Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.mft
File: l7tUs9I8N8PdPgFpypdNJ9up8FA.mft (raw, json)
Hash identifier: Pkpnmhl2Gv8FJE+bWQsBE5kHHT/dZHXOhlLHwX6Zm44=
Subject key identifier: 5E:92:11:DB:D5:F6:DB:94:5F:5A:BD:5E:8C:0A:49:F0:6B:2F:81:12
Authority key identifier: 97:BB:54:B3:D2:3C:37:C3:DD:3E:01:69:CA:97:4D:27:DB:A9:F0:50
Certificate issuer: /CN=A91D51C1/serialNumber=97BB54B3D23C37C3DD3E0169CA974D27DBA9F050
Certificate serial: 05AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7tUs9I8N8PdPgFpypdNJ9up8FA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.mft
Manifest number: 05A5
Signing time: Fri 28 Mar 2025 23:27:01 +0000
Manifest this update: Fri 28 Mar 2025 23:27:01 +0000
Manifest next update: Fri 04 Apr 2025 23:27:01 +0000
Files and hashes: 1: l7tUs9I8N8PdPgFpypdNJ9up8FA.crl (hash: c/bSPbzbmPM4pR6MpPGvlQdOli73V09OSErvqT3bDe4=)
2: 1E8ADFD0C1F211EBA984726AC4F9AE02.roa (hash: bWn5aFY6Kg9nqE6Xd5cFT5I+I/vhYdu828/JrK8jyYg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1453 (0x5ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D51C1
Validity
Not Before: Mar 28 23:27:01 2025 GMT
Not After : Apr 4 23:27:01 2025 GMT
Subject: CN=67e73045-462c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2c:ed:f2:82:25:b7:da:6f:18:b6:8c:72:b6:
47:7b:07:4d:7a:1c:1c:ce:57:59:39:70:4f:a8:96:
ef:f8:68:5c:f2:10:b3:90:52:aa:a8:5e:92:7a:f6:
72:15:8c:ae:8c:23:76:24:50:67:4f:db:07:b1:b4:
a2:2a:9e:c3:ba:46:0d:d3:91:ba:d7:78:3c:fd:05:
68:a9:e9:8d:b9:53:3e:a4:fe:fd:73:c9:b9:ee:84:
05:93:3c:aa:89:0a:28:57:a0:1e:5a:3c:90:61:66:
b6:b2:30:d5:39:af:a3:4a:54:d0:8b:e2:31:81:35:
47:83:af:c5:c6:94:b3:57:8c:c2:8e:5b:8e:dd:3a:
ea:e3:6a:d0:ec:b2:00:bc:38:f5:5d:4f:33:51:7b:
6d:75:f6:67:65:ff:a6:8a:44:01:11:49:cc:c3:2d:
1d:06:f0:21:93:59:e4:3b:6c:15:80:65:40:64:e1:
de:b0:65:7c:40:9a:10:64:01:b9:40:4b:aa:2c:97:
5b:60:41:a4:1b:90:bb:b9:64:7b:7b:a2:11:7b:89:
e0:51:cb:8c:82:47:ec:55:52:6d:81:54:ab:12:a9:
c1:19:9e:45:a2:18:32:9a:1c:7e:71:78:e0:a7:05:
72:3b:da:b1:16:4a:b8:63:c0:2c:42:b4:67:72:32:
d2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:92:11:DB:D5:F6:DB:94:5F:5A:BD:5E:8C:0A:49:F0:6B:2F:81:12
X509v3 Authority Key Identifier:
keyid:97:BB:54:B3:D2:3C:37:C3:DD:3E:01:69:CA:97:4D:27:DB:A9:F0:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7tUs9I8N8PdPgFpypdNJ9up8FA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:fb:7f:4a:e3:7d:06:b9:67:ba:0f:0c:76:b3:70:b3:3d:f4:
be:13:15:de:54:b0:f3:b3:c6:1b:ba:5d:54:ff:a8:05:66:27:
f0:20:9f:17:19:41:b2:15:1d:83:15:0f:92:ac:37:1a:2c:c9:
d9:cd:19:e6:97:66:62:c3:87:b9:40:46:62:92:a6:2e:66:f5:
95:46:b3:d7:46:3f:d3:ec:46:69:bb:4e:75:3a:71:b6:01:f9:
fb:ca:06:38:ba:4d:df:1f:01:34:b4:29:c2:ce:2a:9d:99:23:
33:f4:ab:88:49:af:9f:03:ae:af:3d:db:51:78:7f:25:b7:f5:
8c:51:a1:09:f6:6f:fd:3b:24:0d:f4:14:e0:0b:2e:97:56:89:
ef:dc:95:90:3b:41:65:d6:4c:b5:36:44:84:ad:f6:1c:c3:95:
b1:c8:8b:0c:dd:0a:3e:f8:6c:dd:80:30:f0:77:1c:b4:de:84:
01:3e:3f:77:c4:d0:25:e2:ea:9d:bd:5e:a8:9f:d5:4b:d6:87:
6f:cf:b6:29:f4:cf:87:bf:64:12:28:7a:86:17:d7:a8:8f:1b:
5c:5e:13:a1:4a:b0:82:6b:20:50:ff:52:bc:18:43:d0:ac:20:
56:74:90:b2:f5:53:36:29:bc:b3:5f:14:a9:d8:9e:e9:47:98:
01:f1:ea:74
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDUxQzExMTAvBgNVBAUTKDk3QkI1NEIzRDIzQzM3QzNERDNFMDE2OUNBOTc0RDI3
REJBOUYwNTAwHhcNMjUwMzI4MjMyNzAxWhcNMjUwNDA0MjMyNzAxWjAYMRYwFAYD
VQQDEw02N2U3MzA0NS00NjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuCzt8oIlt9pvGLaMcrZHewdNehwczldZOXBPqJbv+Ghc8hCzkFKqqF6SevZy
FYyujCN2JFBnT9sHsbSiKp7DukYN05G613g8/QVoqemNuVM+pP79c8m57oQFkzyq
iQooV6AeWjyQYWa2sjDVOa+jSlTQi+IxgTVHg6/FxpSzV4zCjluO3Trq42rQ7LIA
vDj1XU8zUXttdfZnZf+mikQBEUnMwy0dBvAhk1nkO2wVgGVAZOHesGV8QJoQZAG5
QEuqLJdbYEGkG5C7uWR7e6IRe4ngUcuMgkfsVVJtgVSrEqnBGZ5Fohgymhx+cXjg
pwVyO9qxFkq4Y8AsQrRncjLSHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6SEdvV
9tuUX1q9XowKSfBrL4ESMB8GA1UdIwQYMBaAFJe7VLPSPDfD3T4BacqXTSfbqfBQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTFDMS9EOTJFNjlBQUMx
RUUxMUVCQkZENTdFMkFDNEY5QUUwMi9sN3RVczlJOE44UGRQZ0ZweXBkTko5dXA4
RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2w3dFVzOUk4TjhQZFBnRnB5cGROSjl1cDhGQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NTFDMS9EOTJFNjlBQUMxRUUxMUVCQkZENTdFMkFDNEY5QUUwMi9sN3RVczlJOE44
UGRQZ0ZweXBkTko5dXA4RkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAJ+39K430GuWe6Dwx2s3CzPfS+ExXeVLDzs8Ybul1U/6gFZifwIJ8X
GUGyFR2DFQ+SrDcaLMnZzRnml2Ziw4e5QEZikqYuZvWVRrPXRj/T7EZpu051OnG2
Afn7ygY4uk3fHwE0tCnCziqdmSMz9KuISa+fA66vPdtReH8lt/WMUaEJ9m/9OyQN
9BTgCy6XVonv3JWQO0Fl1ky1NkSErfYcw5WxyIsM3Qo++GzdgDDwdxy03oQBPj93
xNAl4uqdvV6on9VL1odvz7Yp9M+Hv2QSKHqGF9eojxtcXhOhSrCCayBQ/1K8GEPQ
rCBWdJCy9VM2KbyzXxSp2J7pR5gB8ep0
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:44:24 2025 by rpki-client