Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft
File: KoE65dYVKWBF2z4sQsuPzaxq0gw.mft (raw, json)
Hash identifier: 1h7oh3k9Jr+mR1e4Aj0CBuIMeo4pO/vPOhD/+V3jN3U=
Subject key identifier: B8:B5:89:1C:73:72:19:E0:62:39:3C:37:B1:D9:F8:50:59:08:5E:E4
Authority key identifier: 2A:81:3A:E5:D6:15:29:60:45:DB:3E:2C:42:CB:8F:CD:AC:6A:D2:0C
Certificate issuer: /CN=A9193BF8/serialNumber=2A813AE5D615296045DB3E2C42CB8FCDAC6AD20C
Certificate serial: 0170
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft
Manifest number: 016D
Signing time: Sat 29 Mar 2025 03:22:34 +0000
Manifest this update: Sat 29 Mar 2025 03:22:34 +0000
Manifest next update: Sat 05 Apr 2025 03:22:34 +0000
Files and hashes: 1: KoE65dYVKWBF2z4sQsuPzaxq0gw.crl (hash: TYEDf6wa3IYSrTo69LqG/hOLBfjpTeQifmC2cXmt0gE=)
2: B8F3C5B4E01811ED8385DA62C4F9AE02.roa (hash: XP8lLbicS7mB1IqZ6ApZEYlo1iErgLT+WwIjnSaqxSY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 368 (0x170)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193BF8
Validity
Not Before: Mar 29 03:22:34 2025 GMT
Not After : Apr 5 03:22:34 2025 GMT
Subject: CN=67e7677a-cf70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c3:f6:fa:4c:c1:90:63:ec:30:c7:4d:47:96:
27:b7:b5:0e:d9:65:8c:ac:38:4d:91:a3:59:c6:52:
f9:7f:cc:d9:e8:9c:06:72:9c:2d:8e:9a:cd:09:38:
80:85:02:82:1d:9a:d0:ad:6e:9b:69:20:c7:10:70:
e6:fe:bd:75:fa:e5:44:3d:cd:43:55:1d:a0:8a:82:
19:d7:80:8c:15:e7:be:39:40:23:d0:71:41:c4:ff:
20:d6:e5:af:59:82:ef:4c:ff:06:b2:8d:39:33:40:
6b:e9:08:50:d6:f0:a8:a0:ab:84:af:e0:52:8d:cf:
fb:be:83:b4:18:da:30:08:8b:77:41:d3:38:24:25:
46:ef:2d:4b:98:cd:89:6e:0d:e5:6a:cf:a2:ca:f6:
ca:dc:12:f2:49:2d:0a:48:5a:8b:04:bb:ad:89:c8:
37:4a:a2:d8:8b:9c:9c:3b:a5:88:60:10:b2:89:db:
31:25:11:85:f9:6e:86:10:bb:ac:54:cf:a8:95:65:
5a:7d:cd:7a:25:98:7a:27:17:64:67:b0:71:31:bb:
1d:b3:06:ee:e8:6d:37:6b:04:7e:eb:04:43:d9:0f:
9b:60:2f:ab:77:11:c0:7e:c6:5f:82:ec:46:17:2f:
a5:51:e3:f0:6e:dc:a5:34:c2:f0:8a:eb:ec:1d:3c:
40:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B5:89:1C:73:72:19:E0:62:39:3C:37:B1:D9:F8:50:59:08:5E:E4
X509v3 Authority Key Identifier:
keyid:2A:81:3A:E5:D6:15:29:60:45:DB:3E:2C:42:CB:8F:CD:AC:6A:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:2b:3a:0b:66:bf:42:ed:d8:2f:37:8f:ae:67:0d:e0:4b:4b:
68:2f:ab:a3:72:0f:17:89:95:55:64:70:1a:20:97:35:f4:92:
01:a7:99:16:4c:1b:54:11:4e:84:9f:74:a2:9a:76:ba:a9:2e:
03:c7:f1:6c:50:ef:59:88:a3:e4:f7:2e:f4:24:43:34:d1:b4:
50:59:de:ab:42:62:30:97:00:13:05:dc:eb:12:01:8b:80:45:
a6:dd:5b:0c:c4:4d:d9:a7:f3:52:e4:56:1c:b6:b6:fc:22:05:
cc:fe:df:32:78:b8:58:f1:f4:46:c7:f0:72:1f:37:70:c8:8c:
d0:9a:90:df:48:51:39:69:06:e5:3d:bb:64:de:9e:ea:3d:52:
0a:51:76:46:e6:51:bb:00:82:3a:30:10:d2:3a:a9:72:74:7b:
ed:9f:e5:43:e0:57:68:a5:7b:2f:b5:22:8f:c2:1d:9a:71:7d:
d8:0c:b2:22:64:1b:9e:08:ee:e9:70:f2:f9:74:61:34:78:c9:
0f:67:ed:29:f3:e8:11:fc:66:20:63:91:df:93:af:97:41:db:
71:a1:d2:35:23:4d:15:26:49:1f:8e:e4:c3:ba:09:50:d9:a8:
62:dd:50:85:73:03:c9:74:2d:1d:e2:19:4a:22:b4:fe:fb:cc:
63:ac:39:ab
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTNCRjgxMTAvBgNVBAUTKDJBODEzQUU1RDYxNTI5NjA0NURCM0UyQzQyQ0I4RkNE
QUM2QUQyMEMwHhcNMjUwMzI5MDMyMjM0WhcNMjUwNDA1MDMyMjM0WjAYMRYwFAYD
VQQDEw02N2U3Njc3YS1jZjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA38P2+kzBkGPsMMdNR5Ynt7UO2WWMrDhNkaNZxlL5f8zZ6JwGcpwtjprNCTiA
hQKCHZrQrW6baSDHEHDm/r11+uVEPc1DVR2gioIZ14CMFee+OUAj0HFBxP8g1uWv
WYLvTP8Gso05M0Br6QhQ1vCooKuEr+BSjc/7voO0GNowCIt3QdM4JCVG7y1LmM2J
bg3las+iyvbK3BLySS0KSFqLBLuticg3SqLYi5ycO6WIYBCyidsxJRGF+W6GELus
VM+olWVafc16JZh6JxdkZ7BxMbsdswbu6G03awR+6wRD2Q+bYC+rdxHAfsZfguxG
Fy+lUePwbtylNMLwiuvsHTxA7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLi1iRxz
chngYjk8N7HZ+FBZCF7kMB8GA1UdIwQYMBaAFCqBOuXWFSlgRds+LELLj82satIM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0JGOC9BMjJCRDE1OEUw
MTUxMUVEQjE2NjY5NjFDNEY5QUUwMi9Lb0U2NWRZVktXQkYyejRzUXN1UHpheHEw
Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0tvRTY1ZFlWS1dCRjJ6NHNRc3VQemF4cTBndy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
M0JGOC9BMjJCRDE1OEUwMTUxMUVEQjE2NjY5NjFDNEY5QUUwMi9Lb0U2NWRZVktX
QkYyejRzUXN1UHpheHEwZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCLKzoLZr9C7dgvN4+uZw3gS0toL6ujcg8XiZVVZHAaIJc19JIBp5kW
TBtUEU6En3Simna6qS4Dx/FsUO9ZiKPk9y70JEM00bRQWd6rQmIwlwATBdzrEgGL
gEWm3VsMxE3Zp/NS5FYctrb8IgXM/t8yeLhY8fRGx/ByHzdwyIzQmpDfSFE5aQbl
Pbtk3p7qPVIKUXZG5lG7AII6MBDSOqlydHvtn+VD4FdopXsvtSKPwh2acX3YDLIi
ZBueCO7pcPL5dGE0eMkPZ+0p8+gR/GYgY5Hfk6+XQdtxodI1I00VJkkfjuTDuglQ
2ahi3VCFcwPJdC0d4hlKIrT++8xjrDmr
-----END CERTIFICATE-----
Generated at Fri Apr 11 00:01:59 2025 by rpki-client