Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F52FD/625F0F0ABACD11EBAA23976DC4F9AE02/XUXapVj_ZfZmNblniAm4rPBAc9I.mft
File: XUXapVj_ZfZmNblniAm4rPBAc9I.mft (raw, json)
Hash identifier: XmhKWY/2PgT3K5g11/vSmOxVab6KASdisYjQ8B3Lclc=
Subject key identifier: 97:81:68:3E:B0:CE:50:21:2C:72:FA:A2:81:E7:EA:F5:EC:7F:0E:C8
Authority key identifier: 5D:45:DA:A5:58:FF:65:F6:66:35:B9:67:88:09:B8:AC:F0:40:73:D2
Certificate issuer: /CN=A91F52FD/serialNumber=5D45DAA558FF65F66635B9678809B8ACF04073D2
Certificate serial: 05C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUXapVj_ZfZmNblniAm4rPBAc9I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F52FD/625F0F0ABACD11EBAA23976DC4F9AE02/XUXapVj_ZfZmNblniAm4rPBAc9I.mft
Manifest number: 05B8
Signing time: Fri 28 Mar 2025 23:23:24 +0000
Manifest this update: Fri 28 Mar 2025 23:23:23 +0000
Manifest next update: Fri 04 Apr 2025 23:23:23 +0000
Files and hashes: 1: XUXapVj_ZfZmNblniAm4rPBAc9I.crl (hash: WbEBuhQ6S5IfU9fEWGvHM9aO1WIAyZOkajzeg5eF5n4=)
2: 48459AB0BACF11EBAA321370C4F9AE02.roa (hash: bgQvr2Jdprt2Ja1Usi3GgYGC5SiLxAPy60mdKqHu2RA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1472 (0x5c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F52FD
Validity
Not Before: Mar 28 23:23:23 2025 GMT
Not After : Apr 4 23:23:23 2025 GMT
Subject: CN=67e72f6b-37b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6c:40:3c:86:a6:24:83:99:2f:d2:f9:5b:70:
60:c2:10:e4:21:dd:b4:2b:7c:f2:a2:76:0f:36:6f:
f6:6b:91:6e:2f:22:7a:fe:30:cc:ea:a1:4a:5d:59:
d0:43:29:51:50:58:9b:28:3c:c0:96:db:15:b8:ed:
dc:b4:ef:17:6b:cb:83:33:1a:db:ba:84:37:f3:c5:
a5:8e:94:c9:ff:3c:2e:02:a2:0e:f7:0d:4f:3d:23:
b5:e9:45:05:41:ce:b8:45:b9:63:02:ae:79:5d:51:
56:ec:73:cc:93:1d:36:7b:c9:56:4a:c4:e8:49:c3:
96:4e:19:b2:70:71:a3:08:57:19:a4:0f:52:f4:e1:
ad:6e:af:c6:c4:25:58:05:07:d1:7b:96:17:f2:01:
b2:02:68:cd:19:53:08:26:09:a5:d7:e2:42:af:fe:
da:22:6c:5e:69:e1:30:27:97:6b:44:fa:6a:a3:4c:
14:dd:12:fd:bd:d1:42:64:dd:e5:c3:21:9c:43:da:
f6:2b:f5:8b:15:56:48:ce:c9:5e:5f:90:eb:c5:5d:
40:f8:fe:c1:94:75:cc:82:87:b9:8d:ba:0d:ba:95:
5f:ab:dc:4c:83:d2:02:89:bb:41:18:b9:99:f4:b1:
21:8f:58:fe:d8:99:94:3d:88:a7:84:f6:7c:91:b1:
79:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:81:68:3E:B0:CE:50:21:2C:72:FA:A2:81:E7:EA:F5:EC:7F:0E:C8
X509v3 Authority Key Identifier:
keyid:5D:45:DA:A5:58:FF:65:F6:66:35:B9:67:88:09:B8:AC:F0:40:73:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F52FD/625F0F0ABACD11EBAA23976DC4F9AE02/XUXapVj_ZfZmNblniAm4rPBAc9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUXapVj_ZfZmNblniAm4rPBAc9I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F52FD/625F0F0ABACD11EBAA23976DC4F9AE02/XUXapVj_ZfZmNblniAm4rPBAc9I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:ca:bc:13:d8:5d:f3:68:8e:66:09:5c:dc:92:bc:f9:4c:8d:
c9:30:b1:7f:8f:5c:73:cd:b4:ce:c8:b7:75:a8:79:5b:69:fc:
d8:c9:29:7f:b9:27:4b:7c:ac:5f:b2:1b:00:11:cc:0e:16:59:
3d:bb:0c:63:80:2c:0d:28:a2:2b:aa:b6:4f:17:94:42:15:a5:
71:7e:29:4f:f4:a6:75:f3:10:2e:7e:dd:fc:93:f7:d3:e7:cb:
5e:c6:75:07:c0:46:b9:f4:18:19:e6:14:7d:68:4e:7a:cd:ee:
46:99:2d:f1:8b:a1:7d:55:48:dc:3b:76:87:b5:c1:d2:18:5a:
e4:f4:bc:1f:54:c1:33:d3:85:44:ab:28:7e:21:1f:51:05:b9:
4b:6c:bb:67:d7:5a:9b:14:63:21:94:66:3e:eb:ef:37:b0:fd:
69:2f:ac:18:06:c5:b0:ff:ac:b3:60:89:d5:4e:94:d8:08:1a:
3b:a3:7a:f1:4c:f8:4a:9e:ba:9f:5b:5c:99:14:38:2c:ba:c4:
84:10:7e:3d:51:58:1b:35:d0:27:5c:2b:7b:33:ff:34:79:84:
8f:33:a3:f5:d2:88:04:44:4f:d8:f3:47:b1:4a:30:37:9b:c3:
d9:6a:d1:7e:c6:d3:e2:8a:3f:ee:de:81:dd:5b:87:fe:84:f8:
8f:c6:73:d6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjUyRkQxMTAvBgNVBAUTKDVENDVEQUE1NThGRjY1RjY2NjM1Qjk2Nzg4MDlCOEFD
RjA0MDczRDIwHhcNMjUwMzI4MjMyMzIzWhcNMjUwNDA0MjMyMzIzWjAYMRYwFAYD
VQQDEw02N2U3MmY2Yi0zN2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA72xAPIamJIOZL9L5W3BgwhDkId20K3zyonYPNm/2a5FuLyJ6/jDM6qFKXVnQ
QylRUFibKDzAltsVuO3ctO8Xa8uDMxrbuoQ388WljpTJ/zwuAqIO9w1PPSO16UUF
Qc64RbljAq55XVFW7HPMkx02e8lWSsToScOWThmycHGjCFcZpA9S9OGtbq/GxCVY
BQfRe5YX8gGyAmjNGVMIJgml1+JCr/7aImxeaeEwJ5drRPpqo0wU3RL9vdFCZN3l
wyGcQ9r2K/WLFVZIzsleX5DrxV1A+P7BlHXMgoe5jboNupVfq9xMg9ICibtBGLmZ
9LEhj1j+2JmUPYinhPZ8kbF5awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJeBaD6w
zlAhLHL6ooHn6vXsfw7IMB8GA1UdIwQYMBaAFF1F2qVY/2X2ZjW5Z4gJuKzwQHPS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTJGRC82MjVGMEYwQUJB
Q0QxMUVCQUEyMzk3NkRDNEY5QUUwMi9YVVhhcFZqX1pmWm1OYmxuaUFtNHJQQkFj
OUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hVWGFwVmpfWmZabU5ibG5pQW00clBCQWM5SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NTJGRC82MjVGMEYwQUJBQ0QxMUVCQUEyMzk3NkRDNEY5QUUwMi9YVVhhcFZqX1pm
Wm1OYmxuaUFtNHJQQkFjOUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA5yrwT2F3zaI5mCVzckrz5TI3JMLF/j1xzzbTOyLd1qHlbafzYySl/
uSdLfKxfshsAEcwOFlk9uwxjgCwNKKIrqrZPF5RCFaVxfilP9KZ18xAuft38k/fT
58texnUHwEa59BgZ5hR9aE56ze5GmS3xi6F9VUjcO3aHtcHSGFrk9LwfVMEz04VE
qyh+IR9RBblLbLtn11qbFGMhlGY+6+83sP1pL6wYBsWw/6yzYInVTpTYCBo7o3rx
TPhKnrqfW1yZFDgsusSEEH49UVgbNdAnXCt7M/80eYSPM6P10ogERE/Y80exSjA3
m8PZatF+xtPiij/u3oHdW4f+hPiPxnPW
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:45:18 2025 by rpki-client