WvJrL4ox3KECfe7z5frir9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKtdqLq9
nt3WeYH8TNsq8AxINg7hMB8GA1UdIwQYMBaAFGkuvT0D8lh0bmhDthKN0gnFEiLm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVEMC9EREI1ODlBMDgw
MTkxMUVEQkJCRTMwNkVDNEY5QUUwMi9hUzY5UFFQeVdIUnVhRU8yRW8zU0NjVVNJ
dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FTNjlQUVB5V0hSdWFFTzJFbzNTQ2NVU0l1WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QkVEMC9EREI1ODlBMDgwMTkxMUVEQkJCRTMwNkVDNEY5QUUwMi9hUzY5UFFQeVdI
UnVhRU8yRW8zU0NjVVNJdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBPnEuHqtHlN63bHEsQwTEKfGaNVpntGS7Dup/zBHAE4dEe9/KEUsxX
HrtV9+E7Fm39svqDNepTfG/I8mb39Ih7xmMAR3TgCuxoua9x5QHBkEwxxPkVRNGy
D+JPsMf1MtJDBBeVMq7cny87+bgmNR4JozeQOZE3Sh0PTTqqlhAAHX/IdFxgqLGY
gWoayZKqd2uWsY8kCeJDOWzeM/gGhfv0pKr5OspUWBf52rhVIAV7yi4unAS3D+Cb
XDa71jOnRxc/UN5tfi0gB3kNl19fUQbWMrk4rOwEPUaEXGvcLyNOkva8GFxQ/vHX
ykt4ZknerGNgaXRDKM1PbYEWgXWhC2I0
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:37:38 2025 by rpki-client