Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
File: _oJu6bwS2q07GXRxsEE_HrIIJjU.mft (raw, json)
Hash identifier: LJbSKOanjh/7gzCowvU7nZPuTvvpeT+EvQI7h0qBjz0=
Subject key identifier: 5E:C9:E4:0C:90:F0:02:33:74:05:2A:2B:52:B2:79:0E:5F:23:B4:15
Authority key identifier: FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35
Certificate issuer: /CN=A91CEBCA/serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635
Certificate serial: 348B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
Manifest number: 347B
Signing time: Fri 28 Mar 2025 14:30:28 +0000
Manifest this update: Fri 28 Mar 2025 14:30:27 +0000
Manifest next update: Fri 04 Apr 2025 14:30:27 +0000
Files and hashes: 1: _oJu6bwS2q07GXRxsEE_HrIIJjU.crl (hash: NEKO+xYHuLkDf34rHNlBcoKvH0kxQZtOKGJ6I5Eqj0M=)
2: 9954B962F02D11EFBA26B94FC4F9AE02.roa (hash: RnZPWsP3pFbLAskD17dhi3cAiJf7pCQ+1pJMd+7uFJQ=)
3: 5CB880EA0B9B11F09EBD312DC4F9AE02.roa (hash: Ec2NCnrqSRluhVLEClrhexd6/1RfxYvDUeGABixh+Cc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13451 (0x348b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEBCA
Validity
Not Before: Mar 28 14:30:27 2025 GMT
Not After : Apr 4 14:30:27 2025 GMT
Subject: CN=67e6b283-06d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0f:07:1a:fa:00:ef:67:77:8b:d6:90:09:52:
31:9b:a6:20:30:53:ff:d0:b9:ff:ac:a5:51:b4:a0:
83:48:ce:31:6c:57:2d:b2:6e:18:88:f1:29:ff:f2:
fc:2a:94:f5:b2:94:e6:d3:b4:30:16:e1:34:05:32:
e1:3c:87:db:a4:1f:55:3c:3d:76:bf:2d:ee:22:18:
7c:f5:63:c9:cb:dc:c3:bd:79:83:83:c1:47:3e:30:
5c:a6:dd:f0:d4:df:7a:14:fc:44:81:d8:7d:16:3a:
0e:8d:df:b2:e1:6a:78:43:61:4b:12:9d:25:df:48:
f4:49:32:36:0b:7d:60:90:f8:a2:7c:94:07:d5:17:
72:5a:5f:6c:1c:14:60:9f:e8:ba:dd:cf:cc:81:f5:
73:89:dc:7b:8b:45:71:30:4d:6e:08:92:ac:06:d7:
60:e9:8b:5b:c6:07:ca:81:20:ea:29:f2:8f:4d:b2:
0a:c6:42:4f:e5:99:7d:2a:b0:9a:63:a5:45:42:d3:
20:be:28:8d:64:d2:e7:e4:51:f2:55:7d:d0:48:70:
56:d5:c0:c7:27:41:14:0a:5a:70:d5:9d:b6:e3:cd:
8d:d2:60:90:1d:4c:69:44:ce:5b:be:15:7d:c4:c8:
b3:95:a5:11:e0:5e:c4:f6:38:0d:5c:db:69:02:72:
06:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C9:E4:0C:90:F0:02:33:74:05:2A:2B:52:B2:79:0E:5F:23:B4:15
X509v3 Authority Key Identifier:
keyid:FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:1e:a2:f6:e4:7e:ec:28:63:2d:5b:1f:72:84:0a:7f:4b:8a:
