Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft
File: sxnfFFXYouFJjNxdSRVpgxxa_aE.mft (raw, json)
Hash identifier: 3cQsDF/Dlc1yYDPmydL0qmB33zBPdU9DWJ9GO8IEJME=
Subject key identifier: 23:81:4B:06:0D:AE:C6:63:55:F1:58:D0:EA:89:39:8E:85:3A:4D:32
Authority key identifier: B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1
Certificate issuer: /CN=A91F87BB/serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1
Certificate serial: 03DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft
Manifest number: 03CF
Signing time: Sat 29 Mar 2025 00:52:08 +0000
Manifest this update: Sat 29 Mar 2025 00:52:07 +0000
Manifest next update: Sat 05 Apr 2025 00:52:07 +0000
Files and hashes: 1: sxnfFFXYouFJjNxdSRVpgxxa_aE.crl (hash: yuAmJulMqGk324iukktr/pXsntnqQfAyQNNpK/vjy2w=)
2: 88B3F0026E9F11EEB03D9582C4F9AE02.roa (hash: OnZeTeaYB5z7AJuz8oi6jGvWEckKykDi+qBUmv+U0QM=)
3: DDCB6B02D9D311EEBB3BDF10C4F9AE02.roa (hash: NYRjezFURAIZr5dfzYcgObUcS0k2GZmBPMzd9N07gUQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 988 (0x3dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F87BB
Validity
Not Before: Mar 29 00:52:07 2025 GMT
Not After : Apr 5 00:52:07 2025 GMT
Subject: CN=67e74437-e5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e2:00:b3:99:cc:5b:6c:92:ea:5f:60:a8:87:
ef:29:04:69:ec:bd:16:cd:b0:da:67:da:27:25:03:
c6:f2:df:2c:38:f4:b6:c7:9e:46:91:a4:af:1a:c3:
01:cc:a5:8c:26:92:e9:3d:ed:2e:79:a8:93:3b:ed:
01:a7:1b:c8:b4:29:19:9f:ac:26:ee:b4:23:83:a3:
37:88:15:8f:eb:cc:b9:76:ee:c1:fa:8e:a9:5c:a5:
69:5a:4e:71:93:3d:f0:3c:02:0a:bf:e0:0a:11:2e:
a1:4d:73:e6:83:84:74:ff:fc:d4:46:0a:55:04:8b:
4c:ba:2f:73:26:93:4f:ad:f3:f3:d3:6e:cf:4e:a9:
2c:a0:13:e9:e2:23:c8:82:e4:8b:e3:25:c0:ef:27:
b4:34:bf:83:06:69:c9:0a:b3:34:48:b3:98:36:d6:
95:4f:62:96:de:8d:36:8a:a5:4e:f1:c7:9e:0e:e6:
c4:cc:5e:40:87:b4:99:b2:bf:75:af:51:a3:bd:bb:
61:2a:87:af:00:5f:a5:f4:46:44:23:68:21:48:53:
25:cf:42:47:4b:84:68:09:1a:d7:6c:73:8e:94:98:
a4:05:49:6a:2f:23:23:cf:e3:f8:94:2f:66:da:6b:
78:53:6d:0c:53:c8:04:e2:f6:cf:e9:85:f0:f1:25:
23:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:81:4B:06:0D:AE:C6:63:55:F1:58:D0:EA:89:39:8E:85:3A:4D:32
X509v3 Authority Key Identifier:
keyid:B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:50:58:fa:7e:b6:e9:4c:5d:02:e3:9d:cb:84:0f:ca:7c:dc:
50:60:2a:6d:5b:07:6c:88:9a:5e:ef:51:45:c7:72:25:0a:83:
6f:c1:35:67:77:f1:df:ed:e5:c1:80:20:99:7d:d8:d0:0f:e6:
d3:44:69:25:3c:3c:9d:22:f4:ed:52:41:fc:73:76:e6:6b:2f:
f8:d9:56:55:d7:f9:d7:18:ca:a9:35:41:ab:f0:4d:9a:9a:2e:
b7:25:ae:54:f4:54:26:bb:23:ca:97:31:e8:9e:2a:db:67:b3:
19:ae:f2:25:95:9d:f6:62:85:f3:f5:0e:be:ad:c5:89:6a:5d:
cd:01:93:44:c7:c9:11:a3:50:6f:15:a3:12:c1:f7:ae:95:70:
39:47:fe:15:db:1e:0b:7f:f2:bd:02:82:41:f7:68:1e:7c:27:
ec:47:a4:e9:88:12:35:b5:34:06:5c:be:1a:9d:a2:67:a3:e9:
46:32:88:f5:2e:22:0d:93:c3:c1:4e:c7:dc:8a:31:16:fc:62:
fa:ec:d3:72:47:b2:c7:7b:89:5f:0c:33:b2:a0:c4:3a:81:9c:
af:43:59:67:4c:95:38:b1:5a:87:5e:ce:6b:95:73:e7:3c:26:
50:5f:ac:82:4f:fd:59:19:ae:4b:1a:12:b7:29:8f:35:5e:c2:
90:4b:35:2f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjg3QkIxMTAvBgNVBAUTKEIzMTlERjE0NTVEOEEyRTE0OThDREM1RDQ5MTU2OTgz
MUM1QUZEQTEwHhcNMjUwMzI5MDA1MjA3WhcNMjUwNDA1MDA1MjA3WjAYMRYwFAYD
VQQDEw02N2U3NDQzNy1lNWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAveIAs5nMW2yS6l9gqIfvKQRp7L0WzbDaZ9onJQPG8t8sOPS2x55GkaSvGsMB
zKWMJpLpPe0ueaiTO+0BpxvItCkZn6wm7rQjg6M3iBWP68y5du7B+o6pXKVpWk5x
kz3wPAIKv+AKES6hTXPmg4R0//zURgpVBItMui9zJpNPrfPz027PTqksoBPp4iPI
guSL4yXA7ye0NL+DBmnJCrM0SLOYNtaVT2KW3o02iqVO8ceeDubEzF5Ah7SZsr91
r1GjvbthKoevAF+l9EZEI2ghSFMlz0JHS4RoCRrXbHOOlJikBUlqLyMjz+P4lC9m
2mt4U20MU8gE4vbP6YXw8SUj1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOBSwYN
rsZjVfFY0OqJOY6FOk0yMB8GA1UdIwQYMBaAFLMZ3xRV2KLhSYzcXUkVaYMcWv2h
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODdCQi85REYwREZCRTdE
RTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91RkpqTnhkU1JWcGd4eGFf
YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3N4bmZGRlhZb3VGSmpOeGRTUlZwZ3h4YV9hRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODdCQi85REYwREZCRTdERTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91
RkpqTnhkU1JWcGd4eGFfYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBOUFj6frbpTF0C453LhA/KfNxQYCptWwdsiJpe71FFx3IlCoNvwTVn
d/Hf7eXBgCCZfdjQD+bTRGklPDydIvTtUkH8c3bmay/42VZV1/nXGMqpNUGr8E2a
mi63Ja5U9FQmuyPKlzHonirbZ7MZrvIllZ32YoXz9Q6+rcWJal3NAZNEx8kRo1Bv
FaMSwfeulXA5R/4V2x4Lf/K9AoJB92gefCfsR6TpiBI1tTQGXL4anaJno+lGMoj1
LiINk8PBTsfcijEW/GL67NNyR7LHe4lfDDOyoMQ6gZyvQ1lnTJU4sVqHXs5rlXPn
PCZQX6yCT/1ZGa5LGhK3KY81XsKQSzUv
-----END CERTIFICATE-----
Generated at Fri Apr 11 15:15:46 2025 by rpki-client