Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft
File: 5VpZVzhbbPjKDASB1i3f_asSwfQ.mft (raw, json)
Hash identifier: aZ+0b7cJH6p5Q1RVJEIrU9nrGzOk+mgp49Vszc0ol9s=
Subject key identifier: B0:06:03:53:81:F3:95:38:3A:13:05:1F:FF:8F:35:FD:D1:8A:D7:6A
Authority key identifier: E5:5A:59:57:38:5B:6C:F8:CA:0C:04:81:D6:2D:DF:FD:AB:12:C1:F4
Certificate issuer: /CN=A91BD090/serialNumber=E55A5957385B6CF8CA0C0481D62DDFFDAB12C1F4
Certificate serial: 08F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft
Manifest number: 08ED
Signing time: Fri 28 Mar 2025 20:39:23 +0000
Manifest this update: Fri 28 Mar 2025 20:39:22 +0000
Manifest next update: Fri 04 Apr 2025 20:39:22 +0000
Files and hashes: 1: 5VpZVzhbbPjKDASB1i3f_asSwfQ.crl (hash: W1P2v66YDSNsIdprdCuyXjm3npxESEdpdIKEF4ip9o8=)
2: A1F46062A64611EAA24E1461C4F9AE02.roa (hash: WPQQ6V7efa7fb8nJuM/CRZGnnAAa2WyVzIIakNwqKYA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2293 (0x8f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD090
Validity
Not Before: Mar 28 20:39:22 2025 GMT
Not After : Apr 4 20:39:22 2025 GMT
Subject: CN=67e708fb-61c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:a7:7e:c5:af:38:9b:37:c3:a0:e9:d9:ba:
ae:b2:2c:70:92:57:b6:c7:8c:46:1a:e8:78:92:ec:
6c:dd:b7:d7:e2:82:1c:74:0e:cb:96:d6:34:85:24:
6f:6b:36:8b:ca:ba:a8:79:73:6f:a0:35:9d:2e:63:
5d:80:d9:20:27:02:46:b6:3c:a8:c0:7f:7f:1c:c8:
52:3f:89:c3:0b:36:89:15:05:40:ab:6f:4b:59:a4:
66:f2:c5:e4:75:23:39:76:7b:f6:ad:6d:ae:41:8c:
2e:bc:bd:b8:06:b3:b1:13:0e:ab:31:03:d9:3f:98:
b7:2b:19:d4:00:d1:ba:7f:31:86:96:a2:7b:e6:b3:
7b:c7:9b:4a:e8:73:29:75:1f:e9:c3:d7:84:a0:95:
da:6c:fb:77:87:7c:fc:2f:f1:d3:ad:f0:2f:cc:1b:
23:8e:55:06:4f:0a:1b:7d:f0:65:29:91:4a:13:39:
8d:9f:84:8d:cb:91:d6:21:f3:1e:dd:5c:40:cb:c1:
80:ae:58:73:2a:26:69:2e:d4:3a:e0:80:76:80:fc:
b2:3e:af:e0:3b:ae:72:ad:29:06:96:be:45:ed:19:
0e:8d:7f:83:f2:42:d1:2b:12:dc:a7:05:16:08:87:
a9:ee:ce:cb:47:89:c3:59:c4:a4:91:e6:e6:7a:93:
d8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:06:03:53:81:F3:95:38:3A:13:05:1F:FF:8F:35:FD:D1:8A:D7:6A
X509v3 Authority Key Identifier:
keyid:E5:5A:59:57:38:5B:6C:F8:CA:0C:04:81:D6:2D:DF:FD:AB:12:C1:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:76:0d:e3:44:d4:b7:a9:e1:ce:5e:3d:ce:52:3d:c1:71:7a:
b9:eb:62:78:b5:68:13:53:be:1c:f4:b0:4b:69:35:ef:27:d6:
e9:2c:f5:e1:07:a8:e1:77:2f:04:97:2e:8c:bd:49:50:b5:ad:
b1:92:ab:22:a3:ad:90:b3:cf:fa:d0:d4:b6:13:65:08:d1:c4:
56:f7:a9:be:36:2a:e0:7f:c0:49:56:69:87:02:5e:7f:b0:85:
cb:09:a3:88:f2:be:a3:c6:2b:eb:90:c0:6e:b1:94:16:65:af:
38:59:bd:8d:26:34:4f:bc:60:c5:ac:77:b8:be:6b:00:92:e2:
0f:be:d8:c3:93:49:e7:15:95:fa:28:aa:db:f0:0b:b2:8c:d0:
54:b9:45:d0:a9:1c:15:af:30:0a:26:aa:53:d3:cd:07:ce:8f:
1b:c3:80:e3:7b:f1:60:ac:0b:21:f5:c1:03:3b:87:49:d1:5b:
91:47:1f:64:49:8b:e7:d8:c0:d8:56:bf:60:7f:dc:eb:8b:1e:
8a:4c:d6:c2:e3:bc:f8:0b:67:2b:15:c6:b0:f5:a3:63:14:86:
de:42:73:d6:ff:a4:28:72:5c:3b:9a:56:94:94:26:ad:62:a9:
88:37:e3:26:3f:d8:42:2f:76:33:21:76:dd:7f:98:de:41:70:
81:71:ae:88
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkQwOTAxMTAvBgNVBAUTKEU1NUE1OTU3Mzg1QjZDRjhDQTBDMDQ4MUQ2MkRERkZE
QUIxMkMxRjQwHhcNMjUwMzI4MjAzOTIyWhcNMjUwNDA0MjAzOTIyWjAYMRYwFAYD
VQQDEw02N2U3MDhmYi02MWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvlunfsWvOJs3w6Dp2bqusixwkle2x4xGGuh4kuxs3bfX4oIcdA7LltY0hSRv
azaLyrqoeXNvoDWdLmNdgNkgJwJGtjyowH9/HMhSP4nDCzaJFQVAq29LWaRm8sXk
dSM5dnv2rW2uQYwuvL24BrOxEw6rMQPZP5i3KxnUANG6fzGGlqJ75rN7x5tK6HMp
dR/pw9eEoJXabPt3h3z8L/HTrfAvzBsjjlUGTwobffBlKZFKEzmNn4SNy5HWIfMe
3VxAy8GArlhzKiZpLtQ64IB2gPyyPq/gO65yrSkGlr5F7RkOjX+D8kLRKxLcpwUW
CIep7s7LR4nDWcSkkebmepPYXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLAGA1OB
85U4OhMFH/+PNf3RitdqMB8GA1UdIwQYMBaAFOVaWVc4W2z4ygwEgdYt3/2rEsH0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDA5MC8yRENFMDQ4Q0E2
NDUxMUVBODYxQUQzNUVDNEY5QUUwMi81VnBaVnpoYmJQaktEQVNCMWkzZl9hc1N3
ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVWcFpWemhiYlBqS0RBU0IxaTNmX2FzU3dmUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RDA5MC8yRENFMDQ4Q0E2NDUxMUVBODYxQUQzNUVDNEY5QUUwMi81VnBaVnpoYmJQ
aktEQVNCMWkzZl9hc1N3ZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBJdg3jRNS3qeHOXj3OUj3BcXq562J4tWgTU74c9LBLaTXvJ9bpLPXh
B6jhdy8Ely6MvUlQta2xkqsio62Qs8/60NS2E2UI0cRW96m+Nirgf8BJVmmHAl5/
sIXLCaOI8r6jxivrkMBusZQWZa84Wb2NJjRPvGDFrHe4vmsAkuIPvtjDk0nnFZX6
KKrb8AuyjNBUuUXQqRwVrzAKJqpT080Hzo8bw4Dje/FgrAsh9cEDO4dJ0VuRRx9k
SYvn2MDYVr9gf9zrix6KTNbC47z4C2crFcaw9aNjFIbeQnPW/6Qoclw7mlaUlCat
YqmIN+MmP9hCL3YzIXbdf5jeQXCBca6I
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:20:17 2025 by rpki-client