Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft
File: Iln4cJbkCts8hBgOKLVsPogi9lE.mft (raw, json)
Hash identifier: BJgGC3To7i3Sw6ylhbzOmIZkGwD8YYafCNnXFAf5gOs=
Subject key identifier: E4:69:20:34:B5:13:C4:16:FF:55:F1:C0:CF:27:07:03:52:02:4F:17
Authority key identifier: 22:59:F8:70:96:E4:0A:DB:3C:84:18:0E:28:B5:6C:3E:88:22:F6:51
Certificate issuer: /CN=A91E9B89/serialNumber=2259F87096E40ADB3C84180E28B56C3E8822F651
Certificate serial: 6E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft
Manifest number: 6C
Signing time: Sat 29 Mar 2025 06:15:36 +0000
Manifest this update: Sat 29 Mar 2025 06:15:35 +0000
Manifest next update: Sat 05 Apr 2025 06:15:35 +0000
Files and hashes: 1: Iln4cJbkCts8hBgOKLVsPogi9lE.crl (hash: WFX9koYeIvpccjtnFedbA0wMMo5B45fWLU8TakovNDU=)
2: CCFF219C6C1811EFA5619D0FC4F9AE02.roa (hash: 3XxXrUl7XjjQy54chnpbCmHALQO6VY0UNh1QIEO4utw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110 (0x6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9B89
Validity
Not Before: Mar 29 06:15:35 2025 GMT
Not After : Apr 5 06:15:35 2025 GMT
Subject: CN=67e79008-1c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7c:d6:d3:dd:83:5c:09:37:25:5b:21:17:e0:
d8:00:f3:8b:4e:59:c3:8a:0e:3e:b9:49:d9:c1:46:
8f:8a:f4:fc:35:62:33:4d:f7:98:82:14:f3:40:c6:
5d:88:ed:1e:65:e2:42:72:e0:1a:46:71:55:7a:0a:
1d:9e:e7:99:fd:f3:8c:df:32:0d:c9:34:43:f8:37:
2b:87:92:28:5e:48:b6:e4:10:3b:a5:6b:b5:5c:36:
50:01:93:ca:31:d2:70:0e:0f:6f:1e:e8:43:3d:d5:
af:b1:93:63:5d:ef:58:f7:f4:a5:22:5c:80:80:1f:
82:1b:bf:68:b4:ac:43:d0:2a:77:47:ca:d5:13:23:
1d:1f:63:8e:c7:3f:30:39:b2:81:7b:48:5e:36:d4:
b0:78:e3:ac:98:06:e8:9b:33:3c:95:76:a1:be:07:
41:c5:ac:59:cd:04:2c:43:33:2e:e9:70:6d:8c:19:
04:9b:78:21:09:0d:7d:63:95:2e:1e:21:1f:6d:73:
b4:c9:65:c1:97:28:58:18:cd:16:93:82:ec:a5:10:
21:eb:47:62:c5:77:4a:25:17:a6:f0:e2:d7:68:4b:
7e:ed:c9:90:b5:6c:9f:59:fd:e2:63:7e:a8:2f:e9:
cc:c5:fd:0d:06:1d:97:6f:bc:8e:fe:3f:7c:c3:40:
b5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:69:20:34:B5:13:C4:16:FF:55:F1:C0:CF:27:07:03:52:02:4F:17
X509v3 Authority Key Identifier:
keyid:22:59:F8:70:96:E4:0A:DB:3C:84:18:0E:28:B5:6C:3E:88:22:F6:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:47:d4:b7:17:bc:52:42:cc:c8:7e:d3:e1:33:0c:a1:ac:7c:
ab:52:30:a7:88:b8:d4:82:07:be:15:78:64:25:d1:6c:f6:3b:
86:05:6e:2b:c9:87:43:dc:02:7e:37:c9:2a:99:9b:2b:d8:12:
0e:df:11:37:39:d0:2f:b7:f5:6e:b9:c7:59:37:8c:cd:bf:08:
04:c4:ec:73:83:da:e7:78:e0:0f:4e:d1:2d:be:69:10:6a:9f:
20:33:f2:bb:63:fb:a5:21:fb:bf:eb:dd:51:58:60:65:7f:1a:
d4:91:42:55:86:19:33:66:59:1f:be:c6:61:f6:c1:c2:b4:5d:
e1:de:3c:08:f2:88:b1:fc:a6:45:8d:14:76:c4:46:dd:03:2f:
9e:d6:cb:40:c6:ef:17:8a:23:01:f5:11:d6:1d:5a:fb:b1:49:
4c:54:5e:df:3f:ba:cb:69:28:33:ed:15:3a:f2:7a:5d:10:01:
63:4e:e0:52:e1:29:3b:fe:83:26:aa:3c:09:a5:5e:4f:cc:f1:
11:8e:14:50:8d:b2:e6:06:d3:95:33:78:fa:34:48:a6:89:d7:
f0:94:60:b4:90:9e:c0:3e:13:9b:8c:e6:73:7d:95:58:d2:58:
50:9a:2f:06:cd:f6:d6:7f:40:98:25:e8:3b:01:b6:36:9d:70:
76:75:1a:85
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
OUI4OTExMC8GA1UEBRMoMjI1OUY4NzA5NkU0MEFEQjNDODQxODBFMjhCNTZDM0U4
ODIyRjY1MTAeFw0yNTAzMjkwNjE1MzVaFw0yNTA0MDUwNjE1MzVaMBgxFjAUBgNV
BAMTDTY3ZTc5MDA4LTFjOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCtfNbT3YNcCTclWyEX4NgA84tOWcOKDj65SdnBRo+K9Pw1YjNN95iCFPNAxl2I
7R5l4kJy4BpGcVV6Ch2e55n984zfMg3JNEP4NyuHkiheSLbkEDula7VcNlABk8ox
0nAOD28e6EM91a+xk2Nd71j39KUiXICAH4Ibv2i0rEPQKndHytUTIx0fY47HPzA5
soF7SF421LB446yYBuibMzyVdqG+B0HFrFnNBCxDMy7pcG2MGQSbeCEJDX1jlS4e
IR9tc7TJZcGXKFgYzRaTguylECHrR2LFd0olF6bw4tdoS37tyZC1bJ9Z/eJjfqgv
6czF/Q0GHZdvvI7+P3zDQLVBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5GkgNLUT
xBb/VfHAzycHA1ICTxcwHwYDVR0jBBgwFoAUIln4cJbkCts8hBgOKLVsPogi9lEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5Qjg5LzNBOUM4QTU2NkMx
ODExRUZBQjZCNjkwQ0M0RjlBRTAyL0lsbjRjSmJrQ3RzOGhCZ09LTFZzUG9naTls
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvSWxuNGNKYmtDdHM4aEJnT0tMVnNQb2dpOWxFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5
Qjg5LzNBOUM4QTU2NkMxODExRUZBQjZCNjkwQ0M0RjlBRTAyL0lsbjRjSmJrQ3Rz
OGhCZ09LTFZzUG9naTlsRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBADVH1LcXvFJCzMh+0+EzDKGsfKtSMKeIuNSCB74VeGQl0Wz2O4YFbivJ
h0PcAn43ySqZmyvYEg7fETc50C+39W65x1k3jM2/CATE7HOD2ud44A9O0S2+aRBq
nyAz8rtj+6Uh+7/r3VFYYGV/GtSRQlWGGTNmWR++xmH2wcK0XeHePAjyiLH8pkWN
FHbERt0DL57Wy0DG7xeKIwH1EdYdWvuxSUxUXt8/ustpKDPtFTryel0QAWNO4FLh
KTv+gyaqPAmlXk/M8RGOFFCNsuYG05UzePo0SKaJ1/CUYLSQnsA+E5uM5nN9lVjS
WFCaLwbN9tZ/QJgl6DsBtjadcHZ1GoU=
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:12:27 2025 by rpki-client