Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft
File: Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft (raw, json)
Hash identifier: Pq3YkKPnD+OLhws6zty6/e5DHtlYw6/dlCZ7NLgvKS0=
Subject key identifier: BF:64:91:19:33:ED:EF:F0:AB:1E:DA:DB:81:72:C6:71:C0:24:59:2B
Authority key identifier: 03:1E:29:F2:6E:78:32:81:B7:68:E8:91:08:53:14:4D:F1:EE:55:34
Certificate issuer: /CN=A91805BF/serialNumber=031E29F26E783281B768E8910853144DF1EE5534
Certificate serial: 0761
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft
Manifest number: 075B
Signing time: Fri 28 Mar 2025 21:49:47 +0000
Manifest this update: Fri 28 Mar 2025 21:49:46 +0000
Manifest next update: Fri 04 Apr 2025 21:49:46 +0000
Files and hashes: 1: Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl (hash: WBZ/M0z4l2PXx4RYN9+yesuMqgqRcCuvBGRPa7PXuo0=)
2: B89D979A13F411EB8BF49553C4F9AE02.roa (hash: uA//4m9RZCjXQutR/xTMIccaTwt8NsdxBBjUfw2F3iI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1889 (0x761)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91805BF
Validity
Not Before: Mar 28 21:49:46 2025 GMT
Not After : Apr 4 21:49:46 2025 GMT
Subject: CN=67e7197a-10d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:04:50:7e:25:f9:e1:f7:c6:49:0e:60:87:93:
54:ea:be:c1:3e:a3:e1:35:d3:f2:e7:3a:27:53:51:
8b:51:a2:41:7e:0b:e3:46:dd:d9:85:38:fb:45:80:
94:0d:91:19:db:83:70:06:73:c8:6e:2f:e5:8d:64:
50:a3:96:df:c1:41:1a:1e:9b:5b:07:33:a7:69:47:
09:ef:70:0d:ab:4b:51:69:36:de:0b:8c:c4:3e:c1:
94:c2:eb:22:95:b2:a9:9b:4c:23:cb:74:1a:de:38:
54:29:8a:bf:ed:09:57:6e:1c:d0:cb:6e:16:14:0e:
42:d5:bd:4b:e2:e8:84:64:35:d9:85:18:e7:23:b6:
28:47:7c:6c:68:4e:06:36:85:21:99:96:b6:09:ee:
05:35:98:d9:a7:59:24:ff:be:51:0d:4e:e9:e6:88:
6e:60:dd:07:38:e4:dc:c0:98:bc:a3:28:d8:26:f4:
b7:fd:3e:87:27:96:30:00:5c:8a:5b:60:56:c0:fb:
d4:6d:90:88:47:ec:e1:fe:4f:00:da:44:e0:2a:aa:
57:c3:a6:e4:fc:1e:79:c0:e9:e5:7d:f7:91:2d:0f:
42:25:cf:be:7c:10:aa:47:65:05:e8:e7:a4:2b:6a:
38:3d:9c:92:a3:ea:44:25:31:49:87:26:b1:de:ec:
5c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:64:91:19:33:ED:EF:F0:AB:1E:DA:DB:81:72:C6:71:C0:24:59:2B
X509v3 Authority Key Identifier:
keyid:03:1E:29:F2:6E:78:32:81:B7:68:E8:91:08:53:14:4D:F1:EE:55:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:40:cb:a8:17:49:89:4b:33:65:23:bc:7b:34:55:f6:d1:5b:
