Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.mft
File: 5fjJ4D7R71BndlYU2mtRJq1vyz4.mft (raw, json)
Hash identifier: zJdjgkHeeJOqDBl7xntspoqkKTdhChpwVtLCSz6F0VU=
Subject key identifier: 69:28:05:C4:26:8B:A9:6E:8C:ED:13:79:9E:D9:90:73:13:93:86:8F
Authority key identifier: E5:F8:C9:E0:3E:D1:EF:50:67:76:56:14:DA:6B:51:26:AD:6F:CB:3E
Certificate issuer: /CN=A91A6548/serialNumber=E5F8C9E03ED1EF5067765614DA6B5126AD6FCB3E
Certificate serial: 04E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5fjJ4D7R71BndlYU2mtRJq1vyz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.mft
Manifest number: 04E2
Signing time: Sat 29 Mar 2025 00:01:20 +0000
Manifest this update: Sat 29 Mar 2025 00:01:20 +0000
Manifest next update: Sat 05 Apr 2025 00:01:20 +0000
Files and hashes: 1: 5fjJ4D7R71BndlYU2mtRJq1vyz4.crl (hash: 6fxqz4dE7qhqkQ48h5xLJLnr+e9mVVQDD37r02uOrko=)
2: E6EC55EE0D7E11EC94917272C4F9AE02.roa (hash: ZFPLjWKhXylD4Z8vt5rlOjVNLoBd2B0qS7n8g9uJPA4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1254 (0x4e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6548
Validity
Not Before: Mar 29 00:01:20 2025 GMT
Not After : Apr 5 00:01:20 2025 GMT
Subject: CN=67e73850-9195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bb:c1:fa:e5:87:79:04:39:ec:7f:6d:cc:09:
ad:53:52:42:02:3c:59:42:5c:48:83:6f:f7:dd:bd:
13:bb:06:bb:61:b6:df:fd:ca:d0:e1:a4:1f:06:5a:
54:ba:c7:40:7d:30:9e:80:a1:21:ff:aa:da:ea:cb:
aa:88:18:24:b8:f3:f9:cf:54:21:01:46:64:d1:ca:
73:f7:4d:ec:99:34:ab:e2:39:af:ee:59:bb:c1:13:
cd:64:61:4c:49:0b:21:78:38:4d:3e:a9:6b:a0:8f:
ac:f5:2d:1a:d2:9e:0f:1e:39:56:f3:54:d1:b6:50:
b6:1f:81:84:c0:ff:3f:22:8f:b4:34:68:72:bd:ae:
fd:5a:37:55:86:45:d4:3a:7e:2c:0b:9e:9f:ca:52:
05:6e:bc:42:c3:16:be:a1:90:dc:f9:ad:f1:c0:78:
bc:6e:44:f0:94:5b:14:0f:f3:c3:64:50:7c:93:42:
b8:69:ad:7d:13:59:45:a9:01:55:14:97:8b:e7:6b:
53:0a:44:bb:18:f2:06:2b:52:37:57:47:18:44:f4:
74:94:46:67:4f:b8:4e:13:e1:73:dd:47:01:a3:1e:
d3:e9:c2:12:4a:e5:26:f8:75:5d:99:f2:bc:81:ba:
9f:e5:3d:1b:4f:09:66:1c:96:c8:8f:25:b7:01:79:
c5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:28:05:C4:26:8B:A9:6E:8C:ED:13:79:9E:D9:90:73:13:93:86:8F
X509v3 Authority Key Identifier:
keyid:E5:F8:C9:E0:3E:D1:EF:50:67:76:56:14:DA:6B:51:26:AD:6F:CB:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5fjJ4D7R71BndlYU2mtRJq1vyz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d6:0c:5e:62:24:cc:7a:ef:3b:b6:36:99:12:32:ec:d3:80:
1c:c3:81:5a:a0:c7:ff:ee:f5:b5:d6:af:f5:69:9b:dd:50:4b:
30:31:08:9a:07:c1:a6:b1:fc:08:f4:79:8c:b8:e0:f2:91:c1:
59:68:1f:d4:5f:62:28:24:2e:22:65:35:d5:fd:58:ea:00:69:
c1:b2:41:7f:a6:24:ea:ca:51:9a:7d:57:b2:de:a1:0f:d0:02:
53:94:1d:8f:ca:cb:55:bb:61:b3:07:13:b6:42:31:93:f5:32:
95:e6:d8:3a:94:a9:a2:4d:da:1a:19:d5:25:ac:a2:ba:3b:0f:
fc:80:1a:9f:a4:a1:8f:36:a9:e5:bc:02:f5:1c:91:79:1e:19:
3b:45:d7:38:06:a6:d7:b0:be:d6:0a:6b:07:52:c3:18:e4:78:
75:0f:2d:8b:45:10:84:3a:94:b5:e9:ac:88:1c:1f:a8:6f:b0:
7b:f4:a2:32:b3:94:71:6f:0c:86:e5:c4:c3:02:bd:e1:18:a4:
a8:d0:11:16:e7:6f:c3:b4:ad:20:0e:6f:12:bb:52:2a:3e:35:
4d:63:e8:ac:0f:85:7a:6a:d0:54:6f:7b:ab:16:d1:0d:b9:36:
a1:e3:9f:86:3c:cf:33:ce:16:4e:f8:2c:7c:c8:6c:1c:49:ca:
fc:d9:0a:35
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTY1NDgxMTAvBgNVBAUTKEU1RjhDOUUwM0VEMUVGNTA2Nzc2NTYxNERBNkI1MTI2
QUQ2RkNCM0UwHhcNMjUwMzI5MDAwMTIwWhcNMjUwNDA1MDAwMTIwWjAYMRYwFAYD
VQQDEw02N2U3Mzg1MC05MTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz7vB+uWHeQQ57H9tzAmtU1JCAjxZQlxIg2/33b0Tuwa7Ybbf/crQ4aQfBlpU
usdAfTCegKEh/6ra6suqiBgkuPP5z1QhAUZk0cpz903smTSr4jmv7lm7wRPNZGFM
SQsheDhNPqlroI+s9S0a0p4PHjlW81TRtlC2H4GEwP8/Io+0NGhyva79WjdVhkXU
On4sC56fylIFbrxCwxa+oZDc+a3xwHi8bkTwlFsUD/PDZFB8k0K4aa19E1lFqQFV
FJeL52tTCkS7GPIGK1I3V0cYRPR0lEZnT7hOE+Fz3UcBox7T6cISSuUm+HVdmfK8
gbqf5T0bTwlmHJbIjyW3AXnFUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGkoBcQm
i6lujO0TeZ7ZkHMTk4aPMB8GA1UdIwQYMBaAFOX4yeA+0e9QZ3ZWFNprUSatb8s+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjU0OC83RENGMjQ4QTBE
N0MxMUVDQkFCREQ1NkRDNEY5QUUwMi81ZmpKNEQ3UjcxQm5kbFlVMm10UkpxMXZ5
ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVmako0RDdSNzFCbmRsWVUybXRSSnExdnl6NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NjU0OC83RENGMjQ4QTBEN0MxMUVDQkFCREQ1NkRDNEY5QUUwMi81ZmpKNEQ3Ujcx
Qm5kbFlVMm10UkpxMXZ5ejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBr1gxeYiTMeu87tjaZEjLs04Acw4FaoMf/7vW11q/1aZvdUEswMQia
B8GmsfwI9HmMuODykcFZaB/UX2IoJC4iZTXV/VjqAGnBskF/piTqylGafVey3qEP
0AJTlB2PystVu2GzBxO2QjGT9TKV5tg6lKmiTdoaGdUlrKK6Ow/8gBqfpKGPNqnl
vAL1HJF5Hhk7Rdc4BqbXsL7WCmsHUsMY5Hh1Dy2LRRCEOpS16ayIHB+ob7B79KIy
s5RxbwyG5cTDAr3hGKSo0BEW52/DtK0gDm8Su1IqPjVNY+isD4V6atBUb3urFtEN
uTah45+GPM8zzhZO+Cx8yGwcScr82Qo1
-----END CERTIFICATE-----
Generated at Thu Apr 10 19:36:17 2025 by rpki-client