Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft
File: UtXW_72oj1ReUbr5n32s4ZPAblc.mft (raw, json)
Hash identifier: hRE/fzeDP6BO6PsK83/qNdygPcPLTzCeqlfU6uuNIRw=
Subject key identifier: 88:0B:3E:54:31:B2:0A:79:F9:B4:26:3D:8D:E6:C7:BE:68:EB:07:DD
Authority key identifier: 52:D5:D6:FF:BD:A8:8F:54:5E:51:BA:F9:9F:7D:AC:E1:93:C0:6E:57
Certificate issuer: /CN=A91F17F6/serialNumber=52D5D6FFBDA88F545E51BAF99F7DACE193C06E57
Certificate serial: 07B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UtXW_72oj1ReUbr5n32s4ZPAblc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft
Manifest number: 07B0
Signing time: Fri 28 Mar 2025 21:25:55 +0000
Manifest this update: Fri 28 Mar 2025 21:25:54 +0000
Manifest next update: Fri 04 Apr 2025 21:25:54 +0000
Files and hashes: 1: UtXW_72oj1ReUbr5n32s4ZPAblc.crl (hash: pBBRBpXn2xDbEPFpUiWVks4BgKyenMtzef3IPXgHkwo=)
2: AF95E6D8F2B711EAA1C01744C4F9AE02.roa (hash: MKiDsu5ueGdBa9te8oknBkNBnhRi0o532gSyxE3s1JA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1974 (0x7b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F17F6
Validity
Not Before: Mar 28 21:25:54 2025 GMT
Not After : Apr 4 21:25:54 2025 GMT
Subject: CN=67e713e2-83ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:19:fd:5b:ba:b6:5d:69:ce:93:19:95:15:df:
3b:f9:be:70:32:91:3e:33:3c:4c:38:52:ce:83:b0:
cb:82:dc:53:e5:73:ab:01:9f:3f:bf:4f:0c:c0:61:
5b:c2:71:59:2e:bd:b6:04:a5:c7:e1:e5:9f:90:b9:
8a:67:d7:87:2f:8e:ae:c9:0a:e6:9e:24:b3:15:53:
d2:f7:f6:ca:ed:ac:fc:72:59:9d:72:52:cc:a3:90:
ac:f1:19:c4:6c:49:70:78:0d:41:84:85:da:23:ae:
75:7d:4c:4c:6b:44:2d:78:72:1f:f1:66:53:ce:18:
85:53:aa:3a:f6:53:1a:2c:1c:e0:9f:2c:e4:c0:a7:
bc:9a:b5:24:f9:bc:20:a4:82:7e:d9:1e:59:3d:3d:
88:cc:64:4e:10:3f:ca:77:cb:f3:4d:ca:35:ef:a0:
37:d9:96:51:e5:b5:18:51:d9:6f:91:19:58:ac:6e:
d0:36:02:c8:0f:33:fd:7f:6d:ea:57:0c:0f:6a:1c:
ed:4c:cd:83:2d:64:fb:0a:00:6d:d5:ee:be:d6:95:
33:d0:86:cd:7c:d8:13:86:c6:14:fc:c3:51:ae:52:
e2:6a:25:52:93:84:a1:ff:ba:17:12:5e:82:b3:9a:
43:27:6c:37:a7:01:8b:d4:27:44:ac:9d:c2:5b:7b:
4e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0B:3E:54:31:B2:0A:79:F9:B4:26:3D:8D:E6:C7:BE:68:EB:07:DD
X509v3 Authority Key Identifier:
keyid:52:D5:D6:FF:BD:A8:8F:54:5E:51:BA:F9:9F:7D:AC:E1:93:C0:6E:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UtXW_72oj1ReUbr5n32s4ZPAblc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:80:8c:91:4d:c6:1c:05:2e:8a:c4:1f:1e:08:cf:cf:39:ed:
