Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft
File: q47HWiojWU9vKtMnsOa7wLCrm-4.mft (raw, json)
Hash identifier: bFseEyQhv4SRarsqxL/3NhgX/ySqECXkzXvyXU5UbFs=
Subject key identifier: 7A:20:67:C6:35:3B:F9:E4:6E:6F:AD:C4:D4:D9:8E:DD:04:20:C7:FC
Authority key identifier: AB:8E:C7:5A:2A:23:59:4F:6F:2A:D3:27:B0:E6:BB:C0:B0:AB:9B:EE
Certificate issuer: /CN=A91F783D/serialNumber=AB8EC75A2A23594F6F2AD327B0E6BBC0B0AB9BEE
Certificate serial: 0DAF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q47HWiojWU9vKtMnsOa7wLCrm-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft
Manifest number: 0DA6
Signing time: Fri 28 Mar 2025 18:04:28 +0000
Manifest this update: Fri 28 Mar 2025 18:04:27 +0000
Manifest next update: Fri 04 Apr 2025 18:04:27 +0000
Files and hashes: 1: q47HWiojWU9vKtMnsOa7wLCrm-4.crl (hash: fGKSbU9fR/LF0nY4AGGwuxFn8wP0WppLliGgOGr2kK4=)
2: E3ACB710B9B211E9A9A37254C4F9AE02.roa (hash: nvhDjt387zYhf/8ySzGmSAzk4CFMkqY2rRX2y6Ihwk0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3503 (0xdaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F783D
Validity
Not Before: Mar 28 18:04:27 2025 GMT
Not After : Apr 4 18:04:27 2025 GMT
Subject: CN=67e6e4ac-a69b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d3:61:53:92:59:98:01:7c:be:95:0e:31:f1:
55:87:e3:b2:a6:ce:1c:4e:e9:18:a1:2b:94:63:e4:
aa:c9:ed:3b:e4:c7:52:5f:a1:26:a6:a5:c5:1b:ef:
9d:4a:52:e3:09:a3:cd:35:f1:0e:30:e0:a3:f0:fa:
48:1a:de:94:d1:f8:e3:74:d4:85:86:39:4a:96:73:
5d:d8:62:a1:7a:b4:76:67:49:0c:f9:8b:31:12:97:
a5:2e:07:e9:61:4e:50:b1:1c:af:9e:ff:43:2c:f2:
c7:04:03:e6:84:ba:2c:47:d1:f9:f6:98:0e:78:6a:
a6:bb:7b:84:f4:a6:1e:ea:63:9f:15:5d:9f:ff:48:
f0:f1:dd:f0:7f:72:63:fa:56:3e:da:f8:da:b2:dd:
c6:ef:28:97:e1:36:61:b6:9c:98:4a:e9:2d:d8:b8:
79:07:98:db:b7:75:8f:ba:73:ec:79:05:03:04:f9:
7d:53:11:65:d2:94:4b:22:78:e2:41:6b:b6:b9:01:
d9:ff:20:54:b8:36:8b:f6:fc:78:db:56:a3:56:63:
b9:86:4f:27:2f:d1:5f:4e:4f:78:23:d7:65:34:d8:
13:87:47:3a:58:39:93:38:3d:d2:93:d0:9e:cb:77:
d9:d3:ce:ca:63:cf:8e:f6:0e:b1:95:cb:bd:6e:cc:
e7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:20:67:C6:35:3B:F9:E4:6E:6F:AD:C4:D4:D9:8E:DD:04:20:C7:FC
X509v3 Authority Key Identifier:
keyid:AB:8E:C7:5A:2A:23:59:4F:6F:2A:D3:27:B0:E6:BB:C0:B0:AB:9B:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q47HWiojWU9vKtMnsOa7wLCrm-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:5e:9a:c8:27:23:b1:59:8e:cd:4c:41:bf:f3:d8:be:92:e5:
