Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft
File: f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft (raw, json)
Hash identifier: uKbQjvr96ptyjwKTRW4yjk2Bc/ExA9mItXHuUn7uBHc=
Subject key identifier: DF:CA:84:71:2C:6D:FB:7D:FA:A5:5B:77:17:F6:97:04:C9:00:0B:56
Authority key identifier: 7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF
Certificate issuer: /CN=A9190992/serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF
Certificate serial: 0434
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft
Manifest number: 0428
Signing time: Sat 29 Mar 2025 00:38:26 +0000
Manifest this update: Sat 29 Mar 2025 00:38:26 +0000
Manifest next update: Sat 05 Apr 2025 00:38:26 +0000
Files and hashes: 1: f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl (hash: SG/WJ9XlIfQS1TtMgjWaf4CAH3nh5D12J0C0ToWPilY=)
2: 5B24C51A60ED11EC874B903BC4F9AE02.roa (hash: y1lAMNBHmo8LOCH2UbQd6lp4y3+4hOTNpmp++HIjEDk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1076 (0x434)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190992
Validity
Not Before: Mar 29 00:38:26 2025 GMT
Not After : Apr 5 00:38:26 2025 GMT
Subject: CN=67e74102-1d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:de:67:0f:51:ee:b2:ad:5f:9f:10:26:cb:07:
61:1d:48:3e:ec:12:86:d2:fd:7c:dd:6d:a1:62:0c:
81:d4:d6:b8:cf:b7:a9:70:94:4e:82:8c:f2:a0:6a:
a1:68:72:e9:b6:58:6c:d4:bf:3d:7b:5b:bc:53:bf:
30:50:09:73:8f:74:ef:10:7a:0f:61:b6:35:1d:d0:
35:3c:4c:c6:78:c6:28:e4:9d:c8:a3:20:b9:74:b8:
4f:e4:32:c7:18:13:78:de:43:1b:bd:f0:50:b2:e9:
79:ac:f5:b6:45:b3:6b:82:86:99:b1:2d:af:05:d8:
41:f0:6e:df:97:35:1a:be:83:2e:00:44:a8:75:ce:
42:06:5c:7e:92:aa:10:24:e9:58:d1:da:a7:0b:80:
7e:74:d3:86:94:4d:9c:7a:8c:ad:17:4d:29:71:60:
a1:ef:d4:31:32:32:fb:8b:fe:6c:af:8e:6f:7b:c9:
70:82:0e:92:94:e7:d6:f5:41:37:4b:fc:e4:89:32:
24:e2:2e:b8:7b:6c:23:e1:39:9f:39:5e:2e:8d:b8:
21:af:d3:23:a9:74:70:ab:9b:a8:2d:7d:9b:68:e1:
df:fa:98:99:52:2e:f1:7c:40:43:22:9b:f2:5c:eb:
e3:ec:4b:5d:f7:e5:82:8c:6d:3b:1a:ed:fa:17:1d:
89:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:CA:84:71:2C:6D:FB:7D:FA:A5:5B:77:17:F6:97:04:C9:00:0B:56
X509v3 Authority Key Identifier:
keyid:7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:1e:d5:37:7d:56:84:14:b0:64:bc:47:26:e5:61:a5:46:61:
55:8a:f4:da:ae:6d:de:4a:4c:37:3c:91:df:f2:be:1f:ed:0d:
8d:17:3e:c1:64:03:85:b2:41:37:85:db:be:2c:81:be:9c:04:
4b:67:e8:e9:41:38:14:9d:c4:00:ae:7c:90:37:31:24:90:24:
9e:4c:14:c3:62:b8:9b:5a:77:79:c3:db:68:15:fb:ed:72:bd:
b0:ab:be:bf:6b:bf:70:0d:14:26:98:5c:34:1f:cc:eb:bc:29:
1d:34:5d:2f:f3:95:f9:ec:ac:a5:7c:91:d2:bc:66:ab:2e:05:
99:c0:b6:81:bd:72:ed:71:14:02:29:fc:33:09:5d:9a:d2:98:
66:c8:76:24:78:b2:44:80:ca:a2:af:8d:51:ce:e1:60:18:59:
63:9e:85:66:25:60:e4:e7:11:15:e1:00:04:00:68:30:af:fa:
f9:cc:64:1b:a0:a8:2e:6b:0f:17:c9:37:54:1f:cb:d1:72:53:
0e:cf:f5:aa:ef:3b:2f:d8:b8:e4:8f:b5:49:dd:c7:8b:12:bf:
1e:7b:74:82:7a:d0:3a:be:b2:1b:76:4c:86:55:d3:57:2d:f9:
04:4a:bd:0e:ec:93:8c:84:a7:25:a0:36:e2:c0:31:bf:a0:be:
70:f0:be:de
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTA5OTIxMTAvBgNVBAUTKDdGNjVDMTEwRTJBMTdFNDFENzcwRkMyREZBNDAzRDE2
QTMzRTVDQUYwHhcNMjUwMzI5MDAzODI2WhcNMjUwNDA1MDAzODI2WjAYMRYwFAYD
VQQDEw02N2U3NDEwMi0xZDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwt5nD1Husq1fnxAmywdhHUg+7BKG0v183W2hYgyB1Na4z7epcJROgozyoGqh
aHLptlhs1L89e1u8U78wUAlzj3TvEHoPYbY1HdA1PEzGeMYo5J3IoyC5dLhP5DLH
GBN43kMbvfBQsul5rPW2RbNrgoaZsS2vBdhB8G7flzUavoMuAESodc5CBlx+kqoQ
JOlY0dqnC4B+dNOGlE2ceoytF00pcWCh79QxMjL7i/5sr45ve8lwgg6SlOfW9UE3
S/zkiTIk4i64e2wj4TmfOV4ujbghr9MjqXRwq5uoLX2baOHf+piZUi7xfEBDIpvy
XOvj7Etd9+WCjG07Gu36Fx2JnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/KhHEs
bft9+qVbdxf2lwTJAAtWMB8GA1UdIwQYMBaAFH9lwRDioX5B13D8LfpAPRajPlyv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDk5Mi81QjNEMDgwMjVD
MEUxMUVDOTc2MDM2MTdDNEY5QUUwMi9mMlhCRU9LaGZrSFhjUHd0LWtBOUZxTS1Y
SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2YyWEJFT0toZmtIWGNQd3Qta0E5RnFNLVhLOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MDk5Mi81QjNEMDgwMjVDMEUxMUVDOTc2MDM2MTdDNEY5QUUwMi9mMlhCRU9LaGZr
SFhjUHd0LWtBOUZxTS1YSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBgHtU3fVaEFLBkvEcm5WGlRmFVivTarm3eSkw3PJHf8r4f7Q2NFz7B
ZAOFskE3hdu+LIG+nARLZ+jpQTgUncQArnyQNzEkkCSeTBTDYribWnd5w9toFfvt
cr2wq76/a79wDRQmmFw0H8zrvCkdNF0v85X57KylfJHSvGarLgWZwLaBvXLtcRQC
KfwzCV2a0phmyHYkeLJEgMqir41RzuFgGFljnoVmJWDk5xEV4QAEAGgwr/r5zGQb
oKguaw8XyTdUH8vRclMOz/Wq7zsv2Ljkj7VJ3ceLEr8ee3SCetA6vrIbdkyGVdNX
LfkESr0O7JOMhKcloDbiwDG/oL5w8L7e
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:34:39 2025 by rpki-client