Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.mft
File: RyIWWikMD62wOOjNLGOuxx6Pg-w.mft (raw, json)
Hash identifier: 67/taGPvfIXCJEwqw4TWNdzxcOZzioSR+ox+HpeKFkQ=
Subject key identifier: BE:B9:58:4C:BC:BC:9E:21:2D:DD:DC:5D:92:9C:A6:15:2C:01:87:4E
Authority key identifier: 47:22:16:5A:29:0C:0F:AD:B0:38:E8:CD:2C:63:AE:C7:1E:8F:83:EC
Certificate issuer: /CN=A918A341/serialNumber=4722165A290C0FADB038E8CD2C63AEC71E8F83EC
Certificate serial: 04EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RyIWWikMD62wOOjNLGOuxx6Pg-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.mft
Manifest number: 04EB
Signing time: Fri 28 Mar 2025 23:59:16 +0000
Manifest this update: Fri 28 Mar 2025 23:59:15 +0000
Manifest next update: Fri 04 Apr 2025 23:59:15 +0000
Files and hashes: 1: RyIWWikMD62wOOjNLGOuxx6Pg-w.crl (hash: /9zrYcRILMBdpmGACQzM6M27AJBX5hesAtPtqWRnoTg=)
2: EF3517E8099311ECAD398842C4F9AE02.roa (hash: 70nUVsPI/eDiHF1rN+y5OKRTGHTL9/bXu36vYcff6Yo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1263 (0x4ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A341
Validity
Not Before: Mar 28 23:59:15 2025 GMT
Not After : Apr 4 23:59:15 2025 GMT
Subject: CN=67e737d3-56cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e3:c4:aa:78:17:48:74:13:d3:15:e1:d8:8f:
c9:a0:ed:ed:79:58:53:47:44:92:75:39:29:7e:4e:
8b:ef:fa:ef:0d:b4:b0:90:db:c5:0c:c1:f3:a1:90:
ef:a6:24:f9:03:e6:d8:19:9c:89:b5:1f:77:af:fd:
73:fd:2c:94:32:8a:dd:2a:13:1f:f9:55:fd:e8:da:
68:ea:78:4e:50:fa:98:0e:b4:8a:45:ca:7d:9e:5c:
5a:39:5b:7b:bc:f9:8f:18:7e:18:72:66:26:5c:0d:
dd:8b:ad:03:95:a4:2f:81:5e:58:6a:e6:1e:7c:35:
dc:c9:d5:ab:74:3a:7d:0d:f2:d2:14:05:92:24:cb:
1d:d5:25:c0:fa:54:3f:fd:78:02:0c:82:70:39:34:
af:94:7b:d2:6d:6f:9e:92:b7:ca:f2:4a:55:69:d4:
63:a0:b8:97:95:5c:c1:86:36:96:89:98:d6:75:85:
ef:b9:42:38:40:02:95:d0:f8:2a:fa:8a:43:39:3a:
75:9c:fb:f4:f5:99:bf:05:b5:a6:22:ac:f0:8d:ae:
0c:f2:b2:d0:4f:48:7f:4e:2a:2d:37:59:90:ae:ca:
45:19:a9:4b:60:54:e1:5d:fa:4b:90:88:94:8b:da:
1a:0d:54:b2:c3:ec:0d:73:f4:2d:ce:67:6a:58:21:
01:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B9:58:4C:BC:BC:9E:21:2D:DD:DC:5D:92:9C:A6:15:2C:01:87:4E
X509v3 Authority Key Identifier:
keyid:47:22:16:5A:29:0C:0F:AD:B0:38:E8:CD:2C:63:AE:C7:1E:8F:83:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RyIWWikMD62wOOjNLGOuxx6Pg-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:eb:6a:67:b8:81:f9:c3:f7:d6:ba:60:f3:75:c1:a3:05:f8:
e0:74:80:bd:99:78:2c:d8:dc:e8:ea:77:5e:69:d8:90:b3:4a:
32:82:ac:97:8a:32:1b:91:bd:ff:d9:f3:c0:93:f2:b6:a6:ab:
6a:39:65:d9:ce:b3:a0:0b:cc:43:7e:5b:76:37:5f:34:ff:ef:
4b:1a:61:48:01:18:22:30:b5:ff:ea:3b:d7:25:db:16:b5:6c:
d8:0b:73:02:65:d8:e5:05:bb:b5:50:a2:ff:c4:e3:3d:b7:6c:
35:72:9e:ee:e7:20:01:04:27:e7:8d:3a:b2:a0:5a:5d:97:45:
88:2d:df:1c:ad:a7:2e:a0:9d:54:bb:28:0d:8c:81:6c:eb:4c:
cb:2d:e4:fb:62:02:69:31:65:70:0f:76:52:8b:5a:00:14:80:
3b:72:5b:60:93:a7:b0:9c:af:de:d7:b9:af:68:39:86:f8:d4:
ff:f2:af:6e:98:cf:28:b1:cf:43:c8:df:c5:3d:65:74:b3:01:
fa:88:95:ea:c3:ee:b1:2f:ec:a2:52:86:2c:82:ef:e3:4f:b2:
dc:93:e9:b3:c0:d8:fb:6d:ef:02:5e:83:03:9b:32:6f:b7:7c:
df:a8:0e:03:61:38:2b:90:03:06:56:c2:be:d9:ef:7a:2c:b1:
fe:3b:93:b0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEEzNDExMTAvBgNVBAUTKDQ3MjIxNjVBMjkwQzBGQURCMDM4RThDRDJDNjNBRUM3
MUU4RjgzRUMwHhcNMjUwMzI4MjM1OTE1WhcNMjUwNDA0MjM1OTE1WjAYMRYwFAYD
VQQDEw02N2U3MzdkMy01NmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzuPEqngXSHQT0xXh2I/JoO3teVhTR0SSdTkpfk6L7/rvDbSwkNvFDMHzoZDv
piT5A+bYGZyJtR93r/1z/SyUMordKhMf+VX96Npo6nhOUPqYDrSKRcp9nlxaOVt7
vPmPGH4YcmYmXA3di60DlaQvgV5YauYefDXcydWrdDp9DfLSFAWSJMsd1SXA+lQ/
/XgCDIJwOTSvlHvSbW+ekrfK8kpVadRjoLiXlVzBhjaWiZjWdYXvuUI4QAKV0Pgq
+opDOTp1nPv09Zm/BbWmIqzwja4M8rLQT0h/TiotN1mQrspFGalLYFThXfpLkIiU
i9oaDVSyw+wNc/QtzmdqWCEBRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL65WEy8
vJ4hLd3cXZKcphUsAYdOMB8GA1UdIwQYMBaAFEciFlopDA+tsDjozSxjrscej4Ps
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTM0MS85QTdFQUM0QTA5
OEYxMUVDQTYzM0UxM0JDNEY5QUUwMi9SeUlXV2lrTUQ2MndPT2pOTEdPdXh4NlBn
LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1J5SVdXaWtNRDYyd09Pak5MR091eHg2UGctdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QTM0MS85QTdFQUM0QTA5OEYxMUVDQTYzM0UxM0JDNEY5QUUwMi9SeUlXV2lrTUQ2
MndPT2pOTEdPdXh4NlBnLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA162pnuIH5w/fWumDzdcGjBfjgdIC9mXgs2Nzo6ndeadiQs0oygqyX
ijIbkb3/2fPAk/K2pqtqOWXZzrOgC8xDflt2N180/+9LGmFIARgiMLX/6jvXJdsW
tWzYC3MCZdjlBbu1UKL/xOM9t2w1cp7u5yABBCfnjTqyoFpdl0WILd8cracuoJ1U
uygNjIFs60zLLeT7YgJpMWVwD3ZSi1oAFIA7cltgk6ewnK/e17mvaDmG+NT/8q9u
mM8osc9DyN/FPWV0swH6iJXqw+6xL+yiUoYsgu/jT7Lck+mzwNj7be8CXoMDmzJv
t3zfqA4DYTgrkAMGVsK+2e96LLH+O5Ow
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:29:59 2025 by rpki-client