Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F692A/489E0F0C229C11ED9A213568C4F9AE02/wrYFvbTytu0rBR3EKy6AP7YHjk0.mft
File: wrYFvbTytu0rBR3EKy6AP7YHjk0.mft (raw, json)
Hash identifier: CFJiig3xo9nNDqz21raKVs9u2eqlvQPa9bq0ySJhXvo=
Subject key identifier: BC:17:69:F3:70:D3:D6:9D:7B:73:FE:49:23:7C:52:69:8F:A5:D0:55
Authority key identifier: C2:B6:05:BD:B4:F2:B6:ED:2B:05:1D:C4:2B:2E:80:3F:B6:07:8E:4D
Certificate issuer: /CN=A91F692A/serialNumber=C2B605BDB4F2B6ED2B051DC42B2E803FB6078E4D
Certificate serial: 0223
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrYFvbTytu0rBR3EKy6AP7YHjk0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F692A/489E0F0C229C11ED9A213568C4F9AE02/wrYFvbTytu0rBR3EKy6AP7YHjk0.mft
Manifest number: 0220
Signing time: Sat 29 Mar 2025 02:11:51 +0000
Manifest this update: Sat 29 Mar 2025 02:11:51 +0000
Manifest next update: Sat 05 Apr 2025 02:11:51 +0000
Files and hashes: 1: wrYFvbTytu0rBR3EKy6AP7YHjk0.crl (hash: Px3lGhWx5Z4VMXhM7Kz73p6Ms3a37kJb5427On43jig=)
2: 11AA6C3E22A111ED848DF584C4F9AE02.roa (hash: 1uFlebZA519OqpXoM4QXBxmovSoHUvM3q5yLtoaHh3w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 547 (0x223)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F692A
Validity
Not Before: Mar 29 02:11:51 2025 GMT
Not After : Apr 5 02:11:51 2025 GMT
Subject: CN=67e756e7-78e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6d:3f:53:d5:9f:5e:e6:1b:b1:d9:6b:2e:d9:
b6:ea:4e:86:fe:99:a6:52:2b:62:f6:82:4a:19:dc:
7b:e4:d2:c5:88:e9:75:59:6e:f9:e4:e8:1c:2d:88:
28:37:02:4f:7b:b8:70:b3:ae:d7:90:54:f4:a6:c9:
ac:b9:88:64:95:e3:47:92:72:94:cf:59:b9:f0:b9:
1e:6f:35:b0:c4:83:f2:e9:f8:cd:33:10:a2:ca:f1:
77:16:2c:7d:f8:fc:ea:45:7b:0b:15:2f:ad:60:05:
9b:a6:ae:41:78:b8:c2:15:cf:7c:3b:31:6b:d0:e0:
1f:eb:0c:b0:bc:62:0f:89:2c:d5:c1:f9:d6:28:f9:
9d:8e:f2:9c:e2:f3:0b:cf:ce:85:01:73:e5:95:a8:
27:09:d2:ef:55:88:7c:df:f5:8a:3b:69:1d:83:1c:
bf:a1:bb:4f:a1:39:01:f6:9a:0b:35:15:60:61:9f:
c5:24:ae:0b:64:35:9f:6f:26:7c:21:16:81:13:e9:
79:94:27:f9:80:90:f6:ed:17:ff:b5:f6:ab:d4:d4:
36:ab:af:76:f5:fb:9e:1d:69:2b:15:91:aa:20:54:
59:e0:4e:c4:d9:bb:c5:0d:8e:10:da:8e:b8:bb:17:
66:33:77:66:9e:84:7e:00:8b:88:b9:eb:f2:0e:e9:
13:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:17:69:F3:70:D3:D6:9D:7B:73:FE:49:23:7C:52:69:8F:A5:D0:55
X509v3 Authority Key Identifier:
keyid:C2:B6:05:BD:B4:F2:B6:ED:2B:05:1D:C4:2B:2E:80:3F:B6:07:8E:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F692A/489E0F0C229C11ED9A213568C4F9AE02/wrYFvbTytu0rBR3EKy6AP7YHjk0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrYFvbTytu0rBR3EKy6AP7YHjk0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F692A/489E0F0C229C11ED9A213568C4F9AE02/wrYFvbTytu0rBR3EKy6AP7YHjk0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:68:d4:a7:2d:91:68:f4:36:32:96:ca:b8:7a:e7:f0:72:f6:
