Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.mft
File: FTtjqTdzsliYghhmVd7zBEbdhg0.mft (raw, json)
Hash identifier: dptjkhR0cCcZzBs6oOOPJvkLVqMzZwn0hygcfDjLLWk=
Subject key identifier: 74:14:7A:6A:CA:AD:B8:12:87:8F:6A:59:AA:95:13:88:8A:F4:EF:5E
Authority key identifier: 15:3B:63:A9:37:73:B2:58:98:82:18:66:55:DE:F3:04:46:DD:86:0D
Certificate issuer: /CN=A91810B4/serialNumber=153B63A93773B2589882186655DEF30446DD860D
Certificate serial: 0245
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTtjqTdzsliYghhmVd7zBEbdhg0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.mft
Manifest number: 0241
Signing time: Sat 29 Mar 2025 02:07:39 +0000
Manifest this update: Sat 29 Mar 2025 02:07:39 +0000
Manifest next update: Sat 05 Apr 2025 02:07:39 +0000
Files and hashes: 1: FTtjqTdzsliYghhmVd7zBEbdhg0.crl (hash: RAJf84Ks5T8SDreHT6ho87IIrgudkKNeFmDuDF780NM=)
2: 27A32D7A16BA11EDB0E9E464C4F9AE02.roa (hash: uux+o2sOdsirWh/aoHrxCjsCKmrUczbEHaZJtHyFOgA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 581 (0x245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91810B4
Validity
Not Before: Mar 29 02:07:39 2025 GMT
Not After : Apr 5 02:07:39 2025 GMT
Subject: CN=67e755eb-f76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:70:31:c2:bb:1c:d7:b7:96:82:e0:03:e4:ce:
e7:3a:1e:ff:5f:11:66:65:02:e3:12:a5:87:2a:5d:
a7:51:e7:35:e1:0d:8c:23:0e:6c:5d:f0:61:72:cf:
ac:a4:08:40:d9:46:1f:bc:b6:bf:dd:bc:ae:aa:88:
8d:c2:8b:3a:53:b9:d3:d7:67:77:94:20:08:94:33:
b0:06:97:21:1d:8e:e5:0f:6a:de:28:60:50:9e:49:
25:ec:85:f3:07:3c:bf:b3:04:ba:a2:b2:fe:b2:15:
10:6a:dc:63:4d:4d:ea:9a:8d:05:e4:d9:1c:cd:2e:
26:d7:31:01:84:e1:24:89:be:6f:91:dc:13:29:08:
af:47:5c:42:33:67:d0:43:db:1b:b0:c4:58:3f:f8:
98:10:65:0d:0d:c8:02:e3:9e:dd:a8:ab:d4:70:54:
e4:a4:d7:49:0f:d8:65:69:fc:fc:9f:06:da:27:9d:
dd:db:7e:dc:ef:0f:62:56:c4:3a:91:f7:fb:6e:71:
e6:b2:08:9e:bb:6b:57:0f:44:bb:88:7d:9a:1a:b9:
1e:43:04:c4:e9:e2:16:8d:5c:ed:30:ba:b6:58:64:
45:ef:12:e1:4f:4b:90:ad:c2:56:02:f6:3b:70:32:
8b:56:1d:28:b2:03:4a:0e:1d:8b:f6:f3:98:22:e4:
a8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:14:7A:6A:CA:AD:B8:12:87:8F:6A:59:AA:95:13:88:8A:F4:EF:5E
X509v3 Authority Key Identifier:
keyid:15:3B:63:A9:37:73:B2:58:98:82:18:66:55:DE:F3:04:46:DD:86:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTtjqTdzsliYghhmVd7zBEbdhg0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:c4:2e:1c:a4:e3:1c:2d:e5:77:ac:5d:f5:c7:dc:f0:6f:32:
