Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft
File: eKfTXvnEd150y6PRZrYbdZAkFSM.mft (raw, json)
Hash identifier: IGLLkjFbIwHbs1/B/fo2PY1H1cAuIPAIcqC2KiLwTGQ=
Subject key identifier: 96:14:8D:80:A3:10:17:8F:0C:31:CC:1E:7E:9D:16:60:9A:BD:02:30
Authority key identifier: 78:A7:D3:5E:F9:C4:77:5E:74:CB:A3:D1:66:B6:1B:75:90:24:15:23
Certificate issuer: /CN=A91D2C38/serialNumber=78A7D35EF9C4775E74CBA3D166B61B7590241523
Certificate serial: 43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKfTXvnEd150y6PRZrYbdZAkFSM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft
Manifest number: 42
Signing time: Sat 29 Mar 2025 06:45:55 +0000
Manifest this update: Sat 29 Mar 2025 06:45:55 +0000
Manifest next update: Sat 05 Apr 2025 06:45:55 +0000
Files and hashes: 1: eKfTXvnEd150y6PRZrYbdZAkFSM.crl (hash: dmjITa8IbFvxBw9QhMEVIcxUHLgV8hTF9QAgJIk+C6s=)
2: 8DDD0D56A98C11EFAAC0F364C4F9AE02.roa (hash: yg1U4JyDYBAoLLqLQFnhNTd+uuZ0oKhea1PeFahobmY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2C38
Validity
Not Before: Mar 29 06:45:55 2025 GMT
Not After : Apr 5 06:45:55 2025 GMT
Subject: CN=67e79723-eab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e1:75:7e:e7:ae:bb:08:19:97:35:64:1a:f7:
97:cf:e4:7a:d3:39:66:9e:0a:97:15:44:54:fe:3b:
5f:48:fa:1e:76:f3:38:67:43:d6:ae:4f:f7:93:ce:
3e:34:71:79:82:df:8e:5e:52:5d:4a:ca:46:72:c8:
88:cd:b7:7d:6d:fc:3a:78:01:b0:53:71:0d:91:2a:
0c:8d:8a:39:9e:d1:e3:bf:3c:30:71:f0:c8:04:17:
f4:27:c9:bb:ac:e5:e8:54:a5:f0:e9:7f:f7:37:c3:
e5:f6:6b:6e:1e:5f:a1:24:2c:d6:1c:09:9f:fb:d8:
b5:cd:dd:3e:d7:bc:0e:8a:da:74:08:35:86:48:a7:
7b:d6:a2:f8:c0:b4:ac:0f:fe:4f:23:4a:ec:04:c5:
45:89:a7:40:c6:6b:7c:f9:1d:8b:1b:b2:64:fe:65:
50:1c:9f:80:a9:a3:8b:a2:bc:ec:b8:e9:fd:24:dc:
30:2a:0e:d6:1e:46:8d:d2:32:f9:25:19:a6:1a:68:
01:f3:eb:75:ef:75:0c:9f:ce:ed:ec:af:bc:d5:a8:
00:00:a6:e9:8d:2e:23:39:f8:34:87:45:a1:ad:58:
63:24:1e:bb:08:85:fb:bb:1a:4a:4d:f7:0d:80:22:
d2:8f:52:e1:9c:62:2b:35:e8:be:28:3d:7e:81:9b:
55:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:14:8D:80:A3:10:17:8F:0C:31:CC:1E:7E:9D:16:60:9A:BD:02:30
X509v3 Authority Key Identifier:
keyid:78:A7:D3:5E:F9:C4:77:5E:74:CB:A3:D1:66:B6:1B:75:90:24:15:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKfTXvnEd150y6PRZrYbdZAkFSM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:aa:26:78:f9:86:ed:d7:c4:48:c3:48:7b:e0:98:66:2d:1b:
