
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft
File: -c8El8-2fhYnKRCY8R8XhuuJ_1A.mft (raw, json)
Hash identifier: 5znN5jqV+SQEVVwe1vFg9T9k+3LV61WtaRvKaNef9K8=
Subject key identifier: 7D:98:78:66:41:5B:7D:48:98:FC:9B:AA:23:E7:B0:CA:25:51:F5:DA
Authority key identifier: F9:CF:04:97:CF:B6:7E:16:27:29:10:98:F1:1F:17:86:EB:89:FF:50
Certificate issuer: /CN=A91B5073/serialNumber=F9CF0497CFB67E1627291098F11F1786EB89FF50
Certificate serial: 1070
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft
Manifest number: 18E3
Signing time: Fri 28 Mar 2025 17:29:20 +0000
Manifest this update: Fri 28 Mar 2025 17:29:19 +0000
Manifest next update: Fri 04 Apr 2025 17:29:19 +0000
Files and hashes: 1: -c8El8-2fhYnKRCY8R8XhuuJ_1A.crl (hash: M3Ib4OZ6DvYO51o3FEdmKkKDIiO+yzefK0gVDThkJXI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4208 (0x1070)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5073
Validity
Not Before: Mar 28 17:29:19 2025 GMT
Not After : Apr 4 17:29:19 2025 GMT
Subject: CN=67e6dc70-228f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3c:9d:4d:70:8d:98:d0:41:c3:bb:8f:a4:b8:
d5:e0:b3:79:e5:4f:ec:c2:f3:ed:d3:2d:40:c9:ff:
23:db:a1:02:79:0d:63:31:46:78:3b:84:ed:2c:de:
b0:81:cf:cf:e3:5e:25:e9:1f:2c:c5:ff:c5:49:f2:
7c:f0:59:19:eb:1f:65:22:40:b4:24:75:67:2c:a3:
f4:d9:e2:93:29:8b:f6:e9:5c:5c:d0:4d:d8:4b:3f:
4c:00:db:95:38:83:1e:6b:06:55:09:22:c7:bd:31:
cb:b0:f8:5b:7d:39:4b:e5:45:31:23:2e:34:b4:b3:
18:cd:8e:07:39:73:4b:e6:01:35:2c:b0:8b:4f:b7:
9d:c4:90:d5:85:ad:83:e5:7d:6e:63:12:00:6b:69:
50:e5:18:ff:20:17:b9:d5:33:f8:ec:74:f3:2a:74:
9b:e4:5e:22:2c:97:db:a6:0b:6e:38:a9:cb:21:de:
4d:45:e2:e6:05:d8:a9:14:88:a2:f9:9f:08:c5:43:
83:21:76:7a:ea:1b:43:36:65:b8:5d:08:a0:f1:4a:
f7:c0:9d:9a:82:8c:81:f0:5e:3a:49:df:e8:94:37:
25:d9:0c:d2:4d:db:f3:7d:f5:29:97:71:71:90:2c:
ce:8e:5e:81:e2:82:df:41:fa:6c:e4:66:f3:b8:2f:
9d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:98:78:66:41:5B:7D:48:98:FC:9B:AA:23:E7:B0:CA:25:51:F5:DA
X509v3 Authority Key Identifier:
keyid:F9:CF:04:97:CF:B6:7E:16:27:29:10:98:F1:1F:17:86:EB:89:FF:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:9b:82:6d:67:ff:b8:bd:50:4b:5c:b2:9b:99:27:56:75:62:
d0:b4:6b:8a:b6:6d:a5:a2:87:39:60:83:56:50:da:3c:ac:8a:
27:f5:97:8d:5f:16:6a:50:b5:ff:5d:0f:71:f4:5a:a4:9f:91:
42:1b:99:d6:7f:6f:5d:db:0f:b9:2a:a3:8e:c4:3d:53:98:8c:
d1:dd:51:db:e8:ff:ba:2e:32:55:ea:f7:58:80:2e:d5:2a:40:
32:0d:b1:8e:3c:9a:12:5e:21:18:dd:7f:98:09:9a:f0:a4:6b:
bb:6f:f2:24:32:2d:4e:a1:2d:39:41:bd:09:b1:89:13:87:0b:
5f:d3:3b:d8:ce:c5:f3:3a:82:56:e3:ad:a5:ee:5f:0f:2e:31:
91:c2:51:3a:36:80:47:01:e4:83:04:92:0d:a4:97:74:dd:b0:
e8:f4:fb:29:69:6c:80:7e:4e:2e:00:e0:f8:e0:b9:ea:df:f0:
ba:43:e8:8e:67:ed:a3:e9:f5:e4:5d:d8:b7:d6:d3:86:68:f4:
53:cc:bb:e6:d9:a8:46:3b:35:c0:78:01:81:41:2e:79:55:01:
3e:31:4a:30:89:32:21:35:ba:e6:a2:01:ad:96:65:f9:41:26:
a9:38:b3:9a:07:df:e8:3d:03:32:cd:39:27:97:02:aa:d3:2d:
b5:74:fe:67
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjUwNzMxMTAvBgNVBAUTKEY5Q0YwNDk3Q0ZCNjdFMTYyNzI5MTA5OEYxMUYxNzg2
RUI4OUZGNTAwHhcNMjUwMzI4MTcyOTE5WhcNMjUwNDA0MTcyOTE5WjAYMRYwFAYD
VQQDEw02N2U2ZGM3MC0yMjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtTydTXCNmNBBw7uPpLjV4LN55U/swvPt0y1Ayf8j26ECeQ1jMUZ4O4TtLN6w
gc/P414l6R8sxf/FSfJ88FkZ6x9lIkC0JHVnLKP02eKTKYv26Vxc0E3YSz9MANuV
OIMeawZVCSLHvTHLsPhbfTlL5UUxIy40tLMYzY4HOXNL5gE1LLCLT7edxJDVha2D
5X1uYxIAa2lQ5Rj/IBe51TP47HTzKnSb5F4iLJfbpgtuOKnLId5NReLmBdipFIii
+Z8IxUODIXZ66htDNmW4XQig8Ur3wJ2agoyB8F46Sd/olDcl2QzSTdvzffUpl3Fx
kCzOjl6B4oLfQfps5GbzuC+dYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2YeGZB
W31ImPybqiPnsMolUfXaMB8GA1UdIwQYMBaAFPnPBJfPtn4WJykQmPEfF4brif9Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTA3My80M0YxNjI2NDMz
OTUxMUU5QkZCMUMyMUFDNEY5QUUwMi8tYzhFbDgtMmZoWW5LUkNZOFI4WGh1dUpf
MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1jOEVsOC0yZmhZbktSQ1k4UjhYaHV1Sl8xQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NTA3My80M0YxNjI2NDMzOTUxMUU5QkZCMUMyMUFDNEY5QUUwMi8tYzhFbDgtMmZo
WW5LUkNZOFI4WGh1dUpfMUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAsm4JtZ/+4vVBLXLKbmSdWdWLQtGuKtm2looc5YINWUNo8rIon9ZeN
XxZqULX/XQ9x9Fqkn5FCG5nWf29d2w+5KqOOxD1TmIzR3VHb6P+6LjJV6vdYgC7V
KkAyDbGOPJoSXiEY3X+YCZrwpGu7b/IkMi1OoS05Qb0JsYkThwtf0zvYzsXzOoJW
462l7l8PLjGRwlE6NoBHAeSDBJINpJd03bDo9PspaWyAfk4uAOD44Lnq3/C6Q+iO
Z+2j6fXkXdi31tOGaPRTzLvm2ahGOzXAeAGBQS55VQE+MUowiTIhNbrmogGtlmX5
QSapOLOaB9/oPQMyzTknlwKq0y21dP5n
-----END CERTIFICATE-----
Generated at Sat Apr 12 10:34:31 2025 by rpki-client