13:3d:7a:b9:47:86:b5:3a:3e:81:6b:56:4d:66:69:c8:f2:2d:
98:f9:ca:8c:c7:f2:e0:b2:79:d3:a4:10:e2:ee:7f:0a:43:43:
26:cd:46:5c:9b:2a:ab:88:fa:03:ca:ab:ac:03:1d:94:79:1a:
e9:55:e9:72:7e:14:56:73:97:69:8e:65:a6:18:90:a7:59:77:
59:f7:0a:9c:d6:72:82:4d:19:df:1e:38:df:69:c5:bb:ed:46:
09:5f:87:54:4c:6f:d5:e6:f3:ef:fc:a6:a6:da:6a:a4:87:e6:
89:18:a2:a4:14:e4:10:4d:99:53:88:91:93:11:28:e6:ee:7c:
59:7e:67:4c:d1:57:d7:cb:5f:f5:03:b4:f6:b5:6d:66:74:f0:
78:3a:71:1d:e7:eb:82:51:aa:17:c1:0d:c5:80:f1:f9:4b:73:
36:fe:1e:50:d9:07:80:7c:5e:07:4f:f1:2e:8d:de:61:f2:e8:
ed:e0:71:ad:09:88:c6:d8:8e:db:a2:d6:d2:af:0b:22:d1:1d:
16:0b:0c:45:39:cd:60:3d:59:df:dc:90:a7:7e:3f:e8:eb:eb:
fa:a7:45:5d:49:1d:af:01:df:dd:21:66:20:21:19:2d:40:5c:
b9:ce:04:67
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjc4M0QxMTAvBgNVBAUTKEFCOEVDNzVBMkEyMzU5NEY2RjJBRDMyN0IwRTZCQkMw
QjBBQjlCRUUwHhcNMjUwMzI4MTgwNDI3WhcNMjUwNDA0MTgwNDI3WjAYMRYwFAYD
VQQDEw02N2U2ZTRhYy1hNjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzdNhU5JZmAF8vpUOMfFVh+Oyps4cTukYoSuUY+Sqye075MdSX6EmpqXFG++d
SlLjCaPNNfEOMOCj8PpIGt6U0fjjdNSFhjlKlnNd2GKherR2Z0kM+YsxEpelLgfp
YU5QsRyvnv9DLPLHBAPmhLosR9H59pgOeGqmu3uE9KYe6mOfFV2f/0jw8d3wf3Jj
+lY+2vjast3G7yiX4TZhtpyYSukt2Lh5B5jbt3WPunPseQUDBPl9UxFl0pRLInji
QWu2uQHZ/yBUuDaL9vx421ajVmO5hk8nL9FfTk94I9dlNNgTh0c6WDmTOD3Sk9Ce
y3fZ087KY8+O9g6xlcu9bszncQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHogZ8Y1
O/nkbm+txNTZjt0EIMf8MB8GA1UdIwQYMBaAFKuOx1oqI1lPbyrTJ7Dmu8Cwq5vu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzgzRC8zMURGMURFRUI5
QjExMUU5OTkwQzA4NTJDNEY5QUUwMi9xNDdIV2lvaldVOXZLdE1uc09hN3dMQ3Jt
LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3E0N0hXaW9qV1U5dkt0TW5zT2E3d0xDcm0tNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NzgzRC8zMURGMURFRUI5QjExMUU5OTkwQzA4NTJDNEY5QUUwMi9xNDdIV2lvaldV
OXZLdE1uc09hN3dMQ3JtLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAUXprIJyOxWY7NTEG/89i+kuUTPXq5R4a1Oj6Ba1ZNZmnI8i2Y+cqM
x/LgsnnTpBDi7n8KQ0MmzUZcmyqriPoDyqusAx2UeRrpVelyfhRWc5dpjmWmGJCn
WXdZ9wqc1nKCTRnfHjjfacW77UYJX4dUTG/V5vPv/Kam2mqkh+aJGKKkFOQQTZlT
iJGTESjm7nxZfmdM0VfXy1/1A7T2tW1mdPB4OnEd5+uCUaoXwQ3FgPH5S3M2/h5Q
2QeAfF4HT/Eujd5h8ujt4HGtCYjG2I7botbSrwsi0R0WCwxFOc1gPVnf3JCnfj/o
6+v6p0VdSR2vAd/dIWYgIRktQFy5zgRn
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:46:01 2025 by rpki-client