Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
File: A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft (raw, json)
Hash identifier: g0f5uNpngI/KNNIEvjj8YBcxADQyHF7WuaNQhYGUUUk=
Subject key identifier: 95:97:06:E0:77:F1:6A:AB:9C:B9:77:50:A3:7E:6C:00:23:0C:F9:BE
Authority key identifier: 03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4
Certificate issuer: /CN=A91822BF/serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4
Certificate serial: 0BB6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
Manifest number: 0BAF
Signing time: Fri 28 Mar 2025 19:04:16 +0000
Manifest this update: Fri 28 Mar 2025 19:04:15 +0000
Manifest next update: Fri 04 Apr 2025 19:04:15 +0000
Files and hashes: 1: A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl (hash: mitH2qeD3PYg+ucKdYDY1mBMifeFbuXlrl2hWQUVWFA=)
2: 37EA3E261ADC11EA8EB46F37C4F9AE02.roa (hash: 3kGetLo0/1T2TeuK7e4cz2fvy6XLEBwpuyaFMSSdmUI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2998 (0xbb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91822BF
Validity
Not Before: Mar 28 19:04:15 2025 GMT
Not After : Apr 4 19:04:15 2025 GMT
Subject: CN=67e6f2b0-8208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5c:16:f3:2e:09:34:07:a2:e6:d4:68:26:2c:
bd:30:3f:85:52:ee:1b:39:b8:64:f9:93:7c:70:0a:
ad:9e:e3:c8:31:82:28:39:d5:49:12:5e:10:a0:ec:
31:b5:7f:ae:ae:e1:98:c2:f6:28:ad:72:7e:41:e9:
17:4c:59:85:2a:05:09:f1:c7:59:6b:42:ad:ea:e3:
ff:53:96:fe:22:08:fb:c0:4c:cb:bd:74:d7:79:2d:
cf:94:68:2c:a5:fe:c6:13:d2:2b:b2:63:e4:58:49:
73:6c:18:7e:3c:85:39:d9:14:34:39:e2:ca:e1:ee:
96:fb:94:0b:8a:da:8e:5e:15:77:f7:b5:60:bc:3d:
58:f6:4f:cb:fa:7a:f3:8b:4c:a5:b0:b4:03:9f:2e:
d9:fa:10:45:ae:01:54:eb:25:26:0f:09:bf:45:7e:
50:43:f9:1f:4c:99:5e:c1:9a:63:d5:d5:b4:e0:22:
e7:80:93:a9:3a:15:75:27:55:6c:3b:a9:51:02:aa:
38:dc:56:16:56:06:33:42:c8:a5:6a:32:05:38:ae:
db:c9:84:3f:f4:6a:45:3d:96:ff:27:90:3d:c7:34:
fd:3f:92:e1:e1:70:e1:d8:fe:bb:7d:a4:ce:2b:a0:
08:72:82:7e:e2:5a:66:8d:b3:d8:83:21:ec:da:c8:
dd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:97:06:E0:77:F1:6A:AB:9C:B9:77:50:A3:7E:6C:00:23:0C:F9:BE
X509v3 Authority Key Identifier:
keyid:03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f3:8b:eb:83:03:d1:93:89:32:8b:7a:b0:73:0d:fc:cd:b6:
e2:ab:71:db:d4:a8:89:66:b9:3d:8b:2c:92:21:bd:d0:b7:11:
72:86:0f:6e:99:73:f3:49:56:35:51:e5:12:72:3e:b1:c5:36:
ec:04:a2:5c:6c:40:fe:18:a9:25:75:7e:30:78:23:6f:65:a3:
e0:0f:5e:41:81:57:07:c2:95:ea:9b:96:74:9e:d9:42:8e:c6:
5f:75:c0:34:8d:57:97:5e:ab:43:12:79:02:83:20:34:29:b6:
03:6e:b5:34:a6:88:58:22:81:93:63:69:d8:dc:67:9d:ef:dd:
cb:13:b4:9d:fa:90:3e:f9:c5:3d:38:73:a9:68:9c:da:da:ac:
63:07:a6:97:90:2c:22:7f:ab:b9:3b:50:4d:20:b1:06:ca:9d:
8d:56:da:24:42:3b:45:25:71:36:8c:19:f2:d7:58:89:ee:63:
b5:fe:33:fc:45:36:62:16:bb:ae:7e:d9:d1:fc:f8:9a:22:6c:
8e:50:1a:d1:68:40:9f:e0:55:65:9f:42:73:8f:7a:83:7b:4f:
f3:e2:a3:20:c8:84:93:1a:27:4a:09:94:9f:4c:d3:78:27:78:
53:74:ca:a0:85:28:f7:bb:0b:9b:3a:24:51:30:45:6c:59:99:
81:ab:8a:ab
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODIyQkYxMTAvBgNVBAUTKDAzNzdCOTNDOTFGREFGNDY5QTU5MUI0QzUyRDI0Q0Ix
NTU1RDJCRDQwHhcNMjUwMzI4MTkwNDE1WhcNMjUwNDA0MTkwNDE1WjAYMRYwFAYD
VQQDEw02N2U2ZjJiMC04MjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqVwW8y4JNAei5tRoJiy9MD+FUu4bObhk+ZN8cAqtnuPIMYIoOdVJEl4QoOwx
tX+uruGYwvYorXJ+QekXTFmFKgUJ8cdZa0Kt6uP/U5b+Igj7wEzLvXTXeS3PlGgs
pf7GE9IrsmPkWElzbBh+PIU52RQ0OeLK4e6W+5QLitqOXhV397VgvD1Y9k/L+nrz
i0ylsLQDny7Z+hBFrgFU6yUmDwm/RX5QQ/kfTJlewZpj1dW04CLngJOpOhV1J1Vs
O6lRAqo43FYWVgYzQsilajIFOK7byYQ/9GpFPZb/J5A9xzT9P5Lh4XDh2P67faTO
K6AIcoJ+4lpmjbPYgyHs2sjd0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWXBuB3
8WqrnLl3UKN+bAAjDPm+MB8GA1UdIwQYMBaAFAN3uTyR/a9GmlkbTFLSTLFVXSvU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjJCRi8xMDM5QkM0MDFB
REIxMUVBQUEzQTgyMzVDNEY5QUUwMi9BM2U1UEpIOXIwYWFXUnRNVXRKTXNWVmRL
OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0EzZTVQSkg5cjBhYVdSdE1VdEpNc1ZWZEs5US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MjJCRi8xMDM5QkM0MDFBREIxMUVBQUEzQTgyMzVDNEY5QUUwMi9BM2U1UEpIOXIw
YWFXUnRNVXRKTXNWVmRLOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAs84vrgwPRk4kyi3qwcw38zbbiq3Hb1KiJZrk9iyySIb3QtxFyhg9u
mXPzSVY1UeUScj6xxTbsBKJcbED+GKkldX4weCNvZaPgD15BgVcHwpXqm5Z0ntlC
jsZfdcA0jVeXXqtDEnkCgyA0KbYDbrU0pohYIoGTY2nY3Ged793LE7Sd+pA++cU9
OHOpaJza2qxjB6aXkCwif6u5O1BNILEGyp2NVtokQjtFJXE2jBny11iJ7mO1/jP8
RTZiFruuftnR/PiaImyOUBrRaECf4FVln0Jzj3qDe0/z4qMgyISTGidKCZSfTNN4
J3hTdMqghSj3uwubOiRRMEVsWZmBq4qr
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:19:30 2025 by rpki-client