Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft
File: FDm85NeiKugDbOsu5uavGPIbtZM.mft (raw, json)
Hash identifier: caA+CJqfno37eagwX18YrYbr2Y4RVuro4w5aYYynrPU=
Subject key identifier: 9C:92:84:7B:15:76:26:5F:F1:60:4B:2C:24:76:5F:F5:CA:5E:C7:4B
Authority key identifier: 14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93
Certificate issuer: /CN=A91F57D9/serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593
Certificate serial: 037C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft
Manifest number: 0371
Signing time: Sat 29 Mar 2025 01:10:22 +0000
Manifest this update: Sat 29 Mar 2025 01:10:22 +0000
Manifest next update: Sat 05 Apr 2025 01:10:22 +0000
Files and hashes: 1: FDm85NeiKugDbOsu5uavGPIbtZM.crl (hash: sprDTUif0WpcQ0hqnIDHc2q07J2IyCDP45sCrFkzxJA=)
2: CD22C9C8DC0D11ECA064B94CC4F9AE02.roa (hash: h1qvpOWxudSOhwTtJ3Z+p/+X0JRO+haXbihi5IJyhXw=)
3: F8071E24DC1111EC80AE816DC4F9AE02.roa (hash: OCdNpCgeUfuyWeLKRdqmiCW32PlQusQy1i0JweMZuFo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 892 (0x37c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F57D9
Validity
Not Before: Mar 29 01:10:22 2025 GMT
Not After : Apr 5 01:10:22 2025 GMT
Subject: CN=67e7487e-ba7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dc:a0:62:da:a7:56:6d:e1:61:c4:df:c7:79:
fe:1e:d3:1d:36:94:d9:79:10:7f:b3:76:fc:9b:9c:
09:98:41:44:88:03:fb:01:69:c0:58:63:c5:d1:a4:
8d:00:bb:10:f0:75:4e:60:48:46:9a:76:85:21:0f:
73:49:bd:4e:ad:2a:be:da:9d:d9:60:6c:25:55:fc:
d2:df:80:30:6c:13:37:e4:a2:c5:b0:4d:8f:ca:c7:
0e:fe:b9:21:fc:95:24:5a:a9:7a:6a:e1:9f:d5:7c:
9a:12:71:ef:a5:11:b5:01:14:99:62:b2:da:25:1f:
08:76:f5:fb:42:5b:3e:5a:f9:3b:59:b5:5d:07:e3:
ed:b0:6f:2b:ad:af:06:8d:12:b2:f5:19:c0:37:89:
d7:e7:d4:e7:3b:51:db:b0:3a:f5:bb:10:f0:72:48:
28:31:50:a8:42:38:f6:59:ea:34:cc:46:c6:21:95:
61:3e:30:e2:69:6b:01:ac:6d:a4:a1:c8:12:ea:93:
78:05:46:2b:61:54:17:b8:75:05:c0:7d:79:fc:50:
8c:16:1d:c5:41:97:89:3a:87:0a:e6:82:a3:d7:4e:
8c:ca:11:ea:ef:4f:8c:88:26:04:61:c2:e6:79:58:
31:6c:d0:f5:e3:0e:78:b1:39:df:ec:98:c7:f4:e1:
23:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:92:84:7B:15:76:26:5F:F1:60:4B:2C:24:76:5F:F5:CA:5E:C7:4B
X509v3 Authority Key Identifier:
keyid:14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:9a:38:4e:1d:1a:fd:b9:5d:b7:64:cf:df:6a:b3:79:8e:1d:
