Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft
File: nWBHd6Cse-aqCBCwJetJPqbdNGM.mft (raw, json)
Hash identifier: 9DaBXVAJ6puY1QnyNDdpZE3ECRvGGePAp1iyvYZsFN0=
Subject key identifier: BD:66:40:FE:F6:77:1A:E6:52:F2:29:60:33:12:B5:51:01:4F:D9:04
Authority key identifier: 9D:60:47:77:A0:AC:7B:E6:AA:08:10:B0:25:EB:49:3E:A6:DD:34:63
Certificate issuer: /CN=A9198FD0/serialNumber=9D604777A0AC7BE6AA0810B025EB493EA6DD3463
Certificate serial: 0473
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft
Manifest number: 046D
Signing time: Sat 29 Mar 2025 00:23:12 +0000
Manifest this update: Sat 29 Mar 2025 00:23:12 +0000
Manifest next update: Sat 05 Apr 2025 00:23:12 +0000
Files and hashes: 1: nWBHd6Cse-aqCBCwJetJPqbdNGM.crl (hash: DguGjYV/Bw9yOyNBXjcfDsq8qXEZpiKTlz8+RE0zML8=)
2: 8327C2403DE011ECAB508171C4F9AE02.roa (hash: Sa14PRGt0bBOrLuIs7j8Gc0qLkwHSO6EtTYwSlnujqM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1139 (0x473)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198FD0
Validity
Not Before: Mar 29 00:23:12 2025 GMT
Not After : Apr 5 00:23:12 2025 GMT
Subject: CN=67e73d70-fbf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:47:1f:04:b1:06:22:6e:29:51:9b:ee:72:92:
30:b1:03:dd:15:40:bb:0d:d3:2a:9a:c6:f8:e1:ed:
3c:62:da:35:e3:fe:1c:16:fc:11:55:0a:ac:59:a2:
cd:75:a0:9d:80:b9:cc:4d:92:cd:b9:1b:59:ef:54:
c7:2d:9f:7a:49:1a:dd:df:4d:62:7c:86:f0:01:c9:
a6:cd:ce:f1:d6:23:c2:11:32:ed:bf:91:e3:00:be:
fc:e4:b1:50:dd:c9:96:3d:08:7c:d7:e1:6e:d2:b6:
a0:9d:bd:2b:72:6b:8e:9e:d0:b3:89:77:a0:d4:e9:
56:cf:2b:36:6f:de:19:fa:fc:fd:99:5c:3c:51:73:
15:78:ab:45:a9:73:79:e6:73:41:a0:2e:6a:7d:fa:
e8:76:6b:f4:ad:a4:2a:0f:68:cd:65:72:a7:e1:0b:
70:c7:cc:e8:b2:18:d6:3e:9e:c4:10:77:c2:88:e0:
95:d3:f7:f2:7c:3a:39:92:fb:d4:11:7f:7b:26:cf:
15:fc:a3:aa:a4:74:00:12:00:83:f0:16:21:3a:5a:
af:83:cd:20:49:aa:1d:f0:c7:12:d4:60:54:6a:31:
06:34:3a:93:f9:88:06:e8:38:f6:aa:64:2f:90:56:
8e:86:f1:8f:d1:b1:9b:4a:54:1a:0a:18:5e:f2:14:
0f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:66:40:FE:F6:77:1A:E6:52:F2:29:60:33:12:B5:51:01:4F:D9:04
X509v3 Authority Key Identifier:
keyid:9D:60:47:77:A0:AC:7B:E6:AA:08:10:B0:25:EB:49:3E:A6:DD:34:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:85:76:c1:02:54:0c:45:92:d6:13:da:fa:cd:31:96:ce:6b:
