Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft
File: 90n3b5KhbSqHFDf3LIbQ0F3imtU.mft (raw, json)
Hash identifier: N5KTT/QNOAxshKQzUqfhOLrO9D3+IZYfdE+O3qNCnhU=
Subject key identifier: 16:71:86:EC:76:FC:48:77:1B:CF:7E:F6:2C:9E:64:4F:FC:CA:B6:35
Authority key identifier: F7:49:F7:6F:92:A1:6D:2A:87:14:37:F7:2C:86:D0:D0:5D:E2:9A:D5
Certificate issuer: /CN=A91DDDED/serialNumber=F749F76F92A16D2A871437F72C86D0D05DE29AD5
Certificate serial: 0199
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft
Manifest number: 0196
Signing time: Sat 29 Mar 2025 02:58:49 +0000
Manifest this update: Sat 29 Mar 2025 02:58:49 +0000
Manifest next update: Sat 05 Apr 2025 02:58:49 +0000
Files and hashes: 1: 90n3b5KhbSqHFDf3LIbQ0F3imtU.crl (hash: /mNbH789F/4xAcpu0+5YPTff/x7wRjqOkmQ0xtrR2o4=)
2: 69B6C14A9DF611ED8D51D272C4F9AE02.roa (hash: 54OZtiC3lpeukDDzmCUDt697LQ+SuKtxGSa0nhIWHEA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409 (0x199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDDED
Validity
Not Before: Mar 29 02:58:49 2025 GMT
Not After : Apr 5 02:58:49 2025 GMT
Subject: CN=67e761e9-3d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:98:65:46:92:3d:1e:58:5d:cb:96:e6:86:96:
70:1b:76:76:bd:a1:33:f3:a8:58:13:7a:12:6a:65:
61:cb:32:12:b9:60:d7:58:38:93:a8:31:e8:85:9a:
9d:13:74:88:44:be:83:3e:14:a2:bc:03:93:3a:41:
af:bf:e2:98:d2:44:c2:4f:f0:4c:cb:eb:c5:62:17:
b9:00:33:03:43:40:68:cd:34:6d:27:b7:b4:ac:dd:
53:a5:3e:c6:9d:1b:1a:59:91:70:0c:02:4f:d7:f3:
09:6d:73:39:20:4d:ed:78:ca:80:f3:a0:32:ad:5c:
15:1a:b3:94:ea:e9:a4:92:23:af:99:98:30:51:31:
78:0e:c0:80:16:f3:62:15:ee:da:4e:72:6d:82:85:
c1:6d:63:c1:f9:e8:cc:e3:2a:13:bc:01:c1:d3:ab:
3a:aa:ac:6d:fb:48:39:2f:90:bd:35:19:fa:81:a3:
a6:1c:cd:c8:14:c2:0e:dc:78:21:2e:81:a6:a5:a0:
a2:10:43:5c:1f:98:5d:a6:55:ac:20:c2:ab:2a:6f:
c5:e1:64:d0:3c:0c:31:22:0e:70:f1:c4:eb:58:aa:
2c:21:b1:4d:5d:a2:4a:3d:d6:9c:e7:0e:ec:3c:9a:
c8:96:5b:d8:a5:a4:fd:61:18:2b:07:d8:97:c8:7e:
90:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:71:86:EC:76:FC:48:77:1B:CF:7E:F6:2C:9E:64:4F:FC:CA:B6:35
X509v3 Authority Key Identifier:
keyid:F7:49:F7:6F:92:A1:6D:2A:87:14:37:F7:2C:86:D0:D0:5D:E2:9A:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d7:5b:53:8e:be:14:dc:a0:e3:63:8d:a9:f0:a2:a2:8b:ad:
81:c1:12:f1:e4:a5:f2:c7:9a:42:51:f8:0a:e0:6b:17:c4:1c:
cb:59:a3:79:04:47:7c:47:13:db:fc:c4:ea:a0:a6:54:cb:15:
1d:84:3d:d6:4d:47:5e:ec:7d:20:a8:94:c4:0f:30:51:1e:88:
db:a6:01:88:56:c8:e2:96:3e:f6:c2:65:8b:f6:1f:e0:40:32:
f3:f7:25:24:d5:ed:63:ab:33:c5:da:b2:e8:dd:4b:f1:0e:c2:
9d:d4:13:b0:e0:ae:60:41:e4:9c:a6:8e:71:af:ef:0d:44:50:
94:6d:71:16:5e:90:53:f4:be:a1:ea:f3:7b:bd:3d:8d:ad:ec:
be:ad:73:cf:fa:26:12:d3:8b:ab:82:87:6b:46:1a:a4:6a:01:
2b:3a:eb:75:4e:eb:ea:55:b8:24:75:e8:b7:77:04:ee:4a:3d:
49:5b:39:88:45:12:e1:17:b0:5e:08:92:47:db:68:8d:d8:21:
95:b1:b5:3e:d2:2c:25:eb:68:e9:43:6d:ed:c0:74:7e:4a:b4:
db:d6:43:3f:f6:60:f7:96:fc:b0:f3:52:59:59:aa:f3:d2:b0:
e1:3c:30:e9:bf:c0:6f:7a:23:b6:7a:42:66:b3:83:58:09:4d:
ff:26:fd:08
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RERERUQxMTAvBgNVBAUTKEY3NDlGNzZGOTJBMTZEMkE4NzE0MzdGNzJDODZEMEQw
NURFMjlBRDUwHhcNMjUwMzI5MDI1ODQ5WhcNMjUwNDA1MDI1ODQ5WjAYMRYwFAYD
VQQDEw02N2U3NjFlOS0zZDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8phlRpI9Hlhdy5bmhpZwG3Z2vaEz86hYE3oSamVhyzISuWDXWDiTqDHohZqd
E3SIRL6DPhSivAOTOkGvv+KY0kTCT/BMy+vFYhe5ADMDQ0BozTRtJ7e0rN1TpT7G
nRsaWZFwDAJP1/MJbXM5IE3teMqA86AyrVwVGrOU6umkkiOvmZgwUTF4DsCAFvNi
Fe7aTnJtgoXBbWPB+ejM4yoTvAHB06s6qqxt+0g5L5C9NRn6gaOmHM3IFMIO3Hgh
LoGmpaCiEENcH5hdplWsIMKrKm/F4WTQPAwxIg5w8cTrWKosIbFNXaJKPdac5w7s
PJrIllvYpaT9YRgrB9iXyH6Q7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBZxhux2
/Eh3G89+9iyeZE/8yrY1MB8GA1UdIwQYMBaAFPdJ92+SoW0qhxQ39yyG0NBd4prV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERERFRC83OUNDMDE2NjlE
RjIxMUVEOTU5NDlGNTdDNEY5QUUwMi85MG4zYjVLaGJTcUhGRGYzTEliUTBGM2lt
dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzkwbjNiNUtoYlNxSEZEZjNMSWJRMEYzaW10VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RERFRC83OUNDMDE2NjlERjIxMUVEOTU5NDlGNTdDNEY5QUUwMi85MG4zYjVLaGJT
cUhGRGYzTEliUTBGM2ltdFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAc11tTjr4U3KDjY42p8KKii62BwRLx5KXyx5pCUfgK4GsXxBzLWaN5
BEd8RxPb/MTqoKZUyxUdhD3WTUde7H0gqJTEDzBRHojbpgGIVsjilj72wmWL9h/g
QDLz9yUk1e1jqzPF2rLo3UvxDsKd1BOw4K5gQeScpo5xr+8NRFCUbXEWXpBT9L6h
6vN7vT2Nrey+rXPP+iYS04urgodrRhqkagErOut1TuvqVbgkdei3dwTuSj1JWzmI
RRLhF7BeCJJH22iN2CGVsbU+0iwl62jpQ23twHR+SrTb1kM/9mD3lvyw81JZWarz
0rDhPDDpv8BveiO2ekJms4NYCU3/Jv0I
-----END CERTIFICATE-----
Generated at Tue Apr 8 21:20:27 2025 by rpki-client