Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
File: 4kPzvoJVabsWrLN0vJjavmkLF8E.mft (raw, json)
Hash identifier: MttG8YKf2hzUr0ZZntBmMGQfV9D/6cbRcCvY45+yF0s=
Subject key identifier: 5B:44:83:64:81:42:3E:05:F7:15:57:A4:4D:49:2A:A3:0E:15:DB:E8
Authority key identifier: E2:43:F3:BE:82:55:69:BB:16:AC:B3:74:BC:98:DA:BE:69:0B:17:C1
Certificate issuer: /CN=A917E678/serialNumber=E243F3BE825569BB16ACB374BC98DABE690B17C1
Certificate serial: 0681
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
Manifest number: 065E
Signing time: Fri 28 Mar 2025 17:01:45 +0000
Manifest this update: Fri 28 Mar 2025 17:01:45 +0000
Manifest next update: Fri 04 Apr 2025 17:01:45 +0000
Files and hashes: 1: 4kPzvoJVabsWrLN0vJjavmkLF8E.crl (hash: 7OwBP1lxlSDe6+lCPYUGjUK5+1upXE+fqzfUaT72k1w=)
2: 91E868D4902B11EF87435A54C4F9AE02.roa (hash: M9JBLSmTZK+WGHWP4PBl4vCGB8OpE/d5KiAWANLVB54=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1665 (0x681)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E678
Validity
Not Before: Mar 28 17:01:45 2025 GMT
Not After : Apr 4 17:01:45 2025 GMT
Subject: CN=67e6d5f9-8702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fd:fe:e9:39:de:30:76:6d:44:6b:86:5c:e9:
33:46:ea:68:c4:b3:c7:4d:24:87:0c:5c:f3:6d:89:
c5:f4:4e:40:2a:99:3e:42:06:ec:24:6f:69:4a:13:
4f:14:ed:72:81:2a:3a:45:bb:cc:73:3d:5e:0f:5b:
73:70:cb:1a:8f:09:d7:f5:9e:06:14:62:ce:7c:d0:
9d:76:8b:23:82:ce:df:ca:73:d0:48:5f:8e:8e:d2:
78:17:da:70:b8:60:ff:76:09:39:5b:2e:5e:e6:80:
9a:20:f9:98:2e:ce:c7:42:23:14:e4:3b:b0:80:49:
e0:a8:e1:2b:85:c0:20:9b:6f:a7:b8:81:09:3d:b5:
ca:74:13:3a:df:4b:47:a5:90:ff:de:7d:40:5a:14:
d3:27:ce:de:4c:c9:0a:57:bf:64:83:8a:58:19:8b:
a4:58:c8:d9:4f:0d:8f:b0:06:d5:be:0c:b0:26:88:
a4:21:61:a0:2b:ef:77:68:b7:f4:6e:ab:07:8e:45:
06:0a:ed:e5:3b:d5:c7:2d:f0:ff:ed:2a:41:c8:fc:
8f:3a:8c:b4:c9:9e:30:e4:96:3f:de:c4:14:05:36:
15:76:2c:a9:0a:d8:fc:81:59:11:aa:fd:47:9f:95:
64:ef:7e:84:92:27:48:b9:ec:04:3a:69:61:d8:6c:
fd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:44:83:64:81:42:3E:05:F7:15:57:A4:4D:49:2A:A3:0E:15:DB:E8
X509v3 Authority Key Identifier:
keyid:E2:43:F3:BE:82:55:69:BB:16:AC:B3:74:BC:98:DA:BE:69:0B:17:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:52:ef:f4:4b:69:bb:ad:2e:7b:a1:0d:fa:95:64:df:fe:9c:
2b:95:46:30:96:bc:84:4b:2c:ed:ea:af:ab:f4:30:34:ad:ce:
8c:7a:c9:e7:9d:f9:c5:41:3e:3d:e0:2e:84:ac:9a:1c:4a:ee:
30:43:c3:2a:77:01:83:0c:74:3a:4f:8b:57:d1:8d:f5:b9:b1:
51:d2:b2:aa:c8:60:f7:3e:84:70:be:5c:10:6c:9d:24:e2:bd:
d1:c5:9f:30:72:10:b9:5b:71:b8:ca:39:3d:f2:54:3a:b0:32:
9e:3b:d0:55:ba:80:b8:a4:9a:56:b8:41:f0:c5:a8:93:48:0f:
fa:8c:dc:af:ff:5b:44:dd:51:f0:b4:4e:55:d7:b4:16:f5:26:
a3:21:5f:5b:e0:1a:de:70:8d:f6:cb:cc:ea:35:b4:19:dd:8d:
4a:25:c3:1f:a4:46:1e:4e:ba:29:00:4b:e6:49:dd:5f:ac:1a:
26:3a:27:14:9a:df:e5:83:05:d4:49:68:f8:96:28:c5:90:c2:
0b:b7:e8:01:f9:9d:76:23:d0:cf:74:24:6c:40:71:fb:66:44:
a7:fd:68:96:70:f0:45:8f:09:a9:51:1d:73:2c:9d:2f:cd:60:
a3:07:f7:2e:b7:e2:f4:4b:80:44:d1:91:d3:75:64:3a:b6:bd:
ec:4a:1d:35
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U2NzgxMTAvBgNVBAUTKEUyNDNGM0JFODI1NTY5QkIxNkFDQjM3NEJDOThEQUJF
NjkwQjE3QzEwHhcNMjUwMzI4MTcwMTQ1WhcNMjUwNDA0MTcwMTQ1WjAYMRYwFAYD
VQQDEw02N2U2ZDVmOS04NzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp/3+6TneMHZtRGuGXOkzRupoxLPHTSSHDFzzbYnF9E5AKpk+QgbsJG9pShNP
FO1ygSo6RbvMcz1eD1tzcMsajwnX9Z4GFGLOfNCddosjgs7fynPQSF+OjtJ4F9pw
uGD/dgk5Wy5e5oCaIPmYLs7HQiMU5DuwgEngqOErhcAgm2+nuIEJPbXKdBM630tH
pZD/3n1AWhTTJ87eTMkKV79kg4pYGYukWMjZTw2PsAbVvgywJoikIWGgK+93aLf0
bqsHjkUGCu3lO9XHLfD/7SpByPyPOoy0yZ4w5JY/3sQUBTYVdiypCtj8gVkRqv1H
n5Vk736EkidIuewEOmlh2Gz9EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFtEg2SB
Qj4F9xVXpE1JKqMOFdvoMB8GA1UdIwQYMBaAFOJD876CVWm7FqyzdLyY2r5pCxfB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC9CODk3QzU4MkEx
OUMxMUVCOTJBMkRGMjlDNEY5QUUwMi80a1B6dm9KVmFic1dyTE4wdkpqYXZta0xG
OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0QTFCRUE2MUQ2NjExRTJCMkNEOEI3Qzcy
RkQxRkYyLzRrUHp2b0pWYWJzV3JMTjB2Smphdm1rTEY4RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTY3OC9CODk3QzU4MkExOUMxMUVCOTJBMkRGMjlDNEY5QUUwMi80a1B6dm9KVmFi
c1dyTE4wdkpqYXZta0xGOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBVUu/0S2m7rS57oQ36lWTf/pwrlUYwlryESyzt6q+r9DA0rc6Mesnn
nfnFQT494C6ErJocSu4wQ8MqdwGDDHQ6T4tX0Y31ubFR0rKqyGD3PoRwvlwQbJ0k
4r3RxZ8wchC5W3G4yjk98lQ6sDKeO9BVuoC4pJpWuEHwxaiTSA/6jNyv/1tE3VHw
tE5V17QW9SajIV9b4BrecI32y8zqNbQZ3Y1KJcMfpEYeTropAEvmSd1frBomOicU
mt/lgwXUSWj4lijFkMILt+gB+Z12I9DPdCRsQHH7ZkSn/WiWcPBFjwmpUR1zLJ0v
zWCjB/cut+L0S4BE0ZHTdWQ6tr3sSh01
-----END CERTIFICATE-----
Generated at Fri Apr 11 14:20:27 2025 by rpki-client