d5:90:d9:2e:49:d6:70:90:fc:e3:e4:a2:4f:72:e9:f0:7f:8b:
5f:ee:b8:71:ff:76:8d:41:f8:c8:0f:6e:42:56:55:43:7a:36:
3f:10:d5:07:a4:f3:f6:2d:bb:34:0b:9b:52:bd:1b:a7:e9:60:
3f:e7:12:5a:25:db:83:7d:4f:35:87:6e:01:8a:9e:75:a3:be:
6e:2d:4f:16:33:57:b3:a2:7f:86:00:72:a0:d5:9d:f6:ca:bf:
7d:c8:e3:55:fd:e7:48:99:0b:e1:3d:1b:1a:fe:a4:66:a8:a2:
fb:9e:1c:db:e0:b4:45:e7:8c:b7:5a:a7:23:cd:20:b3:18:70:
73:ca:a7:3e:da:79:56:99:f3:79:71:8d:33:0a:0f:a7:e0:05:
c1:af:0c:6e:f6:8b:8b:5d:e5:5d:f8:c9:9a:a6:42:b7:80:49:
09:35:f2:ba:b5:22:e6:4a:99:72:e0:6e:70:5d:30:9b:d2:b6:
62:7a:e9:21:59:f7:c9:a3:b4:e4:8d:db:33:a2:6d:ba:7c:e7:
15:bb:ee:b4:a4:38:00:57:06:68:33:2c:70:c5:a7:fb:90:55:
90:8f:97:9e:a3:62:b4:88:47:8a:85:fa:34:57:f7:50:47:7b:
30:45:b5:be
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OThGRDAxMTAvBgNVBAUTKDlENjA0Nzc3QTBBQzdCRTZBQTA4MTBCMDI1RUI0OTNF
QTZERDM0NjMwHhcNMjUwMzI5MDAyMzEyWhcNMjUwNDA1MDAyMzEyWjAYMRYwFAYD
VQQDEw02N2U3M2Q3MC1mYmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuUcfBLEGIm4pUZvucpIwsQPdFUC7DdMqmsb44e08Yto14/4cFvwRVQqsWaLN
daCdgLnMTZLNuRtZ71THLZ96SRrd301ifIbwAcmmzc7x1iPCETLtv5HjAL785LFQ
3cmWPQh81+Fu0ragnb0rcmuOntCziXeg1OlWzys2b94Z+vz9mVw8UXMVeKtFqXN5
5nNBoC5qffrodmv0raQqD2jNZXKn4Qtwx8zoshjWPp7EEHfCiOCV0/fyfDo5kvvU
EX97Js8V/KOqpHQAEgCD8BYhOlqvg80gSaod8McS1GBUajEGNDqT+YgG6Dj2qmQv
kFaOhvGP0bGbSlQaChhe8hQPMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL1mQP72
dxrmUvIpYDMStVEBT9kEMB8GA1UdIwQYMBaAFJ1gR3egrHvmqggQsCXrST6m3TRj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEZEMC8yMEI0QkQ4MDNE
RDUxMUVDQjcyNjY0NjRDNEY5QUUwMi9uV0JIZDZDc2UtYXFDQkN3SmV0SlBxYmRO
R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25XQkhkNkNzZS1hcUNCQ3dKZXRKUHFiZE5HTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OEZEMC8yMEI0QkQ4MDNERDUxMUVDQjcyNjY0NjRDNEY5QUUwMi9uV0JIZDZDc2Ut
YXFDQkN3SmV0SlBxYmROR00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBEhXbBAlQMRZLWE9r6zTGWzmvVkNkuSdZwkPzj5KJPcunwf4tf7rhx
/3aNQfjID25CVlVDejY/ENUHpPP2Lbs0C5tSvRun6WA/5xJaJduDfU81h24Bip51
o75uLU8WM1ezon+GAHKg1Z32yr99yONV/edImQvhPRsa/qRmqKL7nhzb4LRF54y3
WqcjzSCzGHBzyqc+2nlWmfN5cY0zCg+n4AXBrwxu9ouLXeVd+MmapkK3gEkJNfK6
tSLmSply4G5wXTCb0rZieukhWffJo7Tkjdszom26fOcVu+60pDgAVwZoMyxwxaf7
kFWQj5eeo2K0iEeKhfo0V/dQR3swRbW+
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:53:20 2025 by rpki-client