Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft
File: p6JnToSEYDkgd5o1LFWATlU2UBQ.mft (raw, json)
Hash identifier: z1+N+d2ccgx0AAT7ZJ4y8yxw7YGR4yNzBrrSyIwnbYo=
Subject key identifier: 78:9A:B8:92:97:A2:85:9D:15:ED:FE:F7:67:BE:4B:BA:74:9D:17:05
Authority key identifier: A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14
Certificate issuer: /CN=A9185CF3/serialNumber=A7A2674E8484603920779A352C55804E55365014
Certificate serial: 0B99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft
Manifest number: 0B92
Signing time: Fri 28 Mar 2025 19:10:26 +0000
Manifest this update: Fri 28 Mar 2025 19:10:26 +0000
Manifest next update: Fri 04 Apr 2025 19:10:26 +0000
Files and hashes: 1: p6JnToSEYDkgd5o1LFWATlU2UBQ.crl (hash: cQz8adxeJ4ONHnrLLHqhfgQBsFLCDnxZ8wNRpI78FCk=)
2: 53B6182C213611EAB9F02B49C4F9AE02.roa (hash: RvdTnjVHgMOyaT2D6NI7RBOs0ab70zz7muos4KwEa2g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2969 (0xb99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185CF3
Validity
Not Before: Mar 28 19:10:26 2025 GMT
Not After : Apr 4 19:10:26 2025 GMT
Subject: CN=67e6f422-cd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:01:81:b4:3e:2a:58:91:d4:25:2a:ea:b6:f6:
75:dd:b2:70:8a:72:b6:9c:71:79:5b:43:a5:62:25:
45:e2:58:00:ab:5d:dd:c5:77:7e:49:5e:37:c7:15:
03:a2:fd:46:4c:44:6c:ea:3d:33:3c:53:3e:29:d5:
21:f0:4b:cf:3e:79:aa:d8:69:cd:84:0f:c7:01:be:
56:d5:62:bf:6d:19:24:f4:f7:6b:b4:42:0c:a0:9c:
5b:a4:c6:25:cf:fe:64:ff:bc:81:52:4c:50:fb:4e:
f7:fe:de:5e:84:f1:b5:50:bb:09:f7:23:56:56:03:
8f:85:e6:af:27:99:dd:c0:6e:0c:fc:a9:1c:51:39:
4b:78:1b:ad:94:50:ec:cf:a6:fb:7b:10:bb:04:43:
8e:40:a4:18:60:0e:91:87:3b:52:48:79:80:ef:76:
71:e2:2f:f0:99:83:71:f2:13:5c:06:54:a3:3d:d4:
e7:02:67:3a:d9:2e:56:8f:6a:91:9d:9f:0f:27:ea:
d6:6f:a8:55:a2:ec:f6:a5:74:15:8d:eb:22:30:50:
8c:6e:20:77:a2:65:e8:68:67:db:8c:67:5f:62:b9:
d3:25:fe:f5:19:cd:58:ba:08:5f:63:58:22:57:2c:
c5:2a:5e:6d:d3:85:eb:ab:cc:b2:20:5e:f6:bd:7b:
28:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9A:B8:92:97:A2:85:9D:15:ED:FE:F7:67:BE:4B:BA:74:9D:17:05
X509v3 Authority Key Identifier:
keyid:A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:83:6b:13:d8:2a:19:a8:21:c1:3f:e9:9d:8c:48:68:53:d8:
02:ee:a0:80:a4:63:21:2a:97:38:a5:e2:ac:2c:8a:46:39:62:
