Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
File: i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft (raw, json)
Hash identifier: 3PQLes0QGyYpo++2tpHZqJZXIkgtBz6jYMtNZKgJoB8=
Subject key identifier: 6D:61:2D:2E:AF:19:19:66:00:D3:DA:83:16:6B:9D:84:F1:56:36:7F
Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
Certificate issuer: /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Certificate serial: 0710
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
Manifest number: 0697
Signing time: Fri 28 Mar 2025 22:55:07 +0000
Manifest this update: Fri 28 Mar 2025 22:55:07 +0000
Manifest next update: Fri 04 Apr 2025 22:55:07 +0000
Files and hashes: 1: i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl (hash: JhQL95/aLkCvYZ63jGzIozct9JASefS6zxDN5h+k35I=)
2: B7BC1B76506A11EDBB3A804AC4F9AE02.roa (hash: gLMJhNvQtjkqWgYHOYJrflnpuLe5m/iNQsn8pAjqC+o=)
3: 79D30C40BABE11EB825A5D09C4F9AE02.roa (hash: VF1EKdtqMB8DRuSBnFKjSSnE5AI9LEnGrDvhJPYGcJw=)
4: 30CB9694A28911ECBC355360C4F9AE02.roa (hash: iacyWEeXTvXTILxRcADZ+9lCVjiDHQnMplIMRt/73Xk=)
5: 97C79A806C0511EF8B77D10EC4F9AE02.roa (hash: Z/eyVAkA9R8S1+9PHNU8ppbtyyeeA+WhA6oeOKeAzo8=)
6: BB9C14F6AA5511EB86F34077C4F9AE02.roa (hash: bcPbqQLGQnoAzNP2Fmg0TCnc4h72RS0Eli/gU7/zCsQ=)
7: 317095E0A28911ECBC355360C4F9AE02.roa (hash: IjGCmqfeR6dWCwkTJerprQJ5jh4UJlY6ZGEM3z029yo=)
8: 8BB6CB12A4D511EB9E4DF342C4F9AE02.roa (hash: q95wxrZ9LN/HMmU4q1987KOKTt7X/HBomrSB/BVWhIg=)
9: 2AECA58494EE11EE84F9D73CC4F9AE02.roa (hash: 47tXXOX+6JbaiLW8oz6RWvc/L98lvJJCB2C4ifvRS0g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1808 (0x710)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC31B
Validity
Not Before: Mar 28 22:55:07 2025 GMT
Not After : Apr 4 22:55:07 2025 GMT
Subject: CN=67e728cb-3bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e6:8a:f3:02:f1:f7:84:3b:45:f7:c9:81:8e:
70:97:04:0b:e2:85:7c:82:8b:4f:60:a5:20:06:6d:
b5:ea:39:e4:7d:e0:b1:25:8c:34:5e:f3:55:49:2f:
54:4c:8c:0e:ae:6a:82:61:6c:fc:bc:7c:6e:5d:40:
3f:cd:b2:9b:54:d9:e3:e3:45:e4:bc:2c:2f:54:04:
f2:2e:a3:36:85:27:93:4c:16:18:c5:40:22:47:8c:
7d:1b:07:9e:6c:64:0a:27:d5:e9:ea:ca:fe:84:87:
5b:eb:9b:8b:49:21:bf:41:85:43:2b:db:d9:a6:dd:
ab:09:7e:33:f0:17:76:e6:d1:89:7f:b4:57:44:66:
d0:4b:ad:47:99:d3:95:95:a5:ec:cd:01:1b:0d:6e:
50:78:d1:4e:9c:58:03:a8:a9:62:ae:f9:40:72:f8:
38:bd:3f:39:15:ff:5f:b1:23:7b:6f:2b:41:c6:47:
71:0d:b4:c3:0a:c6:a2:5c:48:b9:16:14:3d:38:9c:
2e:e5:e2:b2:75:b8:78:22:83:59:4f:fc:4f:5e:78:
9c:b5:47:7d:19:7b:45:eb:d2:93:6f:a6:5f:71:5a:
12:fc:d6:9d:e5:8f:49:3d:7a:15:7b:b9:6d:8c:23:
26:46:fc:db:70:8d:66:3d:60:54:c4:5f:73:f2:75:
4d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:61:2D:2E:AF:19:19:66:00:D3:DA:83:16:6B:9D:84:F1:56:36:7F
X509v3 Authority Key Identifier:
keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a2:e4:eb:5c:87:8e:71:25:12:b7:85:0e:a6:3a:e8:75:9e:
5b:5e:33:70:87:db:9a:10:af:b7:ed:a2:b4:27:e7:c6:08:c0:
fd:f0:48:c1:c2:2a:fb:3d:9c:1e:20:ab:70:b4:1b:d2:28:2c:
22:a7:21:a0:e7:6a:7b:fe:ee:d4:e5:49:07:5b:f7:fa:c0:6e:
a9:fb:ef:3f:aa:61:60:e9:99:a2:b5:5c:d4:f8:47:b4:02:86:
24:82:e5:17:7f:9d:5f:16:f7:a8:e7:c1:6d:59:6e:a3:0c:7f:
37:6f:b3:ba:47:f8:76:f4:d2:64:36:db:41:e9:39:2d:11:c0:
43:b1:64:87:fa:27:b8:ac:99:56:fe:5c:b7:26:68:4f:ad:ca:
31:70:0f:87:3d:9c:4e:31:7c:40:c4:fe:1e:54:fb:3a:d4:97:
fd:30:8e:44:07:9d:3c:36:e4:f7:0f:33:62:79:f9:de:2e:92:
66:f2:cd:ef:66:91:1d:db:82:30:dc:e9:f7:c0:b1:fa:84:80:
9c:3a:c2:29:60:45:6b:61:4f:c5:da:cd:95:f9:c7:48:f8:8c:
37:e9:7c:07:ad:80:f7:9c:8f:56:8f:d6:6b:7b:4e:aa:0b:8f:
d1:b5:4f:79:73:13:91:43:69:8d:93:9f:5b:38:41:4a:8a:31:
a7:f1:20:d4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBxAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REMzMUIxMTAvBgNVBAUTKDhCOEFENUNBMUMzRThCOENGNDY4QjVGNDk2QTkxQUJC
MEU0OENGQTgwHhcNMjUwMzI4MjI1NTA3WhcNMjUwNDA0MjI1NTA3WjAYMRYwFAYD
VQQDEw02N2U3MjhjYi0zYmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsuaK8wLx94Q7RffJgY5wlwQL4oV8gotPYKUgBm216jnkfeCxJYw0XvNVSS9U
TIwOrmqCYWz8vHxuXUA/zbKbVNnj40XkvCwvVATyLqM2hSeTTBYYxUAiR4x9Gwee
bGQKJ9Xp6sr+hIdb65uLSSG/QYVDK9vZpt2rCX4z8Bd25tGJf7RXRGbQS61HmdOV
laXszQEbDW5QeNFOnFgDqKlirvlAcvg4vT85Ff9fsSN7bytBxkdxDbTDCsaiXEi5
FhQ9OJwu5eKydbh4IoNZT/xPXnictUd9GXtF69KTb6ZfcVoS/Nad5Y9JPXoVe7lt
jCMmRvzbcI1mPWBUxF9z8nVNsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1hLS6v
GRlmANPagxZrnYTxVjZ/MB8GA1UdIwQYMBaAFIuK1cocPouM9Gi19JapGrsOSM+o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMxQi9EMEVDQ0Q0ODg5
M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0ejBhTFgwbHFrYXV3NUl6
NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2k0clZ5aHctaTR6MGFMWDBscWthdXc1SXo2Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QzMxQi9EMEVDQ0Q0ODg5M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0
ejBhTFgwbHFrYXV3NUl6NmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAdouTrXIeOcSUSt4UOpjrodZ5bXjNwh9uaEK+37aK0J+fGCMD98EjB
wir7PZweIKtwtBvSKCwipyGg52p7/u7U5UkHW/f6wG6p++8/qmFg6ZmitVzU+Ee0
AoYkguUXf51fFveo58FtWW6jDH83b7O6R/h29NJkNttB6TktEcBDsWSH+ie4rJlW
/ly3JmhPrcoxcA+HPZxOMXxAxP4eVPs61Jf9MI5EB508NuT3DzNiefneLpJm8s3v
ZpEd24Iw3On3wLH6hICcOsIpYEVrYU/F2s2V+cdI+Iw36XwHrYD3nI9Wj9Zre06q
C4/RtU95cxORQ2mNk59bOEFKijGn8SDU
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:43:25 2025 by rpki-client