fc:3a:58:62:1b:d2:03:72:32:c7:2d:ff:46:37:19:b1:d4:f3:
18:d2:88:a6:c0:88:95:2d:38:d7:fb:33:5a:8e:6a:18:fb:a3:
3f:3c:37:e3:00:6e:fc:dc:1c:24:ac:7c:81:cd:07:0b:88:2e:
8d:55:f0:3d:69:53:c3:ff:d9:af:50:c0:e5:77:ab:1c:ca:43:
f4:00:59:23:ce:7e:53:19:05:34:7b:93:a1:49:98:e2:34:bd:
1b:25:e4:b4:ef:bd:82:c6:23:10:98:1e:89:9f:24:0f:d4:fe:
d0:55:d3:06:b9:05:5f:8f:16:b9:29:5b:90:1b:0a:56:79:13:
40:96:c7:84:d8:e0:33:0c:32:36:ed:7a:3d:31:25:7f:6a:68:
bf:c1:40:c0:eb:cb:e9:2c:df:ad:07:53:5b:2f:0a:f9:bf:c5:
0a:18:19:96:fa:b8:52:61:e7:63:2c:50:bc:50:1e:16:42:a0:
72:c6:2c:db:a5:4c:23:c9:00:f8:51:0f:f2:56:9d:9b:f9:b4:
9f:86:44:27:77:23:b7:0a:7b:69:79:e4:df:e3:c9:f5:36:0a:
1a:95:46:f2:c3:ec:f0:3c:54:ed:0a:30:58:70:23:65:94:8f:
e0:73:15:22
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjU3RDkxMTAvBgNVBAUTKDE0MzlCQ0U0RDdBMjJBRTgwMzZDRUIyRUU2RTZBRjE4
RjIxQkI1OTMwHhcNMjUwMzI5MDExMDIyWhcNMjUwNDA1MDExMDIyWjAYMRYwFAYD
VQQDEw02N2U3NDg3ZS1iYTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAudygYtqnVm3hYcTfx3n+HtMdNpTZeRB/s3b8m5wJmEFEiAP7AWnAWGPF0aSN
ALsQ8HVOYEhGmnaFIQ9zSb1OrSq+2p3ZYGwlVfzS34AwbBM35KLFsE2PyscO/rkh
/JUkWql6auGf1XyaEnHvpRG1ARSZYrLaJR8IdvX7Qls+Wvk7WbVdB+PtsG8rra8G
jRKy9RnAN4nX59TnO1HbsDr1uxDwckgoMVCoQjj2Weo0zEbGIZVhPjDiaWsBrG2k
ocgS6pN4BUYrYVQXuHUFwH15/FCMFh3FQZeJOocK5oKj106MyhHq70+MiCYEYcLm
eVgxbND14w54sTnf7JjH9OEj0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJyShHsV
diZf8WBLLCR2X/XKXsdLMB8GA1UdIwQYMBaAFBQ5vOTXoiroA2zrLubmrxjyG7WT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTdEOS8wNzE3RTlFRTlG
NUQxMUVDQkJDQTk2MThDNEY5QUUwMi9GRG04NU5laUt1Z0RiT3N1NXVhdkdQSWJ0
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZEbTg1TmVpS3VnRGJPc3U1dWF2R1BJYnRaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NTdEOS8wNzE3RTlFRTlGNUQxMUVDQkJDQTk2MThDNEY5QUUwMi9GRG04NU5laUt1
Z0RiT3N1NXVhdkdQSWJ0Wk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAlmjhOHRr9uV23ZM/farN5jh38OlhiG9IDcjLHLf9GNxmx1PMY0oim
wIiVLTjX+zNajmoY+6M/PDfjAG783BwkrHyBzQcLiC6NVfA9aVPD/9mvUMDld6sc
ykP0AFkjzn5TGQU0e5OhSZjiNL0bJeS0772CxiMQmB6JnyQP1P7QVdMGuQVfjxa5
KVuQGwpWeRNAlseE2OAzDDI27Xo9MSV/ami/wUDA68vpLN+tB1NbLwr5v8UKGBmW
+rhSYedjLFC8UB4WQqByxizbpUwjyQD4UQ/yVp2b+bSfhkQndyO3CntpeeTf48n1
NgoalUbyw+zwPFTtCjBYcCNllI/gcxUi
-----END CERTIFICATE-----
Generated at Tue Apr 8 15:41:13 2025 by rpki-client