Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft
File: -TCCkkNtEKqYcmtG_Py-oHkZT08.mft (raw, json)
Hash identifier: OfuSGSfXBpbS8yPsmL8QK4ZNYG5HZdgUIqNfe4/abbU=
Subject key identifier: 93:1F:E4:DF:AB:11:6F:76:C7:F7:3C:81:20:20:B2:48:B7:2D:FF:F7
Authority key identifier: F9:30:82:92:43:6D:10:AA:98:72:6B:46:FC:FC:BE:A0:79:19:4F:4F
Certificate issuer: /CN=A91EFBEA/serialNumber=F9308292436D10AA98726B46FCFCBEA079194F4F
Certificate serial: 0C3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft
Manifest number: 0C33
Signing time: Fri 28 Mar 2025 18:35:42 +0000
Manifest this update: Fri 28 Mar 2025 18:35:41 +0000
Manifest next update: Fri 04 Apr 2025 18:35:41 +0000
Files and hashes: 1: -TCCkkNtEKqYcmtG_Py-oHkZT08.crl (hash: Y9NzrrLTlf3OcC1Yg0UboGZdQH19Dun4UxwoCZme1o0=)
2: C7A9FD140A1811EABA1D8360C4F9AE02.roa (hash: sksRMVI3q7oJNtyDgmTVFUq7ceYvdVbVuSS4jEJcQsk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3130 (0xc3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFBEA
Validity
Not Before: Mar 28 18:35:41 2025 GMT
Not After : Apr 4 18:35:41 2025 GMT
Subject: CN=67e6ebfe-a3ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:11:d2:67:eb:92:8b:cd:58:40:76:a9:c6:7d:
e7:e3:4c:9c:f3:d7:17:5f:bf:cb:46:45:fa:15:8b:
c0:c0:f8:bc:71:11:b5:a3:81:ab:53:cb:c5:db:98:
47:3a:9d:2e:d8:cf:99:67:6f:18:65:a2:ce:75:9b:
eb:df:dc:0a:b3:46:4b:96:35:cd:d0:72:0c:d4:cc:
88:27:82:22:fe:73:a7:5f:49:1b:ef:10:75:e3:4d:
59:5d:37:31:be:47:0e:c2:12:f4:e0:41:44:24:08:
a9:74:f4:b8:da:1b:10:51:c7:52:88:82:b1:31:c9:
e1:9c:9f:ef:c3:78:6d:96:8c:f2:60:24:10:c6:6b:
2b:af:1a:d5:33:c4:6c:22:ca:31:a1:46:4b:4c:ae:
f5:0a:cf:57:2b:b5:28:68:2c:51:b5:38:7d:f2:f8:
85:a7:c8:ff:63:f0:8f:ff:db:9a:1a:62:fd:da:f8:
cf:d2:05:5d:aa:59:29:e0:4e:8c:39:22:90:45:99:
22:55:63:fa:5d:ee:73:22:4d:dc:5e:58:19:82:75:
1c:63:ea:eb:ab:a2:f3:8d:ce:a4:63:4f:7a:69:6e:
36:08:85:b1:66:67:e6:98:d2:97:f8:f6:9e:36:f9:
ca:fd:3a:7d:17:c0:6c:9e:3e:05:3f:60:d7:3f:bb:
43:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1F:E4:DF:AB:11:6F:76:C7:F7:3C:81:20:20:B2:48:B7:2D:FF:F7
X509v3 Authority Key Identifier:
keyid:F9:30:82:92:43:6D:10:AA:98:72:6B:46:FC:FC:BE:A0:79:19:4F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:4e:7a:c9:88:41:6b:a4:7a:ae:87:09:07:b2:81:36:31:c4:
df:12:9e:36:15:5d:50:8e:7a:72:dd:7d:77:e0:f0:8c:76:fd:
f1:4a:d8:c8:d3:a7:85:06:c8:0a:33:60:ac:8c:66:60:fc:8e:
b9:61:3c:9e:2c:7e:d6:06:58:f2:5e:5d:bf:4b:14:5e:f2:54:
22:ea:2a:59:8e:1d:42:ee:7c:8c:bf:d6:08:75:e8:e9:3e:af:
b0:80:a2:51:e6:a5:8e:c5:9c:a5:a9:14:57:7a:ff:12:7b:ec:
fd:10:b4:cb:7e:fb:ca:1d:30:09:6c:60:12:46:42:8a:48:3d:
aa:9d:33:11:08:f2:85:68:36:2f:65:9b:68:9b:c5:f2:23:7e:
8c:a6:3d:3a:01:7f:a2:e9:82:c2:6d:95:0a:24:3f:94:5e:f5:
93:57:de:6e:2b:78:1b:36:89:28:e5:5e:82:f1:e6:f3:22:ad:
14:ad:b9:a5:ce:62:0c:1a:79:f3:36:42:92:82:a9:c6:01:1f:
a0:f8:e6:bd:3c:3d:08:a1:50:9b:96:18:3d:11:74:c7:19:20:
1a:03:54:dc:fe:0e:f5:a3:01:df:06:8c:8e:61:eb:34:b3:7d:
90:5a:54:08:30:48:64:46:9c:cb:72:99:9a:3b:63:13:53:8d:
58:d8:7a:3d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUZCRUExMTAvBgNVBAUTKEY5MzA4MjkyNDM2RDEwQUE5ODcyNkI0NkZDRkNCRUEw
NzkxOTRGNEYwHhcNMjUwMzI4MTgzNTQxWhcNMjUwNDA0MTgzNTQxWjAYMRYwFAYD
VQQDEw02N2U2ZWJmZS1hM2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvhHSZ+uSi81YQHapxn3n40yc89cXX7/LRkX6FYvAwPi8cRG1o4GrU8vF25hH
Op0u2M+ZZ28YZaLOdZvr39wKs0ZLljXN0HIM1MyIJ4Ii/nOnX0kb7xB1401ZXTcx
vkcOwhL04EFEJAipdPS42hsQUcdSiIKxMcnhnJ/vw3htlozyYCQQxmsrrxrVM8Rs
IsoxoUZLTK71Cs9XK7UoaCxRtTh98viFp8j/Y/CP/9uaGmL92vjP0gVdqlkp4E6M
OSKQRZkiVWP6Xe5zIk3cXlgZgnUcY+rrq6Lzjc6kY096aW42CIWxZmfmmNKX+Pae
NvnK/Tp9F8Bsnj4FP2DXP7tDvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJMf5N+r
EW92x/c8gSAgski3Lf/3MB8GA1UdIwQYMBaAFPkwgpJDbRCqmHJrRvz8vqB5GU9P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkJFQS83QzlDNTkxODAx
RDgxMUVBQjdEN0I0NDRDNEY5QUUwMi8tVENDa2tOdEVLcVljbXRHX1B5LW9Ia1pU
MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1UQ0Nra050RUtxWWNtdEdfUHktb0hrWlQwOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RkJFQS83QzlDNTkxODAxRDgxMUVBQjdEN0I0NDRDNEY5QUUwMi8tVENDa2tOdEVL
cVljbXRHX1B5LW9Ia1pUMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQArTnrJiEFrpHquhwkHsoE2McTfEp42FV1Qjnpy3X134PCMdv3xStjI
06eFBsgKM2CsjGZg/I65YTyeLH7WBljyXl2/SxRe8lQi6ipZjh1C7nyMv9YIdejp
Pq+wgKJR5qWOxZylqRRXev8Se+z9ELTLfvvKHTAJbGASRkKKSD2qnTMRCPKFaDYv
ZZtom8XyI36Mpj06AX+i6YLCbZUKJD+UXvWTV95uK3gbNoko5V6C8ebzIq0Urbml
zmIMGnnzNkKSgqnGAR+g+Oa9PD0IoVCblhg9EXTHGSAaA1Tc/g71owHfBoyOYes0
s32QWlQIMEhkRpzLcpmaO2MTU41Y2Ho9
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:22:09 2025 by rpki-client