Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft
File: aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft (raw, json)
Hash identifier: KM6RVa2QYlHXwWUCaI58npxsLsI3zNSMK2Yw2zmkzVs=
Subject key identifier: EA:0B:E3:D4:E0:62:85:F3:9C:1A:00:DC:18:5E:87:70:67:C4:57:0F
Authority key identifier: 69:6A:F4:FE:03:66:13:D6:51:B5:E2:9A:09:D4:FE:71:B5:55:A4:49
Certificate issuer: /CN=A91A80F9/serialNumber=696AF4FE036613D651B5E29A09D4FE71B555A449
Certificate serial: 0C83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft
Manifest number: 0C7B
Signing time: Fri 28 Mar 2025 18:25:07 +0000
Manifest this update: Fri 28 Mar 2025 18:25:06 +0000
Manifest next update: Fri 04 Apr 2025 18:25:06 +0000
Files and hashes: 1: aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl (hash: 52xoPX5xk24vXNZ0oeoG6DUJVtqf69yoxpdMQWVDvyw=)
2: 3EF3C6EEF8B511EAAD434755C4F9AE02.roa (hash: 2oxrZykX6FImkgj0+sEn3YTkG/5Ks+ROCEDtHP8d+xs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3203 (0xc83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A80F9
Validity
Not Before: Mar 28 18:25:06 2025 GMT
Not After : Apr 4 18:25:06 2025 GMT
Subject: CN=67e6e982-5505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f0:02:ff:b3:c3:ff:fe:8c:fb:46:30:06:9b:
03:bb:15:f4:76:49:b5:fa:86:b3:bb:28:d7:aa:dd:
c0:6f:be:65:f3:6b:2f:75:72:87:0a:c6:cc:37:28:
83:b9:83:a7:86:6f:07:dd:86:87:3a:5f:88:4a:f3:
8e:ba:08:b3:ba:96:22:b3:b5:71:a0:32:f6:52:8b:
8c:66:27:71:a8:6e:e3:34:15:34:b6:86:78:46:03:
6e:1b:a3:08:b3:72:80:9b:37:0b:e8:ce:39:63:5b:
70:26:3f:8e:6a:55:71:ad:a3:94:ae:22:ed:76:31:
d7:6a:ca:b9:25:6c:f3:74:40:d1:fe:4f:32:49:6a:
f7:19:48:a3:12:8b:8f:17:96:a2:57:1f:37:65:e5:
e3:aa:80:e3:95:f6:7d:53:a4:63:dc:0c:af:60:72:
31:55:2c:d9:6c:38:a4:bb:43:66:71:86:21:58:fa:
98:4c:10:b7:da:bc:e5:a7:1c:2e:60:45:94:3c:29:
e9:cd:84:d3:fc:ae:59:d3:78:42:89:d6:79:0e:6a:
45:86:35:af:b5:e5:70:33:57:ac:fe:cf:8c:af:33:
66:ce:10:f9:aa:41:86:a3:b8:bb:95:02:2a:d8:3a:
87:8e:b2:cf:03:cf:9f:5a:d9:4e:e3:dd:bc:8c:f8:
3f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0B:E3:D4:E0:62:85:F3:9C:1A:00:DC:18:5E:87:70:67:C4:57:0F
X509v3 Authority Key Identifier:
keyid:69:6A:F4:FE:03:66:13:D6:51:B5:E2:9A:09:D4:FE:71:B5:55:A4:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d8:55:aa:ff:1e:a1:32:a0:c4:e8:e1:0e:1d:b3:cd:81:20:
e7:23:ac:a6:08:de:28:86:2b:5c:75:c2:34:2c:76:c8:b5:f1:
18:c5:7e:68:6e:d6:b8:04:21:9b:30:a5:e0:f8:5d:ce:c1:81:
c2:12:b6:b1:07:92:e9:65:08:fb:95:f0:8e:20:05:e0:86:46:
05:c0:66:07:25:66:29:bd:77:18:68:14:90:5d:53:35:4f:96:
35:89:65:0e:0d:1d:ab:be:06:2a:6c:19:23:ff:11:ac:61:04:
57:6f:d0:6e:6c:8b:fc:75:41:53:97:0a:7c:8e:a0:d7:7f:80:
3e:d4:63:81:80:3e:7f:51:b0:9e:d9:eb:92:58:9e:49:33:41:
ce:d8:9b:4e:c3:03:92:49:88:11:ad:26:4f:f7:36:b0:96:12:
d0:7b:9c:20:2f:9a:ad:5d:e6:c1:e2:c0:0f:11:87:f9:96:4c:
fc:bf:e2:d6:dd:60:db:4c:1b:fb:62:87:3d:9a:5d:3c:36:ee:
11:b6:cd:e7:c1:e2:9b:38:04:e4:a6:2d:22:52:a2:55:f3:f8:
6d:13:d5:ec:35:3a:e2:5a:dc:8a:40:cf:a1:d3:cb:fa:de:1e:
1a:81:b4:f7:f4:02:aa:98:71:54:03:6e:2a:1e:1a:71:d1:da:
a9:14:fc:4b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTgwRjkxMTAvBgNVBAUTKDY5NkFGNEZFMDM2NjEzRDY1MUI1RTI5QTA5RDRGRTcx
QjU1NUE0NDkwHhcNMjUwMzI4MTgyNTA2WhcNMjUwNDA0MTgyNTA2WjAYMRYwFAYD
VQQDEw02N2U2ZTk4Mi01NTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2PAC/7PD//6M+0YwBpsDuxX0dkm1+oazuyjXqt3Ab75l82svdXKHCsbMNyiD
uYOnhm8H3YaHOl+ISvOOugizupYis7VxoDL2UouMZidxqG7jNBU0toZ4RgNuG6MI
s3KAmzcL6M45Y1twJj+OalVxraOUriLtdjHXasq5JWzzdEDR/k8ySWr3GUijEouP
F5aiVx83ZeXjqoDjlfZ9U6Rj3AyvYHIxVSzZbDiku0NmcYYhWPqYTBC32rzlpxwu
YEWUPCnpzYTT/K5Z03hCidZ5DmpFhjWvteVwM1es/s+MrzNmzhD5qkGGo7i7lQIq
2DqHjrLPA8+fWtlO4928jPg/PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOoL49Tg
YoXznBoA3Bheh3BnxFcPMB8GA1UdIwQYMBaAFGlq9P4DZhPWUbXimgnU/nG1VaRJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBGOS80OTc3M0FEMEY0
QTQxMUU5OENDNzVFMzdDNEY5QUUwMi9hV3IwX2dObUU5WlJ0ZUthQ2RULWNiVlZw
RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FXcjBfZ05tRTlaUnRlS2FDZFQtY2JWVnBFay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
ODBGOS80OTc3M0FEMEY0QTQxMUU5OENDNzVFMzdDNEY5QUUwMi9hV3IwX2dObUU5
WlJ0ZUthQ2RULWNiVlZwRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCK2FWq/x6hMqDE6OEOHbPNgSDnI6ymCN4ohitcdcI0LHbItfEYxX5o
bta4BCGbMKXg+F3OwYHCEraxB5LpZQj7lfCOIAXghkYFwGYHJWYpvXcYaBSQXVM1
T5Y1iWUODR2rvgYqbBkj/xGsYQRXb9BubIv8dUFTlwp8jqDXf4A+1GOBgD5/UbCe
2euSWJ5JM0HO2JtOwwOSSYgRrSZP9zawlhLQe5wgL5qtXebB4sAPEYf5lkz8v+LW
3WDbTBv7Yoc9ml08Nu4Rts3nweKbOATkpi0iUqJV8/htE9XsNTriWtyKQM+h08v6
3h4agbT39AKqmHFUA24qHhpx0dqpFPxL
-----END CERTIFICATE-----
Generated at Fri Apr 11 16:39:06 2025 by rpki-client