Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft
File: Abso_b4VWoZixe5oDP3wyY1OvR0.mft (raw, json)
Hash identifier: ZptfSvgYEp0ElL7RsTb378md34qqW+eA5wEOrWIBGVo=
Subject key identifier: BD:3E:B6:F6:7E:3D:A1:4D:FC:9A:9E:1A:E8:08:84:53:F3:D6:29:43
Authority key identifier: 01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D
Certificate issuer: /CN=A91DACA7/serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D
Certificate serial: 86
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft
Manifest number: 84
Signing time: Sat 29 Mar 2025 05:56:01 +0000
Manifest this update: Sat 29 Mar 2025 05:56:01 +0000
Manifest next update: Sat 05 Apr 2025 05:56:01 +0000
Files and hashes: 1: Abso_b4VWoZixe5oDP3wyY1OvR0.crl (hash: NHcgLfLGaiM3/yjyZRVN6HpdTzsNp3+JXg9CeLvNy8U=)
2: ECB0C56845B211EFBCC09A1AC4F9AE02.roa (hash: EGPY/0B+FhNPcxx4yI5SHvTWW9NTcAbNHzvZ84arIm4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DACA7
Validity
Not Before: Mar 29 05:56:01 2025 GMT
Not After : Apr 5 05:56:01 2025 GMT
Subject: CN=67e78b71-5997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:99:fd:71:a5:3c:8e:53:a2:c1:8b:99:e6:07:
c7:d1:97:ad:69:f0:38:7c:dc:90:66:a7:d9:af:41:
44:d1:f9:70:6a:65:da:cb:c9:b4:3c:74:52:f5:e8:
89:51:74:a9:6f:f6:c0:6a:dd:a9:6a:2e:32:8c:51:
9a:d3:38:16:b8:92:22:85:0a:ff:08:c5:b9:11:01:
5b:ab:56:87:2b:04:f3:9f:4a:be:ed:a0:7b:ed:95:
09:12:29:af:d6:41:5c:71:f5:03:18:72:ee:99:04:
58:24:89:b5:b3:ff:d9:2f:90:5d:0d:34:b0:c3:10:
2d:06:5f:b7:27:2e:43:56:ca:40:5a:6d:7f:77:7e:
64:ae:ee:58:b3:5a:b4:81:f8:bb:74:de:c4:f9:75:
6b:02:bd:19:58:bc:84:d7:eb:b2:b2:a8:46:30:0d:
bc:a0:ff:ed:95:18:f1:f4:3e:03:17:c8:9e:ad:6a:
52:a7:62:b3:aa:fb:1b:06:ea:1e:75:d1:70:20:72:
3f:7e:6c:09:5f:18:3e:bd:03:c0:70:69:8e:16:f9:
fb:d7:6c:b1:a6:1b:9f:8d:7d:8a:0c:29:a2:20:76:
56:d4:61:e9:7c:b9:80:f1:05:bd:8c:bf:52:d4:41:
0f:d4:b3:c4:34:eb:d0:71:74:75:2f:98:e5:6d:b1:
c7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3E:B6:F6:7E:3D:A1:4D:FC:9A:9E:1A:E8:08:84:53:F3:D6:29:43
X509v3 Authority Key Identifier:
keyid:01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:2c:ed:a1:d0:e6:d2:7a:33:22:e1:75:62:40:25:ed:c8:f2:
7a:a3:b9:5c:20:e8:af:b7:79:81:8b:2c:0a:c8:c9:45:c8:ab:
46:f1:59:ec:ba:77:49:36:b2:b0:8f:80:76:5d:31:2f:a0:82:
a8:71:8e:ef:b6:1b:bc:8d:9f:28:02:45:cd:67:f5:bd:cc:70:
f6:62:67:a2:5e:71:ad:49:9a:bd:69:bd:92:a4:5e:f6:4a:77:
e4:c4:26:f3:c9:19:f5:d9:ab:fd:db:5b:8f:0c:15:9e:70:d3:
1a:17:6f:48:4e:4f:17:4c:ae:49:17:ad:97:b3:aa:ce:1a:fb:
7f:cb:b2:6e:7c:04:dc:b5:c2:a9:8f:a6:2f:c7:21:6c:aa:ed:
e3:f8:f1:ad:63:8f:53:a1:a6:de:2f:0f:b1:24:b7:10:5a:c2:
16:ce:85:25:46:7e:4d:33:54:b4:35:de:78:c1:09:de:b9:5f:
5e:3a:04:76:0d:95:7c:67:d0:4f:a1:89:12:2a:ed:e5:5e:7d:
2c:03:f5:06:f0:96:e2:c4:66:79:67:87:fa:ba:c2:30:75:45:
dc:d8:0e:85:99:a5:f9:59:a9:f2:17:21:75:30:01:49:33:23:
41:eb:5a:cb:7e:f6:25:fd:e1:ca:a2:cb:c2:1b:94:e7:3b:ab:
9f:83:0c:3b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REFDQTcxMTAvBgNVBAUTKDAxQkIyOEZEQkUxNTVBODY2MkM1RUU2ODBDRkRGMEM5
OEQ0RUJEMUQwHhcNMjUwMzI5MDU1NjAxWhcNMjUwNDA1MDU1NjAxWjAYMRYwFAYD
VQQDEw02N2U3OGI3MS01OTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4pn9caU8jlOiwYuZ5gfH0ZetafA4fNyQZqfZr0FE0flwamXay8m0PHRS9eiJ
UXSpb/bAat2pai4yjFGa0zgWuJIihQr/CMW5EQFbq1aHKwTzn0q+7aB77ZUJEimv
1kFccfUDGHLumQRYJIm1s//ZL5BdDTSwwxAtBl+3Jy5DVspAWm1/d35kru5Ys1q0
gfi7dN7E+XVrAr0ZWLyE1+uysqhGMA28oP/tlRjx9D4DF8ierWpSp2KzqvsbBuoe
ddFwIHI/fmwJXxg+vQPAcGmOFvn712yxphufjX2KDCmiIHZW1GHpfLmA8QW9jL9S
1EEP1LPENOvQcXR1L5jlbbHH1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0+tvZ+
PaFN/JqeGugIhFPz1ilDMB8GA1UdIwQYMBaAFAG7KP2+FVqGYsXuaAz98MmNTr0d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUNBNy81MTdFNkU0QzQ1
QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9BYnNvX2I0VldvWml4ZTVvRFAzd3lZMU92
UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0Fic29fYjRWV29aaXhlNW9EUDN3eVkxT3ZSMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QUNBNy81MTdFNkU0QzQ1QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9BYnNvX2I0Vldv
Wml4ZTVvRFAzd3lZMU92UjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC9LO2h0ObSejMi4XViQCXtyPJ6o7lcIOivt3mBiywKyMlFyKtG8Vns
undJNrKwj4B2XTEvoIKocY7vthu8jZ8oAkXNZ/W9zHD2YmeiXnGtSZq9ab2SpF72
SnfkxCbzyRn12av921uPDBWecNMaF29ITk8XTK5JF62Xs6rOGvt/y7JufATctcKp
j6YvxyFsqu3j+PGtY49ToabeLw+xJLcQWsIWzoUlRn5NM1S0Nd54wQneuV9eOgR2
DZV8Z9BPoYkSKu3lXn0sA/UG8JbixGZ5Z4f6usIwdUXc2A6FmaX5WanyFyF1MAFJ
MyNB61rLfvYl/eHKosvCG5TnO6ufgww7
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:45:35 2025 by rpki-client