3b:e6:55:b5:6f:a8:99:82:09:3e:5f:10:ee:9f:4b:02:d1:a5:
33:b8:ab:f8:65:5b:d7:3b:f9:d0:a3:1c:f3:81:48:18:f2:bf:
61:1d:c0:cb:46:92:a5:4b:7d:a8:de:57:33:74:f1:0c:aa:c7:
ca:0b:c3:23:f9:60:7e:4a:8b:66:24:c7:a7:f5:1a:d8:4b:4c:
3a:a6:ad:21:46:90:5d:e3:a6:8a:eb:65:a9:d9:01:82:7f:eb:
11:b5:53:1b:a5:03:d8:1d:88:1b:d7:8d:ac:99:da:95:3b:a1:
a2:0d:a8:c9:42:7e:ed:0b:62:8b:8d:78:94:8c:da:a9:8d:8f:
de:b4:cc:00:fb:dc:1b:c0:07:4c:92:7c:37:95:d7:5e:00:af:
3f:12:3a:30:5b:46:d1:5b:7f:09:9f:6e:ad:9b:37:64:a5:57:
62:72:69:c6:ce:e9:02:33:77:bb:08:d2:e5:7d:87:e0:2b:28:
1f:a6:7c:9e:9f:10:80:0d:02:21:36:6c:85:0a:51:02:00:c5:
de:d5:fc:bc:5d:76:1f:94:7e:a2:18:a0:a2:f4:87:cc:a7:1f:
08:fe:48:7c:b7:f1:95:88:e2:ec:d0:7d:a2:9c:88:4b:c4:e7:
88:b2:45:61
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODEwQjQxMTAvBgNVBAUTKDE1M0I2M0E5Mzc3M0IyNTg5ODgyMTg2NjU1REVGMzA0
NDZERDg2MEQwHhcNMjUwMzI5MDIwNzM5WhcNMjUwNDA1MDIwNzM5WjAYMRYwFAYD
VQQDEw02N2U3NTVlYi1mNzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs3Axwrsc17eWguAD5M7nOh7/XxFmZQLjEqWHKl2nUec14Q2MIw5sXfBhcs+s
pAhA2UYfvLa/3byuqoiNwos6U7nT12d3lCAIlDOwBpchHY7lD2reKGBQnkkl7IXz
Bzy/swS6orL+shUQatxjTU3qmo0F5NkczS4m1zEBhOEkib5vkdwTKQivR1xCM2fQ
Q9sbsMRYP/iYEGUNDcgC457dqKvUcFTkpNdJD9hlafz8nwbaJ53d237c7w9iVsQ6
kff7bnHmsgieu2tXD0S7iH2aGrkeQwTE6eIWjVztMLq2WGRF7xLhT0uQrcJWAvY7
cDKLVh0osgNKDh2L9vOYIuSogQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQUemrK
rbgSh49qWaqVE4iK9O9eMB8GA1UdIwQYMBaAFBU7Y6k3c7JYmIIYZlXe8wRG3YYN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTBCNC83N0Q1MkFBMDE2
QjUxMUVEOTgwM0EyNzJDNEY5QUUwMi9GVHRqcVRkenNsaVlnaGhtVmQ3ekJFYmRo
ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZUdGpxVGR6c2xpWWdoaG1WZDd6QkViZGhnMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MTBCNC83N0Q1MkFBMDE2QjUxMUVEOTgwM0EyNzJDNEY5QUUwMi9GVHRqcVRkenNs
aVlnaGhtVmQ3ekJFYmRoZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBixC4cpOMcLeV3rF31x9zwbzI75lW1b6iZggk+XxDun0sC0aUzuKv4
ZVvXO/nQoxzzgUgY8r9hHcDLRpKlS32o3lczdPEMqsfKC8Mj+WB+SotmJMen9RrY
S0w6pq0hRpBd46aK62Wp2QGCf+sRtVMbpQPYHYgb142smdqVO6GiDajJQn7tC2KL
jXiUjNqpjY/etMwA+9wbwAdMknw3lddeAK8/EjowW0bRW38Jn26tmzdkpVdicmnG
zukCM3e7CNLlfYfgKygfpnyenxCADQIhNmyFClECAMXe1fy8XXYflH6iGKCi9IfM
px8I/kh8t/GViOLs0H2inIhLxOeIskVh
-----END CERTIFICATE-----
Generated at Sat Apr 5 05:52:26 2025 by rpki-client