Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft
File: eVaKOOzbYX5njAimzEPE1lAs7GI.mft (raw, json)
Hash identifier: AqVFL3zD8cPcn6oQL0+gJbXWjb2fv8V9jzoi8Em0fa8=
Subject key identifier: DE:A0:D6:12:0B:61:5B:36:BB:BD:49:FD:45:F5:A8:C6:70:6E:AE:1B
Authority key identifier: 79:56:8A:38:EC:DB:61:7E:67:8C:08:A6:CC:43:C4:D6:50:2C:EC:62
Certificate issuer: /CN=A91B38F5/serialNumber=79568A38ECDB617E678C08A6CC43C4D6502CEC62
Certificate serial: 0A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft
Manifest number: 09
Signing time: Sat 29 Mar 2025 07:28:41 +0000
Manifest this update: Sat 29 Mar 2025 07:28:40 +0000
Manifest next update: Sat 05 Apr 2025 07:28:40 +0000
Files and hashes: 1: eVaKOOzbYX5njAimzEPE1lAs7GI.crl (hash: cToMh2pzfVOE/8WbfCMyhMj24cnTE+ZcxW1ms1Sb/do=)
2: B5E94296025C11F0BDF41912C4F9AE02.roa (hash: vF2hPrjWnGE1wVLs/Ml1OeBVYR8W6IECJw4qVwfrJO0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B38F5
Validity
Not Before: Mar 29 07:28:40 2025 GMT
Not After : Apr 5 07:28:40 2025 GMT
Subject: CN=67e7a128-26a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:87:76:e5:05:16:d5:3c:c8:f8:a1:e1:e2:fc:
86:80:a1:4a:42:aa:33:e2:e9:76:ff:59:9c:cb:60:
ab:c1:e0:89:b6:41:31:f8:14:5d:30:ac:cc:d0:0d:
cb:8b:54:37:d4:6e:a2:54:48:ad:db:45:8d:1e:ac:
43:64:66:1c:c9:04:34:bc:60:2f:1f:1f:19:a2:81:
56:3f:a2:24:51:23:1c:6e:46:f0:e0:25:20:3a:0c:
de:b4:1c:de:2a:c8:f3:fd:49:65:65:51:53:93:7a:
01:86:08:17:3d:2a:27:93:e3:d2:0f:b9:e1:0a:25:
e1:78:a8:fa:42:12:e5:8c:78:f4:91:b7:de:3d:ee:
39:88:d7:e4:2a:ca:45:cd:32:23:40:04:a6:b4:47:
4f:fa:99:bc:a1:21:98:20:20:ee:24:16:4a:f3:4f:
1e:be:bf:4c:0f:bc:a5:48:31:1b:b3:eb:e5:59:c8:
15:d9:fd:a5:aa:27:a7:9d:04:34:c5:df:39:ab:9c:
0d:03:bc:85:f3:77:01:16:73:7b:bb:ca:06:01:e9:
9b:ec:58:68:63:b9:c6:36:58:37:67:67:b0:22:c1:
31:a8:88:7f:61:e9:c0:b6:d7:48:24:0f:e7:78:d6:
1d:6e:44:4c:e9:69:12:76:55:46:cc:5e:22:65:dd:
89:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A0:D6:12:0B:61:5B:36:BB:BD:49:FD:45:F5:A8:C6:70:6E:AE:1B
X509v3 Authority Key Identifier:
keyid:79:56:8A:38:EC:DB:61:7E:67:8C:08:A6:CC:43:C4:D6:50:2C:EC:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c5:7c:c3:f2:a5:fa:ae:d1:e1:d6:16:c5:2a:8b:e2:91:cb:
0f:7c:40:2c:55:c6:e7:b9:9d:30:d5:3c:46:8c:a1:79:37:42:
1b:52:ce:28:58:e7:65:3b:4d:6b:68:a3:37:34:66:c8:72:34:
fa:fa:71:d9:18:c5:cf:5a:bb:2b:3d:2c:fa:ca:5a:28:bd:cd:
df:5e:4f:dd:11:fc:9b:93:0a:3f:e1:02:75:5f:1e:ac:8b:90:
08:3b:fe:e1:47:13:09:0b:cd:c1:2a:44:09:74:a1:7d:23:b4:
6c:0f:57:2a:24:59:57:e5:eb:ab:b8:54:7d:9e:a9:c1:7d:cc:
f3:b8:82:e4:3d:b0:0d:16:e5:ef:c5:74:5a:5a:e0:b2:4f:f5:
5e:cd:82:e3:83:48:7d:35:a5:8d:8b:bd:9f:1a:d0:0c:a8:e6:
63:bb:94:c8:77:0d:9b:fb:8e:69:22:b2:76:ee:0e:e5:f1:ec:
12:de:ca:4a:46:71:36:2d:85:d3:e0:4a:37:d9:18:37:c3:88:
0a:7e:dd:35:c5:33:c0:e0:78:07:a1:e6:8e:b2:5a:64:61:28:
17:fb:c1:c5:75:51:69:1c:84:39:b2:04:64:7e:22:55:c5:23:
b9:d4:88:77:32:5f:03:bf:32:2f:70:90:8b:78:f6:8c:78:d1:
f7:a9:c9:f8
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
MzhGNTExMC8GA1UEBRMoNzk1NjhBMzhFQ0RCNjE3RTY3OEMwOEE2Q0M0M0M0RDY1
MDJDRUM2MjAeFw0yNTAzMjkwNzI4NDBaFw0yNTA0MDUwNzI4NDBaMBgxFjAUBgNV
BAMTDTY3ZTdhMTI4LTI2YTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD2h3blBRbVPMj4oeHi/IaAoUpCqjPi6Xb/WZzLYKvB4Im2QTH4FF0wrMzQDcuL
VDfUbqJUSK3bRY0erENkZhzJBDS8YC8fHxmigVY/oiRRIxxuRvDgJSA6DN60HN4q
yPP9SWVlUVOTegGGCBc9KieT49IPueEKJeF4qPpCEuWMePSRt9497jmI1+QqykXN
MiNABKa0R0/6mbyhIZggIO4kFkrzTx6+v0wPvKVIMRuz6+VZyBXZ/aWqJ6edBDTF
3zmrnA0DvIXzdwEWc3u7ygYB6ZvsWGhjucY2WDdnZ7AiwTGoiH9h6cC210gkD+d4
1h1uREzpaRJ2VUbMXiJl3YmJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3qDWEgth
Wza7vUn9RfWoxnBurhswHwYDVR0jBBgwFoAUeVaKOOzbYX5njAimzEPE1lAs7GIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzOEY1L0U4MDI4MTlFMDI1
QjExRjA5QUNGRDkxMEM0RjlBRTAyL2VWYUtPT3piWVg1bmpBaW16RVBFMWxBczdH
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvZVZhS09PemJZWDVuakFpbXpFUEUxbEFzN0dJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz
OEY1L0U4MDI4MTlFMDI1QjExRjA5QUNGRDkxMEM0RjlBRTAyL2VWYUtPT3piWVg1
bmpBaW16RVBFMWxBczdHSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAF/FfMPypfqu0eHWFsUqi+KRyw98QCxVxue5nTDVPEaMoXk3QhtSzihY
52U7TWtoozc0ZshyNPr6cdkYxc9auys9LPrKWii9zd9eT90R/JuTCj/hAnVfHqyL
kAg7/uFHEwkLzcEqRAl0oX0jtGwPVyokWVfl66u4VH2eqcF9zPO4guQ9sA0W5e/F
dFpa4LJP9V7NguODSH01pY2LvZ8a0Ayo5mO7lMh3DZv7jmkisnbuDuXx7BLeykpG
cTYthdPgSjfZGDfDiAp+3TXFM8DgeAeh5o6yWmRhKBf7wcV1UWkchDmyBGR+IlXF
I7nUiHcyXwO/Mi9wkIt49ox40fepyfg=
-----END CERTIFICATE-----
Generated at Thu Apr 10 23:58:24 2025 by rpki-client