Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft
File: xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft (raw, json)
Hash identifier: hhjL8WMSe3EGAVAGdUIegAwV95SqejgtChRv2c3qDaI=
Subject key identifier: 22:17:7F:96:67:8D:B2:75:7D:41:DE:BC:3E:EA:31:31:8F:59:DB:C3
Authority key identifier: C4:11:C2:D7:24:01:F5:3E:CA:01:63:57:88:9D:7E:BA:3B:CC:FD:CD
Certificate issuer: /CN=A91B6F60/serialNumber=C411C2D72401F53ECA016357889D7EBA3BCCFDCD
Certificate serial: 04D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft
Manifest number: 04D1
Signing time: Sat 29 Mar 2025 00:04:32 +0000
Manifest this update: Sat 29 Mar 2025 00:04:31 +0000
Manifest next update: Sat 05 Apr 2025 00:04:31 +0000
Files and hashes: 1: xBHC1yQB9T7KAWNXiJ1-ujvM_c0.crl (hash: VCL43lM6+BbArzhxHTMLw2pjPzEQH7Ex6ABjEZPtRu0=)
2: 52A8AE84152E11EC94BCB264C4F9AE02.roa (hash: rYm3bxzeD9Hz/zvaLyO6m3QZv6wC6yDqGi0rEoUEXJs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1239 (0x4d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6F60
Validity
Not Before: Mar 29 00:04:31 2025 GMT
Not After : Apr 5 00:04:31 2025 GMT
Subject: CN=67e7390f-643e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:84:4e:5b:1e:51:d1:fa:02:33:9d:5d:42:07:
1c:f4:6c:bf:b2:35:c1:4b:04:6a:77:99:8a:1c:55:
5e:5c:56:fa:ec:23:68:28:54:6a:d4:21:2a:0f:33:
d1:f1:2e:7e:ea:ac:0f:cd:fe:57:a9:ff:91:4b:ef:
1e:91:53:37:c2:be:6a:09:31:b7:87:5c:27:6f:f3:
9e:6e:46:c9:0f:1b:64:02:1d:3c:59:9b:d0:86:bd:
83:8f:93:a6:c6:e0:fa:5a:f1:fc:db:eb:ee:aa:de:
cc:ce:6a:36:22:ee:d5:06:b2:ad:ca:d3:d5:af:1f:
1a:39:59:3b:b5:01:ec:1c:52:0b:57:24:4b:67:0e:
e1:4a:3a:09:d6:e3:2e:48:f1:cb:33:15:ab:26:aa:
7f:ef:7c:56:4a:c0:ad:bd:d2:91:89:f5:8a:7e:48:
10:66:6d:af:88:da:49:61:b6:b2:dc:99:f8:67:b7:
1b:a1:e1:60:e8:3f:16:e5:e2:66:d3:c6:2e:04:f8:
8f:e5:31:1a:ed:92:bc:e0:1d:da:15:3e:5a:79:e0:
46:db:48:87:4c:c4:8c:98:50:d0:14:d0:1c:9a:f3:
08:51:7f:11:07:1f:50:c1:b6:bb:30:00:c8:bf:8b:
a8:80:e4:69:93:d9:dd:62:21:48:b0:3d:07:ee:68:
24:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:17:7F:96:67:8D:B2:75:7D:41:DE:BC:3E:EA:31:31:8F:59:DB:C3
X509v3 Authority Key Identifier:
keyid:C4:11:C2:D7:24:01:F5:3E:CA:01:63:57:88:9D:7E:BA:3B:CC:FD:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:06:cc:c9:76:c7:c2:62:6b:a3:5d:9a:0a:0d:c4:f0:a4:e4:
12:3f:52:93:07:cc:c8:e0:2c:75:1c:b0:c7:41:6d:50:0b:8b:
dd:c2:bf:ff:e7:07:7f:af:48:9f:3a:0f:b7:54:17:21:5a:bd:
2d:66:a0:89:7c:a4:a8:42:fa:38:80:90:41:dc:bc:0f:30:ea:
3a:3b:b5:cb:f1:a2:b2:17:5d:86:e3:0d:41:3b:65:3e:7b:76:
f0:3e:15:e9:bf:d2:14:b0:6c:b3:cd:36:2d:d1:42:a6:a1:7f:
9a:7c:8f:19:7b:de:60:e1:22:30:b9:af:4b:37:52:e4:d5:49:
7d:54:60:07:7c:ae:ef:b7:25:64:62:eb:66:be:d9:f5:03:70:
55:ab:f7:0f:b9:09:7f:4c:b9:56:d7:19:90:ad:bc:1d:62:41:
ce:fa:90:dc:46:d1:67:5c:30:9b:e7:6c:51:3b:eb:94:c4:1c:
d3:dd:23:37:30:8c:29:df:e6:d0:30:18:da:80:d5:a9:59:53:
01:5c:a3:f3:b0:f5:19:a8:fd:4b:9e:59:77:65:fa:aa:ba:57:
95:2c:62:50:bd:cc:68:14:8d:ba:68:35:6e:f6:ee:00:49:eb:
d4:72:c1:c4:58:7c:5d:b3:30:20:d1:36:b3:c5:63:73:93:b8:
f7:cf:cf:b7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjZGNjAxMTAvBgNVBAUTKEM0MTFDMkQ3MjQwMUY1M0VDQTAxNjM1Nzg4OUQ3RUJB
M0JDQ0ZEQ0QwHhcNMjUwMzI5MDAwNDMxWhcNMjUwNDA1MDAwNDMxWjAYMRYwFAYD
VQQDEw02N2U3MzkwZi02NDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAooROWx5R0foCM51dQgcc9Gy/sjXBSwRqd5mKHFVeXFb67CNoKFRq1CEqDzPR
8S5+6qwPzf5Xqf+RS+8ekVM3wr5qCTG3h1wnb/OebkbJDxtkAh08WZvQhr2Dj5Om
xuD6WvH82+vuqt7Mzmo2Iu7VBrKtytPVrx8aOVk7tQHsHFILVyRLZw7hSjoJ1uMu
SPHLMxWrJqp/73xWSsCtvdKRifWKfkgQZm2viNpJYbay3Jn4Z7cboeFg6D8W5eJm
08YuBPiP5TEa7ZK84B3aFT5aeeBG20iHTMSMmFDQFNAcmvMIUX8RBx9Qwba7MADI
v4uogORpk9ndYiFIsD0H7mgkTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCIXf5Zn
jbJ1fUHevD7qMTGPWdvDMB8GA1UdIwQYMBaAFMQRwtckAfU+ygFjV4idfro7zP3N
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkY2MC85NDkzMkJFQzE1
MkIxMUVDQjMyMTE4NjNDNEY5QUUwMi94QkhDMXlRQjlUN0tBV05YaUoxLXVqdk1f
YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hCSEMxeVFCOVQ3S0FXTlhpSjEtdWp2TV9jMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NkY2MC85NDkzMkJFQzE1MkIxMUVDQjMyMTE4NjNDNEY5QUUwMi94QkhDMXlRQjlU
N0tBV05YaUoxLXVqdk1fYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAYBszJdsfCYmujXZoKDcTwpOQSP1KTB8zI4Cx1HLDHQW1QC4vdwr//
5wd/r0ifOg+3VBchWr0tZqCJfKSoQvo4gJBB3LwPMOo6O7XL8aKyF12G4w1BO2U+
e3bwPhXpv9IUsGyzzTYt0UKmoX+afI8Ze95g4SIwua9LN1Lk1Ul9VGAHfK7vtyVk
Yutmvtn1A3BVq/cPuQl/TLlW1xmQrbwdYkHO+pDcRtFnXDCb52xRO+uUxBzT3SM3
MIwp3+bQMBjagNWpWVMBXKPzsPUZqP1Lnll3ZfqquleVLGJQvcxoFI26aDVu9u4A
SevUcsHEWHxdszAg0TazxWNzk7j3z8+3
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:25:05 2025 by rpki-client