Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft
File: dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft (raw, json)
Hash identifier: Dix1bD52lLu8qdZAub/yzM+6Alf74VRlj3EuXGgaXQA=
Subject key identifier: A7:5E:2C:5A:F5:20:08:4E:29:69:AD:E3:D4:4A:C7:67:2E:AC:C2:6A
Authority key identifier: 74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86
Certificate issuer: /CN=A91D76E5/serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886
Certificate serial: 083D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft
Manifest number: 0834
Signing time: Fri 28 Mar 2025 21:03:54 +0000
Manifest this update: Fri 28 Mar 2025 21:03:53 +0000
Manifest next update: Fri 04 Apr 2025 21:03:53 +0000
Files and hashes: 1: dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl (hash: v8X9Qx3LfQSA75nFWf5+LSbdaAe9H5YW6w3eYL+nUOw=)
2: 94B101721B8B11EEACEA736AC4F9AE02.roa (hash: 8KEvrrkPqDZO6TToBnuRSPRZoDSK+MH3syDaDWUh+s0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2109 (0x83d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D76E5
Validity
Not Before: Mar 28 21:03:53 2025 GMT
Not After : Apr 4 21:03:53 2025 GMT
Subject: CN=67e70eba-2b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c1:1a:43:ac:31:e4:60:5a:f6:de:1c:b8:49:
ad:d6:ad:9a:dc:a7:10:47:22:56:89:57:64:d1:ac:
60:06:e2:60:9e:83:99:85:4f:95:38:1b:ac:4c:4a:
84:9f:13:65:5f:e6:03:68:46:43:4c:c3:eb:cb:09:
d1:5b:ac:95:ea:1b:d6:8a:25:b8:45:9c:a7:4a:10:
fc:a5:1e:89:31:f3:50:71:f1:53:ee:c7:0d:58:6b:
dc:d8:a3:60:ad:d1:33:ce:15:be:a8:c3:e4:da:84:
e7:05:0b:b1:7a:91:a1:95:48:83:12:fb:3c:b5:b0:
4c:b6:9e:21:47:53:df:bb:48:0c:d7:34:6f:81:86:
cd:bc:97:65:1e:15:87:f7:a4:56:8a:00:07:72:66:
8c:d8:fe:1c:68:5c:85:7b:6e:1f:d7:18:74:93:da:
07:97:25:6d:d5:42:ee:7e:cf:d9:2f:96:a4:43:2f:
f1:ac:fb:be:ed:38:1b:76:62:85:c0:81:f2:c8:6a:
15:88:8a:d1:63:e6:48:aa:17:c6:9b:5c:b0:6a:bf:
15:6b:d0:35:64:5d:33:1d:bc:e8:75:88:36:66:9a:
3e:26:64:74:d7:54:0e:ad:67:f2:d9:46:40:c1:a5:
47:f9:6e:5a:33:9f:35:ad:97:a5:7a:d6:9d:f3:1a:
ae:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5E:2C:5A:F5:20:08:4E:29:69:AD:E3:D4:4A:C7:67:2E:AC:C2:6A
X509v3 Authority Key Identifier:
keyid:74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:16:f2:ed:d0:b1:42:d0:39:08:e6:ed:4d:6a:8d:63:f9:0f:
dd:bf:2f:c5:5d:05:9f:72:65:bb:6a:91:b0:ce:f8:d9:2c:97:
ff:e3:19:28:c5:53:43:41:0d:28:2e:ae:65:2e:4b:45:60:3a:
39:06:b7:f9:e7:c5:d8:57:79:ec:69:0a:45:bc:88:03:81:61:
3c:66:4e:ea:8d:5b:9a:98:dd:67:4d:e1:3e:0b:70:c1:c6:39:
48:e9:6e:fb:7b:11:71:29:8a:39:03:6b:f4:51:b1:b5:5d:08:
b9:f1:50:29:fe:50:a8:5f:31:3b:60:23:e4:1b:a8:a2:5c:8f:
ae:19:72:05:01:73:ed:ba:0a:96:d7:f4:e0:d0:68:c6:55:d1:
97:7d:09:20:3f:b4:b0:4e:33:27:69:8f:7a:64:14:75:67:b5:
08:3d:17:bf:9f:f8:1f:18:c2:a7:5a:23:7f:c6:19:af:fb:a0:
79:cf:e1:a8:cc:1b:39:99:05:11:1f:4b:36:54:46:03:de:c4:
f8:da:89:e1:0b:44:d4:12:61:8f:d9:69:ec:62:7f:6b:35:b9:
e1:c1:ae:3d:bb:31:b2:0d:0e:b5:0a:3b:e4:93:3e:6f:d9:fd:
3c:ad:bd:a7:56:fc:ea:08:35:66:0c:f6:b0:31:4e:43:21:65:
2b:cf:af:2f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDc2RTUxMTAvBgNVBAUTKDc0OEJDNzlBRkE5QjdGRjc1QjEzMDBBRDI5NDBFN0ZD
QzE0MkY4ODYwHhcNMjUwMzI4MjEwMzUzWhcNMjUwNDA0MjEwMzUzWjAYMRYwFAYD
VQQDEw02N2U3MGViYS0yYjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwMEaQ6wx5GBa9t4cuEmt1q2a3KcQRyJWiVdk0axgBuJgnoOZhU+VOBusTEqE
nxNlX+YDaEZDTMPrywnRW6yV6hvWiiW4RZynShD8pR6JMfNQcfFT7scNWGvc2KNg
rdEzzhW+qMPk2oTnBQuxepGhlUiDEvs8tbBMtp4hR1Pfu0gM1zRvgYbNvJdlHhWH
96RWigAHcmaM2P4caFyFe24f1xh0k9oHlyVt1ULufs/ZL5akQy/xrPu+7TgbdmKF
wIHyyGoViIrRY+ZIqhfGm1ywar8Va9A1ZF0zHbzodYg2Zpo+JmR011QOrWfy2UZA
waVH+W5aM581rZeletad8xqu0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKdeLFr1
IAhOKWmt49RKx2curMJqMB8GA1UdIwQYMBaAFHSLx5r6m3/3WxMArSlA5/zBQviG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzZFNS9FMDgzQTBFQUNC
MTIxMUVBOTI1MDdBMkJDNEY5QUUwMi9kSXZIbXZxYmZfZGJFd0N0S1VEbl9NRkMt
SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RJdkhtdnFiZl9kYkV3Q3RLVURuX01GQy1JWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NzZFNS9FMDgzQTBFQUNCMTIxMUVBOTI1MDdBMkJDNEY5QUUwMi9kSXZIbXZxYmZf
ZGJFd0N0S1VEbl9NRkMtSVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAqFvLt0LFC0DkI5u1Nao1j+Q/dvy/FXQWfcmW7apGwzvjZLJf/4xko
xVNDQQ0oLq5lLktFYDo5Brf558XYV3nsaQpFvIgDgWE8Zk7qjVuamN1nTeE+C3DB
xjlI6W77exFxKYo5A2v0UbG1XQi58VAp/lCoXzE7YCPkG6iiXI+uGXIFAXPtugqW
1/Tg0GjGVdGXfQkgP7SwTjMnaY96ZBR1Z7UIPRe/n/gfGMKnWiN/xhmv+6B5z+Go
zBs5mQURH0s2VEYD3sT42onhC0TUEmGP2WnsYn9rNbnhwa49uzGyDQ61Cjvkkz5v
2f08rb2nVvzqCDVmDPawMU5DIWUrz68v
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:22:11 2025 by rpki-client