08:07:80:07:4c:27:b9:7d:5b:fe:84:1d:98:20:6e:51:34:f1:
dd:57:84:74:ff:46:d3:62:a7:48:c2:86:52:0b:27:a6:7a:27:
29:79:e7:2f:f3:0f:d9:33:27:39:43:5b:63:8f:66:1c:1a:67:
e3:97:00:d7:40:a5:fd:85:98:1f:cd:e1:72:7b:a6:82:ae:e8:
73:62:4a:e7:98:0d:e7:70:0d:1f:54:63:e9:c9:2e:49:f5:38:
4c:28:4a:30:82:9f:0f:eb:c2:7b:95:89:3c:e0:80:65:4b:16:
97:bd:44:e4:eb:09:47:8e:13:4f:38:c1:58:40:13:7b:7b:b1:
24:33:e7:ab:ab:65:5e:82:33:4f:f0:94:c4:b5:dc:73:b9:3f:
1c:b5:ba:70:6b:68:70:c0:e8:49:e2:0d:14:35:30:97:c4:bb:
cb:79:b2:77:27:bd:91:46:e0:0a:8d:b1:63:6c:c0:c7:46:b5:
e4:f8:89:65:46:44:90:c0:37:e2:66:9c:6b:ee:4b:5a:f1:51:
aa:d8:c4:59:49:69:7d:35:39:2e:1a:cc:18:bd:9f:40:de:f6:
32:36:eb:1a:dc:1b:9e:70:63:da:a2:50:53:54:64:f5:bc:25:
51:8c:bb:26
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjY5MkExMTAvBgNVBAUTKEMyQjYwNUJEQjRGMkI2RUQyQjA1MURDNDJCMkU4MDNG
QjYwNzhFNEQwHhcNMjUwMzI5MDIxMTUxWhcNMjUwNDA1MDIxMTUxWjAYMRYwFAYD
VQQDEw02N2U3NTZlNy03OGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzm0/U9WfXuYbsdlrLtm26k6G/pmmUiti9oJKGdx75NLFiOl1WW755OgcLYgo
NwJPe7hws67XkFT0psmsuYhkleNHknKUz1m58LkebzWwxIPy6fjNMxCiyvF3Fix9
+PzqRXsLFS+tYAWbpq5BeLjCFc98OzFr0OAf6wywvGIPiSzVwfnWKPmdjvKc4vML
z86FAXPllagnCdLvVYh83/WKO2kdgxy/obtPoTkB9poLNRVgYZ/FJK4LZDWfbyZ8
IRaBE+l5lCf5gJD27Rf/tfar1NQ2q6929fueHWkrFZGqIFRZ4E7E2bvFDY4Q2o64
uxdmM3dmnoR+AIuIuevyDukTWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLwXafNw
09ade3P+SSN8UmmPpdBVMB8GA1UdIwQYMBaAFMK2Bb208rbtKwUdxCsugD+2B45N
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjkyQS80ODlFMEYwQzIy
OUMxMUVEOUEyMTM1NjhDNEY5QUUwMi93cllGdmJUeXR1MHJCUjNFS3k2QVA3WUhq
azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dyWUZ2YlR5dHUwckJSM0VLeTZBUDdZSGprMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NjkyQS80ODlFMEYwQzIyOUMxMUVEOUEyMTM1NjhDNEY5QUUwMi93cllGdmJUeXR1
MHJCUjNFS3k2QVA3WUhqazAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBdaNSnLZFo9DYylsq4eufwcvYIB4AHTCe5fVv+hB2YIG5RNPHdV4R0
/0bTYqdIwoZSCyemeicpeecv8w/ZMyc5Q1tjj2YcGmfjlwDXQKX9hZgfzeFye6aC
ruhzYkrnmA3ncA0fVGPpyS5J9ThMKEowgp8P68J7lYk84IBlSxaXvUTk6wlHjhNP
OMFYQBN7e7EkM+erq2VegjNP8JTEtdxzuT8ctbpwa2hwwOhJ4g0UNTCXxLvLebJ3
J72RRuAKjbFjbMDHRrXk+IllRkSQwDfiZpxr7kta8VGq2MRZSWl9NTkuGswYvZ9A
3vYyNusa3BuecGPaolBTVGT1vCVRjLsm
-----END CERTIFICATE-----
Generated at Wed Apr 9 15:55:39 2025 by rpki-client