Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft
File: HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft (raw, json)
Hash identifier: s0tHfoevKEBoY39BqiV148RShCLGu5XUWFAJITcjing=
Subject key identifier: FF:52:CA:29:D0:F9:3B:DA:6F:88:49:5B:F6:91:42:C5:6B:F5:BD:B1
Authority key identifier: 1C:4E:9F:3F:80:05:05:A4:0B:A1:65:B6:C0:20:40:5A:22:C6:4B:3B
Certificate issuer: /CN=A91B1FA8/serialNumber=1C4E9F3F800505A40BA165B6C020405A22C64B3B
Certificate serial: 134D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft
Manifest number: 1323
Signing time: Fri 28 Mar 2025 17:10:24 +0000
Manifest this update: Fri 28 Mar 2025 17:10:23 +0000
Manifest next update: Fri 04 Apr 2025 17:10:23 +0000
Files and hashes: 1: HE6fP4AFBaQLoWW2wCBAWiLGSzs.crl (hash: uLrhzl7t+MR+OwMXQtCg+lZfaj1k0+osLEhJoxFR5Ek=)
2: 40366CF0F8C811EBB7BFD243C4F9AE02.roa (hash: YO0KSyMg3rhBagYoGztB5o5uMcRrrSiw068DI4yqRmI=)
3: E4A74BE6255211EB96B9B269C4F9AE02.roa (hash: WXuqlnvJ/kQYgmajvkp6WqRXIhVjEPtrsEAuBi7s1vA=)
4: 538F7B12B1D711EBB3C0A24AC4F9AE02.roa (hash: VriM0YGDOfhzo18xUQqToLLJGd+19KKo1Yju23Rp1tg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4941 (0x134d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1FA8
Validity
Not Before: Mar 28 17:10:23 2025 GMT
Not After : Apr 4 17:10:23 2025 GMT
Subject: CN=67e6d7ff-e49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f0:02:a9:38:79:c6:17:3b:ec:9a:34:6e:1f:
22:7a:83:3f:76:28:35:d3:9b:2a:9c:29:94:e4:a5:
5c:d2:ed:24:28:79:5e:90:1c:00:22:e4:b7:a0:d5:
44:1e:68:e5:22:75:f1:61:90:3c:a0:a7:3f:1b:63:
35:da:ca:ff:0e:e4:e2:d4:ad:4b:ef:68:31:4a:dd:
7b:f6:84:d8:d1:60:dc:e3:32:60:07:cc:6e:e6:eb:
a7:a5:d7:12:0c:f2:62:7b:6d:44:2d:f0:41:80:7c:
91:18:c4:d6:e9:1e:f9:5f:9d:39:c6:49:c7:c2:67:
b4:6f:5e:11:a5:c0:ca:ec:d6:dc:4e:9f:8f:95:12:
88:8b:98:76:00:08:96:ce:fb:34:ac:e2:a1:bc:58:
75:67:2f:6f:66:a9:39:9c:02:45:9d:2e:c3:e0:81:
b3:f2:14:96:53:29:d2:1a:11:b8:f1:14:8a:e1:4c:
0e:95:56:72:c1:ae:6f:46:ac:3e:e9:cc:32:20:ad:
db:f6:db:f2:28:1a:40:5f:1d:17:71:c6:a1:8f:6b:
23:cb:92:91:2f:61:a7:5c:ac:4f:eb:48:6d:b5:cd:
b7:9c:98:b1:ef:ed:80:b2:36:bd:d0:89:63:f2:f7:
45:72:f6:4f:0a:5c:44:dd:37:20:db:69:b9:bc:17:
3d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:52:CA:29:D0:F9:3B:DA:6F:88:49:5B:F6:91:42:C5:6B:F5:BD:B1
X509v3 Authority Key Identifier:
keyid:1C:4E:9F:3F:80:05:05:A4:0B:A1:65:B6:C0:20:40:5A:22:C6:4B:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:38:ae:a5:d2:3e:81:28:c6:07:bc:e3:43:ef:30:be:75:bf:
fa:66:11:60:49:4a:47:20:b3:b3:bf:83:3e:4f:1b:c2:6b:1e:
c6:42:f3:56:e2:1a:86:b6:33:ee:71:1a:99:c7:96:ed:c8:29:
ba:01:62:d3:0d:26:ab:02:5f:39:b8:70:45:ab:13:55:f8:df:
26:f5:10:d6:df:ec:b8:dc:17:ab:07:50:b8:a6:44:c0:4b:06:
dc:42:c4:94:4c:dc:11:62:5c:90:9b:e1:9d:2f:84:26:7e:f2:
37:a3:d6:57:42:9b:10:8c:74:5d:95:d0:9a:96:d9:5e:54:61:
25:c1:d9:ee:40:3b:09:ee:9c:5f:9f:b9:dc:c4:41:2c:95:0e:
ec:16:49:6b:b8:8c:10:4b:e4:2b:ff:ca:9b:76:1a:fa:ea:ce:
09:2f:91:6c:1f:ad:e1:0a:2e:df:3b:41:17:93:cc:ca:f4:01:
93:5e:e0:86:ff:44:ea:ac:6b:5f:48:cb:47:fa:04:ce:2d:5e:
af:3f:63:d7:03:7f:40:b3:5b:91:cf:9b:17:04:92:e5:e1:e0:
af:d4:b0:08:c0:dd:34:ff:e1:a3:01:35:40:01:f1:19:43:33:
89:74:1a:f0:63:7d:58:6c:ec:61:d3:a0:91:0d:53:83:84:85:
e7:ab:00:17
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICE00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjFGQTgxMTAvBgNVBAUTKDFDNEU5RjNGODAwNTA1QTQwQkExNjVCNkMwMjA0MDVB
MjJDNjRCM0IwHhcNMjUwMzI4MTcxMDIzWhcNMjUwNDA0MTcxMDIzWjAYMRYwFAYD
VQQDEw02N2U2ZDdmZi1lNDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxfACqTh5xhc77Jo0bh8ieoM/dig105sqnCmU5KVc0u0kKHlekBwAIuS3oNVE
HmjlInXxYZA8oKc/G2M12sr/DuTi1K1L72gxSt179oTY0WDc4zJgB8xu5uunpdcS
DPJie21ELfBBgHyRGMTW6R75X505xknHwme0b14RpcDK7NbcTp+PlRKIi5h2AAiW
zvs0rOKhvFh1Zy9vZqk5nAJFnS7D4IGz8hSWUynSGhG48RSK4UwOlVZywa5vRqw+
6cwyIK3b9tvyKBpAXx0Xccahj2sjy5KRL2GnXKxP60httc23nJix7+2Asja90Ilj
8vdFcvZPClxE3Tcg22m5vBc9uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9SyinQ
+Tvab4hJW/aRQsVr9b2xMB8GA1UdIwQYMBaAFBxOnz+ABQWkC6FltsAgQFoixks7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUZBOC9FODYxRkQzQUFG
RDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9IRTZmUDRBRkJhUUxvV1cyd0NCQVdpTEdT
enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hFNmZQNEFGQmFRTG9XVzJ3Q0JBV2lMR1N6cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MUZBOC9FODYxRkQzQUFGRDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9IRTZmUDRBRkJh
UUxvV1cyd0NCQVdpTEdTenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAFOK6l0j6BKMYHvOND7zC+db/6ZhFgSUpHILOzv4M+TxvCax7GQvNW
4hqGtjPucRqZx5btyCm6AWLTDSarAl85uHBFqxNV+N8m9RDW3+y43BerB1C4pkTA
SwbcQsSUTNwRYlyQm+GdL4QmfvI3o9ZXQpsQjHRdldCaltleVGElwdnuQDsJ7pxf
n7ncxEEslQ7sFklruIwQS+Qr/8qbdhr66s4JL5FsH63hCi7fO0EXk8zK9AGTXuCG
/0TqrGtfSMtH+gTOLV6vP2PXA39As1uRz5sXBJLl4eCv1LAIwN00/+GjATVAAfEZ
QzOJdBrwY31YbOxh06CRDVODhIXnqwAX
-----END CERTIFICATE-----
Generated at Thu Apr 10 17:20:46 2025 by rpki-client