Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft
File: gButjLImQd3t5NvTn0vn9NjK6lU.mft (raw, json)
Hash identifier: GfRgQaJW8zBD0VLu8ayQxJfG+eUYhYNrJNecAVpONZ4=
Subject key identifier: F7:06:C5:93:DE:01:D9:62:C2:6A:46:CA:70:06:6D:1C:30:01:B6:CF
Authority key identifier: 80:1B:AD:8C:B2:26:41:DD:ED:E4:DB:D3:9F:4B:E7:F4:D8:CA:EA:55
Certificate issuer: /CN=A91BF849/serialNumber=801BAD8CB22641DDEDE4DBD39F4BE7F4D8CAEA55
Certificate serial: 01F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft
Manifest number: 01F1
Signing time: Sat 29 Mar 2025 02:20:48 +0000
Manifest this update: Sat 29 Mar 2025 02:20:48 +0000
Manifest next update: Sat 05 Apr 2025 02:20:48 +0000
Files and hashes: 1: gButjLImQd3t5NvTn0vn9NjK6lU.crl (hash: 9lVb45VgZRQvdnV5Njl+vESTxmzgnbw5wxfUUTIvp38=)
2: A5D6438038C011ED8D00366CC4F9AE02.roa (hash: TRC536qZcJYkhaiy2DyQacSqavhhgva90rSbfihiHR4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503 (0x1f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF849
Validity
Not Before: Mar 29 02:20:48 2025 GMT
Not After : Apr 5 02:20:48 2025 GMT
Subject: CN=67e75900-c2a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f3:ec:e4:3e:56:62:2b:e0:e8:aa:ae:27:f4:
0e:7e:c7:5e:4a:ae:60:95:b4:37:49:83:1e:66:23:
2f:ca:61:a1:47:10:e8:87:8d:f2:72:bf:6c:62:3f:
5a:9c:bb:05:45:7f:f2:86:f9:65:5c:e9:3c:f1:b4:
2c:cd:19:f3:69:a1:a6:60:aa:fa:dc:69:b1:e1:41:
55:05:d4:b7:5e:ef:58:ac:71:56:78:d1:06:dc:0f:
3c:ef:97:f8:82:10:c4:27:65:a4:3b:36:fc:4c:86:
a6:12:ef:55:27:bd:66:2f:e9:17:f9:9c:cf:1a:dc:
b8:53:94:63:74:33:0e:a5:87:a1:62:90:6f:a3:94:
61:4e:af:62:b3:44:9d:f6:c5:57:98:94:41:46:06:
ee:6d:47:35:6c:1d:81:c1:bb:29:84:98:75:22:66:
d7:70:0d:59:ad:78:df:b0:8c:49:81:12:ba:8f:5a:
e7:e5:23:4a:88:85:36:21:93:b9:7c:50:39:fd:8a:
bb:4d:a0:49:a1:29:93:39:3e:0a:2c:ed:ea:18:c8:
ad:b6:7e:2c:51:46:17:8e:b3:d9:26:06:d8:af:48:
a5:13:e0:7d:b2:02:b4:a4:77:5a:11:47:6c:83:82:
c5:9e:c0:a2:7b:b9:f3:11:62:e8:ff:fb:7c:20:64:
46:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:06:C5:93:DE:01:D9:62:C2:6A:46:CA:70:06:6D:1C:30:01:B6:CF
X509v3 Authority Key Identifier:
keyid:80:1B:AD:8C:B2:26:41:DD:ED:E4:DB:D3:9F:4B:E7:F4:D8:CA:EA:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:37:3e:f9:76:be:52:3a:b8:c6:53:e2:b1:c5:5e:6b:ba:0f:
9b:97:1d:56:4c:d8:94:87:84:88:6e:81:21:ff:cb:6a:4a:19:
69:a1:e3:87:00:2a:21:4b:c3:b7:5d:b0:e9:ef:46:26:f2:64:
38:b8:e8:db:e8:ba:17:f3:87:32:34:29:21:cf:ca:e9:b7:12:
73:e2:45:3c:3f:af:df:d2:35:c5:df:1d:ac:ab:65:ea:13:c1:
a0:d0:05:a5:65:66:f9:be:ae:3d:ac:eb:51:d5:e5:c6:6a:49:
1a:38:20:25:12:a9:b4:e9:02:7e:73:82:08:9d:a6:7f:c3:64:
5d:40:11:da:ee:a6:0b:bd:d1:7e:5d:1e:cd:7c:d1:d8:e7:e0:
33:f3:92:3b:72:91:21:f5:92:62:1d:67:ba:39:9b:48:6d:39:
57:f9:96:26:7c:c6:62:4d:55:27:b5:e2:a8:e0:48:0f:9f:28:
ac:63:48:4c:f6:99:ff:51:0c:bd:1f:5f:c7:74:fa:05:a6:26:
14:aa:be:ba:94:a8:6d:76:bc:15:da:44:43:e4:45:29:9e:66:
72:da:39:48:fa:4b:7b:36:dd:a8:d8:38:9d:93:c7:54:70:2a:
d9:4f:a7:54:22:8f:7d:b7:77:35:b0:ab:a1:da:9e:27:0e:a4:
9d:82:d9:23
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkY4NDkxMTAvBgNVBAUTKDgwMUJBRDhDQjIyNjQxRERFREU0REJEMzlGNEJFN0Y0
RDhDQUVBNTUwHhcNMjUwMzI5MDIyMDQ4WhcNMjUwNDA1MDIyMDQ4WjAYMRYwFAYD
VQQDEw02N2U3NTkwMC1jMmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4/Ps5D5WYivg6KquJ/QOfsdeSq5glbQ3SYMeZiMvymGhRxDoh43ycr9sYj9a
nLsFRX/yhvllXOk88bQszRnzaaGmYKr63Gmx4UFVBdS3Xu9YrHFWeNEG3A8875f4
ghDEJ2WkOzb8TIamEu9VJ71mL+kX+ZzPGty4U5RjdDMOpYehYpBvo5RhTq9is0Sd
9sVXmJRBRgbubUc1bB2BwbsphJh1ImbXcA1ZrXjfsIxJgRK6j1rn5SNKiIU2IZO5
fFA5/Yq7TaBJoSmTOT4KLO3qGMittn4sUUYXjrPZJgbYr0ilE+B9sgK0pHdaEUds
g4LFnsCie7nzEWLo//t8IGRGEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPcGxZPe
AdliwmpGynAGbRwwAbbPMB8GA1UdIwQYMBaAFIAbrYyyJkHd7eTb059L5/TYyupV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjg0OS9DNDJBNEFEODM4
QkMxMUVEQjBBRkI4NjRDNEY5QUUwMi9nQnV0akxJbVFkM3Q1TnZUbjB2bjlOaks2
bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dCdXRqTEltUWQzdDVOdlRuMHZuOU5qSzZsVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
Rjg0OS9DNDJBNEFEODM4QkMxMUVEQjBBRkI4NjRDNEY5QUUwMi9nQnV0akxJbVFk
M3Q1TnZUbjB2bjlOaks2bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBeNz75dr5SOrjGU+KxxV5rug+blx1WTNiUh4SIboEh/8tqShlpoeOH
ACohS8O3XbDp70Ym8mQ4uOjb6LoX84cyNCkhz8rptxJz4kU8P6/f0jXF3x2sq2Xq
E8Gg0AWlZWb5vq49rOtR1eXGakkaOCAlEqm06QJ+c4IInaZ/w2RdQBHa7qYLvdF+
XR7NfNHY5+Az85I7cpEh9ZJiHWe6OZtIbTlX+ZYmfMZiTVUnteKo4EgPnyisY0hM
9pn/UQy9H1/HdPoFpiYUqr66lKhtdrwV2kRD5EUpnmZy2jlI+kt7Nt2o2Didk8dU
cCrZT6dUIo99t3c1sKuh2p4nDqSdgtkj
-----END CERTIFICATE-----
Generated at Fri Apr 11 06:27:38 2025 by rpki-client