
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft
File: Gv1CZeY9DL91I27ZaGrk8AFV_34.mft (raw, json)
Hash identifier: /gg2LqPiKeSGQa7BUzk0k6HisLScBwmoknvDvq93Wfo=
Subject key identifier: B4:27:91:0E:E6:CC:AA:AF:C4:A4:C3:BC:D9:1F:DA:0B:99:B3:4F:1D
Authority key identifier: 1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E
Certificate issuer: /CN=A91CBA26/serialNumber=1AFD4265E63D0CBF75236ED9686AE4F00155FF7E
Certificate serial: 1911
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft
Manifest number: 18FE
Signing time: Fri 28 Mar 2025 16:33:29 +0000
Manifest this update: Fri 28 Mar 2025 16:33:28 +0000
Manifest next update: Fri 04 Apr 2025 16:33:28 +0000
Files and hashes: 1: Gv1CZeY9DL91I27ZaGrk8AFV_34.crl (hash: M4744zgLUamykyp1NtKxC45KkDkGBcM/UeHgGGMYFm8=)
2: FFE0F998101511EDA7D8F271C4F9AE02.roa (hash: RnL32mbH2nfGSeBF5CgeDIySAoSrBSDNFXrw7LKGyjA=)
3: EFD9938E2FAF11EDBE0A8C10C4F9AE02.roa (hash: i9JFPAUn7PS/i/yxYDte5hNt2lU/GYfFJVKLS5WTzUc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6417 (0x1911)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBA26
Validity
Not Before: Mar 28 16:33:28 2025 GMT
Not After : Apr 4 16:33:28 2025 GMT
Subject: CN=67e6cf58-a0ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ec:47:78:b9:ce:4d:d6:ca:98:37:50:73:6a:
cf:5c:81:64:20:06:11:5a:33:80:14:5a:91:2b:ad:
0f:44:a4:77:1d:d7:a1:b7:89:6d:de:5c:5b:93:f6:
2f:91:85:c4:de:2a:26:cb:8b:85:79:d6:14:14:35:
2f:94:f3:98:29:4c:ce:fb:7d:b5:79:dd:e1:59:e4:
97:de:d3:db:ed:70:b4:d3:72:a4:ef:c3:42:87:14:
49:03:c4:28:c6:70:35:3c:6a:d3:d9:22:62:53:2f:
ec:37:0f:d3:ab:b9:c8:d3:22:b0:f9:df:93:d8:a6:
2a:8f:a1:0e:c8:e3:13:06:75:51:1d:11:97:ab:83:
45:e1:a2:45:c5:eb:81:9e:9c:32:f7:ae:40:58:25:
80:1e:32:5a:d8:da:fd:f9:be:a3:fb:4f:21:57:dc:
f8:b0:df:75:30:8d:cf:1e:22:cb:7a:4b:19:6b:18:
0a:8e:c2:6c:86:6e:30:f1:0b:c7:d5:c5:2a:38:cf:
4d:4d:56:d2:f5:42:f4:d7:ae:04:02:85:22:66:9f:
75:2a:59:d6:92:b9:84:9d:6c:2c:46:3e:67:4d:79:
26:ab:09:8b:2e:4c:81:15:d7:47:5e:67:b7:c2:e5:
3a:a0:b3:cc:2c:b0:16:a1:c0:d3:cf:9f:a7:d1:ea:
95:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:27:91:0E:E6:CC:AA:AF:C4:A4:C3:BC:D9:1F:DA:0B:99:B3:4F:1D
X509v3 Authority Key Identifier:
keyid:1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a0:d2:f9:e9:e5:cd:26:fa:a9:fe:e7:fe:85:45:45:11:37:
91:11:83:2b:ea:9b:d0:82:22:41:33:ad:4d:b7:14:65:11:84:
39:5b:c4:4d:cf:08:4d:3a:a5:98:54:ea:b3:4f:1e:fc:25:c7:
f0:2b:91:f3:97:6a:84:59:e1:30:1d:53:88:61:4e:b6:1d:01:
51:fd:34:a1:d6:f1:2b:f9:26:ab:5f:34:40:6a:2a:35:cd:27:
00:9d:cd:79:09:58:f6:5e:a7:04:06:65:bd:6a:7a:13:b1:bb:
a7:0b:ce:05:7f:0f:57:1b:60:80:ac:97:45:9e:cf:0e:fe:6e:
9b:21:2f:51:0f:07:26:29:0d:38:47:04:1c:60:e8:64:4a:8f:
88:04:4b:fd:bc:89:b9:f1:ed:f5:87:3e:a5:20:a4:d8:56:24:
f1:db:d1:59:b6:0e:07:01:d2:c8:8f:ba:b5:8d:a8:28:55:38:
cc:0e:0a:6d:5b:5f:ac:3d:ec:ef:54:73:a9:8e:00:9b:d7:02:
d2:71:39:55:84:96:8e:74:48:76:33:15:c4:8e:af:d8:c1:cf:
d7:02:bd:ca:83:7e:a9:0e:08:50:47:f9:53:be:38:94:c3:8a:
cc:f2:49:8b:4a:e7:9b:34:a9:b5:e3:2a:ad:5b:ef:45:c2:a9:
53:d2:be:96
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0JBMjYxMTAvBgNVBAUTKDFBRkQ0MjY1RTYzRDBDQkY3NTIzNkVEOTY4NkFFNEYw
MDE1NUZGN0UwHhcNMjUwMzI4MTYzMzI4WhcNMjUwNDA0MTYzMzI4WjAYMRYwFAYD
VQQDEw02N2U2Y2Y1OC1hMGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7uxHeLnOTdbKmDdQc2rPXIFkIAYRWjOAFFqRK60PRKR3Hdeht4lt3lxbk/Yv
kYXE3iomy4uFedYUFDUvlPOYKUzO+321ed3hWeSX3tPb7XC003Kk78NChxRJA8Qo
xnA1PGrT2SJiUy/sNw/Tq7nI0yKw+d+T2KYqj6EOyOMTBnVRHRGXq4NF4aJFxeuB
npwy965AWCWAHjJa2Nr9+b6j+08hV9z4sN91MI3PHiLLeksZaxgKjsJshm4w8QvH
1cUqOM9NTVbS9UL0164EAoUiZp91KlnWkrmEnWwsRj5nTXkmqwmLLkyBFddHXme3
wuU6oLPMLLAWocDTz5+n0eqV8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQnkQ7m
zKqvxKTDvNkf2guZs08dMB8GA1UdIwQYMBaAFBr9QmXmPQy/dSNu2Whq5PABVf9+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkEyNi9DQTY0Q0JGQTgy
NUQxMUU3OTEzMjA5MURDNEY5QUUwMi9HdjFDWmVZOURMOTFJMjdaYUdyazhBRlZf
MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0d2MUNaZVk5REw5MUkyN1phR3JrOEFGVl8zNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QkEyNi9DQTY0Q0JGQTgyNUQxMUU3OTEzMjA5MURDNEY5QUUwMi9HdjFDWmVZOURM
OTFJMjdaYUdyazhBRlZfMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBvoNL56eXNJvqp/uf+hUVFETeREYMr6pvQgiJBM61NtxRlEYQ5W8RN
zwhNOqWYVOqzTx78JcfwK5Hzl2qEWeEwHVOIYU62HQFR/TSh1vEr+SarXzRAaio1
zScAnc15CVj2XqcEBmW9anoTsbunC84Ffw9XG2CArJdFns8O/m6bIS9RDwcmKQ04
RwQcYOhkSo+IBEv9vIm58e31hz6lIKTYViTx29FZtg4HAdLIj7q1jagoVTjMDgpt
W1+sPezvVHOpjgCb1wLScTlVhJaOdEh2MxXEjq/Ywc/XAr3Kg36pDghQR/lTvjiU
w4rM8kmLSuebNKm14yqtW+9FwqlT0r6W
-----END CERTIFICATE-----
Generated at Mon Apr 7 08:41:30 2025 by rpki-client