Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft
File: JYQfp3wFcWWF_nvbBgC5hk40BtI.mft (raw, json)
Hash identifier: B5m1QqA/W5+qxMghMu7KYfL8RZtgtvVGDQdIlmX3cAI=
Subject key identifier: 98:2A:77:B8:25:24:9F:A2:E8:BA:7F:8A:69:AA:A6:C2:2D:E7:C2:C3
Authority key identifier: 25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2
Certificate issuer: /CN=A91E28C1/serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2
Certificate serial: 093F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft
Manifest number: 092D
Signing time: Fri 28 Mar 2025 20:33:28 +0000
Manifest this update: Fri 28 Mar 2025 20:33:28 +0000
Manifest next update: Fri 04 Apr 2025 20:33:28 +0000
Files and hashes: 1: JYQfp3wFcWWF_nvbBgC5hk40BtI.crl (hash: 1+rYdg15iHehUDxecGpAzGR9DqnBFrIvteWG4xNWMgc=)
2: 14A4E3F099E211EAAC99C833C4F9AE02.roa (hash: EhRN/uooWnaf/BKx+rG8uVpZETp6E4AIAKPHufyI6h0=)
3: FCC951D6FB1211EDBFADE86AC4F9AE02.roa (hash: AlqDLojfq/3K+BcDiv2qbdt3OzeIJeW5BYNJ45Km+FU=)
4: 91FD24BA23C511EDA6D7F073C4F9AE02.roa (hash: lALAU96uBUqRbrTkDfaqUsPuADDi3BxVAQqhmKJyzX4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2367 (0x93f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E28C1
Validity
Not Before: Mar 28 20:33:28 2025 GMT
Not After : Apr 4 20:33:28 2025 GMT
Subject: CN=67e70798-0e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:80:6e:c4:f4:bf:56:cb:d4:7f:57:23:8d:f9:
ec:33:80:85:7e:ec:04:79:3f:87:c2:12:03:a7:80:
3d:25:3f:3d:f0:69:0d:46:69:cf:77:f7:d0:63:09:
ff:94:7c:2d:a9:1c:20:b6:8a:14:a3:df:f6:c5:be:
18:6d:77:3c:fb:e5:c7:4c:63:55:23:da:3d:bf:e3:
85:67:99:9f:f3:08:8c:a3:80:33:07:3b:b5:3c:2d:
63:50:5a:16:16:71:fe:18:52:30:0b:a0:c6:ab:0f:
ad:c4:5b:13:89:32:27:87:a3:2b:ed:a2:c5:f9:df:
85:c5:7e:8d:63:04:38:8b:f7:23:2e:e6:31:81:18:
29:5a:88:d2:12:a8:8e:61:05:5a:8a:69:7d:cd:97:
76:a2:43:a1:87:32:0f:e0:9b:b8:45:06:89:fa:3a:
09:28:6c:2e:9c:90:e4:21:86:f3:1e:27:41:17:8a:
41:ca:ec:cc:05:a8:cc:f1:47:c7:a9:eb:35:49:31:
a4:78:d5:70:74:85:e2:2a:c8:87:87:bd:26:22:97:
87:ee:57:44:eb:a7:91:36:36:7d:7b:60:d4:b1:e9:
4d:0e:e7:c6:32:d2:36:39:d6:31:31:a2:94:ea:b3:
0b:e7:0c:24:24:bf:05:a5:d3:86:03:9a:60:c9:14:
a4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2A:77:B8:25:24:9F:A2:E8:BA:7F:8A:69:AA:A6:C2:2D:E7:C2:C3
X509v3 Authority Key Identifier:
keyid:25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:ac:be:d9:62:d3:98:72:99:06:e8:77:d1:fd:78:33:c1:d8:
