Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft
File: RrT_jckWend9mNhfL1Id0TZwc7M.mft (raw, json)
Hash identifier: 9Hy5K9NCofQC4ZruYsa7w6bphN9nGtb3hja4BJjjbyM=
Subject key identifier: 3D:21:18:05:06:01:00:D6:5E:53:7A:3A:76:CC:73:64:61:28:39:45
Authority key identifier: 46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3
Certificate issuer: /CN=A91ADE0A/serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3
Certificate serial: 0481
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft
Manifest number: 0479
Signing time: Fri 28 Mar 2025 15:58:04 +0000
Manifest this update: Fri 28 Mar 2025 15:58:03 +0000
Manifest next update: Fri 04 Apr 2025 15:58:03 +0000
Files and hashes: 1: RrT_jckWend9mNhfL1Id0TZwc7M.crl (hash: LL+2OEL871YuRJxy8ID8wr9XG5UiRudUgkCoI9vrzc8=)
2: B3789882F23211EC9A7DB924C4F9AE02.roa (hash: mHbYCPxnBj3PWJdh7qbfDGDK73T1pf2kWSW1uT2gXIg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1153 (0x481)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADE0A
Validity
Not Before: Mar 28 15:58:03 2025 GMT
Not After : Apr 4 15:58:03 2025 GMT
Subject: CN=67e6c70b-6fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:d7:0e:67:b2:f8:3a:73:30:3b:22:3e:17:13:
76:65:4d:90:f9:57:c2:d5:d5:9f:86:1f:f9:a6:c3:
36:ab:36:ff:b2:31:62:73:56:b6:42:e1:43:39:7b:
c1:e3:c2:8e:69:a8:13:9d:7d:6e:b2:d3:ff:7f:5b:
b8:f1:4d:76:50:13:c1:ae:b4:dd:2a:d7:9a:19:66:
d7:b2:da:fa:9f:63:fb:88:35:fb:55:0c:93:7d:51:
1a:ad:e9:e7:a2:12:4b:35:49:e9:50:c5:d3:98:43:
45:0c:f6:8b:a3:65:71:9b:21:7a:a3:65:04:47:2e:
ba:f7:a3:99:42:e8:6d:b1:f4:7c:68:e1:56:f6:3e:
85:6b:a9:51:de:71:20:6f:00:dd:7f:e0:7a:c8:c0:
74:67:2d:6e:f1:e3:76:db:22:bf:3a:29:36:e0:11:
60:be:e1:eb:bb:d2:4d:3e:4c:b4:99:26:5e:6d:f6:
b6:ba:18:17:37:93:43:97:d0:40:b8:1e:59:27:b2:
c9:d7:22:03:a8:08:9f:5d:4f:22:08:d4:a6:ee:36:
e3:b2:ed:1d:09:e5:95:78:2b:b2:71:c0:df:16:5c:
1f:d4:6e:9a:f3:f4:69:2c:7e:29:4c:cc:65:f5:d4:
ae:39:68:10:52:80:23:9e:fd:e6:74:66:3c:c1:3f:
14:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:21:18:05:06:01:00:D6:5E:53:7A:3A:76:CC:73:64:61:28:39:45
X509v3 Authority Key Identifier:
keyid:46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e0:69:26:24:74:14:50:5d:21:14:69:a3:bc:26:61:a6:fc:
9c:6b:5f:1e:8d:c1:9d:ee:35:d8:d0:d8:2b:24:08:07:af:a2:
6f:ed:b8:18:af:92:3d:df:8f:a6:79:1f:c0:48:bc:f0:88:bd:
0d:c3:09:31:15:8c:4e:8a:09:a1:14:f9:6f:9f:78:eb:70:33:
ba:58:ed:3b:f0:27:4e:dc:a1:72:25:dc:51:94:6e:25:91:ab:
53:fd:57:02:6e:2c:7a:dd:01:87:3e:cd:09:ec:e6:a4:47:55:
7b:68:51:8f:5e:08:fc:55:96:ba:20:2f:5c:59:8c:4e:05:6c:
55:2a:3c:5d:11:c9:9c:62:3e:d8:93:2f:f4:5d:6b:25:98:dd:
81:5e:ec:cc:3b:1c:5c:c1:c3:f3:f1:33:67:49:79:04:7c:15:
97:cb:87:42:71:f9:05:be:85:1f:b8:93:5a:ea:02:eb:d4:2e:
64:ce:cf:1d:77:4c:f7:81:1c:3b:a2:ba:ef:1e:3d:87:e2:20:
f9:be:af:78:52:02:e3:df:15:1a:9e:40:75:03:44:3e:51:95:
1a:88:5c:f3:e9:27:24:b4:35:cc:95:10:87:57:d0:0c:e4:69:
7e:0a:fe:74:11:bd:63:0a:22:4b:63:3e:89:78:fe:ce:12:85:
56:76:1a:be
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QURFMEExMTAvBgNVBAUTKDQ2QjRGRjhEQzkxNjdBNzc3RDk4RDg1RjJGNTIxREQx
MzY3MDczQjMwHhcNMjUwMzI4MTU1ODAzWhcNMjUwNDA0MTU1ODAzWjAYMRYwFAYD
VQQDEw02N2U2YzcwYi02ZmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9tcOZ7L4OnMwOyI+FxN2ZU2Q+VfC1dWfhh/5psM2qzb/sjFic1a2QuFDOXvB
48KOaagTnX1ustP/f1u48U12UBPBrrTdKteaGWbXstr6n2P7iDX7VQyTfVEarenn
ohJLNUnpUMXTmENFDPaLo2VxmyF6o2UERy6696OZQuhtsfR8aOFW9j6Fa6lR3nEg
bwDdf+B6yMB0Zy1u8eN22yK/Oik24BFgvuHru9JNPky0mSZebfa2uhgXN5NDl9BA
uB5ZJ7LJ1yIDqAifXU8iCNSm7jbjsu0dCeWVeCuyccDfFlwf1G6a8/RpLH4pTMxl
9dSuOWgQUoAjnv3mdGY8wT8UIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0hGAUG
AQDWXlN6OnbMc2RhKDlFMB8GA1UdIwQYMBaAFEa0/43JFnp3fZjYXy9SHdE2cHOz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREUwQS80MzU2N0VFNDNE
MjgxMUVDQkVGNzdDNzZDNEY5QUUwMi9SclRfamNrV2VuZDltTmhmTDFJZDBUWndj
N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1JyVF9qY2tXZW5kOW1OaGZMMUlkMFRad2M3TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
REUwQS80MzU2N0VFNDNEMjgxMUVDQkVGNzdDNzZDNEY5QUUwMi9SclRfamNrV2Vu
ZDltTmhmTDFJZDBUWndjN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBa4GkmJHQUUF0hFGmjvCZhpvyca18ejcGd7jXY0NgrJAgHr6Jv7bgY
r5I934+meR/ASLzwiL0NwwkxFYxOigmhFPlvn3jrcDO6WO078CdO3KFyJdxRlG4l
katT/VcCbix63QGHPs0J7OakR1V7aFGPXgj8VZa6IC9cWYxOBWxVKjxdEcmcYj7Y
ky/0XWslmN2BXuzMOxxcwcPz8TNnSXkEfBWXy4dCcfkFvoUfuJNa6gLr1C5kzs8d
d0z3gRw7orrvHj2H4iD5vq94UgLj3xUankB1A0Q+UZUaiFzz6ScktDXMlRCHV9AM
5Gl+Cv50Eb1jCiJLYz6JeP7OEoVWdhq+
-----END CERTIFICATE-----
Generated at Wed Apr 9 19:58:00 2025 by rpki-client