Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
File: fd2N3PFW56GBobc5eyTUIJY1Pdg.mft (raw, json)
Hash identifier: Lvp3WaGoKxtWkPm83c8XQzwBgIE+7zpuKzCv3ljZvHU=
Subject key identifier: 17:82:E1:D9:53:81:F4:F5:45:CB:39:DF:94:18:68:04:7E:7D:FD:62
Authority key identifier: 7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8
Certificate issuer: /CN=A91A55EC/serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8
Certificate serial: 0432
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
Manifest number: 042C
Signing time: Sat 29 Mar 2025 00:36:35 +0000
Manifest this update: Sat 29 Mar 2025 00:36:34 +0000
Manifest next update: Sat 05 Apr 2025 00:36:34 +0000
Files and hashes: 1: fd2N3PFW56GBobc5eyTUIJY1Pdg.crl (hash: hESA0okUMMx/L9XR6Uz6qNgU/AdqvlaEnM3jDQQF/RE=)
2: 8E15FBF25CFF11ECB5477E0BC4F9AE02.roa (hash: EJYgzer8+vXx8u7MJTCTkYBHErTwzRTpiwQcsCSE90E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1074 (0x432)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A55EC
Validity
Not Before: Mar 29 00:36:34 2025 GMT
Not After : Apr 5 00:36:34 2025 GMT
Subject: CN=67e74092-84aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9d:75:02:8d:f2:c9:88:4e:83:6e:72:e3:50:
d0:77:b3:40:77:07:5b:8f:fd:2f:ae:db:45:87:e9:
14:0a:45:6b:d8:75:52:11:68:c9:83:bc:0d:d9:84:
3a:e5:a9:d8:11:53:95:15:44:42:7d:09:52:af:24:
aa:a4:58:09:72:52:05:f8:12:44:a9:b4:24:88:f5:
72:b9:f5:af:a1:df:ea:97:b0:58:5f:f2:45:40:fb:
5c:a3:dd:3c:8e:9d:38:84:21:bb:cb:7e:55:08:a1:
9e:46:4e:50:eb:21:43:c0:f1:a0:b6:28:0e:d8:36:
63:a2:86:97:7b:07:d9:44:98:db:d8:04:47:4e:17:
cb:98:4f:8b:65:e7:ef:43:c5:56:28:fa:7d:20:f0:
33:ec:c5:69:70:88:71:82:b9:21:5a:bd:3b:1b:c7:
aa:b1:b1:9e:4b:9c:96:80:0c:22:d0:bb:ea:b5:58:
3c:b1:67:87:e7:25:2a:c3:ab:95:21:b4:84:11:bc:
d4:6c:bb:33:17:75:03:27:72:d0:e9:d9:83:1f:71:
90:c7:45:0f:e2:77:e7:d6:c1:cc:6b:c6:49:69:21:
0b:cf:e4:e8:e6:d4:59:b9:09:0c:8c:7a:ba:e5:2d:
e1:ce:af:31:61:77:e1:8d:20:d6:62:03:d9:72:36:
58:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:82:E1:D9:53:81:F4:F5:45:CB:39:DF:94:18:68:04:7E:7D:FD:62
X509v3 Authority Key Identifier:
keyid:7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:3f:36:6c:33:0d:db:8c:aa:ae:75:38:09:e6:58:01:46:62:
a6:0a:52:3b:22:78:7d:6e:31:69:43:bb:54:75:3d:c1:3a:41:
