Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.mft
File: KN1yVzxbraKIuDKzmB_0yYsvjFE.mft (raw, json)
Hash identifier: +Vd4XW50Gw3z6GTCiN8lcphYA9Unwdez2sSc7lyMx30=
Subject key identifier: F7:00:CD:6B:DA:52:C0:07:18:3E:2F:8A:05:9B:33:61:9F:88:21:44
Authority key identifier: 28:DD:72:57:3C:5B:AD:A2:88:B8:32:B3:98:1F:F4:C9:8B:2F:8C:51
Certificate issuer: /CN=A9180174/serialNumber=28DD72573C5BADA288B832B3981FF4C98B2F8C51
Certificate serial: 04D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KN1yVzxbraKIuDKzmB_0yYsvjFE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.mft
Manifest number: 04D1
Signing time: Sat 29 Mar 2025 00:04:52 +0000
Manifest this update: Sat 29 Mar 2025 00:04:52 +0000
Manifest next update: Sat 05 Apr 2025 00:04:52 +0000
Files and hashes: 1: KN1yVzxbraKIuDKzmB_0yYsvjFE.crl (hash: SS60Cn7NjTETZ2uj9isV88XKldTHdnXroNHiQ2scjYA=)
2: F6750B60168D11EC89C9CB5DC4F9AE02.roa (hash: 9is5aeB2FzFVh9EnamHZGKMz2wLecoiTResPsgf3D2Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1239 (0x4d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180174
Validity
Not Before: Mar 29 00:04:52 2025 GMT
Not After : Apr 5 00:04:52 2025 GMT
Subject: CN=67e73924-9824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2c:1a:20:48:d2:fe:0e:5b:a6:d8:9f:93:76:
a2:db:99:d5:f2:19:e7:2e:12:f7:bf:3a:99:14:f7:
b9:9b:fd:e4:e4:33:f7:bc:8f:66:f9:e5:53:c8:a4:
88:b5:36:ff:4d:8c:82:ff:5d:5c:6f:7d:d1:fa:2e:
79:cd:ca:1e:7a:f2:e6:92:1c:16:a3:21:97:e5:27:
88:7e:2d:41:44:44:4b:0c:c6:b3:4a:1e:03:f9:e9:
44:1b:4c:2e:b0:d6:5d:3e:f9:69:05:b2:a6:63:1c:
96:ba:58:cf:5e:3d:a3:21:86:19:82:5c:28:3a:94:
95:5f:72:35:4d:fc:c4:95:4e:e0:6b:ef:2a:f3:7e:
a2:57:fd:a1:37:21:8b:a1:03:cb:94:d1:5b:02:09:
b5:37:57:b5:28:2f:9e:d7:e7:e3:a6:50:1c:62:1f:
1b:7c:fc:40:e6:77:e8:5b:60:1e:bb:cc:8d:23:c4:
9b:b5:53:13:2d:85:df:0f:81:e0:2d:84:5f:9b:77:
6e:1f:12:4d:bc:83:1e:fa:21:ca:5e:ff:8d:d8:5e:
7f:a2:21:e7:4d:cd:63:12:42:77:65:34:58:7c:e2:
94:52:43:a2:33:e0:be:13:6c:8b:e7:45:cd:d5:8d:
70:56:ff:61:ff:7c:00:66:64:11:2b:69:69:da:26:
fa:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:00:CD:6B:DA:52:C0:07:18:3E:2F:8A:05:9B:33:61:9F:88:21:44
X509v3 Authority Key Identifier:
keyid:28:DD:72:57:3C:5B:AD:A2:88:B8:32:B3:98:1F:F4:C9:8B:2F:8C:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KN1yVzxbraKIuDKzmB_0yYsvjFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:aa:ca:66:2b:9f:7e:90:0e:2c:1b:60:11:5a:a6:bd:30:99:
e5:d1:fe:0f:2f:38:d3:9a:b5:94:de:0d:cc:fe:91:88:42:5d:
c4:2c:c6:47:92:bd:27:0c:09:2e:8d:6d:f2:38:00:bb:65:ce:
18:60:d7:67:dd:6d:cb:a6:00:5d:21:db:69:94:4e:ed:a0:ad:
b8:c8:e4:08:fa:2b:41:0a:48:cc:81:4a:d5:16:05:50:43:47:
02:91:41:e5:d5:16:01:9d:c0:6e:88:d3:9e:05:89:0b:88:88:
b9:26:b0:6d:ea:82:f9:03:fd:09:d8:9b:26:26:59:55:02:66:
b1:0b:f6:81:97:93:63:ed:a8:c2:a3:33:24:a1:24:a0:51:1f:
5c:c0:49:c0:78:64:39:6b:95:55:b4:23:6d:5b:7c:63:f8:58:
d9:ad:1d:0e:b9:cb:36:de:26:00:64:0e:44:01:55:5f:36:69:
d2:ed:d8:13:fd:67:e9:73:08:be:99:1f:68:3d:9b:c8:8a:d0:
c4:a8:3b:6c:b4:56:f3:f6:8d:c9:23:27:92:cc:35:5b:2d:a7:
bc:53:17:9a:e0:50:33:3a:a9:a3:b8:29:29:47:ee:a2:56:02:
b5:d0:24:93:62:e3:cf:63:fc:4f:de:4e:d3:c4:ae:06:ef:35:
5e:85:a1:57
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODAxNzQxMTAvBgNVBAUTKDI4REQ3MjU3M0M1QkFEQTI4OEI4MzJCMzk4MUZGNEM5
OEIyRjhDNTEwHhcNMjUwMzI5MDAwNDUyWhcNMjUwNDA1MDAwNDUyWjAYMRYwFAYD
VQQDEw02N2U3MzkyNC05ODI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwCwaIEjS/g5bptifk3ai25nV8hnnLhL3vzqZFPe5m/3k5DP3vI9m+eVTyKSI
tTb/TYyC/11cb33R+i55zcoeevLmkhwWoyGX5SeIfi1BRERLDMazSh4D+elEG0wu
sNZdPvlpBbKmYxyWuljPXj2jIYYZglwoOpSVX3I1TfzElU7ga+8q836iV/2hNyGL
oQPLlNFbAgm1N1e1KC+e1+fjplAcYh8bfPxA5nfoW2Aeu8yNI8SbtVMTLYXfD4Hg
LYRfm3duHxJNvIMe+iHKXv+N2F5/oiHnTc1jEkJ3ZTRYfOKUUkOiM+C+E2yL50XN
1Y1wVv9h/3wAZmQRK2lp2ib6FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPcAzWva
UsAHGD4vigWbM2GfiCFEMB8GA1UdIwQYMBaAFCjdclc8W62iiLgys5gf9MmLL4xR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDE3NC83OUQ2NjYyQTE2
ODkxMUVDODE2MjU4MENDNEY5QUUwMi9LTjF5Vnp4YnJhS0l1REt6bUJfMHlZc3Zq
RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tOMXlWenhicmFLSXVES3ptQl8weVlzdmpGRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDE3NC83OUQ2NjYyQTE2ODkxMUVDODE2MjU4MENDNEY5QUUwMi9LTjF5Vnp4YnJh
S0l1REt6bUJfMHlZc3ZqRkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAgqspmK59+kA4sG2ARWqa9MJnl0f4PLzjTmrWU3g3M/pGIQl3ELMZH
kr0nDAkujW3yOAC7Zc4YYNdn3W3LpgBdIdtplE7toK24yOQI+itBCkjMgUrVFgVQ
Q0cCkUHl1RYBncBuiNOeBYkLiIi5JrBt6oL5A/0J2JsmJllVAmaxC/aBl5Nj7ajC
ozMkoSSgUR9cwEnAeGQ5a5VVtCNtW3xj+FjZrR0Oucs23iYAZA5EAVVfNmnS7dgT
/Wfpcwi+mR9oPZvIitDEqDtstFbz9o3JIyeSzDVbLae8Uxea4FAzOqmjuCkpR+6i
VgK10CSTYuPPY/xP3k7TxK4G7zVehaFX
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:16:16 2025 by rpki-client