Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft
File: sJELB8hrD_owClKsfDH8tSwFMtc.mft (raw, json)
Hash identifier: oUGy0aoIZ33xb+nNj1jbIJRCe8QZ4PQNh+mnoDrfxK4=
Subject key identifier: 22:D5:7B:74:22:29:2E:97:B1:E0:F2:CA:8D:C1:08:22:DC:18:A1:6A
Authority key identifier: B0:91:0B:07:C8:6B:0F:FA:30:0A:52:AC:7C:31:FC:B5:2C:05:32:D7
Certificate issuer: /CN=A91B777C/serialNumber=B0910B07C86B0FFA300A52AC7C31FCB52C0532D7
Certificate serial: 05D1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft
Manifest number: 05CB
Signing time: Fri 28 Mar 2025 23:19:18 +0000
Manifest this update: Fri 28 Mar 2025 23:19:17 +0000
Manifest next update: Fri 04 Apr 2025 23:19:17 +0000
Files and hashes: 1: sJELB8hrD_owClKsfDH8tSwFMtc.crl (hash: PYykZKMUyqjPyrMYtUUj+AvKRM8bMZaO7s77yf8q97w=)
2: 9095FC2CB2E811EBADBB3753C4F9AE02.roa (hash: h5dvfa3FRBYPtcjjdPkOqAVQA/qeLJ42SQi+kECAh1M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1489 (0x5d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B777C
Validity
Not Before: Mar 28 23:19:17 2025 GMT
Not After : Apr 4 23:19:17 2025 GMT
Subject: CN=67e72e76-47d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:aa:fe:76:b6:1c:80:e6:67:40:2c:48:1f:b1:
c5:c2:ce:48:6a:92:64:9a:c8:2d:54:8d:da:4c:7a:
4a:b0:d9:82:f0:1f:70:e6:3a:ba:3a:38:79:c7:e5:
95:5e:c3:46:f1:a5:9c:64:fb:9b:ec:0e:3b:eb:6d:
15:67:59:a3:2e:a6:8e:6c:bb:53:68:1e:56:b9:42:
cf:0d:23:c4:40:5f:bb:d0:0d:d2:2f:42:1d:f2:87:
6a:b1:d3:f2:40:6a:0a:76:a7:39:bf:c5:26:9f:1d:
62:5e:b0:51:b7:0d:13:6b:96:13:36:86:6d:42:e5:
42:f7:89:e3:0f:76:49:c3:fe:80:be:d2:f6:b8:36:
d5:3a:0d:31:26:07:82:94:b8:f7:2b:31:ad:a0:62:
03:3c:00:db:12:03:ff:ab:0e:2c:cb:d3:01:00:1c:
d9:4b:c6:a9:10:f4:8e:79:97:5a:1f:c5:14:a1:be:
95:d0:8c:98:1b:2a:5d:1d:7b:42:6d:d5:7c:0b:54:
90:0e:54:25:6d:ca:c4:bf:1f:44:0b:4b:d7:0c:5b:
ad:e2:bb:1b:e4:67:35:13:0f:52:97:02:78:38:e6:
bf:c6:8a:c5:0e:a4:2b:9a:5d:16:bf:8a:9f:c0:28:
9f:14:93:00:c6:61:a1:a0:0f:79:02:1d:da:64:cd:
55:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D5:7B:74:22:29:2E:97:B1:E0:F2:CA:8D:C1:08:22:DC:18:A1:6A
X509v3 Authority Key Identifier:
keyid:B0:91:0B:07:C8:6B:0F:FA:30:0A:52:AC:7C:31:FC:B5:2C:05:32:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:bf:ee:4b:06:1e:9b:c0:59:79:e0:07:5b:e7:12:96:a5:85:
43:00:7d:00:56:13:ba:ce:b7:25:1e:c7:ce:e6:50:0d:1f:04:
b1:c1:02:91:9f:73:4f:04:c1:05:a5:2c:5b:c7:57:01:51:ed:
b8:3f:63:a4:28:b4:f8:72:e9:c1:af:8c:f1:a8:41:22:fe:c4:
e8:7a:c4:c1:46:92:13:4a:13:26:f9:54:ea:66:99:91:22:b3:
d3:de:b7:b1:54:1f:31:1e:36:c3:2f:df:3a:6c:be:04:c3:7a:
60:90:8c:54:23:d0:79:f1:53:b4:e8:e5:cc:6a:81:ad:8c:5c:
4f:d3:b2:fc:0a:4f:aa:80:31:33:23:3b:0d:8f:cf:db:5c:1a:
fa:a7:57:5b:d1:ba:cd:81:11:4e:66:a5:ef:e1:9e:63:22:4c:
ea:cf:fd:01:0c:0c:eb:e8:9c:01:8f:f6:0e:62:74:7b:f2:49:
37:5f:97:7a:9e:2c:db:c3:84:6b:7f:c2:53:bb:01:b4:c1:1a:
d1:e5:fa:3e:3e:5d:2e:af:41:0a:e2:bf:f6:60:19:8c:d3:7c:
46:ba:90:23:6c:ae:72:3f:26:fe:88:1d:b2:94:e2:f7:f8:1f:
8c:45:6a:2c:ef:fb:34:16:06:04:86:61:47:3f:27:14:64:9d:
9a:0a:8a:8c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjc3N0MxMTAvBgNVBAUTKEIwOTEwQjA3Qzg2QjBGRkEzMDBBNTJBQzdDMzFGQ0I1
MkMwNTMyRDcwHhcNMjUwMzI4MjMxOTE3WhcNMjUwNDA0MjMxOTE3WjAYMRYwFAYD
VQQDEw02N2U3MmU3Ni00N2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzar+drYcgOZnQCxIH7HFws5IapJkmsgtVI3aTHpKsNmC8B9w5jq6Ojh5x+WV
XsNG8aWcZPub7A47620VZ1mjLqaObLtTaB5WuULPDSPEQF+70A3SL0Id8odqsdPy
QGoKdqc5v8Umnx1iXrBRtw0Ta5YTNoZtQuVC94njD3ZJw/6AvtL2uDbVOg0xJgeC
lLj3KzGtoGIDPADbEgP/qw4sy9MBABzZS8apEPSOeZdaH8UUob6V0IyYGypdHXtC
bdV8C1SQDlQlbcrEvx9EC0vXDFut4rsb5Gc1Ew9SlwJ4OOa/xorFDqQrml0Wv4qf
wCifFJMAxmGhoA95Ah3aZM1VGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCLVe3Qi
KS6XseDyyo3BCCLcGKFqMB8GA1UdIwQYMBaAFLCRCwfIaw/6MApSrHwx/LUsBTLX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3Qy82MkQwM0U4Q0Iy
REExMUVCOEIzODRBNjBDNEY5QUUwMi9zSkVMQjhockRfb3dDbEtzZkRIOHRTd0ZN
dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3NKRUxCOGhyRF9vd0NsS3NmREg4dFN3Rk10Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
Nzc3Qy82MkQwM0U4Q0IyREExMUVCOEIzODRBNjBDNEY5QUUwMi9zSkVMQjhockRf
b3dDbEtzZkRIOHRTd0ZNdGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBIv+5LBh6bwFl54Adb5xKWpYVDAH0AVhO6zrclHsfO5lANHwSxwQKR
n3NPBMEFpSxbx1cBUe24P2OkKLT4cunBr4zxqEEi/sToesTBRpITShMm+VTqZpmR
IrPT3rexVB8xHjbDL986bL4Ew3pgkIxUI9B58VO06OXMaoGtjFxP07L8Ck+qgDEz
IzsNj8/bXBr6p1db0brNgRFOZqXv4Z5jIkzqz/0BDAzr6JwBj/YOYnR78kk3X5d6
nizbw4Rrf8JTuwG0wRrR5fo+Pl0ur0EK4r/2YBmM03xGupAjbK5yPyb+iB2ylOL3
+B+MRWos7/s0FgYEhmFHPycUZJ2aCoqM
-----END CERTIFICATE-----
Generated at Fri Apr 11 05:26:23 2025 by rpki-client