Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/Bt8bUkvQ3d2hebBFBifq9_jZTAA.mft
File: Bt8bUkvQ3d2hebBFBifq9_jZTAA.mft (raw, json)
Hash identifier: L3PsD/ypQVVI56iiEZ08v9SGwhQ4q4CsM+xo5kMNXHk=
Subject key identifier: AE:D1:50:F6:D7:10:EE:E3:C4:4D:37:C7:E6:52:5D:8B:13:E7:35:60
Authority key identifier: 06:DF:1B:52:4B:D0:DD:DD:A1:79:B0:45:06:27:EA:F7:F8:D9:4C:00
Certificate issuer: /CN=A91C9025/serialNumber=06DF1B524BD0DDDDA179B0450627EAF7F8D94C00
Certificate serial: 09DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bt8bUkvQ3d2hebBFBifq9_jZTAA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/Bt8bUkvQ3d2hebBFBifq9_jZTAA.mft
Manifest number: 09C7
Signing time: Thu 06 Feb 2025 19:37:26 +0000
Manifest this update: Thu 06 Feb 2025 19:37:26 +0000
Manifest next update: Thu 13 Feb 2025 19:37:26 +0000
Files and hashes: 1: Bt8bUkvQ3d2hebBFBifq9_jZTAA.crl (hash: WIoGKVW/atud/vJZsgi3ShctFo/29HLGz0FE6pHDeXg=)
2: 7C79A58C6E1111ED9880616FC4F9AE02.roa (hash: DpXI7IHTgZ+8TF2AhlH8Vt104anWWa1f0ZyL5HMPP+0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2525 (0x9dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9025
Validity
Not Before: Feb 6 19:37:26 2025 GMT
Not After : Feb 13 19:37:26 2025 GMT
Subject: CN=67a50f76-3ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ed:5b:e5:08:a2:c8:92:ac:06:3a:c3:19:27:
02:26:d3:b0:da:b4:95:f5:a7:e8:1d:fe:39:8f:8d:
62:2e:e1:40:dd:eb:a0:61:81:24:f9:4e:84:fe:d3:
67:57:be:b3:c0:a7:fb:87:ee:fe:42:e6:7c:83:4f:
00:aa:13:54:85:52:3b:b7:0f:e8:7b:21:04:95:bf:
04:ed:b2:7f:b2:b9:aa:79:4b:49:89:e9:b8:e4:66:
ca:7a:d0:95:5c:92:c3:57:40:d3:d1:3e:21:0a:92:
e1:3c:f1:59:c0:04:97:b5:b7:65:15:9c:19:84:2a:
3e:20:13:87:e9:99:63:85:78:36:b4:d7:32:5c:72:
0e:f2:bb:45:71:30:2d:2e:87:ed:79:ab:b4:6a:b4:
52:83:29:d6:2b:34:63:84:0f:13:5f:be:1c:cb:cb:
93:0b:22:38:73:06:85:72:35:b0:25:18:40:86:2e:
53:00:c3:5c:18:96:86:f5:52:92:6c:bf:93:9f:04:
49:ad:9a:7d:d6:96:54:6e:e0:0b:6e:5d:78:b1:f2:
b6:c6:8d:f2:1b:af:d1:1c:a7:0b:8e:8d:20:8c:25:
3b:bf:17:79:0b:57:c2:b7:0e:30:b6:2f:c7:86:f0:
00:6d:20:19:51:33:cf:0c:1f:1d:87:04:90:36:60:
2e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D1:50:F6:D7:10:EE:E3:C4:4D:37:C7:E6:52:5D:8B:13:E7:35:60
X509v3 Authority Key Identifier:
keyid:06:DF:1B:52:4B:D0:DD:DD:A1:79:B0:45:06:27:EA:F7:F8:D9:4C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/Bt8bUkvQ3d2hebBFBifq9_jZTAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bt8bUkvQ3d2hebBFBifq9_jZTAA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/Bt8bUkvQ3d2hebBFBifq9_jZTAA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:6f:66:b4:38:86:62:d1:dd:a9:16:26:94:4c:df:b0:4e:e5:
4e:b2:f9:94:59:e4:30:68:e7:f1:72:1d:a7:4d:20:70:87:08:
86:ad:65:16:09:da:a0:d8:5f:cd:2d:56:17:c1:b8:ef:fc:e4:
9f:30:9f:e9:aa:ff:93:4a:e6:6e:37:da:c9:ef:c2:46:45:12:
5c:86:8c:8b:a8:c0:63:54:f8:a1:e2:d7:34:d3:84:e4:67:7f:
f7:c2:5a:12:a2:ff:1e:76:fc:36:6e:d4:68:ed:0d:46:18:11:
3c:9b:0e:ed:29:a5:27:76:d7:2b:d5:23:98:80:b2:c2:66:18:
7b:fe:4c:c7:78:dc:63:29:f0:b7:b1:7d:20:44:45:ab:cd:47:
76:44:3e:fa:7e:9d:76:62:cf:5e:db:37:f9:0c:e3:f1:d6:f7:
1b:94:b3:0d:4c:24:6e:f5:aa:cd:2a:9d:18:a0:5b:0c:fc:47:
eb:f3:be:8e:bc:4d:bf:9a:1f:7f:3b:5f:31:49:d0:c2:bc:4b:
00:f0:9f:fc:a6:bc:6a:2f:4d:1b:14:f6:1c:85:6d:bf:b2:13:
4e:72:48:cf:ec:68:77:a2:79:72:59:ef:b6:65:f8:43:0f:48:
1b:e7:f7:e9:48:17:65:ca:1e:14:ac:a6:ac:c6:b2:63:a3:c2:
42:55:5d:5b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzkwMjUxMTAvBgNVBAUTKDA2REYxQjUyNEJEMERERERBMTc5QjA0NTA2MjdFQUY3
RjhEOTRDMDAwHhcNMjUwMjA2MTkzNzI2WhcNMjUwMjEzMTkzNzI2WjAYMRYwFAYD
VQQDEw02N2E1MGY3Ni0zY2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsO1b5QiiyJKsBjrDGScCJtOw2rSV9afoHf45j41iLuFA3eugYYEk+U6E/tNn
V76zwKf7h+7+QuZ8g08AqhNUhVI7tw/oeyEElb8E7bJ/srmqeUtJiem45GbKetCV
XJLDV0DT0T4hCpLhPPFZwASXtbdlFZwZhCo+IBOH6ZljhXg2tNcyXHIO8rtFcTAt
Lofteau0arRSgynWKzRjhA8TX74cy8uTCyI4cwaFcjWwJRhAhi5TAMNcGJaG9VKS
bL+TnwRJrZp91pZUbuALbl14sfK2xo3yG6/RHKcLjo0gjCU7vxd5C1fCtw4wti/H
hvAAbSAZUTPPDB8dhwSQNmAuEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7RUPbX
EO7jxE03x+ZSXYsT5zVgMB8GA1UdIwQYMBaAFAbfG1JL0N3doXmwRQYn6vf42UwA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTAyNS8xMEQ3NzFDMjc4
ODQxMUVBQURBNTEzMTBDNEY5QUUwMi9CdDhiVWt2UTNkMmhlYkJGQmlmcTlfalpU
QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0J0OGJVa3ZRM2QyaGViQkZCaWZxOV9qWlRBQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTAyNS8xMEQ3NzFDMjc4ODQxMUVBQURBNTEzMTBDNEY5QUUwMi9CdDhiVWt2UTNk
MmhlYkJGQmlmcTlfalpUQUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC2b2a0OIZi0d2pFiaUTN+wTuVOsvmUWeQwaOfxch2nTSBwhwiGrWUW
Cdqg2F/NLVYXwbjv/OSfMJ/pqv+TSuZuN9rJ78JGRRJchoyLqMBjVPih4tc004Tk
Z3/3wloSov8edvw2btRo7Q1GGBE8mw7tKaUndtcr1SOYgLLCZhh7/kzHeNxjKfC3
sX0gREWrzUd2RD76fp12Ys9e2zf5DOPx1vcblLMNTCRu9arNKp0YoFsM/Efr876O
vE2/mh9/O18xSdDCvEsA8J/8prxqL00bFPYchW2/shNOckjP7Gh3onlyWe+2ZfhD
D0gb5/fpSBdlyh4UrKasxrJjo8JCVV1b
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:32:32 2025 by rpki-client