Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft
File: 3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft (raw, json)
Hash identifier: Vyf86KEZNHzNr45bxHQSX3jNxguZj941UTv41TEXZCk=
Subject key identifier: E5:4B:A4:E7:70:E1:98:3D:D6:E7:A4:F6:59:79:33:4B:F2:08:01:8E
Authority key identifier: DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11
Certificate issuer: /CN=A91D76BE/serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11
Certificate serial: 0A1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft
Manifest number: 0A16
Signing time: Fri 28 Mar 2025 20:02:48 +0000
Manifest this update: Fri 28 Mar 2025 20:02:48 +0000
Manifest next update: Fri 04 Apr 2025 20:02:48 +0000
Files and hashes: 1: 3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl (hash: vtdNdRA8l/tBDCcaKUIpkqxIxV088bwPCaOY0ej+HoI=)
2: 47772F946C2011EAA5965B3CC4F9AE02.roa (hash: VtwEbio1gRB7Ch5LlsoNkh9yhOMrAAqsTjIWAhPZFj0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2589 (0xa1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D76BE
Validity
Not Before: Mar 28 20:02:48 2025 GMT
Not After : Apr 4 20:02:48 2025 GMT
Subject: CN=67e70068-3334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a6:61:04:b9:cb:a5:f2:0c:2f:6d:44:0c:16:
0e:e3:38:38:4d:44:62:79:0e:87:0e:97:af:f8:a8:
5d:56:69:9f:3d:cc:da:28:7e:30:52:65:2b:49:1e:
19:0c:3f:e4:a0:c2:de:9c:50:c6:d1:59:ca:7c:5f:
f7:36:b0:20:31:0c:ed:fb:a9:60:3c:0a:21:59:ee:
0e:32:3c:af:9f:a4:3d:bc:e8:cd:a9:ff:b7:4f:ba:
b0:3e:99:3f:a2:c7:40:5f:36:e7:b6:02:6e:cb:8d:
77:da:98:f8:17:48:03:74:91:da:6f:a9:ad:8e:53:
e7:40:d4:c6:b4:7d:3c:87:c5:ee:a1:e1:c4:59:ab:
86:d0:7d:f2:4e:1f:b6:28:ec:51:34:2f:90:0d:7f:
98:ac:95:12:05:91:d7:8a:70:b7:33:87:e8:26:10:
5c:f2:bb:6e:ec:ba:10:08:cc:0b:ad:c3:de:14:76:
2d:c0:60:da:09:a6:88:a6:32:0b:72:cb:1e:bd:9b:
a0:bb:76:d7:b0:79:fb:4e:30:8a:36:19:e6:d5:df:
9b:21:63:7a:e4:d6:d2:08:b4:31:f8:24:26:71:b4:
4f:92:33:70:34:7b:c1:55:b7:25:c7:e0:31:c8:6b:
21:6e:f3:2a:47:99:8e:53:f8:fb:d1:c9:3e:09:d1:
e9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4B:A4:E7:70:E1:98:3D:D6:E7:A4:F6:59:79:33:4B:F2:08:01:8E
X509v3 Authority Key Identifier:
keyid:DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:d7:c9:f2:98:4e:05:50:ed:f0:84:b7:c1:b1:3b:7b:68:a4:
1f:7f:52:9a:d3:c1:f0:29:40:fd:67:ff:35:42:02:e5:ec:33:
cd:a7:da:59:8f:6c:20:ad:d0:c5:da:00:4c:70:33:71:9b:97:
57:f3:86:17:a6:4c:b6:03:72:f8:24:2b:d5:fb:7a:62:f6:cd:
fa:c5:5c:6b:05:ff:6a:3a:34:b2:b1:62:3e:28:c0:dc:ea:b0:
2b:72:66:8d:db:9f:87:d3:bb:da:58:73:9f:b3:24:69:b3:60:
5a:da:04:0f:89:2b:d1:5d:21:00:c8:a0:10:cf:b3:20:1d:a4:
cb:5f:62:c9:a3:d8:90:3c:d1:4c:d3:a2:af:e4:65:e2:d8:bf:
f2:6c:09:ce:9c:0f:db:e4:12:4e:53:61:34:4f:8e:17:c8:7e:
12:4b:ef:04:76:05:96:af:cf:16:46:c8:e9:f3:45:54:7a:eb:
c9:2a:a1:ec:33:37:7f:3f:dd:0f:c4:20:2e:61:4d:11:b8:f6:
86:fc:da:9a:5d:98:1a:d3:fc:e6:58:57:9b:db:4a:00:ab:25:
be:66:1f:81:e6:d6:51:25:7d:ba:54:a1:f8:90:f1:af:f0:20:
b0:b3:d2:c4:01:5f:5b:39:45:86:08:ce:74:1b:21:2c:81:41:
d1:de:2a:c3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDc2QkUxMTAvBgNVBAUTKEREMTE4QkJCMzQ5RjJDOUI0MEREOUJCNzFBNUI2MUM2
NEJEQjNFMTEwHhcNMjUwMzI4MjAwMjQ4WhcNMjUwNDA0MjAwMjQ4WjAYMRYwFAYD
VQQDEw02N2U3MDA2OC0zMzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzqZhBLnLpfIML21EDBYO4zg4TURieQ6HDpev+KhdVmmfPczaKH4wUmUrSR4Z
DD/koMLenFDG0VnKfF/3NrAgMQzt+6lgPAohWe4OMjyvn6Q9vOjNqf+3T7qwPpk/
osdAXzbntgJuy4132pj4F0gDdJHab6mtjlPnQNTGtH08h8XuoeHEWauG0H3yTh+2
KOxRNC+QDX+YrJUSBZHXinC3M4foJhBc8rtu7LoQCMwLrcPeFHYtwGDaCaaIpjIL
cssevZugu3bXsHn7TjCKNhnm1d+bIWN65NbSCLQx+CQmcbRPkjNwNHvBVbclx+Ax
yGshbvMqR5mOU/j70ck+CdHp2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVLpOdw
4Zg91uek9ll5M0vyCAGOMB8GA1UdIwQYMBaAFN0Ri7s0nyybQN2btxpbYcZL2z4R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzZCRS80NEMyOUUwRTZC
NzcxMUVBODY1OTQ0NzZDNEY5QUUwMi8zUkdMdXpTZkxKdEEzWnUzR2x0aHhrdmJQ
aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNSR0x1elNmTEp0QTNadTNHbHRoeGt2YlBoRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NzZCRS80NEMyOUUwRTZCNzcxMUVBODY1OTQ0NzZDNEY5QUUwMi8zUkdMdXpTZkxK
dEEzWnUzR2x0aHhrdmJQaEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCj18nymE4FUO3whLfBsTt7aKQff1Ka08HwKUD9Z/81QgLl7DPNp9pZ
j2wgrdDF2gBMcDNxm5dX84YXpky2A3L4JCvV+3pi9s36xVxrBf9qOjSysWI+KMDc
6rArcmaN25+H07vaWHOfsyRps2Ba2gQPiSvRXSEAyKAQz7MgHaTLX2LJo9iQPNFM
06Kv5GXi2L/ybAnOnA/b5BJOU2E0T44XyH4SS+8EdgWWr88WRsjp80VUeuvJKqHs
Mzd/P90PxCAuYU0RuPaG/NqaXZga0/zmWFeb20oAqyW+Zh+B5tZRJX26VKH4kPGv
8CCws9LEAV9bOUWGCM50GyEsgUHR3irD
-----END CERTIFICATE-----
Generated at Fri Apr 11 19:00:39 2025 by rpki-client