Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft
File: rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft (raw, json)
Hash identifier: SinBXUy7dxxFIzdkUTs54GVeudJ0oKzw4AU+IZuVTuU=
Subject key identifier: 65:2C:D0:A7:23:B4:47:D7:6E:08:1A:5B:71:EB:76:04:89:76:4E:16
Authority key identifier: AD:6A:85:68:97:7E:AF:58:EE:AF:1C:8A:97:D6:37:7C:2E:25:E4:B0
Certificate issuer: /CN=A91A95AB/serialNumber=AD6A8568977EAF58EEAF1C8A97D6377C2E25E4B0
Certificate serial: 3478
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft
Manifest number: 3C9A
Signing time: Fri 28 Mar 2025 15:19:23 +0000
Manifest this update: Fri 28 Mar 2025 15:19:22 +0000
Manifest next update: Fri 04 Apr 2025 15:19:22 +0000
Files and hashes: 1: rWqFaJd-r1jurxyKl9Y3fC4l5LA.crl (hash: //vzCdSHKncjcq3pGH+4zoaXjDFOR84uUvfxPf6sSTQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13432 (0x3478)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A95AB
Validity
Not Before: Mar 28 15:19:22 2025 GMT
Not After : Apr 4 15:19:22 2025 GMT
Subject: CN=67e6bdfb-f500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b7:51:b3:0d:74:12:e4:93:4b:9a:88:b2:ca:
0f:6d:96:9f:30:ab:d3:c9:4a:27:ca:9c:d4:44:a4:
68:6e:f0:05:de:cf:e5:c7:6c:30:89:3e:43:0c:d2:
ef:2d:4e:59:04:76:f0:9e:06:23:21:59:87:38:5b:
65:45:7b:53:97:15:7e:b3:6c:bb:16:26:f1:71:13:
1b:80:84:c9:18:ea:ee:1b:e6:ba:7f:6c:69:9c:3f:
f6:30:39:0c:5d:b2:9b:26:85:8d:12:16:05:b3:1e:
0e:9b:a0:74:61:b9:76:ad:81:bf:df:ae:d8:09:5e:
f1:67:fa:38:f6:b1:1c:37:5e:8f:1d:1c:a7:7e:28:
5e:6a:e2:51:4f:62:79:e1:cc:16:98:ec:cf:29:19:
fe:fb:bc:db:6f:02:15:8d:e9:f4:38:63:11:89:39:
5e:5c:e9:42:85:99:5b:73:2f:a8:be:d3:ae:ab:89:
62:cc:04:05:6d:99:82:45:89:0e:0b:7d:47:57:63:
2e:61:60:b7:0b:20:1a:45:e6:08:61:ea:14:58:3f:
21:44:c2:ce:61:92:4b:53:f1:1b:48:37:da:34:d0:
b4:03:28:88:a3:0c:ad:4f:67:86:82:b4:63:3e:77:
76:c4:62:c1:33:f6:b9:ea:ef:f3:10:7c:1a:1a:ba:
38:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2C:D0:A7:23:B4:47:D7:6E:08:1A:5B:71:EB:76:04:89:76:4E:16
X509v3 Authority Key Identifier:
keyid:AD:6A:85:68:97:7E:AF:58:EE:AF:1C:8A:97:D6:37:7C:2E:25:E4:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:6e:98:68:2c:06:35:ba:91:c0:22:90:40:fc:80:4e:cb:25:
53:8f:76:66:a8:71:26:25:ba:7f:15:75:30:fd:93:f6:b4:3f:
ae:da:ae:15:7b:26:9f:e8:4a:c6:55:db:61:39:06:fd:ae:ee:
f8:ce:3c:0d:e5:4e:a2:2f:4c:5e:f4:72:3d:20:25:b6:26:b3:
7f:ab:3a:44:47:fe:e4:69:d5:9c:51:9a:66:63:38:e9:fb:65:
f4:f1:c9:7c:7d:36:ab:be:23:e8:21:d3:20:6d:dd:ed:63:81:
64:6c:ec:12:7b:a6:d5:10:4b:28:74:37:8c:e3:42:8b:ed:af:
d3:6f:2f:99:aa:68:64:56:85:79:f3:86:8a:16:60:8d:9f:ce:
42:37:e2:6a:ed:49:55:73:4c:62:33:98:a5:5e:bd:d3:3b:31:
11:12:2f:2f:d2:70:af:13:fd:e4:97:e6:06:e5:0f:36:aa:a4:
89:a9:93:d6:73:a6:f7:db:95:47:23:24:8f:62:c6:00:f4:70:
71:46:e3:24:86:af:07:ea:bc:52:eb:05:10:06:03:5b:2e:60:
54:08:9f:0d:22:1b:1c:ac:1d:1a:18:80:f7:1c:f2:21:04:ab:
9b:a7:e6:44:38:84:84:25:fa:88:3e:0c:2c:7b:88:72:d4:1f:
64:1e:c6:43
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTk1QUIxMTAvBgNVBAUTKEFENkE4NTY4OTc3RUFGNThFRUFGMUM4QTk3RDYzNzdD
MkUyNUU0QjAwHhcNMjUwMzI4MTUxOTIyWhcNMjUwNDA0MTUxOTIyWjAYMRYwFAYD
VQQDEw02N2U2YmRmYi1mNTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwbdRsw10EuSTS5qIssoPbZafMKvTyUonypzURKRobvAF3s/lx2wwiT5DDNLv
LU5ZBHbwngYjIVmHOFtlRXtTlxV+s2y7FibxcRMbgITJGOruG+a6f2xpnD/2MDkM
XbKbJoWNEhYFsx4Om6B0Ybl2rYG/367YCV7xZ/o49rEcN16PHRynfiheauJRT2J5
4cwWmOzPKRn++7zbbwIVjen0OGMRiTleXOlChZlbcy+ovtOuq4lizAQFbZmCRYkO
C31HV2MuYWC3CyAaReYIYeoUWD8hRMLOYZJLU/EbSDfaNNC0AyiIowytT2eGgrRj
Pnd2xGLBM/a56u/zEHwaGro4AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUs0Kcj
tEfXbggaW3HrdgSJdk4WMB8GA1UdIwQYMBaAFK1qhWiXfq9Y7q8cipfWN3wuJeSw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTVBQi8yQUFGRjU3ODFE
QTcxMUUyQTFGMkNDQTAwOEIwMkNEMi9yV3FGYUpkLXIxanVyeHlLbDlZM2ZDNGw1
TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JXcUZhSmQtcjFqdXJ4eUtsOVkzZkM0bDVMQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTVBQi8yQUFGRjU3ODFEQTcxMUUyQTFGMkNDQTAwOEIwMkNEMi9yV3FGYUpkLXIx
anVyeHlLbDlZM2ZDNGw1TEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCdbphoLAY1upHAIpBA/IBOyyVTj3ZmqHEmJbp/FXUw/ZP2tD+u2q4V
eyaf6ErGVdthOQb9ru74zjwN5U6iL0xe9HI9ICW2JrN/qzpER/7kadWcUZpmYzjp
+2X08cl8fTarviPoIdMgbd3tY4FkbOwSe6bVEEsodDeM40KL7a/Tby+ZqmhkVoV5
84aKFmCNn85CN+Jq7UlVc0xiM5ilXr3TOzEREi8v0nCvE/3kl+YG5Q82qqSJqZPW
c6b325VHIySPYsYA9HBxRuMkhq8H6rxS6wUQBgNbLmBUCJ8NIhscrB0aGID3HPIh
BKubp+ZEOISEJfqIPgwse4hy1B9kHsZD
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:37:39 2025 by rpki-client