Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft
File: q-SlyJP0_Kxy2WRGir563z5vyP4.mft (raw, json)
Hash identifier: NyFyRTKaoS+knENQdtP37QXpdJvaW0u1qrcVKln0I2k=
Subject key identifier: AA:AC:13:97:E4:99:38:2F:E4:81:16:39:AC:16:57:19:5F:B7:7D:03
Authority key identifier: AB:E4:A5:C8:93:F4:FC:AC:72:D9:64:46:8A:BE:7A:DF:3E:6F:C8:FE
Certificate issuer: /CN=A91894BE/serialNumber=ABE4A5C893F4FCAC72D964468ABE7ADF3E6FC8FE
Certificate serial: 024C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft
Manifest number: 0248
Signing time: Sat 29 Mar 2025 02:05:48 +0000
Manifest this update: Sat 29 Mar 2025 02:05:48 +0000
Manifest next update: Sat 05 Apr 2025 02:05:48 +0000
Files and hashes: 1: q-SlyJP0_Kxy2WRGir563z5vyP4.crl (hash: z291UG69ufy7HL9oxdE0S6GAoXV7iRuKX+LEAT+yzAQ=)
2: 942BF3C013CA11ED983E350EC4F9AE02.roa (hash: 7RgKIXJ+YIFOFiYNofYamgA+0eKHAOepqg8p2i4RVOc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 588 (0x24c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91894BE
Validity
Not Before: Mar 29 02:05:48 2025 GMT
Not After : Apr 5 02:05:48 2025 GMT
Subject: CN=67e7557c-663f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:90:3c:62:80:8f:07:db:c4:c5:13:d5:aa:a8:
81:2a:97:7b:50:2e:14:b8:9f:6c:4b:93:36:9d:a7:
03:5b:8d:f0:e1:1b:11:aa:a0:b6:94:eb:8b:b5:01:
99:c6:ae:c6:4b:80:1c:65:43:4c:d6:7e:d8:56:23:
af:b8:d7:92:4f:75:63:d7:0b:27:3d:b5:27:6c:12:
54:ec:99:b1:7e:86:2c:e4:22:e3:c9:73:8d:ed:65:
9a:60:5f:eb:05:4b:89:ab:65:80:5a:f0:39:eb:28:
a3:44:0a:73:a6:b8:9b:1f:07:e3:5b:79:e7:b6:b2:
97:bd:e1:17:ce:1d:94:df:47:05:63:03:f1:28:e2:
3b:9a:28:eb:7b:9d:79:b2:8f:75:cd:9c:c4:cc:c4:
31:a0:6f:fe:8c:32:91:b4:25:98:74:a2:e6:fc:0d:
1e:2f:aa:62:c0:f4:9a:4f:16:2d:4a:56:c4:ba:0f:
54:21:be:a0:03:af:50:bf:12:7b:63:e5:4a:c1:62:
01:09:77:f3:b7:ea:6b:13:9a:7d:e9:33:e3:fe:cb:
38:42:8a:15:8b:ca:91:a8:7e:26:a4:e1:27:8b:27:
ba:f1:6f:a3:24:6d:fe:cc:fb:b8:9a:a6:08:ad:41:
fc:20:ca:5c:f5:79:59:60:c4:f2:85:11:96:5c:65:
57:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AC:13:97:E4:99:38:2F:E4:81:16:39:AC:16:57:19:5F:B7:7D:03
X509v3 Authority Key Identifier:
keyid:AB:E4:A5:C8:93:F4:FC:AC:72:D9:64:46:8A:BE:7A:DF:3E:6F:C8:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:21:3b:4e:67:33:32:f8:3e:21:e4:5d:15:46:60:10:c4:88:
98:e2:88:0f:12:11:af:e3:68:7e:72:b2:3e:99:d7:5c:20:da:
56:a6:dd:f9:7d:bd:c3:a3:86:f9:86:d0:d3:7d:bc:bd:2f:d5:
84:16:fe:b0:9c:a2:a2:58:72:46:4b:3e:10:42:83:73:14:6d:
b3:8a:cf:b7:37:bd:2a:36:1d:01:52:de:25:75:a4:56:0c:06:
7e:40:d5:a8:73:61:4a:39:5b:4b:62:be:f9:bc:6b:4b:14:fe:
be:10:67:3d:5f:a9:10:d7:5f:75:7a:00:01:94:99:1a:ac:38:
b3:45:6e:ec:5f:c8:5a:f8:8f:ed:44:4b:3e:18:26:6b:7e:15:
99:f1:16:ac:d2:bf:0b:7e:60:6d:e2:8b:b8:c7:c0:56:fd:12:
71:17:e4:e7:f7:85:bd:61:31:8f:5f:14:df:07:54:4e:5e:a6:
70:28:de:ea:7c:8f:ec:42:13:e9:2a:8e:e7:4a:d5:5b:0a:e1:
9f:40:6f:90:59:c8:ed:63:0b:d0:56:88:01:79:14:6d:cb:b3:
2b:fa:b5:1e:b5:ec:dd:13:cc:b0:be:aa:97:8d:e5:63:57:44:
75:d6:ef:56:05:be:40:f6:22:9a:69:2f:3b:06:32:1c:29:cc:
e6:08:bf:eb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODk0QkUxMTAvBgNVBAUTKEFCRTRBNUM4OTNGNEZDQUM3MkQ5NjQ0NjhBQkU3QURG
M0U2RkM4RkUwHhcNMjUwMzI5MDIwNTQ4WhcNMjUwNDA1MDIwNTQ4WjAYMRYwFAYD
VQQDEw02N2U3NTU3Yy02NjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwpA8YoCPB9vExRPVqqiBKpd7UC4UuJ9sS5M2nacDW43w4RsRqqC2lOuLtQGZ
xq7GS4AcZUNM1n7YViOvuNeST3Vj1wsnPbUnbBJU7JmxfoYs5CLjyXON7WWaYF/r
BUuJq2WAWvA56yijRApzpribHwfjW3nntrKXveEXzh2U30cFYwPxKOI7mijre515
so91zZzEzMQxoG/+jDKRtCWYdKLm/A0eL6piwPSaTxYtSlbEug9UIb6gA69QvxJ7
Y+VKwWIBCXfzt+prE5p96TPj/ss4QooVi8qRqH4mpOEniye68W+jJG3+zPu4mqYI
rUH8IMpc9XlZYMTyhRGWXGVXaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKqsE5fk
mTgv5IEWOawWVxlft30DMB8GA1UdIwQYMBaAFKvkpciT9PysctlkRoq+et8+b8j+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTRCRS8wQjREMDI5QzEz
QzUxMUVEOUY1QUYyNkFDNEY5QUUwMi9xLVNseUpQMF9LeHkyV1JHaXI1NjN6NXZ5
UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3EtU2x5SlAwX0t4eTJXUkdpcjU2M3o1dnlQNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OTRCRS8wQjREMDI5QzEzQzUxMUVEOUY1QUYyNkFDNEY5QUUwMi9xLVNseUpQMF9L
eHkyV1JHaXI1NjN6NXZ5UDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCdITtOZzMy+D4h5F0VRmAQxIiY4ogPEhGv42h+crI+mddcINpWpt35
fb3Do4b5htDTfby9L9WEFv6wnKKiWHJGSz4QQoNzFG2zis+3N70qNh0BUt4ldaRW
DAZ+QNWoc2FKOVtLYr75vGtLFP6+EGc9X6kQ1191egABlJkarDizRW7sX8ha+I/t
REs+GCZrfhWZ8Ras0r8LfmBt4ou4x8BW/RJxF+Tn94W9YTGPXxTfB1ROXqZwKN7q
fI/sQhPpKo7nStVbCuGfQG+QWcjtYwvQVogBeRRty7Mr+rUetezdE8ywvqqXjeVj
V0R11u9WBb5A9iKaaS87BjIcKczmCL/r
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:50:26 2025 by rpki-client