Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.mft
File: Ny468IjbN1qP-RmFiy3MXH_Epeg.mft (raw, json)
Hash identifier: uKxLbJm8veFci4pUObkdat6n+uLgLkxsDH+zUbKYQiM=
Subject key identifier: A8:F2:8B:6A:64:3F:C7:D7:83:EC:0D:51:B3:49:BC:7A:6F:38:EE:23
Authority key identifier: 37:2E:3A:F0:88:DB:37:5A:8F:F9:19:85:8B:2D:CC:5C:7F:C4:A5:E8
Certificate issuer: /CN=A91A679F/serialNumber=372E3AF088DB375A8FF919858B2DCC5C7FC4A5E8
Certificate serial: 0731
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny468IjbN1qP-RmFiy3MXH_Epeg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.mft
Manifest number: 071E
Signing time: Fri 28 Mar 2025 22:08:18 +0000
Manifest this update: Fri 28 Mar 2025 22:08:18 +0000
Manifest next update: Fri 04 Apr 2025 22:08:18 +0000
Files and hashes: 1: Ny468IjbN1qP-RmFiy3MXH_Epeg.crl (hash: TYv2GoK+c6bqY/Mb3ZmEfzo65Upj2z7cWsGelMYjXvo=)
2: B033793C686D11EE8607594CC4F9AE02.roa (hash: JOi7OHLhFtdHcYqhgYyNkkEIbuwvBfapNIuWdidQbmc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1841 (0x731)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A679F
Validity
Not Before: Mar 28 22:08:18 2025 GMT
Not After : Apr 4 22:08:18 2025 GMT
Subject: CN=67e71dd2-a84d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:33:f8:cb:8a:3a:6f:3c:c3:9e:31:8d:05:7d:
0c:7c:ba:b2:69:81:52:71:2c:42:b4:db:0b:c7:e0:
a2:e7:b6:4c:d2:ce:e2:b5:9e:1e:14:1b:5a:f2:c9:
f6:74:e4:61:ea:cd:1e:8f:04:0b:5a:a7:2b:f3:0b:
4a:56:87:3d:5c:c1:6a:71:77:51:1f:ef:ac:80:28:
74:45:b4:8f:ab:69:43:45:61:9d:c9:b4:bd:a9:aa:
33:db:e8:59:c5:3e:be:00:ec:be:6c:0d:c3:4b:dc:
2b:f8:2f:d0:7a:3e:d7:36:7c:fe:bf:0b:30:4c:65:
dc:be:c2:4e:05:80:b6:db:5f:1a:84:bb:74:07:39:
3f:12:82:4b:da:a1:d7:61:58:ee:1f:2a:4c:1b:37:
df:42:27:63:7b:f4:1d:65:df:b1:a3:d0:83:87:7f:
52:04:44:27:96:73:4c:83:b9:82:be:12:c4:2c:10:
ae:48:bc:93:a7:97:b5:6b:97:d0:b2:3e:1a:5b:37:
d5:cc:0a:b1:ad:c7:e2:27:41:2c:46:4a:08:48:9a:
f1:ed:1f:77:0a:32:c3:33:e7:91:15:c9:be:7c:d0:
61:b5:29:a3:8f:e9:6b:48:79:ab:1d:71:ea:23:a6:
c7:11:4b:05:f8:a3:ae:84:d7:e6:ec:1c:84:50:f5:
0b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F2:8B:6A:64:3F:C7:D7:83:EC:0D:51:B3:49:BC:7A:6F:38:EE:23
X509v3 Authority Key Identifier:
keyid:37:2E:3A:F0:88:DB:37:5A:8F:F9:19:85:8B:2D:CC:5C:7F:C4:A5:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny468IjbN1qP-RmFiy3MXH_Epeg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:eb:43:d0:16:ad:87:b4:25:30:b2:fd:89:35:bf:70:10:d9:
fc:cb:84:43:4b:ba:29:3b:ab:30:c1:c3:16:d1:ac:6d:20:3d:
b5:b4:b8:18:8b:4e:e5:cf:1b:97:44:9b:62:98:c9:c5:ff:e4:
6d:9a:5c:3e:50:bf:29:9e:ff:07:5b:9c:b0:4a:52:28:b6:98:
31:b4:48:dd:70:1d:77:a4:eb:b0:9e:88:6d:47:4b:09:d5:f1:
69:51:df:21:3f:41:00:77:60:fe:7d:f9:4b:5e:1d:44:ce:80:
ef:1d:dd:a9:f4:20:b8:d1:62:76:7c:e4:32:d1:90:1b:29:b9:
25:a6:eb:0a:2e:1b:52:d6:ca:4f:70:96:ae:c8:30:2f:c0:e3:
00:99:1d:06:ea:5a:47:9a:38:e8:8a:98:a2:d7:d6:9b:67:e2:
47:91:06:13:2d:d5:90:3b:16:8f:52:c8:16:d5:85:27:d1:ca:
3f:1c:86:94:8d:18:ae:a7:ad:72:8f:70:1b:12:b5:c8:34:b3:
ea:45:a8:a3:49:96:3e:1d:ae:e9:b6:51:0f:7a:7b:00:34:fc:
c1:e1:02:af:ab:83:0e:4e:cb:9d:39:4a:ca:28:47:10:04:8c:
ba:9b:70:f8:e8:41:61:1a:eb:b0:cc:ab:6c:e1:4e:d1:4b:3c:
0c:19:85:ef
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTY3OUYxMTAvBgNVBAUTKDM3MkUzQUYwODhEQjM3NUE4RkY5MTk4NThCMkRDQzVD
N0ZDNEE1RTgwHhcNMjUwMzI4MjIwODE4WhcNMjUwNDA0MjIwODE4WjAYMRYwFAYD
VQQDEw02N2U3MWRkMi1hODRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1TP4y4o6bzzDnjGNBX0MfLqyaYFScSxCtNsLx+Ci57ZM0s7itZ4eFBta8sn2
dORh6s0ejwQLWqcr8wtKVoc9XMFqcXdRH++sgCh0RbSPq2lDRWGdybS9qaoz2+hZ
xT6+AOy+bA3DS9wr+C/Qej7XNnz+vwswTGXcvsJOBYC2218ahLt0Bzk/EoJL2qHX
YVjuHypMGzffQidje/QdZd+xo9CDh39SBEQnlnNMg7mCvhLELBCuSLyTp5e1a5fQ
sj4aWzfVzAqxrcfiJ0EsRkoISJrx7R93CjLDM+eRFcm+fNBhtSmjj+lrSHmrHXHq
I6bHEUsF+KOuhNfm7ByEUPULQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjyi2pk
P8fXg+wNUbNJvHpvOO4jMB8GA1UdIwQYMBaAFDcuOvCI2zdaj/kZhYstzFx/xKXo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjc5Ri9BMTUyNUY2QzJG
OTIxMUVCQjNFQkFGMjlDNEY5QUUwMi9OeTQ2OElqYk4xcVAtUm1GaXkzTVhIX0Vw
ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL055NDY4SWpiTjFxUC1SbUZpeTNNWEhfRXBlZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
Njc5Ri9BMTUyNUY2QzJGOTIxMUVCQjNFQkFGMjlDNEY5QUUwMi9OeTQ2OElqYk4x
cVAtUm1GaXkzTVhIX0VwZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCH60PQFq2HtCUwsv2JNb9wENn8y4RDS7opO6swwcMW0axtID21tLgY
i07lzxuXRJtimMnF/+Rtmlw+UL8pnv8HW5ywSlIotpgxtEjdcB13pOuwnohtR0sJ
1fFpUd8hP0EAd2D+fflLXh1EzoDvHd2p9CC40WJ2fOQy0ZAbKbklpusKLhtS1spP
cJauyDAvwOMAmR0G6lpHmjjoipii19abZ+JHkQYTLdWQOxaPUsgW1YUn0co/HIaU
jRiup61yj3AbErXINLPqRaijSZY+Ha7ptlEPensANPzB4QKvq4MOTsudOUrKKEcQ
BIy6m3D46EFhGuuwzKts4U7RSzwMGYXv
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:46:05 2025 by rpki-client