Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.mft
File: EobObnRy-d6N8qVtj9oUScpz7dw.mft (raw, json)
Hash identifier: KcBlqt/RXDp21C1ZEVCx79ReufU8kptg24ij092uFXQ=
Subject key identifier: 50:C8:B4:47:76:A9:FC:97:78:94:0C:7A:57:22:9E:EE:0C:2E:3B:CC
Authority key identifier: 12:86:CE:6E:74:72:F9:DE:8D:F2:A5:6D:8F:DA:14:49:CA:73:ED:DC
Certificate issuer: /CN=A91D9196/serialNumber=1286CE6E7472F9DE8DF2A56D8FDA1449CA73EDDC
Certificate serial: 1EF9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EobObnRy-d6N8qVtj9oUScpz7dw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.mft
Manifest number: 1EE3
Signing time: Fri 28 Mar 2025 16:08:51 +0000
Manifest this update: Fri 28 Mar 2025 16:08:50 +0000
Manifest next update: Fri 04 Apr 2025 16:08:50 +0000
Files and hashes: 1: EobObnRy-d6N8qVtj9oUScpz7dw.crl (hash: TWQ5v5jlTyAhK36PuniFT6ht8mcbu9VQvqcXNLEoRjo=)
2: 166B6FD854EE11E78DFD1629C4F9AE02.roa (hash: 4pH+e0DAGB7uiyu6q3/py65vuNCItVcuG3R7I6BU3bw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7929 (0x1ef9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9196
Validity
Not Before: Mar 28 16:08:50 2025 GMT
Not After : Apr 4 16:08:50 2025 GMT
Subject: CN=67e6c993-1fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a5:5f:a1:36:dc:13:40:a8:66:3a:d2:25:f1:
fe:8d:6d:ff:49:01:a6:ec:76:69:d6:18:01:2a:48:
c8:44:e3:81:e4:42:0a:ec:d3:be:39:5e:ab:0a:8f:
f7:99:d3:61:05:99:34:f9:d5:de:67:9f:b3:b1:82:
ef:92:7b:d4:dd:71:45:25:e8:18:c5:21:6f:4a:c6:
6a:fe:a8:9d:ef:c9:60:30:6a:d0:ef:67:1a:9a:07:
86:4b:33:9c:f8:37:34:33:0d:d2:1b:6f:54:21:fd:
d8:8b:5f:70:47:f3:ef:fb:90:fd:cd:7c:f4:de:d0:
46:d5:2c:52:bb:44:1b:d8:a9:ce:75:d9:21:4e:aa:
47:e2:38:34:35:96:89:19:00:4c:25:cf:b4:70:8a:
4e:cb:20:50:30:ef:f2:ee:7b:e2:32:9c:dd:ba:4f:
82:33:b5:b9:a0:07:da:a7:87:e8:15:ba:43:68:43:
af:9a:6f:97:53:8a:71:14:45:c5:25:96:6f:64:1c:
d7:db:04:4e:c3:83:e9:bf:05:06:1c:15:e0:8b:0e:
12:9c:93:94:87:28:d4:8c:98:2d:9a:8f:eb:30:be:
44:d3:ab:fd:db:c3:18:b4:f4:05:56:99:88:e7:b7:
7d:39:62:f9:58:bc:d6:52:a3:9c:be:d5:97:c3:a7:
63:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C8:B4:47:76:A9:FC:97:78:94:0C:7A:57:22:9E:EE:0C:2E:3B:CC
X509v3 Authority Key Identifier:
keyid:12:86:CE:6E:74:72:F9:DE:8D:F2:A5:6D:8F:DA:14:49:CA:73:ED:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EobObnRy-d6N8qVtj9oUScpz7dw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:7a:d3:23:51:40:92:d3:81:b0:0f:d0:51:8b:bb:6e:5d:71:
