Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1F27/F77C109AFBA511ED88D0C96DC4F9AE02/nC3RgnBi24kuOEZaEK_kkWg1wCc.mft
File: nC3RgnBi24kuOEZaEK_kkWg1wCc.mft (raw, json)
Hash identifier: 8mtUkNLzX1r9CZgBpUzq5UEupcr4yXCdZew0ikM6Tk4=
Subject key identifier: 5A:9B:49:47:D8:32:89:54:D7:5E:62:59:46:08:83:49:42:7C:B2:5C
Authority key identifier: 9C:2D:D1:82:70:62:DB:89:2E:38:46:5A:10:AF:E4:91:68:35:C0:27
Certificate issuer: /CN=A91B1F27/serialNumber=9C2DD1827062DB892E38465A10AFE4916835C027
Certificate serial: 015D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nC3RgnBi24kuOEZaEK_kkWg1wCc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1F27/F77C109AFBA511ED88D0C96DC4F9AE02/nC3RgnBi24kuOEZaEK_kkWg1wCc.mft
Manifest number: 015A
Signing time: Sat 29 Mar 2025 03:32:17 +0000
Manifest this update: Sat 29 Mar 2025 03:32:17 +0000
Manifest next update: Sat 05 Apr 2025 03:32:17 +0000
Files and hashes: 1: nC3RgnBi24kuOEZaEK_kkWg1wCc.crl (hash: JmPZQLSNGGdgJrKPtSwfcOnVw6DYB4agVedHFnm6UL4=)
2: ED31BA0AFBAE11ED977DEA10C4F9AE02.roa (hash: sZ1Qc0QixkblDQbEZ18gwDagCIypsTqT+SHpNFgumsQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 349 (0x15d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1F27
Validity
Not Before: Mar 29 03:32:17 2025 GMT
Not After : Apr 5 03:32:17 2025 GMT
Subject: CN=67e769c1-ba0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8b:6b:85:3d:93:34:5d:32:92:4b:c5:ee:fb:
71:8e:cf:cf:ae:a0:b5:46:3e:be:74:0a:22:6a:5f:
8d:ec:fb:b5:ef:16:d2:51:04:bb:7e:0c:86:3c:23:
10:9f:c8:e5:db:23:af:e0:8a:be:1b:fb:b4:41:87:
c4:a9:d3:46:90:7f:5e:aa:92:69:00:11:d7:fe:de:
9b:ff:fe:95:a7:4f:71:d1:11:94:f2:29:38:35:ee:
b0:8e:8b:33:55:8f:82:92:0b:0b:01:d3:f6:f1:05:
72:6c:58:03:0c:f8:f6:3c:76:24:85:24:ca:be:3f:
b3:ec:7f:11:b8:3f:b8:33:21:13:06:83:2e:eb:8b:
44:85:a7:fb:77:3a:82:f7:4c:44:cc:23:18:a5:ab:
ab:9c:5f:b1:a9:2d:30:3b:7d:02:c5:74:c6:0a:8f:
8c:f7:e1:40:cb:bb:ce:86:f7:c3:04:46:f9:38:d2:
31:9c:b1:7d:16:fb:38:ec:af:b7:32:27:7d:5b:3f:
73:21:48:7d:15:48:53:5b:22:0b:b1:02:bc:e5:2f:
1a:81:e2:95:5d:bd:49:67:8e:4b:40:3a:24:78:71:
94:e1:d7:b7:f4:ad:20:7a:35:ba:24:bf:db:6b:dc:
b1:06:cd:c6:aa:71:1a:3e:96:09:c9:26:89:ca:6f:
33:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9B:49:47:D8:32:89:54:D7:5E:62:59:46:08:83:49:42:7C:B2:5C
X509v3 Authority Key Identifier:
keyid:9C:2D:D1:82:70:62:DB:89:2E:38:46:5A:10:AF:E4:91:68:35:C0:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1F27/F77C109AFBA511ED88D0C96DC4F9AE02/nC3RgnBi24kuOEZaEK_kkWg1wCc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nC3RgnBi24kuOEZaEK_kkWg1wCc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1F27/F77C109AFBA511ED88D0C96DC4F9AE02/nC3RgnBi24kuOEZaEK_kkWg1wCc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d3:56:b8:0d:eb:57:d2:86:f2:d1:7e:d1:86:55:93:18:12:
38:a5:11:46:d5:70:e0:15:62:d8:12:7b:65:5c:61:e4:8f:76:
2d:b6:2d:bd:8a:0a:57:b5:31:d9:46:f6:1c:f2:d4:83:8a:d1:
da:97:39:f3:90:a6:24:8a:3a:c8:0c:96:31:66:49:2a:78:cd:
1d:8b:4b:f1:11:5f:5d:d9:df:86:0a:8c:7f:54:25:06:39:18:
29:d3:68:78:11:85:ed:06:b3:69:25:f5:54:f8:79:2b:06:e4:
18:de:2c:6e:84:00:96:2e:ac:7c:6b:9b:33:76:23:b4:2b:00:
34:90:de:7a:42:dc:c3:ee:79:0e:04:21:48:e0:d6:3a:74:a7:
e1:a0:d7:b0:b7:e3:7b:f8:7e:ca:12:fb:50:a6:62:6f:82:73:
7f:ae:7c:87:76:2c:13:cf:d1:01:ad:f8:d0:0a:b1:13:25:ae:
b5:04:d0:80:13:9d:a3:36:a7:4a:9a:c4:0e:bb:82:73:0c:7d:
15:38:35:77:33:00:19:a0:97:71:d5:1f:df:f3:4e:55:d9:94:
9c:30:bd:18:2c:21:b5:06:45:31:18:a1:4c:f3:b2:8e:af:d6:
a0:ff:8e:90:19:8f:84:69:c6:3f:42:02:e5:86:1d:2f:bc:8e:
9c:7c:3a:23
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjFGMjcxMTAvBgNVBAUTKDlDMkREMTgyNzA2MkRCODkyRTM4NDY1QTEwQUZFNDkx
NjgzNUMwMjcwHhcNMjUwMzI5MDMzMjE3WhcNMjUwNDA1MDMzMjE3WjAYMRYwFAYD
VQQDEw02N2U3NjljMS1iYTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzItrhT2TNF0ykkvF7vtxjs/PrqC1Rj6+dAoial+N7Pu17xbSUQS7fgyGPCMQ
n8jl2yOv4Iq+G/u0QYfEqdNGkH9eqpJpABHX/t6b//6Vp09x0RGU8ik4Ne6wjosz
VY+CkgsLAdP28QVybFgDDPj2PHYkhSTKvj+z7H8RuD+4MyETBoMu64tEhaf7dzqC
90xEzCMYpaurnF+xqS0wO30CxXTGCo+M9+FAy7vOhvfDBEb5ONIxnLF9Fvs47K+3
Mid9Wz9zIUh9FUhTWyILsQK85S8ageKVXb1JZ45LQDokeHGU4de39K0gejW6JL/b
a9yxBs3GqnEaPpYJySaJym8z7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqbSUfY
MolU115iWUYIg0lCfLJcMB8GA1UdIwQYMBaAFJwt0YJwYtuJLjhGWhCv5JFoNcAn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUYyNy9GNzdDMTA5QUZC
QTUxMUVEODhEMEM5NkRDNEY5QUUwMi9uQzNSZ25CaTI0a3VPRVphRUtfa2tXZzF3
Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25DM1JnbkJpMjRrdU9FWmFFS19ra1dnMXdDYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MUYyNy9GNzdDMTA5QUZCQTUxMUVEODhEMEM5NkRDNEY5QUUwMi9uQzNSZ25CaTI0
a3VPRVphRUtfa2tXZzF3Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBt01a4DetX0oby0X7RhlWTGBI4pRFG1XDgFWLYEntlXGHkj3Ytti29
igpXtTHZRvYc8tSDitHalznzkKYkijrIDJYxZkkqeM0di0vxEV9d2d+GCox/VCUG
ORgp02h4EYXtBrNpJfVU+HkrBuQY3ixuhACWLqx8a5szdiO0KwA0kN56QtzD7nkO
BCFI4NY6dKfhoNewt+N7+H7KEvtQpmJvgnN/rnyHdiwTz9EBrfjQCrETJa61BNCA
E52jNqdKmsQOu4JzDH0VODV3MwAZoJdx1R/f805V2ZScML0YLCG1BkUxGKFM87KO
r9ag/46QGY+EacY/QgLlhh0vvI6cfDoj
-----END CERTIFICATE-----
Generated at Thu Apr 10 19:26:07 2025 by rpki-client