Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft
File: JM96JUWnTqJVAgG27duZ-b7bgbU.mft (raw, json)
Hash identifier: vEQNM1WvTnzfSdzyAqznRqOztKak+XfkQdNLLuRYndc=
Subject key identifier: 69:DB:06:6B:2C:37:53:C2:95:17:38:10:5E:EE:25:16:42:54:63:DD
Authority key identifier: 24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5
Certificate issuer: /CN=A91A0C55/serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5
Certificate serial: 1CA4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft
Manifest number: 1C84
Signing time: Fri 28 Mar 2025 16:17:20 +0000
Manifest this update: Fri 28 Mar 2025 16:17:20 +0000
Manifest next update: Fri 04 Apr 2025 16:17:20 +0000
Files and hashes: 1: JM96JUWnTqJVAgG27duZ-b7bgbU.crl (hash: S6Y+vZAPQM1ZxvVyrR0T9V+ZcDH4VNBY0phQiRrrTg0=)
2: FCA6FF8C749E11E8B07CAE80C4F9AE02.roa (hash: k/o6QQeGjIebtK3cSFt7OP5rP3xEncXYao5ZQWxg/pA=)
3: 91269EDA6D4111EC8A648F1EC4F9AE02.roa (hash: DWn9jCobSOgDEKS3edLHIgrtHpnKwI5elc8EFo1f8dA=)
4: FE6E6B48749E11E8B07CAE80C4F9AE02.roa (hash: Ruri1qHSgWDfSjLB7GMruorS7uq7+YoW4Hew6bZFFkY=)
5: FD4BF398749E11E8B07CAE80C4F9AE02.roa (hash: FTl4166fURxtlu8VB5wTYmb/CvUhAT5RdQV1AnE8x5Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7332 (0x1ca4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0C55
Validity
Not Before: Mar 28 16:17:20 2025 GMT
Not After : Apr 4 16:17:20 2025 GMT
Subject: CN=67e6cb90-9bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:51:8c:24:51:e2:fe:f2:7a:f3:64:c1:3c:14:
e8:b3:9f:67:dd:46:2f:91:6a:9b:fa:6e:19:b7:14:
72:72:42:da:cb:b5:7d:65:be:42:3e:98:47:c6:cb:
28:98:6d:34:82:99:91:bc:11:44:f0:01:e6:e8:ae:
4f:05:c2:d0:7e:19:0d:30:bb:78:81:48:21:8e:56:
d4:de:4b:30:f2:4d:e2:33:17:1b:b8:1a:47:8b:7b:
77:7e:a6:ab:d9:08:10:3b:07:ec:23:26:bd:be:ab:
5e:14:2c:4a:83:e4:3d:75:24:ef:8b:ea:2c:d9:9b:
18:35:37:12:96:8c:da:bf:be:94:c2:08:55:51:1b:
19:85:17:ab:15:3d:ac:9d:86:35:c7:ee:6a:36:e5:
b6:b8:73:fb:66:2b:b2:fc:c0:72:54:8a:aa:3e:34:
21:cb:fa:00:94:6b:fa:06:36:bb:48:cf:52:64:9e:
55:a7:7b:11:e5:60:6c:43:3d:82:57:0e:14:49:58:
f6:48:33:cd:dd:98:e3:cc:6f:83:4b:e9:34:72:4d:
9f:4c:b5:d7:da:a6:ed:de:ff:29:25:22:b4:3c:03:
cf:eb:5c:67:e0:81:52:2b:47:90:b2:25:bc:e1:e5:
b2:f6:44:1c:b2:18:05:17:b3:4e:40:cb:d1:d0:ff:
68:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DB:06:6B:2C:37:53:C2:95:17:38:10:5E:EE:25:16:42:54:63:DD
X509v3 Authority Key Identifier:
keyid:24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3e:cf:e5:e7:48:bb:eb:18:2e:b4:f6:40:e2:c9:63:d8:e5:
ea:a1:83:8f:e4:aa:65:4d:6c:74:bc:de:79:9e:23:01:19:96:
42:42:6b:18:8a:7e:74:25:85:11:48:c0:c3:fd:c3:18:91:92:
b1:60:79:7d:68:b4:b8:e0:37:aa:57:3f:69:f4:93:45:b5:16:
d8:e7:e9:b3:01:6b:e5:ce:4d:d9:47:8d:69:56:f2:9e:03:ec:
73:1f:ad:57:c8:b6:97:a1:85:e2:a2:19:58:7a:77:3b:f5:e8:
fe:ee:5e:ff:cb:be:2b:82:fd:5e:b1:99:9b:99:02:c1:8c:b8:
9b:e1:38:00:87:9b:aa:14:13:42:fc:ca:ae:af:d3:af:12:ae:
87:61:6e:34:68:e1:2a:bc:68:7c:42:2d:13:87:1d:c7:8f:c3:
e3:e1:eb:e2:01:5d:52:76:15:4a:db:42:9a:56:1f:7c:d0:ef:
c1:9c:f2:dd:e5:52:36:f3:77:dc:c6:ba:eb:17:5f:b4:60:7a:
b9:2f:38:e7:e7:84:4c:3b:23:3f:6a:ad:d0:d9:8b:2b:93:24:
d5:bd:d4:ea:fe:88:85:fb:8d:23:44:fd:ec:b8:8d:6e:14:e7:
51:71:19:e8:8d:f6:e9:95:47:50:39:38:86:65:53:55:af:47:
9d:f8:bb:83
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTBDNTUxMTAvBgNVBAUTKDI0Q0Y3QTI1NDVBNzRFQTI1NTAyMDFCNkVEREI5OUY5
QkVEQjgxQjUwHhcNMjUwMzI4MTYxNzIwWhcNMjUwNDA0MTYxNzIwWjAYMRYwFAYD
VQQDEw02N2U2Y2I5MC05YmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqlGMJFHi/vJ682TBPBTos59n3UYvkWqb+m4ZtxRyckLay7V9Zb5CPphHxsso
mG00gpmRvBFE8AHm6K5PBcLQfhkNMLt4gUghjlbU3ksw8k3iMxcbuBpHi3t3fqar
2QgQOwfsIya9vqteFCxKg+Q9dSTvi+os2ZsYNTcSlozav76UwghVURsZhRerFT2s
nYY1x+5qNuW2uHP7Ziuy/MByVIqqPjQhy/oAlGv6Bja7SM9SZJ5Vp3sR5WBsQz2C
Vw4USVj2SDPN3ZjjzG+DS+k0ck2fTLXX2qbt3v8pJSK0PAPP61xn4IFSK0eQsiW8
4eWy9kQcshgFF7NOQMvR0P9o3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGnbBmss
N1PClRc4EF7uJRZCVGPdMB8GA1UdIwQYMBaAFCTPeiVFp06iVQIBtu3bmfm+24G1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEM1NS8yRUE3QTQ2Q0NF
NzExMUU2OUUyQjk0NDRDNEY5QUUwMi9KTTk2SlVXblRxSlZBZ0cyN2R1Wi1iN2Jn
YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pNOTZKVVduVHFKVkFnRzI3ZHVaLWI3YmdiVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MEM1NS8yRUE3QTQ2Q0NFNzExMUU2OUUyQjk0NDRDNEY5QUUwMi9KTTk2SlVXblRx
SlZBZ0cyN2R1Wi1iN2JnYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAaPs/l50i76xgutPZA4slj2OXqoYOP5KplTWx0vN55niMBGZZCQmsY
in50JYURSMDD/cMYkZKxYHl9aLS44DeqVz9p9JNFtRbY5+mzAWvlzk3ZR41pVvKe
A+xzH61XyLaXoYXiohlYenc79ej+7l7/y74rgv1esZmbmQLBjLib4TgAh5uqFBNC
/Mqur9OvEq6HYW40aOEqvGh8Qi0Thx3Hj8Pj4eviAV1SdhVK20KaVh980O/BnPLd
5VI283fcxrrrF1+0YHq5Lzjn54RMOyM/aq3Q2YsrkyTVvdTq/oiF+40jRP3suI1u
FOdRcRnojfbplUdQOTiGZVNVr0ed+LuD
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:31:19 2025 by rpki-client