Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft
File: _IholOLXDjUuTxaAUsUbBasFrMU.mft (raw, json)
Hash identifier: UMAXpD971jFf9WqXca7nyizPnyUi+It6E8SeQQwJbzg=
Subject key identifier: E5:96:F8:E0:29:48:18:47:6B:6A:1E:04:00:96:9F:3A:09:BE:A6:CD
Authority key identifier: FC:88:68:94:E2:D7:0E:35:2E:4F:16:80:52:C5:1B:05:AB:05:AC:C5
Certificate issuer: /CN=A91CABF0/serialNumber=FC886894E2D70E352E4F168052C51B05AB05ACC5
Certificate serial: DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft
Manifest number: D9
Signing time: Sat 29 Mar 2025 04:57:20 +0000
Manifest this update: Sat 29 Mar 2025 04:57:19 +0000
Manifest next update: Sat 05 Apr 2025 04:57:19 +0000
Files and hashes: 1: _IholOLXDjUuTxaAUsUbBasFrMU.crl (hash: Nn5n4W5hLYVS/1ZhS3eNHLhVczKy6JWdTqDDbIcMg/g=)
2: 740B66A6C09A11EE9839DC42C4F9AE02.roa (hash: NOsPGGlDSlCfn8hbBHu4EWI+usdJzaN80KZom3HQWsg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CABF0
Validity
Not Before: Mar 29 04:57:19 2025 GMT
Not After : Apr 5 04:57:19 2025 GMT
Subject: CN=67e77daf-8684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:90:d3:c0:80:70:c1:1f:47:cf:87:50:19:dd:
4a:38:21:e2:46:75:63:ee:c2:63:64:09:c2:e9:2b:
16:09:63:4a:c6:58:8d:7c:78:e2:96:12:e4:4b:17:
a0:28:4a:fd:a7:50:88:7a:73:7e:4f:bb:0c:c7:97:
5f:d3:04:1a:77:53:55:e3:c9:86:c5:c7:0e:d8:c6:
13:16:0a:ff:45:78:15:2e:70:c8:ca:e2:1c:15:64:
26:be:2c:24:2e:f9:44:ef:d9:2d:81:33:d7:38:b3:
de:f4:cc:71:92:9c:15:4c:63:f6:29:c0:04:18:58:
2d:f3:c5:ec:70:ce:ab:bb:2b:9e:b5:09:a9:85:a7:
da:b9:b6:fc:26:21:7c:41:e7:36:53:e1:75:27:5f:
ed:e8:3e:e4:7c:12:e1:08:c3:21:72:4a:f2:b5:99:
28:2f:55:e1:f0:84:0b:44:98:7d:89:da:4c:94:3f:
91:7a:25:67:5e:6c:78:9f:9b:5e:06:5c:df:ba:e5:
cf:73:c3:51:6b:f3:75:0d:60:85:1c:8b:c6:d1:5e:
a6:87:fe:27:a9:fb:13:da:4c:6c:9a:2b:3a:e4:3d:
fd:43:c7:30:8c:76:d2:a7:30:41:3a:10:ed:8f:69:
0a:d8:0a:be:aa:68:46:d9:d5:1c:f8:c8:5e:56:f2:
24:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:96:F8:E0:29:48:18:47:6B:6A:1E:04:00:96:9F:3A:09:BE:A6:CD
X509v3 Authority Key Identifier:
keyid:FC:88:68:94:E2:D7:0E:35:2E:4F:16:80:52:C5:1B:05:AB:05:AC:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:89:a9:fb:33:d8:09:e5:36:5c:44:44:18:92:1c:96:ba:f4:
24:c2:70:85:f8:9f:c6:8e:28:9c:8a:99:b9:e2:07:58:aa:cc:
82:34:be:fd:ec:5a:58:1f:ee:5b:a6:06:dc:60:46:be:95:af:
d1:2d:1f:d6:6e:11:f6:90:2d:bb:27:fb:38:63:8d:17:2f:68:
2b:c5:99:96:92:a2:8d:63:b5:4d:f8:ab:2a:2a:90:2d:34:b8:
35:4f:d9:de:cb:71:a2:04:49:6a:08:7e:b2:f0:76:0d:da:44:
2e:6f:03:bd:00:e2:3a:91:50:53:c3:10:3c:3b:1d:e3:e5:4c:
e7:b7:84:65:ac:98:2d:4e:b7:3d:27:98:9e:0c:79:9c:1c:72:
87:a4:78:cd:0d:f0:6e:27:54:fc:0a:d3:be:1d:e6:64:66:a7:
9a:c7:0b:10:09:b0:0f:db:db:73:24:9a:5a:1e:8b:a8:b4:ed:
15:4e:fa:0e:be:49:f4:2b:2f:cd:34:d0:da:98:9f:02:9f:bd:
79:ad:cc:b5:85:5f:9e:a5:5c:77:e5:33:67:24:31:8b:88:67:
77:4a:8a:81:ce:ac:36:d5:5e:7d:40:6d:77:cc:f2:51:40:3e:
18:c2:c5:33:2c:bf:8f:16:91:13:9b:62:a7:a9:ad:55:4b:27:
81:c5:09:a1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0FCRjAxMTAvBgNVBAUTKEZDODg2ODk0RTJENzBFMzUyRTRGMTY4MDUyQzUxQjA1
QUIwNUFDQzUwHhcNMjUwMzI5MDQ1NzE5WhcNMjUwNDA1MDQ1NzE5WjAYMRYwFAYD
VQQDEw02N2U3N2RhZi04Njg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1ZDTwIBwwR9Hz4dQGd1KOCHiRnVj7sJjZAnC6SsWCWNKxliNfHjilhLkSxeg
KEr9p1CIenN+T7sMx5df0wQad1NV48mGxccO2MYTFgr/RXgVLnDIyuIcFWQmviwk
LvlE79ktgTPXOLPe9MxxkpwVTGP2KcAEGFgt88XscM6ruyuetQmphafaubb8JiF8
Qec2U+F1J1/t6D7kfBLhCMMhckrytZkoL1Xh8IQLRJh9idpMlD+ReiVnXmx4n5te
BlzfuuXPc8NRa/N1DWCFHIvG0V6mh/4nqfsT2kxsmis65D39Q8cwjHbSpzBBOhDt
j2kK2Aq+qmhG2dUc+MheVvIkSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWW+OAp
SBhHa2oeBACWnzoJvqbNMB8GA1UdIwQYMBaAFPyIaJTi1w41Lk8WgFLFGwWrBazF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUJGMC9EOTZCQTY2MEMw
OTkxMUVFQjk1MDVBNDFDNEY5QUUwMi9fSWhvbE9MWERqVXVUeGFBVXNVYkJhc0Zy
TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19JaG9sT0xYRGpVdVR4YUFVc1ViQmFzRnJNVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QUJGMC9EOTZCQTY2MEMwOTkxMUVFQjk1MDVBNDFDNEY5QUUwMi9fSWhvbE9MWERq
VXVUeGFBVXNVYkJhc0ZyTVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCPian7M9gJ5TZcREQYkhyWuvQkwnCF+J/Gjiicipm54gdYqsyCNL79
7FpYH+5bpgbcYEa+la/RLR/WbhH2kC27J/s4Y40XL2grxZmWkqKNY7VN+KsqKpAt
NLg1T9ney3GiBElqCH6y8HYN2kQubwO9AOI6kVBTwxA8Ox3j5Uznt4RlrJgtTrc9
J5ieDHmcHHKHpHjNDfBuJ1T8CtO+HeZkZqeaxwsQCbAP29tzJJpaHouotO0VTvoO
vkn0Ky/NNNDamJ8Cn715rcy1hV+epVx35TNnJDGLiGd3SoqBzqw21V59QG13zPJR
QD4YwsUzLL+PFpETm2Knqa1VSyeBxQmh
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:28:48 2025 by rpki-client