Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4190/F9DE76CA08DA11ED9402D357C4F9AE02/V-dZ3CebVG7agbfv2vVXhRa4Cvw.mft
File: V-dZ3CebVG7agbfv2vVXhRa4Cvw.mft (raw, json)
Hash identifier: TbhO2toAJloTcN6ykqnUiA3EjGtxzjvqTUEAX0i0wkQ=
Subject key identifier: 66:AE:F8:B5:B5:2A:72:49:47:DF:D5:40:B4:51:33:D9:C4:20:E0:69
Authority key identifier: 57:E7:59:DC:27:9B:54:6E:DA:81:B7:EF:DA:F5:57:85:16:B8:0A:FC
Certificate issuer: /CN=A91D4190/serialNumber=57E759DC279B546EDA81B7EFDAF5578516B80AFC
Certificate serial: 026B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V-dZ3CebVG7agbfv2vVXhRa4Cvw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4190/F9DE76CA08DA11ED9402D357C4F9AE02/V-dZ3CebVG7agbfv2vVXhRa4Cvw.mft
Manifest number: 0266
Signing time: Sat 29 Mar 2025 01:58:46 +0000
Manifest this update: Sat 29 Mar 2025 01:58:45 +0000
Manifest next update: Sat 05 Apr 2025 01:58:45 +0000
Files and hashes: 1: V-dZ3CebVG7agbfv2vVXhRa4Cvw.crl (hash: cKrx8RXB64hBit8kelpy9KNerhTfp0tjBzlybPaIj7o=)
2: D18B56F408DD11ED830BEB5CC4F9AE02.roa (hash: 4GuPHy/Lus1nkrgty0dsCrHIRZYa95o0Quv9w9TYCWg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 619 (0x26b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4190
Validity
Not Before: Mar 29 01:58:45 2025 GMT
Not After : Apr 5 01:58:45 2025 GMT
Subject: CN=67e753d5-ed4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:68:be:f9:94:8d:7d:ef:85:27:b7:fb:cd:f7:
84:77:82:e9:ec:37:af:93:59:a3:2e:83:0f:48:c5:
48:00:64:71:6c:14:ba:74:34:bb:19:19:79:01:cb:
6e:d8:29:65:82:97:de:26:ac:65:cb:e7:f4:b4:e8:
7f:a3:c1:7a:30:a5:c0:b1:58:3d:2b:2e:3f:4e:eb:
9c:79:58:8f:a4:88:61:57:c0:fa:81:8b:6c:d2:29:
77:fb:0a:68:84:63:35:42:16:96:96:ec:91:d4:56:
bc:7b:2e:30:5e:c6:12:d2:b9:3c:e0:7b:30:1d:18:
83:a6:ab:aa:fa:6d:d3:dc:14:3e:b6:10:16:9c:bc:
a2:ab:5b:3e:09:67:0f:e1:91:e4:2d:43:72:05:bf:
f7:ce:54:c5:dd:ff:89:b6:4f:ef:3d:04:2c:02:4e:
8f:97:da:3c:02:52:76:9e:b9:e8:2d:46:83:1e:91:
9c:84:a6:08:3c:ad:0c:62:f1:53:d9:45:78:1b:05:
da:f2:8a:fd:9c:45:57:e7:f8:2b:8c:cc:fd:f8:e4:
25:e5:f4:84:7b:96:9e:e6:cc:e6:33:dc:d7:36:b8:
91:1a:c2:2e:d4:cb:39:0e:ca:aa:14:c6:97:62:d1:
99:dc:97:b7:0e:c9:e2:21:83:89:8e:83:a7:76:db:
85:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AE:F8:B5:B5:2A:72:49:47:DF:D5:40:B4:51:33:D9:C4:20:E0:69
X509v3 Authority Key Identifier:
keyid:57:E7:59:DC:27:9B:54:6E:DA:81:B7:EF:DA:F5:57:85:16:B8:0A:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4190/F9DE76CA08DA11ED9402D357C4F9AE02/V-dZ3CebVG7agbfv2vVXhRa4Cvw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V-dZ3CebVG7agbfv2vVXhRa4Cvw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4190/F9DE76CA08DA11ED9402D357C4F9AE02/V-dZ3CebVG7agbfv2vVXhRa4Cvw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:63:ff:8f:b4:15:0f:1c:f2:8d:71:c8:7a:13:d4:cb:2f:7b:
8f:e6:95:18:19:0f:9c:b4:94:41:66:8e:9a:8a:c0:1d:91:85:
eb:22:43:a3:85:25:7e:22:40:32:a2:4f:42:4f:6d:bd:44:e4:
7c:cd:58:e8:93:eb:42:f1:b4:87:16:05:2d:a6:b0:96:3f:f5:
eb:dd:34:de:66:7b:f0:6e:3b:0d:38:f8:51:07:f5:93:50:0d:
7f:4a:62:1b:ea:42:83:e8:6c:79:fa:c3:00:45:57:37:b0:b7:
e3:66:e8:83:27:d8:88:8b:8a:6e:c3:66:17:a1:f5:75:9c:e7:
c1:67:b8:cc:0b:fd:8d:a1:92:a6:fa:d0:29:f5:9e:56:8a:d1:
b0:c3:67:87:5d:6b:e7:77:66:7b:88:ad:60:1f:c5:c2:0a:98:
d9:ee:b6:9c:6e:ac:24:bc:7b:f9:0d:27:8e:69:a8:d1:83:15:
2c:46:9f:e4:16:3a:91:83:2a:36:7d:93:18:e4:d2:4d:32:a2:
7c:ba:11:c4:07:94:3d:83:d3:1c:4a:f6:51:76:ea:25:f9:04:
3f:bf:ec:6f:10:a9:2a:fc:42:82:60:5b:1e:00:c3:49:43:4c:
c1:e2:3b:02:61:54:dc:aa:d7:ae:ae:ef:46:20:e1:bb:67:2b:
8a:90:cf:23
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQxOTAxMTAvBgNVBAUTKDU3RTc1OURDMjc5QjU0NkVEQTgxQjdFRkRBRjU1Nzg1
MTZCODBBRkMwHhcNMjUwMzI5MDE1ODQ1WhcNMjUwNDA1MDE1ODQ1WjAYMRYwFAYD
VQQDEw02N2U3NTNkNS1lZDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA02i++ZSNfe+FJ7f7zfeEd4Lp7Devk1mjLoMPSMVIAGRxbBS6dDS7GRl5Actu
2CllgpfeJqxly+f0tOh/o8F6MKXAsVg9Ky4/TuuceViPpIhhV8D6gYts0il3+wpo
hGM1QhaWluyR1Fa8ey4wXsYS0rk84HswHRiDpquq+m3T3BQ+thAWnLyiq1s+CWcP
4ZHkLUNyBb/3zlTF3f+Jtk/vPQQsAk6Pl9o8AlJ2nrnoLUaDHpGchKYIPK0MYvFT
2UV4GwXa8or9nEVX5/grjMz9+OQl5fSEe5ae5szmM9zXNriRGsIu1Ms5DsqqFMaX
YtGZ3Je3DsniIYOJjoOndtuFOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGau+LW1
KnJJR9/VQLRRM9nEIOBpMB8GA1UdIwQYMBaAFFfnWdwnm1Ru2oG379r1V4UWuAr8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDE5MC9GOURFNzZDQTA4
REExMUVEOTQwMkQzNTdDNEY5QUUwMi9WLWRaM0NlYlZHN2FnYmZ2MnZWWGhSYTRD
dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1YtZFozQ2ViVkc3YWdiZnYydlZYaFJhNEN2dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NDE5MC9GOURFNzZDQTA4REExMUVEOTQwMkQzNTdDNEY5QUUwMi9WLWRaM0NlYlZH
N2FnYmZ2MnZWWGhSYTRDdncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQATY/+PtBUPHPKNcch6E9TLL3uP5pUYGQ+ctJRBZo6aisAdkYXrIkOj
hSV+IkAyok9CT229ROR8zVjok+tC8bSHFgUtprCWP/Xr3TTeZnvwbjsNOPhRB/WT
UA1/SmIb6kKD6Gx5+sMARVc3sLfjZuiDJ9iIi4puw2YXofV1nOfBZ7jMC/2NoZKm
+tAp9Z5WitGww2eHXWvnd2Z7iK1gH8XCCpjZ7racbqwkvHv5DSeOaajRgxUsRp/k
FjqRgyo2fZMY5NJNMqJ8uhHEB5Q9g9McSvZRduol+QQ/v+xvEKkq/EKCYFseAMNJ
Q0zB4jsCYVTcqteuru9GIOG7ZyuKkM8j
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:17:42 2025 by rpki-client