Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.mft
File: BNhIIeE7gDAzVMS-NDMdURHyvKY.mft (raw, json)
Hash identifier: NkEkNyBM9dMv7ezCiG29wln4q8zAR8W5J+/FNCFEmXk=
Subject key identifier: 12:65:5B:3E:F9:52:9E:73:C6:42:DF:FC:0B:48:62:3A:8C:27:6E:04
Authority key identifier: 04:D8:48:21:E1:3B:80:30:33:54:C4:BE:34:33:1D:51:11:F2:BC:A6
Certificate issuer: /CN=A91F0721/serialNumber=04D84821E13B80303354C4BE34331D5111F2BCA6
Certificate serial: 018F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BNhIIeE7gDAzVMS-NDMdURHyvKY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.mft
Manifest number: 018C
Signing time: Sat 29 Mar 2025 03:02:47 +0000
Manifest this update: Sat 29 Mar 2025 03:02:46 +0000
Manifest next update: Sat 05 Apr 2025 03:02:46 +0000
Files and hashes: 1: BNhIIeE7gDAzVMS-NDMdURHyvKY.crl (hash: OfI2YOrilJZKxfkXzMcmQ6s99TY8BZuxSF/54z7t7Pk=)
2: 7659B89AADCC11ED84051211C4F9AE02.roa (hash: S0QCets6nYQwhXbRnwnSRy3OBYGEXLOm6h5sFxoClJ8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399 (0x18f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0721
Validity
Not Before: Mar 29 03:02:46 2025 GMT
Not After : Apr 5 03:02:46 2025 GMT
Subject: CN=67e762d6-5f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ff:5a:03:67:e9:d6:2a:2b:59:d0:83:bc:cc:
f7:8d:64:5b:38:4e:bd:b8:d9:e7:6d:13:7c:90:7b:
ce:86:48:46:cb:25:d3:f7:72:12:d3:73:b9:70:0b:
20:60:04:6c:17:38:4e:93:24:a1:33:e7:de:bb:08:
67:c3:08:56:5d:69:17:48:a5:b9:cb:ba:b7:e8:e2:
26:ca:b8:58:5a:0a:b6:d3:66:0c:d0:37:9e:e3:03:
e1:98:61:b9:18:d5:5e:fa:45:09:52:ae:db:4c:b9:
b2:7e:3f:db:76:e6:54:32:a3:36:fd:9b:8b:11:61:
7f:9d:da:7f:f1:a0:73:9f:75:94:bf:0b:5a:22:6c:
7e:91:0b:c6:a2:12:25:72:99:5c:b5:36:6a:00:ed:
7a:86:20:8b:3d:8f:93:5a:cd:6f:54:29:be:05:f2:
af:92:e9:89:60:17:c8:48:11:e8:7d:c6:72:45:74:
21:7a:72:06:2b:b3:37:cd:59:5e:3f:85:c7:e2:e5:
73:02:40:3e:63:f2:80:e2:9c:57:50:e2:bd:78:0a:
8c:97:cb:3b:62:b7:85:c0:18:d8:c7:87:6a:ba:ae:
94:4c:f3:c5:d3:97:d6:bd:cb:be:69:c9:29:7e:5d:
63:3d:39:18:f9:db:ce:3a:cd:4e:34:82:4d:3e:fa:
13:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:65:5B:3E:F9:52:9E:73:C6:42:DF:FC:0B:48:62:3A:8C:27:6E:04
X509v3 Authority Key Identifier:
keyid:04:D8:48:21:E1:3B:80:30:33:54:C4:BE:34:33:1D:51:11:F2:BC:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BNhIIeE7gDAzVMS-NDMdURHyvKY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:dd:b4:40:82:16:5e:82:7d:9c:5c:ab:72:37:ad:c5:14:d8:
9e:79:76:bd:da:08:dc:b4:59:23:27:6a:f6:e0:e5:fa:74:5f:
98:60:b1:e3:38:cf:81:27:ea:c4:72:b3:b0:6e:ac:0e:fe:86:
09:83:43:8e:89:ff:40:42:54:56:2d:d3:5d:92:e5:e5:77:2f:
e8:34:31:44:e2:8b:a5:70:b4:4a:f7:93:6c:ee:53:b3:97:7a:
59:31:e2:b5:c4:c5:19:a9:b4:8e:03:88:d1:54:09:03:c1:2c:
97:60:8e:4c:b9:2b:ac:9c:c4:03:9b:54:1e:4f:46:ed:ae:fe:
17:f0:14:9c:5e:c4:f9:40:03:28:8e:59:8c:04:88:9b:b0:e7:
b1:28:f5:4e:a7:db:2e:14:63:21:e3:3c:74:93:ad:5c:65:3a:
e8:ba:4a:14:03:6b:5e:7a:9c:38:ac:96:29:6e:c6:d0:a7:30:
37:49:dc:f8:4e:b6:b5:bc:2f:eb:94:b6:96:f2:d1:fd:f0:9b:
65:25:57:2d:7d:31:87:47:47:70:08:f4:a3:ef:15:56:4a:92:
22:1c:af:73:bc:50:08:8a:7d:b6:69:5c:ac:fe:a0:4f:f0:a6:
93:5b:73:2a:66:24:a2:4a:10:67:61:85:f1:08:f9:33:e2:07:
0c:dc:6b:74
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjA3MjExMTAvBgNVBAUTKDA0RDg0ODIxRTEzQjgwMzAzMzU0QzRCRTM0MzMxRDUx
MTFGMkJDQTYwHhcNMjUwMzI5MDMwMjQ2WhcNMjUwNDA1MDMwMjQ2WjAYMRYwFAYD
VQQDEw02N2U3NjJkNi01ZjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzf9aA2fp1iorWdCDvMz3jWRbOE69uNnnbRN8kHvOhkhGyyXT93IS03O5cAsg
YARsFzhOkyShM+feuwhnwwhWXWkXSKW5y7q36OImyrhYWgq202YM0Dee4wPhmGG5
GNVe+kUJUq7bTLmyfj/bduZUMqM2/ZuLEWF/ndp/8aBzn3WUvwtaImx+kQvGohIl
cplctTZqAO16hiCLPY+TWs1vVCm+BfKvkumJYBfISBHofcZyRXQhenIGK7M3zVle
P4XH4uVzAkA+Y/KA4pxXUOK9eAqMl8s7YreFwBjYx4dquq6UTPPF05fWvcu+ackp
fl1jPTkY+dvOOs1ONIJNPvoTYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBJlWz75
Up5zxkLf/AtIYjqMJ24EMB8GA1UdIwQYMBaAFATYSCHhO4AwM1TEvjQzHVER8rym
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDcyMS9DOTEyN0IzRUFE
QzgxMUVEOTIxNjIyMEVDNEY5QUUwMi9CTmhJSWVFN2dEQXpWTVMtTkRNZFVSSHl2
S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JOaElJZUU3Z0RBelZNUy1ORE1kVVJIeXZLWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MDcyMS9DOTEyN0IzRUFEQzgxMUVEOTIxNjIyMEVDNEY5QUUwMi9CTmhJSWVFN2dE
QXpWTVMtTkRNZFVSSHl2S1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAl3bRAghZegn2cXKtyN63FFNieeXa92gjctFkjJ2r24OX6dF+YYLHj
OM+BJ+rEcrOwbqwO/oYJg0OOif9AQlRWLdNdkuXldy/oNDFE4oulcLRK95Ns7lOz
l3pZMeK1xMUZqbSOA4jRVAkDwSyXYI5MuSusnMQDm1QeT0btrv4X8BScXsT5QAMo
jlmMBIibsOexKPVOp9suFGMh4zx0k61cZTroukoUA2teepw4rJYpbsbQpzA3Sdz4
Tra1vC/rlLaW8tH98JtlJVctfTGHR0dwCPSj7xVWSpIiHK9zvFAIin22aVys/qBP
8KaTW3MqZiSiShBnYYXxCPkz4gcM3Gt0
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:34:47 2025 by rpki-client