Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft
File: 8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft (raw, json)
Hash identifier: Z41O97y2dqb/wsNKiaoq4pCMZ5QkuobuW5NhEP7CnBM=
Subject key identifier: 45:F5:42:21:60:DC:AA:DD:66:AF:43:8C:4F:7B:C6:F8:61:1D:DB:8A
Authority key identifier: F0:49:29:EF:74:3C:54:C0:8B:45:E1:9C:FC:51:BF:2A:A5:59:DA:A1
Certificate issuer: /CN=A91B165F/serialNumber=F04929EF743C54C08B45E19CFC51BF2AA559DAA1
Certificate serial: 46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft
Manifest number: 45
Signing time: Sat 29 Mar 2025 06:43:21 +0000
Manifest this update: Sat 29 Mar 2025 06:43:20 +0000
Manifest next update: Sat 05 Apr 2025 06:43:20 +0000
Files and hashes: 1: 8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl (hash: RMRbhmuR+ba+WvPy+jm+5mQzKrHBpscGkEjsBl8oSLM=)
2: 1DF22790A4B611EF9CDA1A2CC4F9AE02.roa (hash: w3wkEl72R5yHh8FDEdSTJXXK4Ra1LhkLOkjK6q8uAIg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B165F
Validity
Not Before: Mar 29 06:43:20 2025 GMT
Not After : Apr 5 06:43:20 2025 GMT
Subject: CN=67e79688-dd07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:53:ba:8e:28:0b:b7:38:39:5f:8f:96:01:00:
c9:4c:05:3b:18:32:96:d8:a0:3c:96:aa:d7:d0:f1:
c5:ea:d2:3c:ca:91:e7:e3:da:ac:43:6e:d5:44:2e:
f5:7f:42:db:28:e8:c6:a0:34:6a:2c:cb:49:86:8e:
e1:02:9c:07:f1:a7:11:af:44:90:e6:38:3d:cd:7f:
e7:54:d9:86:fd:6f:9c:5c:b7:8a:6a:63:61:c0:a4:
a1:0b:22:59:6a:e3:78:a0:96:ec:8c:29:40:46:18:
4c:9f:d5:77:77:ba:b2:dc:95:a8:ec:1c:9f:0e:c6:
d5:d6:94:e7:29:bf:96:fe:db:05:df:13:29:01:1b:
f4:07:18:aa:7b:fe:9e:73:57:26:ee:e5:4a:44:b4:
e3:18:0f:94:da:18:09:b0:af:a9:c0:02:a5:aa:cf:
3f:4b:60:e3:10:6c:c1:75:d7:dd:b4:93:b5:4f:06:
c3:79:74:0d:e4:00:e6:c8:52:25:b9:18:05:91:58:
ba:b2:20:8b:21:f6:f3:25:ba:3a:60:c6:17:29:61:
d7:1c:19:c2:84:ce:49:e4:db:24:85:3c:9e:6f:ff:
b4:d5:d7:68:54:d7:7c:58:19:4b:62:f1:99:1c:49:
f4:42:45:78:d5:1c:fd:b6:e2:ad:80:7a:4d:14:12:
3a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F5:42:21:60:DC:AA:DD:66:AF:43:8C:4F:7B:C6:F8:61:1D:DB:8A
X509v3 Authority Key Identifier:
keyid:F0:49:29:EF:74:3C:54:C0:8B:45:E1:9C:FC:51:BF:2A:A5:59:DA:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:2f:37:82:b2:74:1a:db:53:6b:bd:7b:c0:02:6f:3e:67:f7:
68:ad:d8:66:23:91:83:b1:b6:14:61:12:1a:38:33:7c:aa:a8:
29:dc:f2:17:3b:77:b9:21:65:ed:e4:6a:85:f8:34:4d:a7:ed:
c0:74:18:8f:b8:60:2f:4a:b5:b4:c6:be:11:6e:1d:45:28:0e:
68:16:5b:ba:21:29:ca:79:35:4f:fd:29:d8:8c:78:02:64:28:
ae:ed:95:24:c0:bf:b2:3c:05:ac:40:f8:8f:01:03:fb:dd:aa:
05:66:cd:e1:d0:b9:04:1d:4c:1d:c7:9f:66:4a:e3:38:06:f9:
54:df:0b:c8:41:ff:ca:1e:69:bf:5a:50:7d:05:3d:57:2a:88:
1f:82:c3:c8:67:a4:73:a5:89:f4:58:72:03:c8:3b:65:a2:c3:
58:a9:50:9b:f9:fe:3c:22:38:cc:3d:0a:4f:29:ab:35:b6:fb:
cb:e8:43:13:64:84:f3:5d:10:16:8a:97:0d:eb:3e:b0:56:b1:
6c:ee:fc:d7:f3:da:37:61:43:54:1f:1b:98:eb:d1:c7:1d:cb:
28:c9:69:97:8e:c8:8f:81:d5:83:c8:9e:da:58:f5:91:80:ad:
56:3a:61:7d:a4:1e:1f:2a:0e:1f:27:bd:b0:bf:df:bf:34:4f:
02:9d:e1:1c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
MTY1RjExMC8GA1UEBRMoRjA0OTI5RUY3NDNDNTRDMDhCNDVFMTlDRkM1MUJGMkFB
NTU5REFBMTAeFw0yNTAzMjkwNjQzMjBaFw0yNTA0MDUwNjQzMjBaMBgxFjAUBgNV
BAMTDTY3ZTc5Njg4LWRkMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDlU7qOKAu3ODlfj5YBAMlMBTsYMpbYoDyWqtfQ8cXq0jzKkefj2qxDbtVELvV/
Qtso6MagNGosy0mGjuECnAfxpxGvRJDmOD3Nf+dU2Yb9b5xct4pqY2HApKELIllq
43igluyMKUBGGEyf1Xd3urLclajsHJ8OxtXWlOcpv5b+2wXfEykBG/QHGKp7/p5z
Vybu5UpEtOMYD5TaGAmwr6nAAqWqzz9LYOMQbMF11920k7VPBsN5dA3kAObIUiW5
GAWRWLqyIIsh9vMlujpgxhcpYdccGcKEzknk2ySFPJ5v/7TV12hU13xYGUti8Zkc
SfRCRXjVHP224q2Aek0UEjoFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURfVCIWDc
qt1mr0OMT3vG+GEd24owHwYDVR0jBBgwFoAU8Ekp73Q8VMCLReGc/FG/KqVZ2qEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxNjVGLzhDMjE0OTc0QTRC
MzExRUY4ODlDNzY4N0M0RjlBRTAyLzhFa3A3M1E4Vk1DTFJlR2NfRkdfS3FWWjJx
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvOEVrcDczUThWTUNMUmVHY19GR19LcVZaMnFFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx
NjVGLzhDMjE0OTc0QTRCMzExRUY4ODlDNzY4N0M0RjlBRTAyLzhFa3A3M1E4Vk1D
TFJlR2NfRkdfS3FWWjJxRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBACgvN4KydBrbU2u9e8ACbz5n92it2GYjkYOxthRhEho4M3yqqCnc8hc7
d7khZe3kaoX4NE2n7cB0GI+4YC9KtbTGvhFuHUUoDmgWW7ohKcp5NU/9KdiMeAJk
KK7tlSTAv7I8BaxA+I8BA/vdqgVmzeHQuQQdTB3Hn2ZK4zgG+VTfC8hB/8oeab9a
UH0FPVcqiB+Cw8hnpHOlifRYcgPIO2Wiw1ipUJv5/jwiOMw9Ck8pqzW2+8voQxNk
hPNdEBaKlw3rPrBWsWzu/Nfz2jdhQ1QfG5jr0ccdyyjJaZeOyI+B1YPIntpY9ZGA
rVY6YX2kHh8qDh8nvbC/3780TwKd4Rw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:51:08 2025 by rpki-client