Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft
File: hNqJJ83vUDOW9ScgGU65MSCdPzo.mft (raw, json)
Hash identifier: slMOXMkP77CWOS5zoflrkNa0N5OPwaJHSSgtSmkC/cg=
Subject key identifier: 8C:E3:15:E0:02:00:DD:0D:6D:CB:26:B3:DB:7E:D5:8E:83:BC:B8:58
Authority key identifier: 84:DA:89:27:CD:EF:50:33:96:F5:27:20:19:4E:B9:31:20:9D:3F:3A
Certificate issuer: /CN=A917F051/serialNumber=84DA8927CDEF503396F52720194EB931209D3F3A
Certificate serial: 02EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft
Manifest number: 02E2
Signing time: Sat 29 Mar 2025 01:36:57 +0000
Manifest this update: Sat 29 Mar 2025 01:36:56 +0000
Manifest next update: Sat 05 Apr 2025 01:36:56 +0000
Files and hashes: 1: hNqJJ83vUDOW9ScgGU65MSCdPzo.crl (hash: z870pQ0RPyGUSDsXqBL4yVZOuUz5lsq/3OLHONhokH0=)
2: 6910E952A86A11EF89DA976DC4F9AE02.roa (hash: 4aOmdIiBIBTvtytMx9F80hnUu5xyycNyp3dSZvfw2H4=)
3: 3EABAF20D8E311EC8F274181C4F9AE02.roa (hash: H4uvOPnOQR7kaTV0mxINyaPGqrlb9ZsfEdxZE+ZhLPI=)
4: 00F0B7EEA87411EF88F5C638C4F9AE02.roa (hash: sGJBxLCH9iu9CcWMb6plXCanRkikajpBvxJ9Q78R1qo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 747 (0x2eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F051
Validity
Not Before: Mar 29 01:36:56 2025 GMT
Not After : Apr 5 01:36:56 2025 GMT
Subject: CN=67e74eb9-d28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fa:e6:88:af:a9:5a:c6:15:ba:7b:e6:a5:53:
bf:66:81:f9:1c:33:d4:97:7e:90:6a:e4:5b:f5:8b:
d2:dd:92:fe:d1:8b:a0:88:c5:6e:a0:bf:54:87:27:
b0:52:6b:d9:2c:bf:3f:61:d8:4b:cd:58:1f:49:df:
d6:4e:eb:57:52:5c:e2:68:fc:fc:31:80:3f:3e:21:
0f:1b:8b:2d:de:26:54:f1:fc:6f:00:e3:b7:f8:86:
17:ec:8c:d5:ce:db:64:14:e4:b7:6e:c1:d9:34:69:
ab:f8:25:56:40:33:ca:a4:54:e0:97:48:ed:14:9d:
0b:85:e4:49:82:fa:d5:ce:ac:48:13:fa:14:fd:df:
5f:47:a6:ad:72:f9:9d:bf:d8:38:5c:f5:51:e3:72:
a7:aa:91:c1:4c:81:24:a2:c9:02:d3:ef:80:20:d1:
2d:6d:dd:bb:49:86:7f:ea:14:86:14:7d:88:85:ca:
f3:83:73:98:29:57:ba:a6:8e:58:79:ee:60:c5:a6:
86:96:24:88:3e:30:75:43:46:ae:24:b8:fb:ed:7b:
25:2e:45:a0:eb:94:9d:a6:f3:39:91:41:7a:a9:b9:
99:98:26:c6:af:88:95:41:68:85:ee:12:44:9e:fd:
c0:da:b4:b7:be:f7:6c:a7:3c:75:8e:1f:d0:38:38:
19:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E3:15:E0:02:00:DD:0D:6D:CB:26:B3:DB:7E:D5:8E:83:BC:B8:58
X509v3 Authority Key Identifier:
keyid:84:DA:89:27:CD:EF:50:33:96:F5:27:20:19:4E:B9:31:20:9D:3F:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:35:d6:77:9f:6e:18:3d:9e:57:95:4b:f9:3e:a6:35:11:d3:
