Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft
File: cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft (raw, json)
Hash identifier: OAmxbeeIFvjwnZBNLD2irdZ4Mul6Lm2qhlKKBRtXZuo=
Subject key identifier: 62:75:C1:78:DA:CC:1F:00:48:AC:B4:70:F3:C8:4F:BE:5B:D8:2C:5C
Authority key identifier: 71:54:60:73:BD:09:27:EB:EB:85:0F:06:DA:76:A7:27:69:E7:13:6B
Certificate issuer: /CN=A91EA6C6/serialNumber=71546073BD0927EBEB850F06DA76A72769E7136B
Certificate serial: 018F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft
Manifest number: 018B
Signing time: Sat 29 Mar 2025 03:04:49 +0000
Manifest this update: Sat 29 Mar 2025 03:04:48 +0000
Manifest next update: Sat 05 Apr 2025 03:04:48 +0000
Files and hashes: 1: cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl (hash: yoJ34rY7G0rBeIhGWC4yvSUzDzQIgS5KncDUeqceccw=)
2: BC69DF32B33E11EDAA6D117BC4F9AE02.roa (hash: db2NWeg4HG/QWHWjQkMvsucOm2s5WuaDwiakb3D08Rk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399 (0x18f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA6C6
Validity
Not Before: Mar 29 03:04:48 2025 GMT
Not After : Apr 5 03:04:48 2025 GMT
Subject: CN=67e76351-e07e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:54:70:ae:a2:eb:3f:2c:b4:4b:ef:11:91:bd:
09:fe:94:67:39:d1:a6:ea:17:04:ec:e0:2b:11:ab:
64:c6:2d:9d:94:2e:45:71:ba:7d:9e:df:c0:01:bd:
2c:48:5e:2f:1c:86:21:94:61:55:50:1d:f1:33:4f:
d3:c8:7a:83:62:f8:5a:2d:84:c5:f4:32:ba:07:63:
5f:ab:59:2a:dd:d9:57:b5:9b:86:d2:55:0c:ce:75:
e5:3e:18:62:22:d3:27:28:08:e3:07:6e:3a:7f:5d:
49:6f:d1:6d:9e:41:91:b1:6a:35:9b:b9:a3:89:54:
93:a6:eb:ba:09:0d:77:1c:ad:79:39:6a:88:f2:dd:
57:f9:51:82:f2:5f:4c:e4:9b:ef:bd:c1:8c:01:41:
a1:30:c4:a8:fc:13:e6:22:4b:89:24:2d:9a:e4:3f:
d3:4e:82:3a:58:c5:6b:eb:09:5b:a3:bc:ea:dc:fb:
c1:6a:b0:76:09:86:99:73:63:49:4d:87:2a:f1:ae:
bd:de:62:76:79:3b:ee:47:87:c1:5f:7e:81:43:90:
79:e8:16:c2:6a:66:9b:ab:03:49:03:7e:ab:70:cc:
4b:b7:ff:25:57:0c:2f:82:ef:cf:0c:e2:07:ef:9f:
45:a4:7a:db:a7:9f:44:e6:9a:a2:dc:5c:8c:78:ae:
0c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:75:C1:78:DA:CC:1F:00:48:AC:B4:70:F3:C8:4F:BE:5B:D8:2C:5C
X509v3 Authority Key Identifier:
keyid:71:54:60:73:BD:09:27:EB:EB:85:0F:06:DA:76:A7:27:69:E7:13:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:2e:ce:b8:52:0f:33:7f:76:df:40:ab:32:ad:b4:81:0e:39:
5d:d0:cf:3a:e2:6d:84:79:df:ab:66:97:c9:9b:ca:fb:30:82:
58:96:55:c0:a9:c6:9d:68:89:34:8d:1d:1c:b6:8f:0d:28:81:
b5:05:16:48:02:a8:f0:b7:a4:d9:8b:bd:fc:9a:db:2a:69:53:
0a:ee:7e:15:6c:b8:b0:d2:fd:85:53:1f:58:b3:81:af:db:de:
03:d0:13:4a:c3:30:e1:02:14:e3:91:bc:38:29:ac:b2:69:17:
9a:c7:44:32:cb:f2:2c:07:d5:e7:cf:c8:be:b4:3e:4c:97:4b:
c4:ba:38:fe:50:65:cd:1e:db:5d:a1:60:ad:c2:98:ec:f4:17:
eb:c1:54:48:d4:bd:38:0a:83:4f:39:40:92:a6:f1:9c:23:61:
bf:50:82:e4:49:10:aa:97:97:b4:3e:e4:62:20:72:63:d3:f1:
3a:31:21:2a:4a:3a:41:fb:0f:c3:b2:4b:53:60:48:e3:4c:03:
e9:26:fd:18:1d:90:ad:70:c2:8b:a9:1e:aa:c8:f6:85:df:9e:
d8:63:e6:e0:b2:21:fd:26:d3:8f:c5:02:eb:48:ee:1b:dd:67:
2e:7c:25:19:3c:db:6f:a7:45:3c:ed:79:b5:e6:e6:f2:73:15:
d9:16:9d:ff
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUE2QzYxMTAvBgNVBAUTKDcxNTQ2MDczQkQwOTI3RUJFQjg1MEYwNkRBNzZBNzI3
NjlFNzEzNkIwHhcNMjUwMzI5MDMwNDQ4WhcNMjUwNDA1MDMwNDQ4WjAYMRYwFAYD
VQQDEw02N2U3NjM1MS1lMDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtVRwrqLrPyy0S+8Rkb0J/pRnOdGm6hcE7OArEatkxi2dlC5Fcbp9nt/AAb0s
SF4vHIYhlGFVUB3xM0/TyHqDYvhaLYTF9DK6B2Nfq1kq3dlXtZuG0lUMznXlPhhi
ItMnKAjjB246f11Jb9FtnkGRsWo1m7mjiVSTpuu6CQ13HK15OWqI8t1X+VGC8l9M
5JvvvcGMAUGhMMSo/BPmIkuJJC2a5D/TToI6WMVr6wlbo7zq3PvBarB2CYaZc2NJ
TYcq8a693mJ2eTvuR4fBX36BQ5B56BbCamabqwNJA36rcMxLt/8lVwwvgu/PDOIH
759FpHrbp59E5pqi3FyMeK4M6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGJ1wXja
zB8ASKy0cPPIT75b2CxcMB8GA1UdIwQYMBaAFHFUYHO9CSfr64UPBtp2pydp5xNr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTZDNi8yQ0FFQUQwNEIz
M0ExMUVEOUZCRDBFNUNDNEY5QUUwMi9jVlJnYzcwSkotdnJoUThHMm5hbkoybm5F
MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NWUmdjNzBKSi12cmhROEcybmFuSjJubkUycy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QTZDNi8yQ0FFQUQwNEIzM0ExMUVEOUZCRDBFNUNDNEY5QUUwMi9jVlJnYzcwSkot
dnJoUThHMm5hbkoybm5FMnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQARLs64Ug8zf3bfQKsyrbSBDjld0M864m2Eed+rZpfJm8r7MIJYllXA
qcadaIk0jR0cto8NKIG1BRZIAqjwt6TZi738mtsqaVMK7n4VbLiw0v2FUx9Ys4Gv
294D0BNKwzDhAhTjkbw4KayyaReax0Qyy/IsB9Xnz8i+tD5Ml0vEujj+UGXNHttd
oWCtwpjs9BfrwVRI1L04CoNPOUCSpvGcI2G/UILkSRCql5e0PuRiIHJj0/E6MSEq
SjpB+w/DsktTYEjjTAPpJv0YHZCtcMKLqR6qyPaF357YY+bgsiH9JtOPxQLrSO4b
3WcufCUZPNtvp0U87Xm15ubycxXZFp3/
-----END CERTIFICATE-----
Generated at Thu Apr 10 11:44:32 2025 by rpki-client