Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft
File: bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft (raw, json)
Hash identifier: 10ln8sX97NQaYYZqR4onSVz/1kZGGhPDeJBPm5NCg1w=
Subject key identifier: 00:E5:46:4C:A2:F1:BA:6C:C6:E0:EB:DB:E8:0F:94:37:07:F3:28:D0
Authority key identifier: 6C:19:46:97:81:6F:9B:13:0B:A5:3C:F4:BE:E6:76:01:59:4E:8C:B1
Certificate issuer: /CN=A91CCAF1/serialNumber=6C194697816F9B130BA53CF4BEE67601594E8CB1
Certificate serial: 58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft
Manifest number: 57
Signing time: Sat 29 Mar 2025 06:29:16 +0000
Manifest this update: Sat 29 Mar 2025 06:29:16 +0000
Manifest next update: Sat 05 Apr 2025 06:29:16 +0000
Files and hashes: 1: bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl (hash: 45yOquDZTncQ151VdXqV3bfMbWuDGqPexIUkYT6EnW8=)
2: BF71D9D0F26811EFBC446868C4F9AE02.roa (hash: 7+qKEqRnu4TPJKKakjwpNT1iFIHMXPBmy/g9UJm3iJo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCAF1
Validity
Not Before: Mar 29 06:29:16 2025 GMT
Not After : Apr 5 06:29:16 2025 GMT
Subject: CN=67e7933c-1534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c5:f8:0d:38:74:50:b2:47:72:d7:c1:0d:11:
a0:83:d8:de:34:6e:a5:09:f1:0a:e8:30:fe:49:56:
85:68:93:d9:22:19:00:8b:fa:4d:ef:de:72:65:8d:
f2:27:b6:b5:38:64:7f:f0:14:9a:bc:21:aa:f7:a6:
4b:d6:14:7b:66:2a:05:53:17:6d:ac:01:5f:0e:02:
4d:03:48:2b:7c:54:a6:b3:76:53:4d:fc:72:89:ef:
44:09:94:5d:29:23:6a:20:50:3e:0c:d8:81:d0:51:
b1:b5:fd:e4:62:88:11:c4:c8:57:f0:e6:b1:47:6a:
c6:7d:8d:24:1e:f6:64:3f:49:4f:51:bb:8a:15:7a:
1c:59:ba:aa:f1:90:6f:2e:41:b8:3c:22:f4:8c:36:
59:dd:6b:9f:78:26:e2:37:6c:59:ba:1c:f0:4b:3d:
95:48:31:7d:8b:71:7a:0a:2d:4e:22:ed:e0:b0:ea:
25:a3:a1:dc:43:57:9b:3b:74:63:b9:cc:3f:46:d5:
82:51:73:31:85:d2:fd:49:22:b6:bd:81:90:0b:f9:
3c:10:5f:4f:d2:1e:ae:9a:25:b6:79:7c:da:d4:88:
b0:3f:a7:c7:b8:3d:66:6d:c3:82:77:15:c7:fb:3d:
a5:d0:9b:2d:9d:32:4a:36:8e:29:7c:46:0c:fe:0c:
0c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E5:46:4C:A2:F1:BA:6C:C6:E0:EB:DB:E8:0F:94:37:07:F3:28:D0
X509v3 Authority Key Identifier:
keyid:6C:19:46:97:81:6F:9B:13:0B:A5:3C:F4:BE:E6:76:01:59:4E:8C:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:30:90:76:f2:c9:d5:63:b5:2c:d8:8a:16:ad:bd:47:b4:50:
79:6a:24:d4:a7:d6:45:ed:f6:12:db:d8:2c:c3:f1:5b:9a:80:
41:cb:57:84:9b:1a:b8:ea:69:a9:1a:08:38:d1:a0:5a:e2:fb:
77:0e:04:0e:77:b0:6d:90:d7:92:5b:08:ca:9a:7a:14:d0:41:
34:9a:56:fd:79:4d:2a:34:81:ed:fe:b6:44:b4:4a:d4:23:49:
f6:ec:c5:be:7f:e5:a4:b0:b7:64:89:10:da:04:73:ca:b6:b6:
13:c7:51:a1:3a:36:3f:0c:dd:8c:98:50:97:1f:1e:58:c4:25:
58:75:c7:b0:bd:35:26:42:91:ab:70:f5:42:6a:68:f6:b8:2d:
33:fb:be:8b:e7:69:38:63:3e:bf:43:a8:7f:57:02:b8:1c:db:
15:54:ab:63:79:a2:96:25:22:38:28:68:f9:cb:95:96:a2:5c:
b1:f8:9d:18:62:60:b9:91:aa:e3:65:8e:2c:7c:96:bd:23:96:
86:f6:bf:24:a3:4d:b5:62:b8:66:04:16:96:28:f0:7f:37:b2:
14:2d:d3:e2:cb:dd:28:59:6d:34:e0:6c:97:9e:81:7a:f0:e3:
64:45:42:a1:d7:88:ea:a2:93:2c:cf:36:1b:f5:ec:6f:9f:c8:
98:58:36:e6
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
Q0FGMTExMC8GA1UEBRMoNkMxOTQ2OTc4MTZGOUIxMzBCQTUzQ0Y0QkVFNjc2MDE1
OTRFOENCMTAeFw0yNTAzMjkwNjI5MTZaFw0yNTA0MDUwNjI5MTZaMBgxFjAUBgNV
BAMTDTY3ZTc5MzNjLTE1MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCZxfgNOHRQskdy18ENEaCD2N40bqUJ8QroMP5JVoVok9kiGQCL+k3v3nJljfIn
trU4ZH/wFJq8Iar3pkvWFHtmKgVTF22sAV8OAk0DSCt8VKazdlNN/HKJ70QJlF0p
I2ogUD4M2IHQUbG1/eRiiBHEyFfw5rFHasZ9jSQe9mQ/SU9Ru4oVehxZuqrxkG8u
Qbg8IvSMNlnda594JuI3bFm6HPBLPZVIMX2LcXoKLU4i7eCw6iWjodxDV5s7dGO5
zD9G1YJRczGF0v1JIra9gZAL+TwQX0/SHq6aJbZ5fNrUiLA/p8e4PWZtw4J3Fcf7
PaXQmy2dMko2jil8Rgz+DAzJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAOVGTKLx
umzG4Ovb6A+UNwfzKNAwHwYDVR0jBBgwFoAUbBlGl4FvmxMLpTz0vuZ2AVlOjLEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDQUYxLzA5QzBEMzY2OEFB
RDExRUZCRUY5MTY2QUM0RjlBRTAyL2JCbEdsNEZ2bXhNTHBUejB2dVoyQVZsT2pM
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYkJsR2w0RnZteE1McFR6MHZ1WjJBVmxPakxFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND
QUYxLzA5QzBEMzY2OEFBRDExRUZCRUY5MTY2QUM0RjlBRTAyL2JCbEdsNEZ2bXhN
THBUejB2dVoyQVZsT2pMRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAGUwkHbyydVjtSzYihatvUe0UHlqJNSn1kXt9hLb2CzD8VuagEHLV4Sb
GrjqaakaCDjRoFri+3cOBA53sG2Q15JbCMqaehTQQTSaVv15TSo0ge3+tkS0StQj
Sfbsxb5/5aSwt2SJENoEc8q2thPHUaE6Nj8M3YyYUJcfHljEJVh1x7C9NSZCkatw
9UJqaPa4LTP7vovnaThjPr9DqH9XArgc2xVUq2N5opYlIjgoaPnLlZaiXLH4nRhi
YLmRquNljix8lr0jlob2vySjTbViuGYEFpYo8H83shQt0+LL3ShZbTTgbJeegXrw
42RFQqHXiOqikyzPNhv17G+fyJhYNuY=
-----END CERTIFICATE-----
Generated at Thu Apr 10 16:16:51 2025 by rpki-client