Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft
File: ftCxNhmz84MH3uG0Dn8neTItvm4.mft (raw, json)
Hash identifier: PkqOgzs9f8OjS3dYSJE/rV3F4i5UH9p4raWNgOpi07o=
Subject key identifier: 8B:00:CB:6B:FD:7E:69:90:E9:36:9F:3F:83:8F:BE:CB:D6:1F:F3:53
Authority key identifier: 7E:D0:B1:36:19:B3:F3:83:07:DE:E1:B4:0E:7F:27:79:32:2D:BE:6E
Certificate issuer: /CN=A91A7EA5/serialNumber=7ED0B13619B3F38307DEE1B40E7F2779322DBE6E
Certificate serial: 0C5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft
Manifest number: 0C44
Signing time: Fri 28 Mar 2025 18:36:13 +0000
Manifest this update: Fri 28 Mar 2025 18:36:13 +0000
Manifest next update: Fri 04 Apr 2025 18:36:12 +0000
Files and hashes: 1: ftCxNhmz84MH3uG0Dn8neTItvm4.crl (hash: 9poSBPKyBU3heXdLPPedQtA+CzDHDrMtxd13xpGQybA=)
2: 93E73ABE833811ECA0A7120DC4F9AE02.roa (hash: s3cffiMnnn0qpE2XEuN7dLCpvHQisPqdoRFFwv4E0go=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3163 (0xc5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7EA5
Validity
Not Before: Mar 28 18:36:13 2025 GMT
Not After : Apr 4 18:36:12 2025 GMT
Subject: CN=67e6ec1d-b9b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:08:2b:b8:0e:b9:c9:ec:9c:37:3b:f6:cd:c5:
3a:c5:be:6f:00:9c:e9:9f:ed:cf:9c:5c:cf:19:4d:
c2:98:3a:c4:f4:dd:e6:ea:f3:4b:06:a4:12:13:34:
57:5b:b2:4f:aa:50:cf:61:e6:c4:7a:c8:05:59:df:
59:3a:af:b4:ad:83:91:8b:f2:97:55:54:ff:13:0d:
e8:3a:ea:46:75:3d:4b:0c:98:3b:8d:91:c5:50:ac:
50:ce:6b:38:f6:e0:0e:d4:17:6a:31:23:a8:62:87:
61:39:f7:6d:38:22:51:ff:99:74:73:a4:f0:33:43:
57:4d:31:b1:77:2d:9a:43:6d:b0:27:78:09:b7:17:
65:4a:2b:ae:78:20:2a:56:9a:0d:d7:92:42:a1:a2:
3a:23:0b:27:f5:37:98:fd:02:f3:21:18:e2:d8:9a:
bd:8e:4c:58:07:3b:dc:83:62:2e:38:9d:af:1a:02:
de:7c:e4:1c:6a:2f:1f:e4:a1:78:4e:f3:9e:13:ba:
8e:de:1a:c1:a1:e7:da:25:40:e5:27:d7:f8:4d:4b:
3c:43:5b:a0:54:25:47:56:f0:46:74:7b:17:3c:99:
e9:d5:d7:72:69:a8:7d:3e:4b:40:ca:08:d5:a2:31:
f5:2a:cd:33:3d:cb:e9:80:d3:e7:72:1d:4e:df:6e:
37:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:00:CB:6B:FD:7E:69:90:E9:36:9F:3F:83:8F:BE:CB:D6:1F:F3:53
X509v3 Authority Key Identifier:
keyid:7E:D0:B1:36:19:B3:F3:83:07:DE:E1:B4:0E:7F:27:79:32:2D:BE:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:c7:3e:46:61:59:e4:d9:b6:69:bb:85:3a:9b:09:be:1c:2e:
ec:25:d1:03:4a:b2:3f:9e:57:cb:cd:bb:da:26:04:5c:d8:50:
98:ab:9e:52:fd:d9:8d:16:45:78:5a:26:58:8c:c9:f4:bc:74:
88:de:6b:1d:61:d0:6c:66:75:50:76:5d:fb:e2:63:be:7c:1b:
2d:b2:39:27:94:73:cc:66:bb:43:8b:46:35:1d:b8:30:cd:79:
14:62:17:8d:b2:f4:75:11:d1:f8:e7:36:d0:04:c7:c6:62:86:
c3:6d:50:19:c2:66:f7:b7:71:b1:3e:29:e6:e6:c4:5f:c0:dc:
0a:29:07:d4:5b:c9:c2:cb:c2:77:8a:ca:e6:70:6a:2f:b3:9c:
82:d7:92:8c:b4:e6:49:b2:00:74:09:f6:f4:af:c8:30:94:08:
7e:ed:69:4a:d9:45:d2:f8:6b:fb:f1:37:29:93:5f:33:1d:e0:
de:11:ee:d3:43:d1:ff:00:e9:bc:79:87:c6:79:21:50:9f:fb:
bd:53:87:f0:38:09:13:ac:bd:44:2b:1d:0c:35:d7:59:82:35:
64:30:1b:9a:c3:db:b1:e9:72:7f:21:af:55:b6:a1:b4:f5:33:
68:38:f6:25:53:e5:95:55:93:9d:94:10:33:d8:d4:00:bb:95:
72:f3:e4:61
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTdFQTUxMTAvBgNVBAUTKDdFRDBCMTM2MTlCM0YzODMwN0RFRTFCNDBFN0YyNzc5
MzIyREJFNkUwHhcNMjUwMzI4MTgzNjEzWhcNMjUwNDA0MTgzNjEyWjAYMRYwFAYD
VQQDEw02N2U2ZWMxZC1iOWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuwgruA65yeycNzv2zcU6xb5vAJzpn+3PnFzPGU3CmDrE9N3m6vNLBqQSEzRX
W7JPqlDPYebEesgFWd9ZOq+0rYORi/KXVVT/Ew3oOupGdT1LDJg7jZHFUKxQzms4
9uAO1BdqMSOoYodhOfdtOCJR/5l0c6TwM0NXTTGxdy2aQ22wJ3gJtxdlSiuueCAq
VpoN15JCoaI6Iwsn9TeY/QLzIRji2Jq9jkxYBzvcg2IuOJ2vGgLefOQcai8f5KF4
TvOeE7qO3hrBoefaJUDlJ9f4TUs8Q1ugVCVHVvBGdHsXPJnp1ddyaah9PktAygjV
ojH1Ks0zPcvpgNPnch1O32434QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIsAy2v9
fmmQ6TafP4OPvsvWH/NTMB8GA1UdIwQYMBaAFH7QsTYZs/ODB97htA5/J3kyLb5u
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0VBNS9DNzg0Q0Y0RTA0
NTAxMUVBOUIzMjg4MTlDNEY5QUUwMi9mdEN4Tmhtejg0TUgzdUcwRG44bmVUSXR2
bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Z0Q3hOaG16ODRNSDN1RzBEbjhuZVRJdHZtNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
N0VBNS9DNzg0Q0Y0RTA0NTAxMUVBOUIzMjg4MTlDNEY5QUUwMi9mdEN4Tmhtejg0
TUgzdUcwRG44bmVUSXR2bTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBXxz5GYVnk2bZpu4U6mwm+HC7sJdEDSrI/nlfLzbvaJgRc2FCYq55S
/dmNFkV4WiZYjMn0vHSI3msdYdBsZnVQdl374mO+fBstsjknlHPMZrtDi0Y1Hbgw
zXkUYheNsvR1EdH45zbQBMfGYobDbVAZwmb3t3GxPinm5sRfwNwKKQfUW8nCy8J3
isrmcGovs5yC15KMtOZJsgB0Cfb0r8gwlAh+7WlK2UXS+Gv78Tcpk18zHeDeEe7T
Q9H/AOm8eYfGeSFQn/u9U4fwOAkTrL1EKx0MNddZgjVkMBuaw9ux6XJ/Ia9VtqG0
9TNoOPYlU+WVVZOdlBAz2NQAu5Vy8+Rh
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:31:15 2025 by rpki-client