Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft
File: lY1wluouaxa8JKHQRXGdLsUUSX4.mft (raw, json)
Hash identifier: Sr75EbTujqlJ7bWRdV+TXe71662S8RRzPDwazZoMdR8=
Subject key identifier: B7:AE:83:CD:C2:2D:30:1D:A5:E1:D8:75:C2:B1:E4:00:EB:D4:E8:D6
Authority key identifier: 95:8D:70:96:EA:2E:6B:16:BC:24:A1:D0:45:71:9D:2E:C5:14:49:7E
Certificate issuer: /CN=A91E28D8/serialNumber=958D7096EA2E6B16BC24A1D045719D2EC514497E
Certificate serial: 0238
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft
Manifest number: 0235
Signing time: Sat 29 Mar 2025 02:09:54 +0000
Manifest this update: Sat 29 Mar 2025 02:09:53 +0000
Manifest next update: Sat 05 Apr 2025 02:09:53 +0000
Files and hashes: 1: lY1wluouaxa8JKHQRXGdLsUUSX4.crl (hash: MuVChygMYpOwGBi8GXUlqfKiVxebms2ixphjKQE10ks=)
2: 01109D481B9011EDBC68484CC4F9AE02.roa (hash: c791advS7FJxJQliNVREZFMZhHtkZDtdWCzXey8hKmc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 568 (0x238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E28D8
Validity
Not Before: Mar 29 02:09:53 2025 GMT
Not After : Apr 5 02:09:53 2025 GMT
Subject: CN=67e75672-b70f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:56:db:d7:70:10:90:c7:d0:86:ca:69:51:4d:
a4:1d:13:4f:ed:3c:e5:69:4c:81:70:e0:72:18:27:
39:1a:e5:b3:85:e2:a4:a8:f3:21:9f:89:bf:3a:5c:
e2:83:c0:c2:28:6e:37:0f:82:92:f1:98:8a:ff:d6:
fe:67:25:55:74:1b:28:a9:b7:a6:53:1b:0f:ad:e2:
9b:40:2b:4f:be:84:ba:a1:71:3e:e0:de:a7:33:1d:
7a:21:4c:41:a7:b5:bb:f8:09:bc:87:30:05:33:bc:
7f:d7:05:88:d3:ca:8d:72:18:9c:cb:73:f6:79:13:
7d:7a:f6:77:ad:ae:15:7c:57:5e:c8:bd:15:85:bd:
ad:72:3b:85:6d:9a:19:cf:61:ff:b5:56:89:48:6a:
7b:1f:da:da:b1:4d:13:d1:31:0c:b4:11:70:96:8c:
48:24:c9:17:b8:17:1a:33:08:91:0a:e9:ce:ce:ea:
e2:f3:78:c6:7c:88:7d:45:42:d0:bc:9b:da:32:d5:
84:41:4d:ba:86:4b:97:e1:f9:2b:07:38:24:50:86:
cf:1a:cd:ba:a2:f4:a6:35:c8:18:c3:61:56:c3:68:
11:65:e2:a1:60:60:5b:5e:13:17:91:13:b8:f1:b8:
e1:1e:74:ec:83:63:7e:eb:0a:69:e7:ea:ba:e8:34:
9d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AE:83:CD:C2:2D:30:1D:A5:E1:D8:75:C2:B1:E4:00:EB:D4:E8:D6
X509v3 Authority Key Identifier:
keyid:95:8D:70:96:EA:2E:6B:16:BC:24:A1:D0:45:71:9D:2E:C5:14:49:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f5:6b:8a:fd:a4:ad:74:90:a7:23:38:52:bc:7e:c4:34:55:
d2:23:eb:28:7d:06:53:87:b1:47:85:45:25:e1:47:81:a1:70:
1c:91:c8:7f:c8:44:b4:97:e3:6c:b1:7e:4e:dd:66:70:59:34:
55:b6:41:f5:43:15:24:b0:1e:30:bf:6e:17:a2:50:a6:3d:86:
25:7a:b4:13:37:79:04:c8:d4:f7:47:75:66:7b:f6:21:54:ce:
c5:28:20:4f:e6:b8:51:ed:c6:df:46:94:30:b9:9a:dc:31:5c:
23:5b:c0:67:89:a1:46:ce:e3:58:44:0f:a6:2b:3d:ee:98:6b:
76:2a:b7:4e:23:00:9c:6b:88:9f:0b:45:91:2d:fa:d7:b1:3f:
3c:cf:8a:fb:88:5a:5d:64:43:4c:27:1f:be:82:6a:46:ac:98:
e8:c2:fd:c5:14:80:02:42:67:f8:55:41:61:dc:f9:f6:50:88:
c5:62:a5:26:d6:c9:c9:7f:ee:ce:10:4f:63:47:94:1c:9f:fe:
5c:38:0d:0d:3d:64:0c:9f:a0:4b:9c:21:0e:1d:36:59:87:08:
b3:29:ba:54:ee:25:57:a6:9b:09:de:5d:29:10:bb:11:68:72:
36:aa:e1:35:38:97:fd:14:14:0b:05:24:b5:24:ec:e1:44:4a:
12:0a:eb:7b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTI4RDgxMTAvBgNVBAUTKDk1OEQ3MDk2RUEyRTZCMTZCQzI0QTFEMDQ1NzE5RDJF
QzUxNDQ5N0UwHhcNMjUwMzI5MDIwOTUzWhcNMjUwNDA1MDIwOTUzWjAYMRYwFAYD
VQQDEw02N2U3NTY3Mi1iNzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9Vbb13AQkMfQhsppUU2kHRNP7TzlaUyBcOByGCc5GuWzheKkqPMhn4m/Olzi
g8DCKG43D4KS8ZiK/9b+ZyVVdBsoqbemUxsPreKbQCtPvoS6oXE+4N6nMx16IUxB
p7W7+Am8hzAFM7x/1wWI08qNchicy3P2eRN9evZ3ra4VfFdeyL0Vhb2tcjuFbZoZ
z2H/tVaJSGp7H9rasU0T0TEMtBFwloxIJMkXuBcaMwiRCunOzuri83jGfIh9RULQ
vJvaMtWEQU26hkuX4fkrBzgkUIbPGs26ovSmNcgYw2FWw2gRZeKhYGBbXhMXkRO4
8bjhHnTsg2N+6wpp5+q66DSdSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLeug83C
LTAdpeHYdcKx5ADr1OjWMB8GA1UdIwQYMBaAFJWNcJbqLmsWvCSh0EVxnS7FFEl+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhEOC82QjI0QkNDMjFB
QkYxMUVEQjVCNENDNENDNEY5QUUwMi9sWTF3bHVvdWF4YThKS0hRUlhHZExzVVVT
WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xZMXdsdW91YXhhOEpLSFFSWEdkTHNVVVNYNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MjhEOC82QjI0QkNDMjFBQkYxMUVEQjVCNENDNENDNEY5QUUwMi9sWTF3bHVvdWF4
YThKS0hRUlhHZExzVVVTWDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCk9WuK/aStdJCnIzhSvH7ENFXSI+sofQZTh7FHhUUl4UeBoXAckch/
yES0l+NssX5O3WZwWTRVtkH1QxUksB4wv24XolCmPYYlerQTN3kEyNT3R3Vme/Yh
VM7FKCBP5rhR7cbfRpQwuZrcMVwjW8BniaFGzuNYRA+mKz3umGt2KrdOIwCca4if
C0WRLfrXsT88z4r7iFpdZENMJx++gmpGrJjowv3FFIACQmf4VUFh3Pn2UIjFYqUm
1snJf+7OEE9jR5Qcn/5cOA0NPWQMn6BLnCEOHTZZhwizKbpU7iVXppsJ3l0pELsR
aHI2quE1OJf9FBQLBSS1JOzhREoSCut7
-----END CERTIFICATE-----
Generated at Fri Apr 11 06:01:03 2025 by rpki-client