Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft
File: d7TYOLfSKf0cdNVYLHNekbVnteI.mft (raw, json)
Hash identifier: jn3nRr1/FfIGgp7I2FutQIrkuzpP8rWo7LUJpp0OPuU=
Subject key identifier: 8D:EF:28:E4:0F:A5:49:DB:24:39:C3:79:05:1C:19:D4:B7:A3:9A:36
Authority key identifier: 77:B4:D8:38:B7:D2:29:FD:1C:74:D5:58:2C:73:5E:91:B5:67:B5:E2
Certificate issuer: /CN=A91D9EAC/serialNumber=77B4D838B7D229FD1C74D5582C735E91B567B5E2
Certificate serial: 03CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d7TYOLfSKf0cdNVYLHNekbVnteI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft
Manifest number: 03C6
Signing time: Sat 29 Mar 2025 00:53:20 +0000
Manifest this update: Sat 29 Mar 2025 00:53:19 +0000
Manifest next update: Sat 05 Apr 2025 00:53:19 +0000
Files and hashes: 1: d7TYOLfSKf0cdNVYLHNekbVnteI.crl (hash: nDoWplHI4vsSrLCPf3p6aTvDaYZy4uqD0luSWX73Q6U=)
2: 55976FBE7F4A11ECB6E05A38C4F9AE02.roa (hash: gxyFLyvg9iXUzDVt1BFdSUDwgh1JJfmLmwnyPeOCm3g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 971 (0x3cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9EAC
Validity
Not Before: Mar 29 00:53:19 2025 GMT
Not After : Apr 5 00:53:19 2025 GMT
Subject: CN=67e7447f-bbdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:27:09:f3:c3:99:db:31:48:f3:2d:c7:53:42:
dd:d0:6c:c5:a3:3c:03:15:b3:2a:8d:b9:23:5c:ee:
fd:cb:01:b4:5c:80:92:2c:a0:6a:48:6a:46:a9:86:
14:c2:9d:ce:35:82:09:e5:b4:a3:c1:f8:f4:0f:d1:
9c:d2:f4:c5:d0:3f:dc:a2:d4:03:aa:20:7f:63:22:
84:95:04:3f:8b:37:42:12:7f:0e:00:f1:36:00:51:
89:e1:62:42:80:45:7a:1d:6d:72:ef:db:a0:7f:9d:
92:a6:00:02:1f:d0:ca:c8:1f:11:5e:9d:cd:22:16:
47:9c:a0:38:64:47:b9:4c:be:72:3c:34:7f:e7:40:
cf:44:3f:20:eb:f5:63:0e:31:1f:68:5c:63:33:79:
3b:cf:f7:48:28:51:17:32:3e:f8:db:39:5f:b7:b1:
b9:77:d3:c0:04:5f:19:27:5d:a2:23:13:5e:88:8c:
f1:5c:f2:05:11:92:b0:5c:9f:f7:5c:4e:b8:4f:c0:
47:10:5c:d0:58:98:3e:29:08:9a:c7:f6:5a:d4:b9:
6a:ee:1a:41:6f:9a:1d:30:82:80:50:fd:96:02:b6:
ce:b3:f1:3f:cf:42:06:83:4b:b5:75:c0:8e:32:f0:
e4:89:18:c0:cc:10:7f:44:0e:20:ab:ed:3a:6b:2e:
1d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EF:28:E4:0F:A5:49:DB:24:39:C3:79:05:1C:19:D4:B7:A3:9A:36
X509v3 Authority Key Identifier:
keyid:77:B4:D8:38:B7:D2:29:FD:1C:74:D5:58:2C:73:5E:91:B5:67:B5:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d7TYOLfSKf0cdNVYLHNekbVnteI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:17:37:f2:ae:d1:0e:5b:65:4e:ef:5a:09:42:12:50:cc:40:
be:3b:cc:8b:35:4a:03:48:a9:c2:00:cf:7d:ae:47:80:a2:9f:
c0:20:d4:11:98:b3:35:2e:f7:49:7e:88:a4:ee:9b:e9:42:fb:
a4:c8:2d:5d:13:7c:a0:69:51:fa:26:11:68:ac:84:76:7a:fe:
2c:54:c8:43:81:67:f2:29:b9:47:dc:f2:d2:8b:96:85:88:c2:
3a:49:46:bd:fd:3e:87:10:07:22:c2:47:2d:16:b7:35:f2:f4:
71:33:6e:fd:21:22:17:0d:40:97:cc:c7:68:9e:d6:74:da:a0:
16:f0:5d:28:53:52:78:19:da:b5:80:58:3a:10:4a:3d:bb:7a:
5d:d2:cd:7f:67:6b:ff:97:c3:91:03:eb:bb:47:d7:d8:f6:95:
9c:c8:90:b8:d0:a6:f0:39:3b:f4:bb:66:47:f8:f2:1d:c9:5a:
3d:f6:81:ce:3f:68:bc:7d:93:ef:ca:17:a0:e7:18:df:de:82:
a5:8e:3f:1d:8f:e4:2d:9a:83:44:76:ab:dd:23:2e:77:c1:31:
a9:2e:13:95:16:5e:67:62:2f:4c:7d:ae:31:a8:53:df:09:74:
6f:80:8d:b6:6a:dc:7c:24:e3:31:6a:21:b2:92:5c:2b:b6:7a:
e6:92:56:c0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDlFQUMxMTAvBgNVBAUTKDc3QjREODM4QjdEMjI5RkQxQzc0RDU1ODJDNzM1RTkx
QjU2N0I1RTIwHhcNMjUwMzI5MDA1MzE5WhcNMjUwNDA1MDA1MzE5WjAYMRYwFAYD
VQQDEw02N2U3NDQ3Zi1iYmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyCcJ88OZ2zFI8y3HU0Ld0GzFozwDFbMqjbkjXO79ywG0XICSLKBqSGpGqYYU
wp3ONYIJ5bSjwfj0D9Gc0vTF0D/cotQDqiB/YyKElQQ/izdCEn8OAPE2AFGJ4WJC
gEV6HW1y79ugf52SpgACH9DKyB8RXp3NIhZHnKA4ZEe5TL5yPDR/50DPRD8g6/Vj
DjEfaFxjM3k7z/dIKFEXMj742zlft7G5d9PABF8ZJ12iIxNeiIzxXPIFEZKwXJ/3
XE64T8BHEFzQWJg+KQiax/Za1Llq7hpBb5odMIKAUP2WArbOs/E/z0IGg0u1dcCO
MvDkiRjAzBB/RA4gq+06ay4daQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3vKOQP
pUnbJDnDeQUcGdS3o5o2MB8GA1UdIwQYMBaAFHe02Di30in9HHTVWCxzXpG1Z7Xi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUVBQy81RDQ1MEZBRTdG
NDYxMUVDQUVEM0VBNjJDNEY5QUUwMi9kN1RZT0xmU0tmMGNkTlZZTEhOZWtiVm50
ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Q3VFlPTGZTS2YwY2ROVllMSE5la2JWbnRlSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OUVBQy81RDQ1MEZBRTdGNDYxMUVDQUVEM0VBNjJDNEY5QUUwMi9kN1RZT0xmU0tm
MGNkTlZZTEhOZWtiVm50ZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQABFzfyrtEOW2VO71oJQhJQzEC+O8yLNUoDSKnCAM99rkeAop/AINQR
mLM1LvdJfoik7pvpQvukyC1dE3ygaVH6JhForIR2ev4sVMhDgWfyKblH3PLSi5aF
iMI6SUa9/T6HEAciwkctFrc18vRxM279ISIXDUCXzMdontZ02qAW8F0oU1J4Gdq1
gFg6EEo9u3pd0s1/Z2v/l8ORA+u7R9fY9pWcyJC40KbwOTv0u2ZH+PIdyVo99oHO
P2i8fZPvyheg5xjf3oKljj8dj+QtmoNEdqvdIy53wTGpLhOVFl5nYi9Mfa4xqFPf
CXRvgI22atx8JOMxaiGyklwrtnrmklbA
-----END CERTIFICATE-----
Generated at Thu Apr 10 20:28:11 2025 by rpki-client