Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft
File: 4z23k7vv5Gy8912zTnCUJ6cu8PM.mft (raw, json)
Hash identifier: 2JzxHuHvDPHfnnrAe57e2mN4NWJO01UA5QOk427UXXo=
Subject key identifier: C0:19:27:CC:EE:24:F9:C7:DC:80:47:40:95:5B:0C:82:68:17:03:63
Authority key identifier: E3:3D:B7:93:BB:EF:E4:6C:BC:F7:5D:B3:4E:70:94:27:A7:2E:F0:F3
Certificate issuer: /CN=A91C7F6A/serialNumber=E33DB793BBEFE46CBCF75DB34E709427A72EF0F3
Certificate serial: 01AF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft
Manifest number: 01AB
Signing time: Sat 29 Mar 2025 02:47:46 +0000
Manifest this update: Sat 29 Mar 2025 02:47:46 +0000
Manifest next update: Sat 05 Apr 2025 02:47:46 +0000
Files and hashes: 1: 4z23k7vv5Gy8912zTnCUJ6cu8PM.crl (hash: 35n16CzfiHf9fEOncPO1IvZKmI4dNDHNeNJowSaE7hg=)
2: 81D5DEE47F5D11EDB4309B54C4F9AE02.roa (hash: zRdos/o+mb+OSdMpMggoSh17MEeYkJt0eDW/UfdGZq4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 431 (0x1af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7F6A
Validity
Not Before: Mar 29 02:47:46 2025 GMT
Not After : Apr 5 02:47:46 2025 GMT
Subject: CN=67e75f52-2f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:61:c7:65:c8:4c:7a:ab:96:cb:0c:f1:25:f9:
99:80:5d:56:30:10:6a:fc:15:53:6f:11:ea:76:bf:
1b:80:29:76:2c:00:e8:34:59:55:81:5c:3e:f3:2e:
85:73:4a:5a:d4:a0:bf:5d:51:ba:06:f3:33:12:7a:
c4:49:1d:95:cf:f1:79:f9:79:8b:32:07:ab:c6:03:
d6:bb:f1:80:f5:bb:9d:2a:4f:b3:e2:89:4e:68:6c:
0f:a2:35:89:8f:10:77:02:03:fe:bb:b4:c5:40:ad:
ab:88:ec:4a:c4:35:ca:49:d4:f1:29:69:a3:eb:15:
d0:40:cd:21:61:a0:e1:52:e8:91:e2:ee:49:1f:0f:
58:27:3b:fd:8e:45:f9:99:4a:11:43:f3:ca:79:43:
72:ea:ab:6c:b2:d6:06:7c:00:c2:07:ca:bc:9e:e4:
43:a5:d9:cf:7f:78:93:5c:c5:67:0c:b3:eb:d1:55:
66:70:dc:20:70:1e:7a:09:08:19:64:7d:d9:57:9e:
86:47:37:ea:1a:74:fe:43:4b:93:19:a8:87:80:af:
5b:9b:f4:78:6c:fa:4a:f3:59:73:1d:a9:bd:a2:bf:
d3:12:73:e4:f4:c1:fd:1d:79:d7:8e:90:9d:24:36:
7a:24:b7:35:d8:b6:07:a2:4f:49:b4:c6:d8:50:c4:
12:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:19:27:CC:EE:24:F9:C7:DC:80:47:40:95:5B:0C:82:68:17:03:63
X509v3 Authority Key Identifier:
keyid:E3:3D:B7:93:BB:EF:E4:6C:BC:F7:5D:B3:4E:70:94:27:A7:2E:F0:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:60:9d:49:79:fc:e8:96:55:4e:c6:34:35:d1:a7:cc:9e:91:
04:97:c7:eb:f4:27:ef:93:b3:65:0a:18:d3:44:37:2d:56:d7:
e6:cd:e4:39:03:2e:88:3d:2b:c7:35:a7:57:51:d5:ad:50:6a:
64:05:20:37:e0:91:75:b4:b4:ef:0c:0d:b1:32:3b:40:63:08:
90:56:41:fe:7b:ea:bb:7c:bd:dd:dd:3e:bf:5a:a4:5e:f2:16:
fd:a5:1e:81:03:c4:f4:e9:bd:48:c4:4f:c1:18:48:ea:b1:97:
34:e9:d1:25:54:8f:91:23:ff:6c:e0:01:5f:52:e2:61:52:62:
3c:e3:c8:84:e8:fb:4e:a0:b2:c2:06:3f:74:25:41:cf:21:20:
86:51:77:38:27:83:bb:9f:60:1d:06:f4:dc:f6:d7:31:36:ae:
a5:ee:dd:b7:b9:c7:ed:d5:b4:42:99:d8:41:72:0f:4b:70:f9:
76:c3:f4:8a:b8:88:5a:d2:ef:d3:19:19:5e:93:f1:1e:50:72:
96:79:41:8e:d1:ab:ec:ac:0a:ee:7e:b3:8f:af:5a:7e:ac:33:
5d:df:3c:86:4d:23:94:97:86:ed:12:bd:e3:bd:6a:56:7f:15:
9b:8b:c4:97:c9:1d:cf:f7:20:a3:d0:47:68:11:67:3b:cc:8e:
fe:a8:d1:b8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzdGNkExMTAvBgNVBAUTKEUzM0RCNzkzQkJFRkU0NkNCQ0Y3NURCMzRFNzA5NDI3
QTcyRUYwRjMwHhcNMjUwMzI5MDI0NzQ2WhcNMjUwNDA1MDI0NzQ2WjAYMRYwFAYD
VQQDEw02N2U3NWY1Mi0yZjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw2HHZchMequWywzxJfmZgF1WMBBq/BVTbxHqdr8bgCl2LADoNFlVgVw+8y6F
c0pa1KC/XVG6BvMzEnrESR2Vz/F5+XmLMgerxgPWu/GA9budKk+z4olOaGwPojWJ
jxB3AgP+u7TFQK2riOxKxDXKSdTxKWmj6xXQQM0hYaDhUuiR4u5JHw9YJzv9jkX5
mUoRQ/PKeUNy6qtsstYGfADCB8q8nuRDpdnPf3iTXMVnDLPr0VVmcNwgcB56CQgZ
ZH3ZV56GRzfqGnT+Q0uTGaiHgK9bm/R4bPpK81lzHam9or/TEnPk9MH9HXnXjpCd
JDZ6JLc12LYHok9JtMbYUMQSnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMAZJ8zu
JPnH3IBHQJVbDIJoFwNjMB8GA1UdIwQYMBaAFOM9t5O77+RsvPdds05wlCenLvDz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0Y2QS8wNjc5MjUwMDdG
NDIxMUVEQjRFNzhDODZDNEY5QUUwMi80ejIzazd2djVHeTg5MTJ6VG5DVUo2Y3U4
UE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzR6MjNrN3Z2NUd5ODkxMnpUbkNVSjZjdThQTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
N0Y2QS8wNjc5MjUwMDdGNDIxMUVEQjRFNzhDODZDNEY5QUUwMi80ejIzazd2djVH
eTg5MTJ6VG5DVUo2Y3U4UE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCtYJ1JefzollVOxjQ10afMnpEEl8fr9Cfvk7NlChjTRDctVtfmzeQ5
Ay6IPSvHNadXUdWtUGpkBSA34JF1tLTvDA2xMjtAYwiQVkH+e+q7fL3d3T6/WqRe
8hb9pR6BA8T06b1IxE/BGEjqsZc06dElVI+RI/9s4AFfUuJhUmI848iE6PtOoLLC
Bj90JUHPISCGUXc4J4O7n2AdBvTc9tcxNq6l7t23ucft1bRCmdhBcg9LcPl2w/SK
uIha0u/TGRlek/EeUHKWeUGO0avsrArufrOPr1p+rDNd3zyGTSOUl4btEr3jvWpW
fxWbi8SXyR3P9yCj0EdoEWc7zI7+qNG4
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:13:14 2025 by rpki-client