3b:c3:b9:cc:76:88:bc:0b:17:67:d8:80:c2:bd:61:08:13:12:
31:9f:ce:a3:c1:ed:ba:0c:b6:7e:b1:21:71:ae:8f:24:c8:ca:
96:46:7b:f3:de:de:0a:a0:2b:de:b2:df:ca:e3:19:5b:90:08:
f9:10:e6:72:d2:d6:d2:68:ab:63:e8:58:6a:f9:73:93:09:9b:
28:6f:e1:eb:c0:5c:90:5f:5e:c9:99:c8:dc:23:74:a4:14:3d:
4f:95:07:b4:a1:b0:21:f0:45:4c:6f:28:a6:62:4e:d5:45:84:
ef:7b:06:60:65:c9:2d:55:59:62:0b:56:80:c5:be:b2:6c:b3:
bb:b8:dd:59:cc:55:32:1b:66:81:13:b3:49:65:00:98:ed:66:
40:97:6b:c5:3b:b1:c7:ac:cb:7c:5c:3f:1b:7d:a3:6f:54:a8:
d4:01:03:55:dc:0e:75:86:90:a9:13:29:78:41:d5:e8:8d:36:
77:3c:87:e8:fe:d2:38:84:dd:16:3f:d5:9a:4f:25:6e:60:a5:
b7:2c:44:1b:55:f1:f4:e7:ba:fd:15:65:b2:a1:97:bf:06:8a:
a3:0f:fa:85:6a:36:e0:3c:dc:a4:2f:fd:95:68:ce:2b:65:0d:
74:4e:4e:b9
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
MkMzODExMC8GA1UEBRMoNzhBN0QzNUVGOUM0Nzc1RTc0Q0JBM0QxNjZCNjFCNzU5
MDI0MTUyMzAeFw0yNTAzMjkwNjQ1NTVaFw0yNTA0MDUwNjQ1NTVaMBgxFjAUBgNV
BAMTDTY3ZTc5NzIzLWVhYjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCr4XV+5667CBmXNWQa95fP5HrTOWaeCpcVRFT+O19I+h528zhnQ9auT/eTzj40
cXmC345eUl1KykZyyIjNt31t/Dp4AbBTcQ2RKgyNijme0eO/PDBx8MgEF/Qnybus
5ehUpfDpf/c3w+X2a24eX6EkLNYcCZ/72LXN3T7XvA6K2nQINYZIp3vWovjAtKwP
/k8jSuwExUWJp0DGa3z5HYsbsmT+ZVAcn4Cpo4uivOy46f0k3DAqDtYeRo3SMvkl
GaYaaAHz63XvdQyfzu3sr7zVqAAApumNLiM5+DSHRaGtWGMkHrsIhfu7GkpN9w2A
ItKPUuGcYis16L4oPX6Bm1WvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlhSNgKMQ
F48MMcwefp0WYJq9AjAwHwYDVR0jBBgwFoAUeKfTXvnEd150y6PRZrYbdZAkFSMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQzM4LzBERTg5MzQwQTk4
QzExRUY5MzUwRkI2M0M0RjlBRTAyL2VLZlRYdm5FZDE1MHk2UFJaclliZFpBa0ZT
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZUtmVFh2bkVkMTUweTZQUlpyWWJkWkFrRlNNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy
QzM4LzBERTg5MzQwQTk4QzExRUY5MzUwRkI2M0M0RjlBRTAyL2VLZlRYdm5FZDE1
MHk2UFJaclliZFpBa0ZTTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAKeqJnj5hu3XxEjDSHvgmGYtGzvDucx2iLwLF2fYgMK9YQgTEjGfzqPB
7boMtn6xIXGujyTIypZGe/Pe3gqgK96y38rjGVuQCPkQ5nLS1tJoq2PoWGr5c5MJ
myhv4evAXJBfXsmZyNwjdKQUPU+VB7ShsCHwRUxvKKZiTtVFhO97BmBlyS1VWWIL
VoDFvrJss7u43VnMVTIbZoETs0llAJjtZkCXa8U7scesy3xcPxt9o29UqNQBA1Xc
DnWGkKkTKXhB1eiNNnc8h+j+0jiE3RY/1ZpPJW5gpbcsRBtV8fTnuv0VZbKhl78G
iqMP+oVqNuA83KQv/ZVozitlDXROTrk=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:32:35 2025 by rpki-client