Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft
File: sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft (raw, json)
Hash identifier: Kh88RfXgP7YXda4/tMTR4SfPwHrsTNt/QpMEoPid7EI=
Subject key identifier: 6C:D4:5C:2E:34:7F:46:72:54:6E:2E:31:03:AA:68:94:BB:BD:02:49
Authority key identifier: B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48
Certificate issuer: /CN=A91BC966/serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248
Certificate serial: 0BF8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft
Manifest number: 0BD0
Signing time: Fri 28 Mar 2025 19:05:30 +0000
Manifest this update: Fri 28 Mar 2025 19:05:29 +0000
Manifest next update: Fri 04 Apr 2025 19:05:29 +0000
Files and hashes: 1: sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl (hash: JvgTs6omY8WAEvHEG6Q8/bpy2pv8JTnVv4GLOa9JtQM=)
2: A6A53FA2D67E11EEAA2CA218C4F9AE02.roa (hash: HeeBDJcwhy8+V+2Cg9KYbQ3U6GO/s9+NiHEgSW8cWgU=)
3: 5DA849821C1211EA819EA46EC4F9AE02.roa (hash: uC/ySBud8URGaJBRTy6y4ruA2gtaltNx8FUR5phArUQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3064 (0xbf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC966
Validity
Not Before: Mar 28 19:05:29 2025 GMT
Not After : Apr 4 19:05:29 2025 GMT
Subject: CN=67e6f2fa-e65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7c:34:0f:96:9b:23:b9:d6:a1:37:48:4e:39:
25:5e:a1:cd:99:a0:fa:98:82:37:5e:d5:47:59:59:
64:9a:a9:36:4e:d4:f7:c0:f9:3f:08:73:2e:a6:be:
6c:06:71:a4:ce:7a:66:4c:fa:31:88:e2:a9:7d:73:
c2:23:69:47:cc:37:78:ec:92:81:d3:60:ce:b4:da:
f7:94:d6:bd:6d:d4:24:2e:31:ad:2b:1f:ca:dd:57:
ec:3c:db:b2:5d:98:62:5a:28:c7:0f:15:c7:8e:ac:
7b:47:ff:5e:0c:f1:d0:1a:60:0b:c9:f3:42:b5:8c:
95:2e:e1:9f:b6:36:ce:bf:17:b8:12:13:ca:54:43:
9f:97:19:72:a5:ed:be:71:a7:6a:f1:19:34:9c:1b:
6c:27:51:97:0c:cf:71:eb:61:b4:c6:24:5f:e1:53:
c6:a8:ee:53:42:1c:9d:c6:dc:42:6c:32:b1:27:10:
38:26:6f:d9:aa:86:56:26:fd:40:07:16:e5:c4:b9:
0c:b3:af:0a:b0:89:78:cd:fe:7e:75:a2:df:09:cd:
4f:ff:6f:42:13:89:f4:a4:45:72:dd:28:8a:e8:3f:
94:e3:8f:91:50:6e:cf:5c:ba:9e:24:24:ee:b3:24:
ae:e3:33:cd:60:dd:a0:2f:e8:84:4f:19:22:df:4a:
fd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D4:5C:2E:34:7F:46:72:54:6E:2E:31:03:AA:68:94:BB:BD:02:49
X509v3 Authority Key Identifier:
keyid:B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:c6:28:d4:f2:e0:a0:88:e8:a9:23:63:f8:38:1c:b8:2e:4c:
b9:1f:f4:38:f3:c1:10:7f:42:e5:0c:6d:b8:71:83:19:0a:4d:
17:e0:39:b3:dd:ea:6c:36:98:b4:80:ee:ba:5a:9a:1d:09:a0:
4a:70:ec:a3:19:29:15:1d:80:ca:d1:f4:09:04:94:01:49:68:
3d:6f:a2:6f:d2:78:e7:7d:0d:80:e8:f6:c9:77:8c:6f:cc:63:
1d:4f:21:23:00:ca:49:78:78:48:dc:b5:94:79:d5:a7:a0:2f:
f9:fa:2f:4f:a1:62:e0:52:de:f1:83:b7:02:d3:b1:43:ed:13:
85:33:31:9a:37:6f:69:f4:e0:94:e9:ea:a8:bc:00:ef:f3:41:
79:07:08:1d:8c:8b:61:75:e0:6f:7e:0e:b2:9a:32:14:2c:b2:
ea:fa:56:65:1d:04:a1:59:c0:df:62:a4:db:15:73:1c:62:a7:
1b:53:43:eb:29:ef:3b:70:8c:d8:7f:1c:43:54:85:84:32:8a:
0a:e7:4a:e4:24:f6:b2:d9:57:44:a6:09:1d:67:a9:ea:10:0c:
05:6f:5d:c0:af:4c:2b:7e:3c:ee:75:e4:d2:b5:e0:37:7a:05:
f3:72:79:02:88:d9:96:8c:57:71:44:b4:2a:b8:70:21:64:f4:
db:d1:0b:1f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkM5NjYxMTAvBgNVBAUTKEIyQTI1RERFMUE5RUM5MUI1OTk4NkE1MzJGNzg4MzU0
MzYxODMyNDgwHhcNMjUwMzI4MTkwNTI5WhcNMjUwNDA0MTkwNTI5WjAYMRYwFAYD
VQQDEw02N2U2ZjJmYS1lNjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt3w0D5abI7nWoTdITjklXqHNmaD6mII3XtVHWVlkmqk2TtT3wPk/CHMupr5s
BnGkznpmTPoxiOKpfXPCI2lHzDd47JKB02DOtNr3lNa9bdQkLjGtKx/K3VfsPNuy
XZhiWijHDxXHjqx7R/9eDPHQGmALyfNCtYyVLuGftjbOvxe4EhPKVEOflxlype2+
cadq8Rk0nBtsJ1GXDM9x62G0xiRf4VPGqO5TQhydxtxCbDKxJxA4Jm/ZqoZWJv1A
BxblxLkMs68KsIl4zf5+daLfCc1P/29CE4n0pEVy3SiK6D+U44+RUG7PXLqeJCTu
sySu4zPNYN2gL+iETxki30r9vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGzUXC40
f0ZyVG4uMQOqaJS7vQJJMB8GA1UdIwQYMBaAFLKiXd4anskbWZhqUy94g1Q2GDJI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzk2Ni9BMTk1MkJBMjFD
MTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlSdFptR3BUTDNpRFZEWVlN
a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NxSmQzaHFleVJ0Wm1HcFRMM2lEVkRZWU1rZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
Qzk2Ni9BMTk1MkJBMjFDMTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlS
dFptR3BUTDNpRFZEWVlNa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDIxijU8uCgiOipI2P4OBy4Lky5H/Q488EQf0LlDG24cYMZCk0X4Dmz
3epsNpi0gO66WpodCaBKcOyjGSkVHYDK0fQJBJQBSWg9b6Jv0njnfQ2A6PbJd4xv
zGMdTyEjAMpJeHhI3LWUedWnoC/5+i9PoWLgUt7xg7cC07FD7ROFMzGaN29p9OCU
6eqovADv80F5BwgdjIthdeBvfg6ymjIULLLq+lZlHQShWcDfYqTbFXMcYqcbU0Pr
Ke87cIzYfxxDVIWEMooK50rkJPay2VdEpgkdZ6nqEAwFb13Ar0wrfjzudeTSteA3
egXzcnkCiNmWjFdxRLQquHAhZPTb0Qsf
-----END CERTIFICATE-----
Generated at Fri Apr 11 10:37:39 2025 by rpki-client