Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft
File: neeKCQtuCCyfsAyqXiyRMlbDyHY.mft (raw, json)
Hash identifier: 11vkNSmTanCbSKEa+a8fO91Ro29v9O2bw4Ud0gYYsg0=
Subject key identifier: A9:96:19:37:99:42:4E:06:E1:63:DA:20:21:0F:8D:1A:C7:03:C6:DB
Authority key identifier: 9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76
Certificate issuer: /CN=A91B3AD7/serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876
Certificate serial: 0C20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft
Manifest number: 0C11
Signing time: Fri 28 Mar 2025 18:51:17 +0000
Manifest this update: Fri 28 Mar 2025 18:51:16 +0000
Manifest next update: Fri 04 Apr 2025 18:51:16 +0000
Files and hashes: 1: neeKCQtuCCyfsAyqXiyRMlbDyHY.crl (hash: HMSAUNWl948mW+gdg3aOTby281MDIA5emdSOmyavpNI=)
2: 6B096E780B8511EA97C80D52C4F9AE02.roa (hash: xcYwEU1Ftnj8dFt6vaWPu1zA9QDrpd8bMuPkYaOoGl0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3104 (0xc20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3AD7
Validity
Not Before: Mar 28 18:51:16 2025 GMT
Not After : Apr 4 18:51:16 2025 GMT
Subject: CN=67e6efa4-59e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2c:cd:1f:2a:43:07:3a:e1:08:d0:3f:d0:9d:
15:cf:4b:93:26:f8:7d:b6:55:fa:b0:bb:1d:59:ff:
f7:37:9d:ae:ca:8a:21:34:c6:34:14:34:29:b2:25:
53:e5:35:62:e4:84:78:53:cc:51:15:8a:97:2f:c7:
53:6b:54:1e:02:1d:19:07:a6:6a:98:6f:6d:be:38:
56:c7:14:f4:45:1b:12:0d:3f:0d:fa:5c:e6:54:b0:
47:24:ef:32:ce:ff:f1:ac:4c:67:44:40:9d:58:3c:
42:84:ce:b5:38:c8:d1:39:1a:61:6b:63:57:a9:dc:
92:ca:1b:3a:70:ca:6d:3c:f8:aa:93:3a:c8:60:7f:
45:b0:0a:82:53:b1:82:df:52:ff:8d:f4:a9:54:fd:
78:3c:2f:de:53:18:20:d0:99:1e:63:ea:96:c9:52:
f1:c7:f8:47:d3:ac:e8:48:a1:e2:39:1c:d3:86:4e:
fb:cb:77:2f:27:1b:a8:6b:d3:10:26:3b:63:b1:43:
47:c6:cd:9c:13:ab:f8:a7:b3:8b:49:4f:77:1e:93:
dc:37:3e:0c:a1:b1:4f:f8:98:91:cf:56:38:93:68:
2d:14:cb:89:5d:10:59:94:41:a0:e1:22:f6:d0:5f:
7c:97:12:8d:92:49:15:9d:30:cb:82:64:15:3a:32:
f6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:96:19:37:99:42:4E:06:E1:63:DA:20:21:0F:8D:1A:C7:03:C6:DB
X509v3 Authority Key Identifier:
keyid:9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:cf:44:5e:89:d4:93:2d:c1:b3:4d:d5:39:cc:68:b0:44:83:
58:d5:01:b0:3c:6d:f2:27:4b:7d:06:d0:dd:db:45:9a:0c:dc:
