Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.mft
File: 1lqpVdfmLHHFqyu3GgydwnKqlGU.mft (raw, json)
Hash identifier: 1VXNWUR+n5RxCFQVEA4Y0vJODrc5Jx1xrRv0Bs5zHCU=
Subject key identifier: 20:E7:91:E1:7E:00:73:08:87:70:BD:0F:66:DE:A0:71:B9:7E:8A:0F
Authority key identifier: D6:5A:A9:55:D7:E6:2C:71:C5:AB:2B:B7:1A:0C:9D:C2:72:AA:94:65
Certificate issuer: /CN=A91EB6A5/serialNumber=D65AA955D7E62C71C5AB2BB71A0C9DC272AA9465
Certificate serial: 0141
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqpVdfmLHHFqyu3GgydwnKqlGU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.mft
Manifest number: 013D
Signing time: Sat 29 Mar 2025 03:50:41 +0000
Manifest this update: Sat 29 Mar 2025 03:50:40 +0000
Manifest next update: Sat 05 Apr 2025 03:50:40 +0000
Files and hashes: 1: 1lqpVdfmLHHFqyu3GgydwnKqlGU.crl (hash: l9bBC4KICNnf4MG3ZrQukZqsJG5BMTWBig7uUpLV5AI=)
2: AE8AEA702C3111EE94A5056FC4F9AE02.roa (hash: DhIch+RxWIpV0kjM6MCCA7OP7UDRbGyuOsypw/t/DWs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 321 (0x141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB6A5
Validity
Not Before: Mar 29 03:50:40 2025 GMT
Not After : Apr 5 03:50:40 2025 GMT
Subject: CN=67e76e11-f2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6d:a3:30:d0:6d:09:ee:4c:a7:87:e3:ac:47:
5c:b0:ec:e0:b1:00:62:d8:a4:9c:99:d8:b8:54:6d:
6b:5c:a2:2a:b9:4e:ab:40:03:99:c4:d0:e7:bc:8a:
1a:00:15:d7:20:59:86:ca:d1:35:df:74:98:4c:f4:
48:6d:f6:55:01:b3:ea:73:5d:aa:c9:d4:ba:f7:e7:
c3:7d:e1:9d:41:8e:b8:b8:f3:34:f4:01:b2:fb:be:
74:73:7d:d6:fa:3f:e9:1d:4a:38:86:bd:c5:fa:7d:
0f:71:fa:a7:14:ec:2f:ed:31:67:fe:a3:a8:56:b4:
f5:de:c2:0d:20:30:48:48:5d:d2:ca:1f:af:c5:67:
24:3d:c9:db:34:ea:7a:bf:8d:fe:1a:46:e1:5b:f6:
fd:3d:5c:6a:53:ff:14:99:59:8c:1a:6a:c4:a1:3c:
d3:01:1e:db:f9:03:eb:b6:fb:32:a9:35:42:3b:4a:
f0:a5:dc:5b:32:ca:1c:e8:a0:33:b0:8c:a1:43:be:
bd:45:95:ff:6f:3f:85:28:48:ff:c7:8d:a4:71:ab:
43:c8:e5:a6:e7:29:34:23:78:08:bd:7a:b5:c9:a7:
5f:a7:63:6b:67:ad:00:19:16:a3:8b:5d:50:70:2c:
83:ef:14:d8:dc:57:a8:a9:9c:15:e8:60:5c:a7:4f:
67:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E7:91:E1:7E:00:73:08:87:70:BD:0F:66:DE:A0:71:B9:7E:8A:0F
X509v3 Authority Key Identifier:
keyid:D6:5A:A9:55:D7:E6:2C:71:C5:AB:2B:B7:1A:0C:9D:C2:72:AA:94:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqpVdfmLHHFqyu3GgydwnKqlGU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:10:08:5c:dc:1a:97:3f:5e:a6:53:3e:9f:e3:e0:df:b6:82:
9a:cf:36:bc:87:cd:a2:55:1b:d5:bd:fc:8a:20:bd:a8:f9:77:
e4:27:55:7f:9a:7d:41:6a:4e:81:08:9a:60:27:3a:85:fe:c5:
fc:06:19:89:87:61:c0:fa:90:d9:24:54:4e:54:91:10:69:a6:
f4:f7:74:a1:97:52:67:72:ae:ff:ab:71:45:57:99:1c:7b:27:
e0:1d:19:fc:cb:64:b7:0b:6a:df:18:f2:f6:6d:24:03:ad:fd:
ec:7a:89:66:7d:f0:7b:38:eb:d4:c1:c7:f5:13:73:b6:e9:6e:
c6:0d:19:9e:63:c5:ea:81:ad:5e:49:c0:36:6b:bf:87:88:58:
ad:9b:32:81:5f:63:e9:db:61:bb:a4:e7:bb:39:db:5e:42:fb:
ab:11:5a:29:8a:2a:88:d7:dd:aa:87:e2:30:7d:18:66:e0:e9:
e5:dc:7e:07:58:fe:38:56:c9:80:1d:22:69:cd:af:41:c9:88:
82:b0:9c:10:af:d5:91:25:c2:b3:21:73:56:b1:79:08:4d:cc:
cf:f3:60:34:84:e5:be:4e:0e:8a:e7:a9:db:bd:99:67:19:bd:
f7:8e:8a:04:d7:91:16:b8:6b:66:03:81:ae:e7:74:5b:10:ac:
f3:92:22:6e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUI2QTUxMTAvBgNVBAUTKEQ2NUFBOTU1RDdFNjJDNzFDNUFCMkJCNzFBMEM5REMy
NzJBQTk0NjUwHhcNMjUwMzI5MDM1MDQwWhcNMjUwNDA1MDM1MDQwWjAYMRYwFAYD
VQQDEw02N2U3NmUxMS1mMmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzm2jMNBtCe5Mp4fjrEdcsOzgsQBi2KScmdi4VG1rXKIquU6rQAOZxNDnvIoa
ABXXIFmGytE133SYTPRIbfZVAbPqc12qydS69+fDfeGdQY64uPM09AGy+750c33W
+j/pHUo4hr3F+n0PcfqnFOwv7TFn/qOoVrT13sINIDBISF3Syh+vxWckPcnbNOp6
v43+GkbhW/b9PVxqU/8UmVmMGmrEoTzTAR7b+QPrtvsyqTVCO0rwpdxbMsoc6KAz
sIyhQ769RZX/bz+FKEj/x42kcatDyOWm5yk0I3gIvXq1yadfp2NrZ60AGRaji11Q
cCyD7xTY3FeoqZwV6GBcp09n6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCDnkeF+
AHMIh3C9D2beoHG5fooPMB8GA1UdIwQYMBaAFNZaqVXX5ixxxasrtxoMncJyqpRl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjZBNS80QTkzRjY0MjJD
MzExMUVFOUNFNEZGNkRDNEY5QUUwMi8xbHFwVmRmbUxISEZxeXUzR2d5ZHduS3Fs
R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFscXBWZGZtTEhIRnF5dTNHZ3lkd25LcWxHVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QjZBNS80QTkzRjY0MjJDMzExMUVFOUNFNEZGNkRDNEY5QUUwMi8xbHFwVmRmbUxI
SEZxeXUzR2d5ZHduS3FsR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCiEAhc3BqXP16mUz6f4+DftoKazza8h82iVRvVvfyKIL2o+XfkJ1V/
mn1Bak6BCJpgJzqF/sX8BhmJh2HA+pDZJFROVJEQaab093Shl1Jncq7/q3FFV5kc
eyfgHRn8y2S3C2rfGPL2bSQDrf3seolmffB7OOvUwcf1E3O26W7GDRmeY8Xqga1e
ScA2a7+HiFitmzKBX2Pp22G7pOe7OdteQvurEVopiiqI192qh+IwfRhm4Onl3H4H
WP44VsmAHSJpza9ByYiCsJwQr9WRJcKzIXNWsXkITczP82A0hOW+Tg6K56nbvZln
Gb33jooE15EWuGtmA4Gu53RbEKzzkiJu
-----END CERTIFICATE-----
Generated at Sat Apr 5 05:25:04 2025 by rpki-client