06:77:65:43:42:ff:c1:8d:50:0c:d5:74:88:92:a0:a0:f3:ae:
9c:b7:4f:10:6f:6e:9a:78:65:2a:c4:1f:d8:d4:1b:b4:ba:5c:
09:f0:a7:4c:e3:92:5f:1b:55:44:29:5e:00:22:23:42:8b:2a:
1a:74:4a:53:95:cd:d1:0f:9d:9b:6f:9e:60:ed:12:a4:a1:fd:
73:08:1a:2c:11:48:78:9c:1a:14:d1:b3:d2:47:4c:42:ef:69:
49:59:d5:f1:90:9b:25:eb:81:e2:58:40:3a:06:d1:e1:87:ff:
8e:4c:8d:c7:4b:37:a7:f3:8a:0a:37:56:d0:cd:72:b4:c1:71:
c0:3f:bd:5f:06:2e:bb:aa:02:c5:5d:b2:ef:52:1d:e3:02:55:
c9:f2:45:8c:14:50:49:13:4f:7a:57:ad:f8:8e:9f:87:98:c1:
15:b9:cd:2e:d0:f1:6e:ce:95:a8:a4:d1:d7:ef:7e:ef:b1:b9:
34:cf:b7:83:69:0f:88:cb:17:00:9a:aa:bc:12:ef:91:dc:7b:
52:36:85:f6:04:c3:84:13:96:7a:b7:76:e6:a7:39:d6:df:60:
c4:aa:51:33
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODVDRjMxMTAvBgNVBAUTKEE3QTI2NzRFODQ4NDYwMzkyMDc3OUEzNTJDNTU4MDRF
NTUzNjUwMTQwHhcNMjUwMzI4MTkxMDI2WhcNMjUwNDA0MTkxMDI2WjAYMRYwFAYD
VQQDEw02N2U2ZjQyMi1jZDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArwGBtD4qWJHUJSrqtvZ13bJwinK2nHF5W0OlYiVF4lgAq13dxXd+SV43xxUD
ov1GTERs6j0zPFM+KdUh8EvPPnmq2GnNhA/HAb5W1WK/bRkk9PdrtEIMoJxbpMYl
z/5k/7yBUkxQ+073/t5ehPG1ULsJ9yNWVgOPheavJ5ndwG4M/KkcUTlLeButlFDs
z6b7exC7BEOOQKQYYA6RhztSSHmA73Zx4i/wmYNx8hNcBlSjPdTnAmc62S5Wj2qR
nZ8PJ+rWb6hVouz2pXQVjesiMFCMbiB3omXoaGfbjGdfYrnTJf71Gc1YughfY1gi
VyzFKl5t04Xrq8yyIF72vXsotQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHiauJKX
ooWdFe3+92e+S7p0nRcFMB8GA1UdIwQYMBaAFKeiZ06EhGA5IHeaNSxVgE5VNlAU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUNGMy80QkRENTE4RTIx
MzUxMUVBQkU0ODg3NDdDNEY5QUUwMi9wNkpuVG9TRVlEa2dkNW8xTEZXQVRsVTJV
QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3A2Sm5Ub1NFWURrZ2Q1bzFMRldBVGxVMlVCUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NUNGMy80QkRENTE4RTIxMzUxMUVBQkU0ODg3NDdDNEY5QUUwMi9wNkpuVG9TRVlE
a2dkNW8xTEZXQVRsVTJVQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC2g2sT2CoZqCHBP+mdjEhoU9gC7qCApGMhKpc4peKsLIpGOWIGd2VD
Qv/BjVAM1XSIkqCg866ct08Qb26aeGUqxB/Y1Bu0ulwJ8KdM45JfG1VEKV4AIiNC
iyoadEpTlc3RD52bb55g7RKkof1zCBosEUh4nBoU0bPSR0xC72lJWdXxkJsl64Hi
WEA6BtHhh/+OTI3HSzen84oKN1bQzXK0wXHAP71fBi67qgLFXbLvUh3jAlXJ8kWM
FFBJE096V634jp+HmMEVuc0u0PFuzpWopNHX737vsbk0z7eDaQ+IyxcAmqq8Eu+R
3HtSNoX2BMOEE5Z6t3bmpznW32DEqlEz
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:45:17 2025 by rpki-client