Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
File: KxuyStzbFPbix7uy2Iq62x3diY0.mft (raw, json)
Hash identifier: k8q/U9FNCiRH24LPoe3gYAD1vU58S4ID6ZkW8fjcYZA=
Subject key identifier: 13:BC:67:42:4E:F0:4F:BB:7B:9B:AC:B2:AF:82:EF:E6:C2:9A:7C:EE
Authority key identifier: 2B:1B:B2:4A:DC:DB:14:F6:E2:C7:BB:B2:D8:8A:BA:DB:1D:DD:89:8D
Certificate issuer: /CN=A91A80D2/serialNumber=2B1BB24ADCDB14F6E2C7BBB2D88ABADB1DDD898D
Certificate serial: 02E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
Manifest number: 02DA
Signing time: Sat 29 Mar 2025 01:37:53 +0000
Manifest this update: Sat 29 Mar 2025 01:37:53 +0000
Manifest next update: Sat 05 Apr 2025 01:37:53 +0000
Files and hashes: 1: KxuyStzbFPbix7uy2Iq62x3diY0.crl (hash: OezN47H/sBk5wUVKmvsXVwAxRGbX6vTaI4iYPFtb3DQ=)
2: 3486D47412D511EFB1EF161DC4F9AE02.roa (hash: Crj6EQEsFsVZ7Rl37tD7+KlB9qlhMrOAHvL0KyIGgkI=)
3: 95CA439CDAE211ECA14A8254C4F9AE02.roa (hash: 16TIMxSDuDuwbvd9GQ+m4o06d2DMg8lDV7WSYdSxPbs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 736 (0x2e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A80D2
Validity
Not Before: Mar 29 01:37:53 2025 GMT
Not After : Apr 5 01:37:53 2025 GMT
Subject: CN=67e74ef1-5b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:eb:c3:cc:ed:a7:31:27:36:bf:4b:7b:cd:15:
00:0c:08:9f:65:48:0c:7f:2c:49:a1:04:6d:f6:7b:
6a:be:36:87:45:74:20:4b:0d:c1:13:63:fa:93:06:
d1:2f:5a:70:d1:6f:f2:fb:39:be:06:28:6f:cf:f0:
95:a6:ff:2e:4c:e4:ce:58:92:95:c4:77:94:3e:c5:
47:94:37:91:9b:fd:2e:5e:d4:c4:ec:dc:80:e9:a4:
f8:f4:ca:f3:a8:3d:3f:7a:6f:09:52:7b:a1:24:b5:
39:6a:0c:f5:5d:03:c9:d3:11:ff:3d:c5:b4:dc:18:
58:2e:41:5a:ea:10:f6:c4:53:0f:10:7b:8f:30:61:
80:15:27:0b:41:fb:c2:7d:36:37:ed:27:ef:85:c4:
82:ee:56:e6:6b:ad:89:5e:8a:09:ad:41:19:be:5b:
88:59:c1:ed:f2:28:f7:2c:4d:7b:88:5e:9e:34:b6:
65:14:79:09:f0:72:7f:f2:84:dd:07:d2:c4:63:c9:
b1:e3:ca:26:43:5d:a4:7e:7b:c0:99:7d:d4:55:f5:
87:64:2e:e6:6e:37:15:5c:09:07:1a:b0:d7:5e:ee:
21:12:7b:3f:eb:40:8a:b4:1a:ce:01:42:e4:13:96:
62:3d:ab:64:f2:94:cf:9c:65:3a:15:bd:ab:22:66:
39:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BC:67:42:4E:F0:4F:BB:7B:9B:AC:B2:AF:82:EF:E6:C2:9A:7C:EE
X509v3 Authority Key Identifier:
keyid:2B:1B:B2:4A:DC:DB:14:F6:E2:C7:BB:B2:D8:8A:BA:DB:1D:DD:89:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:43:fd:21:6c:8d:2f:1d:f1:90:56:ac:3c:76:ae:92:b6:5c:
4e:6e:5e:3c:df:ac:fa:38:d7:59:a2:b0:19:4a:82:cc:70:e6:
89:e5:13:08:4b:d1:29:bc:17:f2:38:13:ec:69:8c:2a:c1:7e:
44:36:bb:bf:e8:07:d1:0c:30:9a:35:19:95:51:62:56:35:d6:
fa:12:18:a3:27:ed:ad:7d:88:b5:3d:9b:94:96:07:5f:5b:7f:
00:a0:16:4f:88:03:bd:60:b6:0c:cb:aa:22:5e:a2:46:5d:b7:
58:3d:29:6b:0a:34:d1:84:0e:f1:39:f5:c1:cd:fc:9c:d9:25:
47:e6:28:1d:3b:8b:c9:2c:99:c2:69:e6:2b:85:bb:5a:a9:89:
5a:4f:9f:0b:77:2d:8a:ad:5b:33:a8:1a:7e:5f:e1:b4:96:7b:
50:c9:3e:84:ca:fb:07:59:15:cf:3a:fd:b9:3f:d2:a9:8c:80:
d8:32:1d:8a:d4:d6:ce:df:59:c4:2b:4f:32:7f:ec:89:0d:2f:
d5:24:a3:0e:02:ee:b2:8a:d8:52:86:ea:84:71:65:c4:b5:ee:
bc:28:0b:7d:d0:91:f2:e6:c8:af:82:3f:b3:49:50:98:4d:9d:
60:ef:f4:12:aa:ff:bb:23:9a:ca:8d:70:02:9a:dc:12:65:b9:
90:0d:17:cf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTgwRDIxMTAvBgNVBAUTKDJCMUJCMjRBRENEQjE0RjZFMkM3QkJCMkQ4OEFCQURC
MURERDg5OEQwHhcNMjUwMzI5MDEzNzUzWhcNMjUwNDA1MDEzNzUzWjAYMRYwFAYD
VQQDEw02N2U3NGVmMS01YjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2OvDzO2nMSc2v0t7zRUADAifZUgMfyxJoQRt9ntqvjaHRXQgSw3BE2P6kwbR
L1pw0W/y+zm+Bihvz/CVpv8uTOTOWJKVxHeUPsVHlDeRm/0uXtTE7NyA6aT49Mrz
qD0/em8JUnuhJLU5agz1XQPJ0xH/PcW03BhYLkFa6hD2xFMPEHuPMGGAFScLQfvC
fTY37SfvhcSC7lbma62JXooJrUEZvluIWcHt8ij3LE17iF6eNLZlFHkJ8HJ/8oTd
B9LEY8mx48omQ12kfnvAmX3UVfWHZC7mbjcVXAkHGrDXXu4hEns/60CKtBrOAULk
E5ZiPatk8pTPnGU6Fb2rImY5VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBO8Z0JO
8E+7e5ussq+C7+bCmnzuMB8GA1UdIwQYMBaAFCsbskrc2xT24se7stiKutsd3YmN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBEMi9ENDI4RDBDNkRB
REUxMUVDODc3MTE0NTBDNEY5QUUwMi9LeHV5U3R6YkZQYml4N3V5MklxNjJ4M2Rp
WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0t4dXlTdHpiRlBiaXg3dXkySXE2MngzZGlZMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
ODBEMi9ENDI4RDBDNkRBREUxMUVDODc3MTE0NTBDNEY5QUUwMi9LeHV5U3R6YkZQ
Yml4N3V5MklxNjJ4M2RpWTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAXQ/0hbI0vHfGQVqw8dq6StlxObl4836z6ONdZorAZSoLMcOaJ5RMI
S9EpvBfyOBPsaYwqwX5ENru/6AfRDDCaNRmVUWJWNdb6EhijJ+2tfYi1PZuUlgdf
W38AoBZPiAO9YLYMy6oiXqJGXbdYPSlrCjTRhA7xOfXBzfyc2SVH5igdO4vJLJnC
aeYrhbtaqYlaT58Ldy2KrVszqBp+X+G0lntQyT6EyvsHWRXPOv25P9KpjIDYMh2K
1NbO31nEK08yf+yJDS/VJKMOAu6yithShuqEcWXEte68KAt90JHy5sivgj+zSVCY
TZ1g7/QSqv+7I5rKjXACmtwSZbmQDRfP
-----END CERTIFICATE-----
Generated at Fri Apr 11 13:45:08 2025 by rpki-client