bb:2f:9b:1b:89:90:a1:33:df:38:fa:d0:95:3a:1e:69:93:c5:
b2:73:e0:2e:8e:00:d5:40:94:e3:ca:28:45:a6:dd:8f:f0:52:
a3:a9:c0:d3:e2:aa:c7:d3:d0:69:ff:9d:a3:a1:ea:99:aa:4a:
1e:4e:69:7a:4c:4d:6e:2e:4b:00:b8:71:e2:f0:81:53:4b:b1:
b4:d8:52:0c:74:a3:96:39:70:2f:99:f5:46:3e:46:5c:15:70:
54:bd:b4:20:ec:6a:67:77:c1:4d:23:23:16:32:eb:6f:88:80:
af:3a:41:f1:4a:67:1b:7a:56:1d:f6:c4:90:67:9b:6b:29:e8:
6c:e7:e1:b2:dc:80:5e:d7:40:ee:06:05:10:01:9d:89:3e:5a:
78:c3:54:06:b0:af:37:21:03:7a:f0:21:34:3c:46:8b:d9:c2:
3e:c2:1a:9f:98:79:e9:44:79:b9:45:b4:d1:39:9e:8d:17:21:
c2:9f:ec:3b:44:60:18:c7:f7:d2:83:a9:75:34:fb:8a:4b:76:
d6:7b:3b:da:c9:8c:58:8c:f0:7a:98:21:3b:7b:bd:48:f8:79:
98:9c:1d:53:d6:03:5d:98:1c:7b:f4:41:8a:ea:d5:e5:6e:73:
63:90:b2:74
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0YwNTExMTAvBgNVBAUTKDg0REE4OTI3Q0RFRjUwMzM5NkY1MjcyMDE5NEVCOTMx
MjA5RDNGM0EwHhcNMjUwMzI5MDEzNjU2WhcNMjUwNDA1MDEzNjU2WjAYMRYwFAYD
VQQDEw02N2U3NGViOS1kMjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx/rmiK+pWsYVunvmpVO/ZoH5HDPUl36QauRb9YvS3ZL+0YugiMVuoL9Uhyew
UmvZLL8/YdhLzVgfSd/WTutXUlziaPz8MYA/PiEPG4st3iZU8fxvAOO3+IYX7IzV
zttkFOS3bsHZNGmr+CVWQDPKpFTgl0jtFJ0LheRJgvrVzqxIE/oU/d9fR6atcvmd
v9g4XPVR43KnqpHBTIEkoskC0++AINEtbd27SYZ/6hSGFH2Ihcrzg3OYKVe6po5Y
ee5gxaaGliSIPjB1Q0auJLj77XslLkWg65SdpvM5kUF6qbmZmCbGr4iVQWiF7hJE
nv3A2rS3vvdspzx1jh/QODgZLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzjFeAC
AN0Nbcsms9t+1Y6DvLhYMB8GA1UdIwQYMBaAFITaiSfN71AzlvUnIBlOuTEgnT86
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjA1MS81QUFEOUQ3RUQ4
REQxMUVDQTVERDBDNTBDNEY5QUUwMi9oTnFKSjgzdlVET1c5U2NnR1U2NU1TQ2RQ
em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hOcUpKODN2VURPVzlTY2dHVTY1TVNDZFB6by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RjA1MS81QUFEOUQ3RUQ4REQxMUVDQTVERDBDNTBDNEY5QUUwMi9oTnFKSjgzdlVE
T1c5U2NnR1U2NU1TQ2RQem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAqNdZ3n24YPZ5XlUv5PqY1EdO7L5sbiZChM984+tCVOh5pk8Wyc+Au
jgDVQJTjyihFpt2P8FKjqcDT4qrH09Bp/52joeqZqkoeTml6TE1uLksAuHHi8IFT
S7G02FIMdKOWOXAvmfVGPkZcFXBUvbQg7Gpnd8FNIyMWMutviICvOkHxSmcbelYd
9sSQZ5trKehs5+Gy3IBe10DuBgUQAZ2JPlp4w1QGsK83IQN68CE0PEaL2cI+whqf
mHnpRHm5RbTROZ6NFyHCn+w7RGAYx/fSg6l1NPuKS3bWezvayYxYjPB6mCE7e71I
+HmYnB1T1gNdmBx79EGK6tXlbnNjkLJ0
-----END CERTIFICATE-----
Generated at Thu Apr 10 19:45:30 2025 by rpki-client