f7:15:4f:c9:3a:e7:33:0e:cd:5f:10:e7:e1:a9:dc:91:13:80:
03:f5:93:f7:3c:2d:71:7b:7e:11:57:b7:d3:43:11:27:a0:0a:
8c:cd:a1:53:58:fd:92:e6:a1:65:09:ff:c4:df:21:06:6a:16:
48:8b:b0:3b:fe:be:f0:88:75:b5:1c:4d:76:cd:e6:f2:6e:ce:
db:5c:19:b5:f9:78:56:fb:d0:f4:f0:e7:6c:f7:5a:5e:7b:cf:
30:f0:eb:c6:2d:47:e2:0f:86:f1:b6:3c:62:08:4d:32:d3:78:
8a:78:eb:d3:d8:b2:5b:d9:64:da:e1:b7:c0:07:52:e5:1d:0d:
26:aa:77:b0:a1:a6:c9:08:f1:e5:35:76:eb:cc:53:7e:ab:f4:
35:0a:28:47:f1:89:f1:b0:03:ff:38:f9:12:f9:eb:11:dc:40:
76:9d:6d:97:e6:05:1a:11:0a:71:e3:9a:b8:3b:46:1c:17:f5:
d1:3c:38:cc:86:3c:25:6e:9b:3e:45:e7:93:16:3f:28:1d:d5:
a4:fb:b5:60:a5:ce:0a:54:bb:6e:f2:23:f7:51:01:75:ca:08:
06:d7:18:d1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU1RUMxMTAvBgNVBAUTKDdEREQ4RERDRjE1NkU3QTE4MUExQjczOTdCMjRENDIw
OTYzNTNERDgwHhcNMjUwMzI5MDAzNjM0WhcNMjUwNDA1MDAzNjM0WjAYMRYwFAYD
VQQDEw02N2U3NDA5Mi04NGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxJ11Ao3yyYhOg25y41DQd7NAdwdbj/0vrttFh+kUCkVr2HVSEWjJg7wN2YQ6
5anYEVOVFURCfQlSrySqpFgJclIF+BJEqbQkiPVyufWvod/ql7BYX/JFQPtco908
jp04hCG7y35VCKGeRk5Q6yFDwPGgtigO2DZjooaXewfZRJjb2ARHThfLmE+LZefv
Q8VWKPp9IPAz7MVpcIhxgrkhWr07G8eqsbGeS5yWgAwi0LvqtVg8sWeH5yUqw6uV
IbSEEbzUbLszF3UDJ3LQ6dmDH3GQx0UP4nfn1sHMa8ZJaSELz+To5tRZuQkMjHq6
5S3hzq8xYXfhjSDWYgPZcjZY8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBeC4dlT
gfT1Rcs535QYaAR+ff1iMB8GA1UdIwQYMBaAFH3djdzxVuehgaG3OXsk1CCWNT3Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVFQy9ERjY1REU5MjU3
ODExMUVDQjY0ODdDNTRDNEY5QUUwMi9mZDJOM1BGVzU2R0JvYmM1ZXlUVUlKWTFQ
ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZkMk4zUEZXNTZHQm9iYzVleVRVSUpZMVBkZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NTVFQy9ERjY1REU5MjU3ODExMUVDQjY0ODdDNTRDNEY5QUUwMi9mZDJOM1BGVzU2
R0JvYmM1ZXlUVUlKWTFQZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCCPzZsMw3bjKqudTgJ5lgBRmKmClI7Inh9bjFpQ7tUdT3BOkH3FU/J
OuczDs1fEOfhqdyRE4AD9ZP3PC1xe34RV7fTQxEnoAqMzaFTWP2S5qFlCf/E3yEG
ahZIi7A7/r7wiHW1HE12zebybs7bXBm1+XhW+9D08Ods91pee88w8OvGLUfiD4bx
tjxiCE0y03iKeOvT2LJb2WTa4bfAB1LlHQ0mqnewoabJCPHlNXbrzFN+q/Q1CihH
8YnxsAP/OPkS+esR3EB2nW2X5gUaEQpx45q4O0YcF/XRPDjMhjwlbps+ReeTFj8o
HdWk+7Vgpc4KVLtu8iP3UQF1yggG1xjR
-----END CERTIFICATE-----
Generated at Wed Apr 9 17:29:43 2025 by rpki-client