Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
File: xC_x0v81KYG8X4IkDsk5TvqzEYY.mft (raw, json)
Hash identifier: 9ZWhF7BwyAQEu07Fphdf+69wV/iAJDKnU/kwWfhmTIM=
Subject key identifier: 99:02:F6:C8:9D:21:FE:D6:D4:5E:12:B7:82:00:91:A5:84:A1:79:2D
Authority key identifier: C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86
Certificate issuer: /CN=A91814E9/serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186
Certificate serial: 0786
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
Manifest number: 077B
Signing time: Fri 28 Mar 2025 21:40:26 +0000
Manifest this update: Fri 28 Mar 2025 21:40:26 +0000
Manifest next update: Fri 04 Apr 2025 21:40:26 +0000
Files and hashes: 1: xC_x0v81KYG8X4IkDsk5TvqzEYY.crl (hash: Dh3D1fRXlOM74SLexqwfFCP3TObaUy8Bq7L6+8SV4rw=)
2: 24D4F9F0E61B11EBBAE35771C4F9AE02.roa (hash: pAxKOEsb1/KFe+q3FlaBgvrNZLF2dQ46tY3qWb9WHrw=)
3: 21EE9510083211EB81509633C4F9AE02.roa (hash: wjVXkLI0cRiF7TL9Zg9ZcPtd+sgFgSN+IcqPU2UoUBo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1926 (0x786)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91814E9
Validity
Not Before: Mar 28 21:40:26 2025 GMT
Not After : Apr 4 21:40:26 2025 GMT
Subject: CN=67e7174a-4cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:56:dd:15:67:f0:02:0d:3a:05:d3:c3:94:9f:
97:77:d7:73:f1:fb:4c:ff:2d:f9:82:86:5c:f2:c0:
f1:e0:fb:1a:50:6f:b8:b0:6b:74:9e:82:8c:cc:ba:
05:1f:e7:65:0e:62:ae:8e:11:72:64:5a:be:89:a3:
95:f3:35:93:ff:a1:e6:44:63:4e:89:55:79:9c:7f:
8b:44:9f:e0:23:e6:17:3e:aa:f5:41:7b:84:ce:e5:
79:2d:96:eb:3e:0e:14:44:85:1d:32:4e:e2:8b:0d:
0d:b9:84:f6:27:0b:12:20:93:2d:5e:b2:7e:1a:76:
7e:01:e3:df:a1:1a:32:e2:21:b2:af:cd:15:60:37:
45:a3:9b:ce:e6:62:82:8a:75:fa:19:68:6f:53:fd:
19:c4:87:e1:65:11:87:aa:b0:be:12:3b:7d:3a:80:
de:ab:1f:cf:68:83:00:05:71:88:44:f7:25:3c:dd:
af:65:1f:61:ab:b5:f1:2e:a4:0b:5f:b8:25:2c:36:
92:d6:82:59:bd:d0:26:e5:9d:59:f8:16:72:e2:fb:
4a:fb:8c:9d:33:ee:bc:33:4a:6d:9a:1a:52:4b:1f:
1b:0c:55:05:73:08:12:d3:8e:e1:0a:ce:b0:de:e2:
77:5b:f2:65:b2:b6:1b:d8:aa:97:ef:22:80:a8:21:
c4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:02:F6:C8:9D:21:FE:D6:D4:5E:12:B7:82:00:91:A5:84:A1:79:2D
X509v3 Authority Key Identifier:
keyid:C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:88:e7:39:03:04:64:05:56:d2:60:26:f5:b4:b5:cc:6a:3a:
f2:7b:27:31:f7:34:a3:c8:b8:3c:e4:4a:bc:c9:be:4f:da:24:
d9:7a:87:30:7f:f7:ea:cf:b0:13:be:01:67:5a:47:3c:62:3b:
fb:83:46:58:44:06:30:9a:4c:66:b7:47:64:4f:c7:0e:0c:7e:
14:c5:11:45:36:95:ad:b7:3e:bd:b9:07:6e:93:7e:4d:ca:69:
ec:38:4c:f7:32:ae:4e:8f:ff:5e:24:b7:0d:4c:1c:28:c0:87:
3f:42:e1:64:14:c1:2e:70:a6:77:cf:15:10:83:9f:6e:b9:08:
c9:07:03:ca:e7:62:a0:11:f1:73:2c:b6:33:30:74:8f:40:32:
c1:a4:c2:77:6a:b9:99:c7:1e:30:b2:e1:c2:03:a4:cf:72:5b:
07:81:a1:fe:c2:2f:e1:e1:d9:53:73:d2:72:c5:40:63:cb:b5:
e8:9d:d3:82:ef:b5:91:b7:21:00:b2:bc:d1:c7:4c:8a:06:5b:
30:3e:be:e0:b1:19:6d:6d:c2:96:f6:6d:19:54:1e:3c:a6:45:
36:b7:00:42:68:20:1a:f2:b9:e9:88:91:a1:37:11:3c:1a:d1:
f7:5b:9a:6e:5f:87:7f:b0:02:49:0a:23:f5:9a:9c:6e:2d:55:
f4:1c:b6:9c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODE0RTkxMTAvBgNVBAUTKEM0MkZGMUQyRkYzNTI5ODFCQzVGODIyNDBFQzkzOTRF
RkFCMzExODYwHhcNMjUwMzI4MjE0MDI2WhcNMjUwNDA0MjE0MDI2WjAYMRYwFAYD
VQQDEw02N2U3MTc0YS00Y2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw1bdFWfwAg06BdPDlJ+Xd9dz8ftM/y35goZc8sDx4PsaUG+4sGt0noKMzLoF
H+dlDmKujhFyZFq+iaOV8zWT/6HmRGNOiVV5nH+LRJ/gI+YXPqr1QXuEzuV5LZbr
Pg4URIUdMk7iiw0NuYT2JwsSIJMtXrJ+GnZ+AePfoRoy4iGyr80VYDdFo5vO5mKC
inX6GWhvU/0ZxIfhZRGHqrC+Ejt9OoDeqx/PaIMABXGIRPclPN2vZR9hq7XxLqQL
X7glLDaS1oJZvdAm5Z1Z+BZy4vtK+4ydM+68M0ptmhpSSx8bDFUFcwgS047hCs6w
3uJ3W/JlsrYb2KqX7yKAqCHE7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJkC9sid
If7W1F4St4IAkaWEoXktMB8GA1UdIwQYMBaAFMQv8dL/NSmBvF+CJA7JOU76sxGG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTRFOS9GRTU3QzJCQzA4
MzAxMUVCQkZFNEM3MzJDNEY5QUUwMi94Q194MHY4MUtZRzhYNElrRHNrNVR2cXpF
WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hDX3gwdjgxS1lHOFg0SWtEc2s1VHZxekVZWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MTRFOS9GRTU3QzJCQzA4MzAxMUVCQkZFNEM3MzJDNEY5QUUwMi94Q194MHY4MUtZ
RzhYNElrRHNrNVR2cXpFWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB3iOc5AwRkBVbSYCb1tLXMajryeycx9zSjyLg85Eq8yb5P2iTZeocw
f/fqz7ATvgFnWkc8Yjv7g0ZYRAYwmkxmt0dkT8cODH4UxRFFNpWttz69uQduk35N
ymnsOEz3Mq5Oj/9eJLcNTBwowIc/QuFkFMEucKZ3zxUQg59uuQjJBwPK52KgEfFz
LLYzMHSPQDLBpMJ3armZxx4wsuHCA6TPclsHgaH+wi/h4dlTc9JyxUBjy7XondOC
77WRtyEAsrzRx0yKBlswPr7gsRltbcKW9m0ZVB48pkU2twBCaCAa8rnpiJGhNxE8
GtH3W5puX4d/sAJJCiP1mpxuLVX0HLac
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:44:04 2025 by rpki-client