Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.mft
File: Fa9eqD_fKJoNZhz127iziIvHWOs.mft (raw, json)
Hash identifier: YI1fV0edmSMqsz2w1RWEsTESn+Hvo2R3VaKkKcjM3yU=
Subject key identifier: FF:28:55:5C:45:87:5B:30:07:3F:28:B9:75:61:3B:62:FD:60:43:BC
Authority key identifier: 15:AF:5E:A8:3F:DF:28:9A:0D:66:1C:F5:DB:B8:B3:88:8B:C7:58:EB
Certificate issuer: /CN=A91C66D4/serialNumber=15AF5EA83FDF289A0D661CF5DBB8B3888BC758EB
Certificate serial: 065E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fa9eqD_fKJoNZhz127iziIvHWOs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.mft
Manifest number: 0657
Signing time: Fri 28 Mar 2025 22:41:25 +0000
Manifest this update: Fri 28 Mar 2025 22:41:24 +0000
Manifest next update: Fri 04 Apr 2025 22:41:24 +0000
Files and hashes: 1: Fa9eqD_fKJoNZhz127iziIvHWOs.crl (hash: lz3gxkLRdUz/3moFYdjQlbltox2TgPmh4M6MZYEkdFs=)
2: A33A3E10755611ED9BD81B73C4F9AE02.roa (hash: 7IOJI4hAFKwjxkzmC8riezJXoYygnlaloMbPjQm5zHE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1630 (0x65e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C66D4
Validity
Not Before: Mar 28 22:41:24 2025 GMT
Not After : Apr 4 22:41:24 2025 GMT
Subject: CN=67e72594-11b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6e:65:d2:89:f2:1c:73:f8:39:40:20:25:48:
4a:a1:e7:02:c7:19:b8:06:77:5a:ca:b4:ac:2f:60:
58:05:cc:87:2b:0a:1d:4c:9c:c6:e6:30:f0:4e:6f:
b7:3a:a2:03:69:65:4a:2e:ed:2e:4a:ce:93:55:73:
38:77:64:de:57:03:f2:5a:25:a5:8a:7b:56:a3:38:
0b:68:d7:ef:63:67:6c:d3:78:8c:ff:28:b9:08:eb:
7d:e9:c5:31:43:f7:39:6d:39:29:43:8b:09:d5:1a:
ef:ad:34:4a:41:52:4c:a8:0b:9c:06:d0:8f:10:87:
03:88:83:d0:d6:c2:ff:63:87:cb:c0:dd:21:a5:47:
a5:ba:25:2f:84:4f:e9:3a:13:dd:eb:f0:c7:f3:68:
89:a1:f0:f1:22:37:0d:19:4f:63:13:e9:58:85:4f:
47:f3:c8:76:ee:fb:45:03:c1:ea:20:65:36:f3:44:
3a:0c:37:22:73:df:83:8b:4f:d5:96:d5:0c:1f:44:
bb:b4:f5:85:20:35:a6:1e:b4:15:20:62:e3:ed:27:
25:a5:fe:7e:3e:8f:bb:3f:62:0a:1a:3b:28:0c:a7:
f7:39:41:cc:17:a9:cb:5f:27:4d:b4:b0:dc:37:1d:
81:04:14:e0:45:81:61:d1:a0:ae:b1:92:70:c8:bb:
b8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:28:55:5C:45:87:5B:30:07:3F:28:B9:75:61:3B:62:FD:60:43:BC
X509v3 Authority Key Identifier:
keyid:15:AF:5E:A8:3F:DF:28:9A:0D:66:1C:F5:DB:B8:B3:88:8B:C7:58:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fa9eqD_fKJoNZhz127iziIvHWOs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:34:11:76:92:c2:d6:7f:97:50:d9:0c:34:f0:db:46:9f:ae:
49:3f:89:5c:d5:19:6e:87:92:a7:ea:e1:b3:f8:3a:1f:64:3a:
93:72:59:07:dc:72:f9:db:d9:a2:8a:83:09:6c:f2:b3:8a:a9:
ff:83:cb:50:4d:29:9a:77:ed:1a:92:4b:3f:4d:28:3b:32:f3:
87:9f:44:4f:5c:d2:65:fb:91:89:89:c0:76:54:c1:f8:e7:df:
77:d8:f9:af:cf:30:41:c7:33:af:f5:e5:4a:3e:bf:e7:2b:d8:
67:3b:36:13:2d:49:60:09:75:e8:0a:2d:3c:bc:bb:a8:25:24:
24:03:ea:8d:fe:0d:75:91:d0:35:85:43:0c:3f:9b:31:f2:c2:
92:a5:98:03:1a:7c:bc:6f:0b:13:29:a7:77:5f:dd:55:1b:66:
d7:d3:64:14:04:13:b4:43:1a:e3:91:17:13:55:56:78:5b:a4:
29:3a:b0:93:14:1e:fc:2b:0e:9f:32:d4:25:f1:86:e1:cf:05:
fa:de:70:fe:b8:2d:e3:ae:c4:0e:91:c5:94:9c:d4:8a:e5:c7:
58:b2:ac:6f:52:e1:b2:8f:64:11:cb:a6:e2:6b:49:a2:27:0c:
42:80:b4:4c:81:b1:82:6f:98:03:d9:eb:6b:f4:20:7f:bb:14:
69:8f:77:6c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzY2RDQxMTAvBgNVBAUTKDE1QUY1RUE4M0ZERjI4OUEwRDY2MUNGNURCQjhCMzg4
OEJDNzU4RUIwHhcNMjUwMzI4MjI0MTI0WhcNMjUwNDA0MjI0MTI0WjAYMRYwFAYD
VQQDEw02N2U3MjU5NC0xMWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu25l0onyHHP4OUAgJUhKoecCxxm4BndayrSsL2BYBcyHKwodTJzG5jDwTm+3
OqIDaWVKLu0uSs6TVXM4d2TeVwPyWiWlintWozgLaNfvY2ds03iM/yi5COt96cUx
Q/c5bTkpQ4sJ1RrvrTRKQVJMqAucBtCPEIcDiIPQ1sL/Y4fLwN0hpUeluiUvhE/p
OhPd6/DH82iJofDxIjcNGU9jE+lYhU9H88h27vtFA8HqIGU280Q6DDcic9+Di0/V
ltUMH0S7tPWFIDWmHrQVIGLj7Sclpf5+Po+7P2IKGjsoDKf3OUHMF6nLXydNtLDc
Nx2BBBTgRYFh0aCusZJwyLu4VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP8oVVxF
h1swBz8ouXVhO2L9YEO8MB8GA1UdIwQYMBaAFBWvXqg/3yiaDWYc9du4s4iLx1jr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjZENC9CRDk4NzUwMjdB
OEUxMUVCQTkwQ0NFMjJDNEY5QUUwMi9GYTllcURfZktKb05aaHoxMjdpemlJdkhX
T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZhOWVxRF9mS0pvTlpoejEyN2l6aUl2SFdPcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NjZENC9CRDk4NzUwMjdBOEUxMUVCQTkwQ0NFMjJDNEY5QUUwMi9GYTllcURfZktK
b05aaHoxMjdpemlJdkhXT3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAINBF2ksLWf5dQ2Qw08NtGn65JP4lc1Rluh5Kn6uGz+DofZDqTclkH
3HL529miioMJbPKziqn/g8tQTSmad+0akks/TSg7MvOHn0RPXNJl+5GJicB2VMH4
59932PmvzzBBxzOv9eVKPr/nK9hnOzYTLUlgCXXoCi08vLuoJSQkA+qN/g11kdA1
hUMMP5sx8sKSpZgDGny8bwsTKad3X91VG2bX02QUBBO0QxrjkRcTVVZ4W6QpOrCT
FB78Kw6fMtQl8YbhzwX63nD+uC3jrsQOkcWUnNSK5cdYsqxvUuGyj2QRy6bia0mi
JwxCgLRMgbGCb5gD2etr9CB/uxRpj3ds
-----END CERTIFICATE-----
Generated at Thu Apr 10 01:11:04 2025 by rpki-client