Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.mft
File: 5P3k1jhc-jqHPsReepFHztMJvAI.mft (raw, json)
Hash identifier: ka1dVDpS13nHnJl/BP7d++1m2hPjUxUWAK6df+b1xVE=
Subject key identifier: B5:F4:B5:8E:72:D4:F8:4A:0C:35:EE:E2:DD:5D:7F:A3:50:98:E6:B7
Authority key identifier: E4:FD:E4:D6:38:5C:FA:3A:87:3E:C4:5E:7A:91:47:CE:D3:09:BC:02
Certificate issuer: /CN=A91EC46B/serialNumber=E4FDE4D6385CFA3A873EC45E7A9147CED309BC02
Certificate serial: 0653
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5P3k1jhc-jqHPsReepFHztMJvAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.mft
Manifest number: 064B
Signing time: Fri 28 Mar 2025 22:46:20 +0000
Manifest this update: Fri 28 Mar 2025 22:46:19 +0000
Manifest next update: Fri 04 Apr 2025 22:46:19 +0000
Files and hashes: 1: 5P3k1jhc-jqHPsReepFHztMJvAI.crl (hash: GnRHdLdTrcVdznJw1//Mph7uOudvSQUsz+xJh6H5upg=)
2: 18ED6F18862211EB99005123C4F9AE02.roa (hash: rr8gNUqLqDSNabGr8QuJud25OZUwhJk+lADOj5yViNQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1619 (0x653)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC46B
Validity
Not Before: Mar 28 22:46:19 2025 GMT
Not After : Apr 4 22:46:19 2025 GMT
Subject: CN=67e726bc-3db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d3:c8:a4:e5:66:ac:83:cf:24:2d:92:fc:32:
2b:bc:a8:04:44:ec:4e:1f:39:5c:52:58:9c:ef:48:
c5:97:34:37:0f:88:58:a8:9a:b0:dc:57:0d:ed:8e:
24:38:a4:0f:d8:c8:eb:ee:19:37:76:ca:25:9f:6b:
1e:fd:2d:3b:ca:b1:7c:e1:7b:f2:84:09:69:bf:ad:
d1:4c:66:25:93:a2:01:f4:91:7c:e4:3d:af:d6:04:
41:29:7c:74:dc:ff:50:8c:d2:0b:9b:ff:8c:a0:43:
6a:8c:72:3e:ee:69:cb:72:51:99:d9:c0:0e:6c:b3:
97:5a:58:6f:e3:a1:7c:b8:3b:72:47:ac:f9:16:15:
9b:ec:11:48:f6:7d:6b:5b:c6:08:7c:2f:48:e9:0e:
9f:31:7e:60:70:f1:15:6d:5b:7d:62:63:e5:88:bf:
67:86:7a:78:1a:1c:df:78:b4:66:13:73:bb:93:e7:
43:5c:9a:13:2f:db:94:d4:ec:12:1a:4a:4b:76:52:
58:60:8f:0f:71:70:bf:3b:68:4e:f3:e1:ad:38:49:
19:41:f7:5e:75:b4:b3:47:c1:63:12:7d:3d:0d:d8:
17:0b:5e:48:5d:f9:c3:81:14:e2:e1:e8:38:f6:69:
ec:5d:98:38:df:67:a4:b9:a3:03:3c:d6:09:0a:e3:
86:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F4:B5:8E:72:D4:F8:4A:0C:35:EE:E2:DD:5D:7F:A3:50:98:E6:B7
X509v3 Authority Key Identifier:
keyid:E4:FD:E4:D6:38:5C:FA:3A:87:3E:C4:5E:7A:91:47:CE:D3:09:BC:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5P3k1jhc-jqHPsReepFHztMJvAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:21:20:30:3a:e4:0c:3f:c2:12:89:0c:05:4a:51:07:7c:78:
e4:9f:ac:f6:a6:8d:69:0a:9b:40:76:1d:97:94:80:2c:a7:bb:
b5:dd:4e:28:47:0b:d5:fd:e4:6e:e1:ae:c8:7d:91:01:8d:52:
9f:6a:c3:85:2e:c9:af:2d:29:c6:df:26:01:a4:e3:64:ad:7c:
05:ff:98:bb:1b:f3:9a:0e:e8:6c:81:47:d8:19:82:43:92:ac:
1a:1f:78:02:d1:8d:f4:e9:5f:5f:be:2c:97:7a:2b:3d:8c:75:
55:55:44:8d:13:91:2e:22:c8:d3:45:06:b0:e9:0b:79:92:0f:
77:10:c8:a3:37:1b:5c:ad:b3:ad:d3:41:4e:47:ee:0a:63:52:
df:73:60:0a:ed:ee:a7:93:e8:91:7f:25:ab:50:0f:2e:34:62:
98:be:37:b4:5f:86:05:c8:57:65:4b:d8:1c:3f:21:c3:9f:e4:
35:12:10:0f:86:bd:93:c5:ec:02:92:29:7e:9c:8c:b3:ec:6c:
25:54:bf:13:a5:3c:47:77:84:d4:35:51:e3:86:da:d1:bb:68:
04:82:51:8f:35:db:73:e3:3d:74:c5:2d:46:32:4e:cd:3a:c7:
b9:59:2c:31:25:62:fc:a9:c1:86:58:ef:03:12:fd:c1:f1:e6:
5e:da:99:cf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUM0NkIxMTAvBgNVBAUTKEU0RkRFNEQ2Mzg1Q0ZBM0E4NzNFQzQ1RTdBOTE0N0NF
RDMwOUJDMDIwHhcNMjUwMzI4MjI0NjE5WhcNMjUwNDA0MjI0NjE5WjAYMRYwFAYD
VQQDEw02N2U3MjZiYy0zZGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAudPIpOVmrIPPJC2S/DIrvKgEROxOHzlcUlic70jFlzQ3D4hYqJqw3FcN7Y4k
OKQP2Mjr7hk3dsoln2se/S07yrF84XvyhAlpv63RTGYlk6IB9JF85D2v1gRBKXx0
3P9QjNILm/+MoENqjHI+7mnLclGZ2cAObLOXWlhv46F8uDtyR6z5FhWb7BFI9n1r
W8YIfC9I6Q6fMX5gcPEVbVt9YmPliL9nhnp4GhzfeLRmE3O7k+dDXJoTL9uU1OwS
GkpLdlJYYI8PcXC/O2hO8+GtOEkZQfdedbSzR8FjEn09DdgXC15IXfnDgRTi4eg4
9mnsXZg432ekuaMDPNYJCuOG3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLX0tY5y
1PhKDDXu4t1df6NQmOa3MB8GA1UdIwQYMBaAFOT95NY4XPo6hz7EXnqRR87TCbwC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzQ2Qi9GNjg1QkM5QzdG
QzIxMUVCQTcxNDU0MkFDNEY5QUUwMi81UDNrMWpoYy1qcUhQc1JlZXBGSHp0TUp2
QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVQM2sxamhjLWpxSFBzUmVlcEZIenRNSnZBSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QzQ2Qi9GNjg1QkM5QzdGQzIxMUVCQTcxNDU0MkFDNEY5QUUwMi81UDNrMWpoYy1q
cUhQc1JlZXBGSHp0TUp2QUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDHISAwOuQMP8ISiQwFSlEHfHjkn6z2po1pCptAdh2XlIAsp7u13U4o
RwvV/eRu4a7IfZEBjVKfasOFLsmvLSnG3yYBpONkrXwF/5i7G/OaDuhsgUfYGYJD
kqwaH3gC0Y306V9fviyXeis9jHVVVUSNE5EuIsjTRQaw6Qt5kg93EMijNxtcrbOt
00FOR+4KY1Lfc2AK7e6nk+iRfyWrUA8uNGKYvje0X4YFyFdlS9gcPyHDn+Q1EhAP
hr2TxewCkil+nIyz7GwlVL8TpTxHd4TUNVHjhtrRu2gEglGPNdtz4z10xS1GMk7N
Ose5WSwxJWL8qcGGWO8DEv3B8eZe2pnP
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:28:44 2025 by rpki-client