Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft
File: dfDxcTIKeOUHAm-fL1T0smcMYhE.mft (raw, json)
Hash identifier: Ay+wNl3XZ7MDPo0VAa2Dz4xTHeKg+VI/4KKafJaztSo=
Subject key identifier: 08:5A:9F:F0:0C:F0:94:A2:DD:6A:FB:7E:99:C0:D3:71:8C:F7:B2:F6
Authority key identifier: 75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11
Certificate issuer: /CN=A91C9161/serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211
Certificate serial: 1A4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft
Manifest number: 1A40
Signing time: Fri 28 Mar 2025 16:27:31 +0000
Manifest this update: Fri 28 Mar 2025 16:27:31 +0000
Manifest next update: Fri 04 Apr 2025 16:27:31 +0000
Files and hashes: 1: dfDxcTIKeOUHAm-fL1T0smcMYhE.crl (hash: nI97kIz7X0GpmWp5RF1JxfpDaXoM/Y82Y5DsT7GXbhg=)
2: 95A226D0EF3C11E9A7190355C4F9AE02.roa (hash: TDZfCqe/A1h/UXKP3e80woGj06+CgzgdnSG8UtuTL5A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6731 (0x1a4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9161
Validity
Not Before: Mar 28 16:27:31 2025 GMT
Not After : Apr 4 16:27:31 2025 GMT
Subject: CN=67e6cdf3-5b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d4:1b:44:7e:ab:ab:78:f9:60:11:e9:1c:eb:
b7:1d:13:47:38:26:d1:7d:ba:2d:f7:5e:a7:15:80:
c2:cd:1c:91:5a:ad:e2:e0:ad:05:c1:d9:cb:9e:e6:
65:36:6d:fe:e0:d3:21:41:ee:06:63:aa:69:b1:f5:
88:b4:f2:48:80:e8:40:55:cf:f4:70:b1:e1:60:e9:
ca:08:51:b0:9f:ca:d1:e3:e7:82:04:3f:b0:31:95:
4c:f2:ca:f9:90:d2:cd:02:8e:7d:b1:fd:3e:5a:5b:
ec:6e:03:f1:56:96:3a:d0:ac:4c:70:f6:91:dc:a8:
da:d9:d4:51:f2:22:c6:18:bc:9d:b7:38:57:10:9e:
43:eb:f1:0a:21:60:24:05:10:be:58:af:f3:64:d6:
89:d8:57:67:fc:26:16:61:60:d8:4b:fd:a9:2a:b1:
09:45:1d:8f:84:dd:74:69:86:59:a4:fb:55:d4:4c:
96:3d:6a:25:51:7b:00:61:80:dd:56:22:ba:ac:a0:
2b:54:69:7c:65:26:6f:d5:e3:46:00:85:01:c1:28:
bb:a1:c4:f5:81:e2:ea:3d:a1:88:7a:a6:81:0b:3f:
f2:7e:da:b6:e2:01:69:75:54:7e:d0:48:8f:c1:5d:
f6:15:eb:5e:d9:49:b1:0a:39:2a:35:8e:c8:ee:ee:
32:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5A:9F:F0:0C:F0:94:A2:DD:6A:FB:7E:99:C0:D3:71:8C:F7:B2:F6
X509v3 Authority Key Identifier:
keyid:75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:97:ee:ec:29:2e:b4:23:1f:d2:4e:c3:29:3b:b4:d8:7d:ad:
76:5a:51:14:84:b6:49:b4:85:98:09:a9:cd:48:aa:ef:a6:d4:
64:46:68:27:b5:c2:dc:ef:5b:fe:49:60:00:67:87:dd:36:3c:
6b:8a:22:7b:82:87:08:0a:b5:af:6d:65:48:48:28:e7:42:7d:
82:6a:0b:e0:76:56:cc:ab:e3:af:29:f8:c4:68:50:dc:e3:e9:
8b:ee:d7:77:88:d9:88:65:bc:60:4f:f8:37:3a:d8:16:92:4a:
1f:92:48:19:e3:a1:f8:c7:ef:aa:ba:7f:e6:c5:ed:8b:1b:d9:
10:71:a7:97:29:46:c6:4f:72:e8:72:47:f5:02:7b:d5:24:73:
92:76:52:b8:16:5d:da:64:de:dd:8e:9d:a4:c9:8a:44:08:59:
6a:91:14:8c:55:26:62:76:ba:84:c9:48:4f:de:43:91:a7:df:
62:5a:4b:1b:4b:e4:4d:54:a4:73:be:44:e8:7c:de:99:76:f1:
5a:4a:77:a2:3a:07:b7:be:1c:b2:5f:9a:8c:ee:29:5c:93:f0:
9e:a0:9b:51:7e:29:a5:78:d7:cd:1a:a4:eb:6c:10:38:8a:5e:
d5:07:b4:02:b5:5d:e8:1e:9d:a1:e6:08:bb:69:84:33:b1:3b:
12:b2:18:44
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzkxNjExMTAvBgNVBAUTKDc1RjBGMTcxMzIwQTc4RTUwNzAyNkY5RjJGNTRGNEIy
NjcwQzYyMTEwHhcNMjUwMzI4MTYyNzMxWhcNMjUwNDA0MTYyNzMxWjAYMRYwFAYD
VQQDEw02N2U2Y2RmMy01YjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApNQbRH6rq3j5YBHpHOu3HRNHOCbRfbot916nFYDCzRyRWq3i4K0FwdnLnuZl
Nm3+4NMhQe4GY6ppsfWItPJIgOhAVc/0cLHhYOnKCFGwn8rR4+eCBD+wMZVM8sr5
kNLNAo59sf0+WlvsbgPxVpY60KxMcPaR3Kja2dRR8iLGGLydtzhXEJ5D6/EKIWAk
BRC+WK/zZNaJ2Fdn/CYWYWDYS/2pKrEJRR2PhN10aYZZpPtV1EyWPWolUXsAYYDd
ViK6rKArVGl8ZSZv1eNGAIUBwSi7ocT1geLqPaGIeqaBCz/yftq24gFpdVR+0EiP
wV32Fete2UmxCjkqNY7I7u4ywwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAhan/AM
8JSi3Wr7fpnA03GM97L2MB8GA1UdIwQYMBaAFHXw8XEyCnjlBwJvny9U9LJnDGIR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTE2MS83MENDMjQ4NjNG
OEIxMUU3QTlFNjcyNDRDNEY5QUUwMi9kZkR4Y1RJS2VPVUhBbS1mTDFUMHNtY01Z
aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RmRHhjVElLZU9VSEFtLWZMMVQwc21jTVloRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTE2MS83MENDMjQ4NjNGOEIxMUU3QTlFNjcyNDRDNEY5QUUwMi9kZkR4Y1RJS2VP
VUhBbS1mTDFUMHNtY01ZaEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBSl+7sKS60Ix/STsMpO7TYfa12WlEUhLZJtIWYCanNSKrvptRkRmgn
tcLc71v+SWAAZ4fdNjxriiJ7gocICrWvbWVISCjnQn2CagvgdlbMq+OvKfjEaFDc
4+mL7td3iNmIZbxgT/g3OtgWkkofkkgZ46H4x++qun/mxe2LG9kQcaeXKUbGT3Lo
ckf1AnvVJHOSdlK4Fl3aZN7djp2kyYpECFlqkRSMVSZidrqEyUhP3kORp99iWksb
S+RNVKRzvkTofN6ZdvFaSneiOge3vhyyX5qM7ilck/CeoJtRfimleNfNGqTrbBA4
il7VB7QCtV3oHp2h5gi7aYQzsTsSshhE
-----END CERTIFICATE-----
Generated at Thu Apr 10 01:16:12 2025 by rpki-client