92:06:36:ed:8c:0a:f9:9f:a5:7c:58:af:36:ad:57:08:cd:c6:
9c:c5:54:3c:4c:5c:80:0f:51:2b:62:ea:37:ab:8c:b6:9c:42:
3c:e7:92:3c:7a:a9:72:97:88:a4:45:e0:9b:0c:79:a6:16:3f:
eb:bf:04:19:ab:45:78:9a:6d:47:e9:34:39:d6:ac:f7:bc:a0:
78:bf:4e:be:80:56:fd:35:96:c1:45:8d:c6:7a:12:f0:2e:0c:
61:68:f4:06:94:8c:39:be:44:46:06:c6:a6:37:89:f3:e8:00:
fd:35:0a:03:1c:26:33:37:43:be:38:d1:24:67:9f:55:d3:99:
1d:f6:5d:6c:85:24:0d:16:8d:d4:9c:5f:7b:02:e5:ac:06:b5:
ea:58:ea:e1:07:51:d3:07:da:27:cd:ca:68:0c:73:06:22:86:
1c:76:01:9e:5d:e9:ab:4e:ae:4d:af:4d:95:1b:f0:f8:fc:95:
97:37:d1:b5:30:d8:58:6b:ca:3a:65:86:40:b9:18:1b:1f:32:
e3:e1:c1:8d:ca:8a:cd:49:fc:7f:7e:30:a3:fa:5d:24:f0:eb:
65:1b:83:73:b2:bf:b2:7a:a3:b0:46:59:7f:d3:fb:c4:3d:f2:
36:82:3f:a2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0VCQ0ExMTAvBgNVBAUTKEZFODI2RUU5QkMxMkRBQUQzQjE5NzQ3MUIwNDEzRjFF
QjIwODI2MzUwHhcNMjUwMzI4MTQzMDI3WhcNMjUwNDA0MTQzMDI3WjAYMRYwFAYD
VQQDEw02N2U2YjI4My0wNmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuQ8HGvoA72d3i9aQCVIxm6YgMFP/0Ln/rKVRtKCDSM4xbFctsm4YiPEp//L8
KpT1spTm07QwFuE0BTLhPIfbpB9VPD12vy3uIhh89WPJy9zDvXmDg8FHPjBcpt3w
1N96FPxEgdh9FjoOjd+y4Wp4Q2FLEp0l30j0STI2C31gkPiifJQH1RdyWl9sHBRg
n+i63c/MgfVzidx7i0VxME1uCJKsBtdg6YtbxgfKgSDqKfKPTbIKxkJP5Zl9KrCa
Y6VFQtMgviiNZNLn5FHyVX3QSHBW1cDHJ0EUClpw1Z22482N0mCQHUxpRM5bvhV9
xMizlaUR4F7E9jgNXNtpAnIGLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7J5AyQ
8AIzdAUqK1KyeQ5fI7QVMB8GA1UdIwQYMBaAFP6Cbum8EtqtOxl0cbBBPx6yCCY1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUJDQS9CNTg4QjRBNjFE
ODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJxMDdHWFJ4c0VFX0hySUlK
alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19vSnU2YndTMnEwN0dYUnhzRUVfSHJJSUpqVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RUJDQS9CNTg4QjRBNjFEODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJx
MDdHWFJ4c0VFX0hySUlKalUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB7HqL25H7sKGMtWx9yhAp/S4qSBjbtjAr5n6V8WK82rVcIzcacxVQ8
TFyAD1ErYuo3q4y2nEI855I8eqlyl4ikReCbDHmmFj/rvwQZq0V4mm1H6TQ51qz3
vKB4v06+gFb9NZbBRY3GehLwLgxhaPQGlIw5vkRGBsamN4nz6AD9NQoDHCYzN0O+
ONEkZ59V05kd9l1shSQNFo3UnF97AuWsBrXqWOrhB1HTB9onzcpoDHMGIoYcdgGe
XemrTq5Nr02VG/D4/JWXN9G1MNhYa8o6ZYZAuRgbHzLj4cGNyorNSfx/fjCj+l0k
8OtlG4Nzsr+yeqOwRll/0/vEPfI2gj+i
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:06:41 2025 by rpki-client