Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft
File: 41zkTnGXKXWROY2C8z0RhhdN6Do.mft (raw, json)
Hash identifier: UHuS3ac8uV7QUZdsSdhlT8ghPOoyGpxgfiUlEzy79ik=
Subject key identifier: C2:92:1A:A1:57:75:00:F1:08:DC:F3:B0:E6:E4:A0:B7:39:14:72:23
Authority key identifier: E3:5C:E4:4E:71:97:29:75:91:39:8D:82:F3:3D:11:86:17:4D:E8:3A
Certificate issuer: /CN=A91A9E55/serialNumber=E35CE44E7197297591398D82F33D1186174DE83A
Certificate serial: 0777
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft
Manifest number: 076F
Signing time: Fri 28 Mar 2025 21:45:07 +0000
Manifest this update: Fri 28 Mar 2025 21:45:07 +0000
Manifest next update: Fri 04 Apr 2025 21:45:07 +0000
Files and hashes: 1: 41zkTnGXKXWROY2C8z0RhhdN6Do.crl (hash: NiYqf4ll0MvJeANxIwPtSKtnkMW2k3EeIlPyrgbbl3U=)
2: 6D7F22A60DF511EBA2098D67C4F9AE02.roa (hash: Sy432PhWarPbK2JtP9nP+Bmc/mIHDONttgOLY2annhk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1911 (0x777)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9E55
Validity
Not Before: Mar 28 21:45:07 2025 GMT
Not After : Apr 4 21:45:07 2025 GMT
Subject: CN=67e71863-be78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:af:74:0a:a1:e8:66:50:5d:9a:24:0c:e4:72:
fe:df:0d:c9:92:bf:dc:c3:71:bf:0e:3e:59:dc:d8:
fe:6a:0f:66:35:d5:0b:47:47:fc:7f:44:c6:a9:ce:
9c:ac:cf:b6:eb:61:f0:ad:63:04:b0:39:77:f6:4b:
17:07:1a:de:7d:db:be:9f:c8:67:38:c3:62:3b:b5:
3b:64:df:77:7b:6f:26:d6:c5:25:66:00:9c:14:4e:
a5:15:3b:0c:c2:1b:55:3b:55:8d:47:65:e5:cd:6e:
c5:f7:28:1a:41:f4:1a:74:c1:8e:1d:45:cd:dc:d0:
6a:a5:c3:5a:e4:af:9d:81:af:87:db:5a:4e:a9:74:
4d:54:a0:d8:85:90:43:db:a0:0b:f5:a9:79:74:99:
f7:08:0e:e9:c7:04:8d:a1:06:e5:55:9f:d7:3f:37:
2c:b4:21:d2:60:a9:c2:d7:1c:c9:23:d9:76:72:b9:
a8:eb:82:fc:37:6b:ea:5a:89:55:49:cb:02:8e:c7:
61:1e:b6:52:41:8f:c9:8e:f8:1c:4b:21:e5:d6:cb:
47:82:8e:d4:7c:65:fd:a1:9d:d5:f3:00:3d:e8:fd:
54:f3:1b:e9:9b:55:56:fa:13:4d:ee:ba:23:aa:27:
68:8c:e7:eb:44:85:11:28:03:84:b8:f8:a5:13:16:
96:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:92:1A:A1:57:75:00:F1:08:DC:F3:B0:E6:E4:A0:B7:39:14:72:23
X509v3 Authority Key Identifier:
keyid:E3:5C:E4:4E:71:97:29:75:91:39:8D:82:F3:3D:11:86:17:4D:E8:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:9d:be:32:f1:ba:50:36:81:9e:b8:9e:54:36:85:88:7b:ce:
b5:fc:fa:80:65:28:ed:a3:97:00:78:e2:c0:3f:2f:ec:11:20:
3f:3c:c8:71:ad:18:75:8d:00:5e:d9:a1:cc:b8:ed:3e:4c:85:
53:fd:93:c4:9b:a6:df:e2:a7:cd:f8:7d:65:bf:59:93:8d:07:
80:73:0e:41:47:be:ec:76:df:58:66:76:5a:ab:39:e9:e3:43:
a3:50:82:63:85:8c:30:d5:60:1a:26:1f:ec:13:c8:10:8a:3b:
52:97:38:fc:24:67:30:57:db:d2:ec:e1:25:fb:1b:37:5d:ef:
64:ef:33:75:6b:4f:af:01:77:d9:5a:45:85:da:17:77:7e:35:
4f:31:61:55:44:87:1e:46:08:61:25:60:ee:4e:f8:10:76:2e:
04:6e:6a:30:13:00:f3:71:98:fd:23:0a:bc:68:28:35:81:c7:
ff:be:24:72:98:6d:bd:21:73:b9:2a:d5:da:c5:5b:08:2f:2b:
27:9a:af:fc:32:c0:45:a3:4a:9e:68:65:b9:31:6e:39:b4:eb:
f2:80:72:f8:d5:b2:fc:10:21:2a:a7:aa:db:88:8b:94:f9:c6:
36:ce:e9:cb:82:53:af:74:61:ed:8d:b1:50:7a:fc:0e:d9:93:
76:90:53:10
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB3cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTlFNTUxMTAvBgNVBAUTKEUzNUNFNDRFNzE5NzI5NzU5MTM5OEQ4MkYzM0QxMTg2
MTc0REU4M0EwHhcNMjUwMzI4MjE0NTA3WhcNMjUwNDA0MjE0NTA3WjAYMRYwFAYD
VQQDEw02N2U3MTg2My1iZTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu690CqHoZlBdmiQM5HL+3w3Jkr/cw3G/Dj5Z3Nj+ag9mNdULR0f8f0TGqc6c
rM+262HwrWMEsDl39ksXBxrefdu+n8hnOMNiO7U7ZN93e28m1sUlZgCcFE6lFTsM
whtVO1WNR2XlzW7F9ygaQfQadMGOHUXN3NBqpcNa5K+dga+H21pOqXRNVKDYhZBD
26AL9al5dJn3CA7pxwSNoQblVZ/XPzcstCHSYKnC1xzJI9l2crmo64L8N2vqWolV
ScsCjsdhHrZSQY/JjvgcSyHl1stHgo7UfGX9oZ3V8wA96P1U8xvpm1VW+hNN7roj
qidojOfrRIURKAOEuPilExaWNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMKSGqFX
dQDxCNzzsObkoLc5FHIjMB8GA1UdIwQYMBaAFONc5E5xlyl1kTmNgvM9EYYXTeg6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUU1NS9EOTUxNzY4NDBE
RjMxMUVCOTMwNzZGNjVDNEY5QUUwMi80MXprVG5HWEtYV1JPWTJDOHowUmhoZE42
RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzQxemtUbkdYS1hXUk9ZMkM4ejBSaGhkTjZEby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OUU1NS9EOTUxNzY4NDBERjMxMUVCOTMwNzZGNjVDNEY5QUUwMi80MXprVG5HWEtY
V1JPWTJDOHowUmhoZE42RG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCMnb4y8bpQNoGeuJ5UNoWIe861/PqAZSjto5cAeOLAPy/sESA/PMhx
rRh1jQBe2aHMuO0+TIVT/ZPEm6bf4qfN+H1lv1mTjQeAcw5BR77sdt9YZnZaqznp
40OjUIJjhYww1WAaJh/sE8gQijtSlzj8JGcwV9vS7OEl+xs3Xe9k7zN1a0+vAXfZ
WkWF2hd3fjVPMWFVRIceRghhJWDuTvgQdi4EbmowEwDzcZj9Iwq8aCg1gcf/viRy
mG29IXO5KtXaxVsILysnmq/8MsBFo0qeaGW5MW45tOvygHL41bL8ECEqp6rbiIuU
+cY2zunLglOvdGHtjbFQevwO2ZN2kFMQ
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:30:25 2025 by rpki-client