Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft
File: gjEAt15d1BoefDKBw1cT9EvobJg.mft (raw, json)
Hash identifier: bCZd1m0Dwl+5t0WzvpHpqJZuPlVWBhORX+NhRKzDFFc=
Subject key identifier: E7:D1:EE:E5:90:30:AF:2B:AB:EB:51:68:5B:02:AF:54:AF:1A:BA:4C
Authority key identifier: 82:31:00:B7:5E:5D:D4:1A:1E:7C:32:81:C3:57:13:F4:4B:E8:6C:98
Certificate issuer: /CN=A91A2E6A/serialNumber=823100B75E5DD41A1E7C3281C35713F44BE86C98
Certificate serial: 93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjEAt15d1BoefDKBw1cT9EvobJg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft
Manifest number: 91
Signing time: Sat 29 Mar 2025 05:45:37 +0000
Manifest this update: Sat 29 Mar 2025 05:45:37 +0000
Manifest next update: Sat 05 Apr 2025 05:45:37 +0000
Files and hashes: 1: gjEAt15d1BoefDKBw1cT9EvobJg.crl (hash: Z064IKRNvkvYvxKkosyumrTbs/FayojPALTZrM7mHnc=)
2: BF466AE8325611EFA462C323C4F9AE02.roa (hash: uYzfBkSO8vYpHzBAx2+F7vI8tdkh606kvIxq3n44H3U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147 (0x93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2E6A
Validity
Not Before: Mar 29 05:45:37 2025 GMT
Not After : Apr 5 05:45:37 2025 GMT
Subject: CN=67e78901-135c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fe:1e:6d:eb:9b:51:dc:d4:ef:da:ff:4a:f4:
d3:47:44:9e:15:d3:06:4d:30:ef:9b:9d:5f:85:23:
6d:9a:ca:8b:e6:81:c4:18:7c:1d:20:d0:65:78:58:
83:9a:66:3b:df:f4:6c:01:36:f6:f0:7d:61:2b:28:
dc:63:e5:a7:47:3d:ab:8e:47:95:f5:14:d3:ba:cf:
b3:11:f3:63:99:f9:5d:5f:5f:44:2d:de:34:f3:61:
4e:39:61:31:13:8c:b3:47:ba:30:4d:76:79:6e:df:
fb:4b:63:4b:0e:7d:ab:df:1d:10:b6:a9:a2:42:19:
fb:90:83:9a:78:5d:8b:09:9f:f0:01:e6:7d:23:32:
16:5a:e1:28:2c:87:57:77:3a:40:3c:4c:3c:58:63:
2b:f1:30:6c:a5:c2:76:1c:5d:a4:f5:68:dd:45:98:
35:a1:b4:9b:05:a8:d4:ed:46:f5:bc:a3:d9:95:4a:
24:bd:5b:e8:de:21:e2:f7:17:a8:76:7d:c7:5c:52:
0e:21:1d:e6:11:f7:36:ef:a0:4c:70:f2:fd:fa:b1:
25:a5:54:28:38:33:de:7a:fd:22:0f:12:d1:e8:ee:
84:ac:c4:67:c6:09:64:9d:9e:2f:2e:9b:38:4c:20:
3c:85:2c:49:00:5e:b2:ed:44:e7:cc:08:ec:0a:22:
8a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D1:EE:E5:90:30:AF:2B:AB:EB:51:68:5B:02:AF:54:AF:1A:BA:4C
X509v3 Authority Key Identifier:
keyid:82:31:00:B7:5E:5D:D4:1A:1E:7C:32:81:C3:57:13:F4:4B:E8:6C:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjEAt15d1BoefDKBw1cT9EvobJg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:66:70:00:e5:46:aa:e4:e9:e2:44:6a:e8:2b:2b:54:e4:a7:
98:07:23:f1:db:56:5e:2e:59:18:92:ac:b9:a5:e5:a2:a8:37:
c3:cc:29:0c:11:81:91:e2:0e:e2:0b:09:71:59:ad:31:99:64:
bf:24:e5:ff:6a:6e:9b:87:8f:3a:1a:8b:0d:64:9c:01:cc:f5:
df:09:6c:b6:0a:43:8e:c7:24:36:76:ec:5e:7a:a7:09:ab:2f:
25:88:70:98:43:78:14:a2:0b:ea:64:5d:af:bf:09:3e:b8:d1:
99:cc:50:46:e9:1c:e3:e1:b9:b4:82:d8:b6:de:79:71:a8:35:
63:cc:63:8d:ab:dc:96:07:c8:cb:f7:d7:05:db:8c:1f:1d:85:
b0:8a:bc:6b:d1:3e:86:34:6e:0e:c8:d9:2d:5d:51:7c:ab:e3:
81:a7:78:65:f7:32:36:d8:15:c1:26:59:fb:5d:8b:f1:8b:78:
0d:64:fe:41:40:88:f5:2d:ec:4a:af:84:c6:0d:bb:fa:0a:8a:
ed:16:2a:2d:fa:ef:ee:79:8d:16:6e:64:e9:9c:1d:ba:d7:03:
a4:9e:c2:a7:44:55:72:fe:3b:44:78:d8:e8:90:52:4f:36:0a:
be:e9:45:3e:dc:60:e5:ba:e6:b3:5d:d5:80:0d:b9:d2:3f:64:
92:2a:29:31
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTJFNkExMTAvBgNVBAUTKDgyMzEwMEI3NUU1REQ0MUExRTdDMzI4MUMzNTcxM0Y0
NEJFODZDOTgwHhcNMjUwMzI5MDU0NTM3WhcNMjUwNDA1MDU0NTM3WjAYMRYwFAYD
VQQDEw02N2U3ODkwMS0xMzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzP4ebeubUdzU79r/SvTTR0SeFdMGTTDvm51fhSNtmsqL5oHEGHwdINBleFiD
mmY73/RsATb28H1hKyjcY+WnRz2rjkeV9RTTus+zEfNjmfldX19ELd4082FOOWEx
E4yzR7owTXZ5bt/7S2NLDn2r3x0QtqmiQhn7kIOaeF2LCZ/wAeZ9IzIWWuEoLIdX
dzpAPEw8WGMr8TBspcJ2HF2k9WjdRZg1obSbBajU7Ub1vKPZlUokvVvo3iHi9xeo
dn3HXFIOIR3mEfc276BMcPL9+rElpVQoODPeev0iDxLR6O6ErMRnxglknZ4vLps4
TCA8hSxJAF6y7UTnzAjsCiKKQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOfR7uWQ
MK8rq+tRaFsCr1SvGrpMMB8GA1UdIwQYMBaAFIIxALdeXdQaHnwygcNXE/RL6GyY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkU2QS9BRTM3M0Q4NDMy
MzAxMUVGOUU1MzIxNTZDNEY5QUUwMi9nakVBdDE1ZDFCb2VmREtCdzFjVDlFdm9i
SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dqRUF0MTVkMUJvZWZES0J3MWNUOUV2b2JKZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MkU2QS9BRTM3M0Q4NDMyMzAxMUVGOUU1MzIxNTZDNEY5QUUwMi9nakVBdDE1ZDFC
b2VmREtCdzFjVDlFdm9iSmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBvZnAA5Uaq5OniRGroKytU5KeYByPx21ZeLlkYkqy5peWiqDfDzCkM
EYGR4g7iCwlxWa0xmWS/JOX/am6bh486GosNZJwBzPXfCWy2CkOOxyQ2duxeeqcJ
qy8liHCYQ3gUogvqZF2vvwk+uNGZzFBG6Rzj4bm0gti23nlxqDVjzGONq9yWB8jL
99cF24wfHYWwirxr0T6GNG4OyNktXVF8q+OBp3hl9zI22BXBJln7XYvxi3gNZP5B
QIj1LexKr4TGDbv6CortFiot+u/ueY0WbmTpnB261wOknsKnRFVy/jtEeNjokFJP
Ngq+6UU+3GDluuazXdWADbnSP2SSKikx
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:08:42 2025 by rpki-client