d9:c8:d0:18:99:61:84:ae:52:15:f5:bf:c6:0f:ae:4c:d4:c5:
b7:72:80:cc:58:66:4d:8f:63:33:7e:61:a1:4f:b7:d8:21:59:
26:cb:05:fa:2b:18:9a:06:4a:eb:30:bd:08:94:43:12:33:a3:
6e:bf:f6:49:35:68:5c:a2:23:fd:6f:d5:d3:43:6d:9d:33:1a:
d8:2f:07:29:ac:1a:01:d9:e3:0f:45:f1:33:9f:1e:00:7f:d7:
9b:6f:45:8e:e0:48:16:79:86:9e:d0:86:c9:47:f3:97:b6:a4:
d8:fa:16:7f:42:4b:f1:d2:f4:da:55:e1:64:2c:1a:a3:18:25:
27:95:e5:0c:8d:f6:47:0a:13:31:e2:dc:da:6a:57:71:72:f7:
97:5c:2c:95:88:98:88:9e:06:40:00:f4:de:c0:ab:17:df:77:
4b:68:55:d2:f4:db:4e:22:17:83:23:f7:4a:00:b9:dc:65:11:
26:99:28:1c:b5:9d:c5:33:18:e6:07:3f:e4:45:83:61:22:1d:
83:f8:dd:c0:f3:5a:13:c0:d8:f0:e7:19:8b:42:ca:7d:a4:d7:
0c:a1:cf:ac:52:d5:af:ff:09:62:77:05:c0:5c:6c:6e:99:7b:
33:0b:8e:0d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTI4QzExMTAvBgNVBAUTKDI1ODQxRkE3N0MwNTcxNjU4NUZFN0JEQjA2MDBCOTg2
NEUzNDA2RDIwHhcNMjUwMzI4MjAzMzI4WhcNMjUwNDA0MjAzMzI4WjAYMRYwFAYD
VQQDEw02N2U3MDc5OC0wZTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0IBuxPS/VsvUf1cjjfnsM4CFfuwEeT+HwhIDp4A9JT898GkNRmnPd/fQYwn/
lHwtqRwgtooUo9/2xb4YbXc8++XHTGNVI9o9v+OFZ5mf8wiMo4AzBzu1PC1jUFoW
FnH+GFIwC6DGqw+txFsTiTInh6Mr7aLF+d+FxX6NYwQ4i/cjLuYxgRgpWojSEqiO
YQVaiml9zZd2okOhhzIP4Ju4RQaJ+joJKGwunJDkIYbzHidBF4pByuzMBajM8UfH
qes1STGkeNVwdIXiKsiHh70mIpeH7ldE66eRNjZ9e2DUselNDufGMtI2OdYxMaKU
6rML5wwkJL8FpdOGA5pgyRSkZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgqd7gl
JJ+i6Lp/immqpsIt58LDMB8GA1UdIwQYMBaAFCWEH6d8BXFlhf572wYAuYZONAbS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhDMS9GOEFGQTE0MDk5
RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNXV0ZfbnZiQmdDNWhrNDBC
dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pZUWZwM3dGY1dXRl9udmJCZ0M1aGs0MEJ0SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MjhDMS9GOEFGQTE0MDk5RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNX
V0ZfbnZiQmdDNWhrNDBCdEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCIrL7ZYtOYcpkG6HfR/XgzwdjZyNAYmWGErlIV9b/GD65M1MW3coDM
WGZNj2MzfmGhT7fYIVkmywX6KxiaBkrrML0IlEMSM6Nuv/ZJNWhcoiP9b9XTQ22d
MxrYLwcprBoB2eMPRfEznx4Af9ebb0WO4EgWeYae0IbJR/OXtqTY+hZ/Qkvx0vTa
VeFkLBqjGCUnleUMjfZHChMx4tzaaldxcveXXCyViJiIngZAAPTewKsX33dLaFXS
9NtOIheDI/dKALncZREmmSgctZ3FMxjmBz/kRYNhIh2D+N3A81oTwNjw5xmLQsp9
pNcMoc+sUtWv/wlidwXAXGxumXszC44N
-----END CERTIFICATE-----
Generated at Wed Apr 9 16:30:23 2025 by rpki-client