bf:82:2b:29:77:c9:3f:40:a1:07:7a:e7:9d:80:b5:f2:68:e2:
f6:87:3c:44:f2:9d:07:9a:a6:9d:ee:b3:62:55:4d:c6:b5:8c:
93:9b:7a:6b:11:1d:06:b6:e7:14:33:34:42:c7:76:63:54:ea:
3c:b3:8f:dd:6f:e2:f3:ea:9c:17:d4:08:6c:e0:26:0c:fa:44:
23:bf:56:ad:41:be:2f:6a:2c:8c:b8:81:12:8e:29:9b:2e:61:
8b:31:ed:b2:7f:71:f7:a2:71:73:5d:47:39:44:49:80:14:52:
1a:b5:3b:d5:2d:02:14:9d:87:88:33:5f:b6:62:a3:ed:26:f9:
fc:2e:f1:56:e4:6b:5e:16:a7:75:3e:23:9f:29:86:8f:c1:77:
3a:dc:fd:1b:23:0f:d2:70:9c:1e:7c:3d:f9:43:0d:4d:1f:88:
2f:f1:86:62:66:39:42:b1:84:40:56:d6:14:fc:50:b2:b5:30:
ea:08:65:76:85:47:05:9e:de:ca:75:8a:14:05:d3:ab:24:7b:
f8:6e:9c:bf:c1:2e:99:6e:3f:21:5b:4e:26:14:91:f8:d1:6e:
6a:6b:fa:06
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjNBRDcxMTAvBgNVBAUTKDlERTc4QTA5MEI2RTA4MkM5RkIwMENBQTVFMkM5MTMy
NTZDM0M4NzYwHhcNMjUwMzI4MTg1MTE2WhcNMjUwNDA0MTg1MTE2WjAYMRYwFAYD
VQQDEw02N2U2ZWZhNC01OWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvCzNHypDBzrhCNA/0J0Vz0uTJvh9tlX6sLsdWf/3N52uyoohNMY0FDQpsiVT
5TVi5IR4U8xRFYqXL8dTa1QeAh0ZB6ZqmG9tvjhWxxT0RRsSDT8N+lzmVLBHJO8y
zv/xrExnRECdWDxChM61OMjRORpha2NXqdySyhs6cMptPPiqkzrIYH9FsAqCU7GC
31L/jfSpVP14PC/eUxgg0JkeY+qWyVLxx/hH06zoSKHiORzThk77y3cvJxuoa9MQ
JjtjsUNHxs2cE6v4p7OLSU93HpPcNz4MobFP+JiRz1Y4k2gtFMuJXRBZlEGg4SL2
0F98lxKNkkkVnTDLgmQVOjL2pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmWGTeZ
Qk4G4WPaICEPjRrHA8bbMB8GA1UdIwQYMBaAFJ3nigkLbggsn7AMql4skTJWw8h2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0FENy8wN0NGOEQ3QTBC
ODQxMUVBQTIxNjc4NEZDNEY5QUUwMi9uZWVLQ1F0dUNDeWZzQXlxWGl5Uk1sYkR5
SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25lZUtDUXR1Q0N5ZnNBeXFYaXlSTWxiRHlIWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
M0FENy8wN0NGOEQ3QTBCODQxMUVBQTIxNjc4NEZDNEY5QUUwMi9uZWVLQ1F0dUND
eWZzQXlxWGl5Uk1sYkR5SFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAzz0ReidSTLcGzTdU5zGiwRINY1QGwPG3yJ0t9BtDd20WaDNy/gisp
d8k/QKEHeuedgLXyaOL2hzxE8p0Hmqad7rNiVU3GtYyTm3prER0GtucUMzRCx3Zj
VOo8s4/db+Lz6pwX1Ahs4CYM+kQjv1atQb4vaiyMuIESjimbLmGLMe2yf3H3onFz
XUc5REmAFFIatTvVLQIUnYeIM1+2YqPtJvn8LvFW5GteFqd1PiOfKYaPwXc63P0b
Iw/ScJwefD35Qw1NH4gv8YZiZjlCsYRAVtYU/FCytTDqCGV2hUcFnt7KdYoUBdOr
JHv4bpy/wS6Zbj8hW04mFJH40W5qa/oG
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:42:37 2025 by rpki-client