Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft
File: C33smHxhdR0-2h2_PnwipzoV3u0.mft (raw, json)
Hash identifier: KvnZNGBouDxxNBZfuop3aIdzsXro0GkEnbjPVZ5euKM=
Subject key identifier: 37:87:9E:1E:17:E2:A1:9F:BC:AF:09:57:D7:BD:7D:16:32:3E:5D:CD
Authority key identifier: 0B:7D:EC:98:7C:61:75:1D:3E:DA:1D:BF:3E:7C:22:A7:3A:15:DE:ED
Certificate issuer: /CN=A91C0E57/serialNumber=0B7DEC987C61751D3EDA1DBF3E7C22A73A15DEED
Certificate serial: 04BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C33smHxhdR0-2h2_PnwipzoV3u0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft
Manifest number: 04B5
Signing time: Sat 29 Mar 2025 00:08:35 +0000
Manifest this update: Sat 29 Mar 2025 00:08:34 +0000
Manifest next update: Sat 05 Apr 2025 00:08:34 +0000
Files and hashes: 1: C33smHxhdR0-2h2_PnwipzoV3u0.crl (hash: HQsx9VGb9wO6kfR0gJFIe0tBx0xc8S8h2x3kw2s3iwE=)
2: 60A8F48A25D211ECB2CCF633C4F9AE02.roa (hash: +PbEWtYSfIT5V18KuiJqAnYLDPzBVBUjvZLUMUeffC4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1211 (0x4bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0E57
Validity
Not Before: Mar 29 00:08:34 2025 GMT
Not After : Apr 5 00:08:34 2025 GMT
Subject: CN=67e73a03-22c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a9:ef:52:a4:a8:ae:4c:c6:a0:c4:aa:d0:ea:
cf:ac:34:e8:27:cb:cc:e9:a3:f2:04:85:04:85:08:
a4:c9:7b:92:e8:53:d2:c0:d9:0d:3f:43:f7:d5:e8:
90:e6:51:88:ef:d6:94:22:39:bb:1a:34:69:a3:44:
e5:ef:8a:0f:7a:16:04:6d:cd:27:89:17:b2:9e:46:
01:4b:e7:83:68:da:9d:b2:ad:6c:53:6b:b3:a8:9b:
22:1a:36:30:77:c3:09:23:59:55:9f:78:da:56:f1:
5c:8a:c6:cd:70:b4:21:dd:e9:88:ba:fb:87:e4:a3:
7a:b6:31:5d:3a:7e:cb:50:89:4a:07:b1:7d:da:36:
a4:69:5a:67:7f:54:1a:7b:91:72:09:07:d8:6a:ac:
91:06:87:a2:59:f2:85:60:d0:97:de:09:9f:08:41:
f0:36:42:29:87:36:59:5d:3f:f8:a9:c3:49:33:5c:
d6:89:73:46:e3:fd:d0:2c:cc:6a:4f:c3:63:9e:d4:
de:c1:b5:0d:a1:61:53:e2:ba:20:fe:21:09:13:77:
6f:66:1f:42:15:ad:a9:b4:58:f6:2d:99:eb:93:f3:
7b:1e:0a:56:9f:31:b3:af:0a:57:87:bb:68:82:a4:
e6:88:3e:46:4d:05:91:6e:1a:0f:2e:64:ff:61:17:
da:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:87:9E:1E:17:E2:A1:9F:BC:AF:09:57:D7:BD:7D:16:32:3E:5D:CD
X509v3 Authority Key Identifier:
keyid:0B:7D:EC:98:7C:61:75:1D:3E:DA:1D:BF:3E:7C:22:A7:3A:15:DE:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C33smHxhdR0-2h2_PnwipzoV3u0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:e8:bb:50:7c:c1:80:35:db:2c:a4:0e:03:a6:94:8b:87:b7:
1d:bc:51:ff:06:90:62:1e:75:44:5a:a8:e3:1a:fe:71:92:0c:
c1:4d:47:43:8d:59:a7:85:d2:4e:76:8f:25:96:5b:14:9e:e7:
48:a7:6f:70:0d:bf:36:e1:47:7e:02:7c:ec:71:ae:e8:d6:1f:
cb:9e:1e:7f:c4:cc:10:30:8e:e3:aa:b7:ee:29:1c:64:9d:d0:
87:cb:ba:0f:10:fc:1f:33:a5:28:84:46:66:a1:26:2b:45:cc:
b8:6a:7c:9c:24:3a:5e:4b:31:c3:12:18:1e:03:0f:09:ce:4a:
46:93:6e:66:d0:51:86:1c:48:f1:d7:40:37:bd:c7:2d:7c:b2:
50:ec:21:1d:e4:70:65:88:d9:5f:1c:97:80:6e:a5:6a:2f:0b:
c7:3f:bf:28:d0:a0:60:53:68:d6:14:72:68:01:6e:27:27:9f:
a2:ed:08:20:8b:82:a8:32:40:c2:65:77:ae:f2:8c:de:8a:57:
d0:e7:80:79:f7:f1:e4:d5:3f:77:a4:44:c1:95:4b:62:00:48:
43:4c:5f:c1:7a:e1:3a:cc:41:5d:9b:a9:4f:fc:0f:dd:db:f3:
cf:52:6b:1c:09:78:af:57:09:bb:8b:b7:04:c3:2a:74:f1:a9:
c0:16:64:2f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzBFNTcxMTAvBgNVBAUTKDBCN0RFQzk4N0M2MTc1MUQzRURBMURCRjNFN0MyMkE3
M0ExNURFRUQwHhcNMjUwMzI5MDAwODM0WhcNMjUwNDA1MDAwODM0WjAYMRYwFAYD
VQQDEw02N2U3M2EwMy0yMmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuKnvUqSorkzGoMSq0OrPrDToJ8vM6aPyBIUEhQikyXuS6FPSwNkNP0P31eiQ
5lGI79aUIjm7GjRpo0Tl74oPehYEbc0niReynkYBS+eDaNqdsq1sU2uzqJsiGjYw
d8MJI1lVn3jaVvFcisbNcLQh3emIuvuH5KN6tjFdOn7LUIlKB7F92jakaVpnf1Qa
e5FyCQfYaqyRBoeiWfKFYNCX3gmfCEHwNkIphzZZXT/4qcNJM1zWiXNG4/3QLMxq
T8NjntTewbUNoWFT4rog/iEJE3dvZh9CFa2ptFj2LZnrk/N7HgpWnzGzrwpXh7to
gqTmiD5GTQWRbhoPLmT/YRfaQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDeHnh4X
4qGfvK8JV9e9fRYyPl3NMB8GA1UdIwQYMBaAFAt97Jh8YXUdPtodvz58Iqc6Fd7t
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEU1Ny9GQ0MxOEExNDIw
NEUxMUVDQjEzRUUxN0FDNEY5QUUwMi9DMzNzbUh4aGRSMC0yaDJfUG53aXB6b1Yz
dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0MzM3NtSHhoZFIwLTJoMl9QbndpcHpvVjN1MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MEU1Ny9GQ0MxOEExNDIwNEUxMUVDQjEzRUUxN0FDNEY5QUUwMi9DMzNzbUh4aGRS
MC0yaDJfUG53aXB6b1YzdTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCB6LtQfMGANdsspA4DppSLh7cdvFH/BpBiHnVEWqjjGv5xkgzBTUdD
jVmnhdJOdo8lllsUnudIp29wDb824Ud+Anzsca7o1h/Lnh5/xMwQMI7jqrfuKRxk
ndCHy7oPEPwfM6UohEZmoSYrRcy4anycJDpeSzHDEhgeAw8JzkpGk25m0FGGHEjx
10A3vcctfLJQ7CEd5HBliNlfHJeAbqVqLwvHP78o0KBgU2jWFHJoAW4nJ5+i7Qgg
i4KoMkDCZXeu8ozeilfQ54B59/Hk1T93pETBlUtiAEhDTF/BeuE6zEFdm6lP/A/d
2/PPUmscCXivVwm7i7cEwyp08anAFmQv
-----END CERTIFICATE-----
Generated at Fri Apr 11 11:57:24 2025 by rpki-client