00:e0:46:08:42:10:0b:4d:5a:31:be:53:51:9e:f4:77:d9:ea:
a4:e7:82:4c:a0:fd:7a:b8:34:d4:28:74:ec:69:24:9e:bf:1e:
9a:8d:1d:bf:46:21:b4:cd:f7:00:11:17:e2:83:6f:5c:18:04:
7f:95:ea:e5:ae:ca:8f:26:3e:c6:ae:ce:73:50:e8:c2:71:8a:
c4:08:7f:3c:42:e7:a0:b9:8a:e2:c9:83:5d:65:cb:05:91:4a:
22:6a:8a:6f:91:6b:25:de:a5:ad:a7:63:16:aa:f6:20:a6:00:
c2:79:bf:2e:75:fa:72:a0:b9:39:3c:11:d1:59:91:cc:e6:da:
ae:5a:3a:05:7a:c9:5c:31:32:c0:68:e3:05:4b:8a:08:36:f5:
72:f8:ec:a2:85:f6:d3:09:3c:0a:14:6c:8b:f6:26:d9:c5:e8:
36:d5:3f:f5:ab:e4:76:29:02:6d:59:9e:6e:8b:d2:14:01:6f:
f3:23:92:64:73:cf:0e:b2:ad:38:d2:21:73:77:f6:ab:af:92:
d3:2c:d0:68:84:cc:8d:df:f9:f6:bd:ba:07:77:99:02:1a:f8:
88:e0:71:1e:12:96:d5:ed:12:83:47:8e:cd:6a:54:ed:0d:98:
2e:1a:51:5d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODA1QkYxMTAvBgNVBAUTKDAzMUUyOUYyNkU3ODMyODFCNzY4RTg5MTA4NTMxNDRE
RjFFRTU1MzQwHhcNMjUwMzI4MjE0OTQ2WhcNMjUwNDA0MjE0OTQ2WjAYMRYwFAYD
VQQDEw02N2U3MTk3YS0xMGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAswRQfiX54ffGSQ5gh5NU6r7BPqPhNdPy5zonU1GLUaJBfgvjRt3ZhTj7RYCU
DZEZ24NwBnPIbi/ljWRQo5bfwUEaHptbBzOnaUcJ73ANq0tRaTbeC4zEPsGUwusi
lbKpm0wjy3Qa3jhUKYq/7QlXbhzQy24WFA5C1b1L4uiEZDXZhRjnI7YoR3xsaE4G
NoUhmZa2Ce4FNZjZp1kk/75RDU7p5ohuYN0HOOTcwJi8oyjYJvS3/T6HJ5YwAFyK
W2BWwPvUbZCIR+zh/k8A2kTgKqpXw6bk/B55wOnlffeRLQ9CJc++fBCqR2UF6Oek
K2o4PZySo+pEJTFJhyax3uxc/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9kkRkz
7e/wqx7a24FyxnHAJFkrMB8GA1UdIwQYMBaAFAMeKfJueDKBt2jokQhTFE3x7lU0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDVCRi9GMTMzQkRBQzEz
RjIxMUVCOUJFRkNENTFDNEY5QUUwMi9BeDRwOG01NE1vRzNhT2lSQ0ZNVVRmSHVW
VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0F4NHA4bTU0TW9HM2FPaVJDRk1VVGZIdVZUUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDVCRi9GMTMzQkRBQzEzRjIxMUVCOUJFRkNENTFDNEY5QUUwMi9BeDRwOG01NE1v
RzNhT2lSQ0ZNVVRmSHVWVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCWQMuoF0mJSzNlI7x7NFX20VsA4EYIQhALTVoxvlNRnvR32eqk54JM
oP16uDTUKHTsaSSevx6ajR2/RiG0zfcAERfig29cGAR/lerlrsqPJj7Grs5zUOjC
cYrECH88QueguYriyYNdZcsFkUoiaopvkWsl3qWtp2MWqvYgpgDCeb8udfpyoLk5
PBHRWZHM5tquWjoFeslcMTLAaOMFS4oINvVy+OyihfbTCTwKFGyL9ibZxeg21T/1
q+R2KQJtWZ5ui9IUAW/zI5Jkc88Osq040iFzd/arr5LTLNBohMyN3/n2vboHd5kC
GviI4HEeEpbV7RKDR47NalTtDZguGlFd
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:09:11 2025 by rpki-client