cc:24:15:e9:a3:c5:c8:1a:02:ce:b2:fb:19:57:a2:21:bb:de:
d0:c2:99:30:82:fb:f6:bd:1a:fa:5b:28:b5:a9:3f:9f:e0:61:
48:fd:a4:d7:50:da:b7:b3:fd:cd:6f:b3:77:4a:f8:bf:e9:36:
74:92:2d:a7:48:dc:f3:68:cd:c7:3f:fe:64:d0:86:e3:8c:5f:
c0:a7:29:25:96:07:40:94:86:46:54:9b:f5:49:e4:76:00:73:
27:b3:b9:8a:02:3d:d5:53:80:87:1f:ff:4a:1d:39:d4:35:07:
f9:68:45:82:69:7b:97:e3:bf:ea:7c:6c:0e:37:1d:0b:7c:1f:
50:eb:ef:64:f0:7d:b3:fc:d1:f9:1b:0d:c4:e5:8f:b7:12:07:
6d:bb:e4:fa:57:4d:ab:a1:e6:31:d4:64:cb:75:07:90:a9:50:
f0:eb:b2:c8:e4:0d:b0:b2:11:5d:c2:a0:66:a9:43:50:8b:fe:
b9:ed:bf:bf:41:55:f1:8d:4f:6b:19:b8:ee:c7:42:5e:ba:8b:
47:2f:c7:02:03:bd:1e:a6:80:97:7a:1b:45:4d:f1:d2:c0:25:
3d:aa:ee:b4:81:49:f5:9b:64:4a:c3:de:2a:0a:7d:32:b3:ab:
29:bb:51:4e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjE3RjYxMTAvBgNVBAUTKDUyRDVENkZGQkRBODhGNTQ1RTUxQkFGOTlGN0RBQ0Ux
OTNDMDZFNTcwHhcNMjUwMzI4MjEyNTU0WhcNMjUwNDA0MjEyNTU0WjAYMRYwFAYD
VQQDEw02N2U3MTNlMi04M2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAshn9W7q2XWnOkxmVFd87+b5wMpE+MzxMOFLOg7DLgtxT5XOrAZ8/v08MwGFb
wnFZLr22BKXH4eWfkLmKZ9eHL46uyQrmniSzFVPS9/bK7az8clmdclLMo5Cs8RnE
bElweA1BhIXaI651fUxMa0QteHIf8WZTzhiFU6o69lMaLBzgnyzkwKe8mrUk+bwg
pIJ+2R5ZPT2IzGROED/Kd8vzTco176A32ZZR5bUYUdlvkRlYrG7QNgLIDzP9f23q
VwwPahztTM2DLWT7CgBt1e6+1pUz0IbNfNgThsYU/MNRrlLiaiVSk4Sh/7oXEl6C
s5pDJ2w3pwGL1CdErJ3CW3tO4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIgLPlQx
sgp5+bQmPY3mx75o6wfdMB8GA1UdIwQYMBaAFFLV1v+9qI9UXlG6+Z99rOGTwG5X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdGNi9FRDkzQ0VFOEYy
QjUxMUVBOUEzRjYzNDFDNEY5QUUwMi9VdFhXXzcyb2oxUmVVYnI1bjMyczRaUEFi
bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1V0WFdfNzJvajFSZVVicjVuMzJzNFpQQWJsYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MTdGNi9FRDkzQ0VFOEYyQjUxMUVBOUEzRjYzNDFDNEY5QUUwMi9VdFhXXzcyb2ox
UmVVYnI1bjMyczRaUEFibGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAWgIyRTcYcBS6KxB8eCM/POe3MJBXpo8XIGgLOsvsZV6Ihu97Qwpkw
gvv2vRr6Wyi1qT+f4GFI/aTXUNq3s/3Nb7N3Svi/6TZ0ki2nSNzzaM3HP/5k0Ibj
jF/ApykllgdAlIZGVJv1SeR2AHMns7mKAj3VU4CHH/9KHTnUNQf5aEWCaXuX47/q
fGwONx0LfB9Q6+9k8H2z/NH5Gw3E5Y+3Egdtu+T6V02roeYx1GTLdQeQqVDw67LI
5A2wshFdwqBmqUNQi/657b+/QVXxjU9rGbjux0JeuotHL8cCA70epoCXehtFTfHS
wCU9qu60gUn1m2RKw94qCn0ys6spu1FO
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:02:09 2025 by rpki-client