2c:ac:b5:63:f3:41:96:59:a5:34:b8:fc:a7:76:dd:89:36:20:
7a:a1:32:ba:dd:d1:09:81:8e:6a:a2:c7:c1:e8:e6:36:d6:cf:
6e:0c:5b:14:92:3d:bf:5a:b5:62:fa:e4:2d:c6:3a:27:8c:d2:
a5:e1:68:6b:7d:26:2d:82:3d:4d:c7:fc:c4:ae:e9:68:7d:84:
11:24:7c:e4:08:fc:6b:b4:20:46:51:86:76:22:53:28:31:ce:
4b:b6:c2:30:c2:5d:03:29:dd:cc:79:3e:01:ff:eb:c8:10:ac:
eb:35:a3:7c:03:d8:9f:cc:87:9e:53:47:09:6e:d1:91:9b:42:
0e:0e:25:32:12:00:4f:74:44:d9:ce:8a:4e:c1:fd:b5:02:d2:
f8:8a:4c:24:64:09:7a:6e:5c:bc:b8:3e:14:d9:37:e3:fe:51:
8d:5e:b5:48:cb:9d:e5:ce:2f:ca:ce:09:4d:8d:29:51:2b:3d:
fd:d2:11:ba:ff:42:25:40:70:24:5e:2e:f0:66:ed:d4:30:cd:
f8:ee:1d:c8:6a:9a:a0:b1:34:55:b9:58:d0:b4:87:1c:a8:8f:
ce:89:b9:44:a6:94:70:ab:7c:2c:f1:d1:09:0c:2a:59:81:37:
46:bf:b1:f2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDkxOTYxMTAvBgNVBAUTKDEyODZDRTZFNzQ3MkY5REU4REYyQTU2RDhGREExNDQ5
Q0E3M0VEREMwHhcNMjUwMzI4MTYwODUwWhcNMjUwNDA0MTYwODUwWjAYMRYwFAYD
VQQDEw02N2U2Yzk5My0xZmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA06VfoTbcE0CoZjrSJfH+jW3/SQGm7HZp1hgBKkjIROOB5EIK7NO+OV6rCo/3
mdNhBZk0+dXeZ5+zsYLvknvU3XFFJegYxSFvSsZq/qid78lgMGrQ72camgeGSzOc
+Dc0Mw3SG29UIf3Yi19wR/Pv+5D9zXz03tBG1SxSu0Qb2KnOddkhTqpH4jg0NZaJ
GQBMJc+0cIpOyyBQMO/y7nviMpzduk+CM7W5oAfap4foFbpDaEOvmm+XU4pxFEXF
JZZvZBzX2wROw4PpvwUGHBXgiw4SnJOUhyjUjJgtmo/rML5E06v928MYtPQFVpmI
57d9OWL5WLzWUqOcvtWXw6djWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDItEd2
qfyXeJQMelcinu4MLjvMMB8GA1UdIwQYMBaAFBKGzm50cvnejfKlbY/aFEnKc+3c
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTE5Ni80MzhGNUQ5NjVB
MUExMUU2QTM4NjQ5MTBDNEY5QUUwMi9Fb2JPYm5SeS1kNk44cVZ0ajlvVVNjcHo3
ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VvYk9iblJ5LWQ2TjhxVnRqOW9VU2Nwejdkdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OTE5Ni80MzhGNUQ5NjVBMUExMUU2QTM4NjQ5MTBDNEY5QUUwMi9Fb2JPYm5SeS1k
Nk44cVZ0ajlvVVNjcHo3ZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQByetMjUUCS04GwD9BRi7tuXXEsrLVj80GWWaU0uPyndt2JNiB6oTK6
3dEJgY5qosfB6OY21s9uDFsUkj2/WrVi+uQtxjonjNKl4WhrfSYtgj1Nx/zErulo
fYQRJHzkCPxrtCBGUYZ2IlMoMc5LtsIwwl0DKd3MeT4B/+vIEKzrNaN8A9ifzIee
U0cJbtGRm0IODiUyEgBPdETZzopOwf21AtL4ikwkZAl6bly8uD4U2Tfj/lGNXrVI
y53lzi/KzglNjSlRKz390hG6/0IlQHAkXi7wZu3UMM347h3IapqgsTRVuVjQtIcc
qI/OiblEppRwq3ws8dEJDCpZgTdGv7Hy
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:14:40 2025 by rpki-client