Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft
File: nhW8ueM67e2saArIyYFuEVkFyiw.mft (raw, json)
Hash identifier: VgrzYzQrv3gqFtbzjNKuXbDMDsfMkzUEzcAgZqcvSS0=
Subject key identifier: D3:8C:28:AA:B9:0D:66:A9:07:65:36:8C:29:AD:EE:C3:97:65:9D:E7
Authority key identifier: 9E:15:BC:B9:E3:3A:ED:ED:AC:68:0A:C8:C9:81:6E:11:59:05:CA:2C
Certificate issuer: /CN=A91F9B3A/serialNumber=9E15BCB9E33AEDEDAC680AC8C9816E115905CA2C
Certificate serial: 16C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft
Manifest number: 16B4
Signing time: Fri 28 Mar 2025 16:46:57 +0000
Manifest this update: Fri 28 Mar 2025 16:46:56 +0000
Manifest next update: Fri 04 Apr 2025 16:46:56 +0000
Files and hashes: 1: nhW8ueM67e2saArIyYFuEVkFyiw.crl (hash: iBO6Px15ec58e1Yc0ZrVyyqexqFGYDYvBdvvTtgpDZM=)
2: 7A7A6AC6234311EA90D15227C4F9AE02.roa (hash: inLOYpzfiQRyaW4Jx9DTFdqEkju4HPJ5ZYoO4gNZ1PI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5825 (0x16c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9B3A
Validity
Not Before: Mar 28 16:46:56 2025 GMT
Not After : Apr 4 16:46:56 2025 GMT
Subject: CN=67e6d280-1289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7f:24:25:4d:a1:56:1c:e2:b3:48:f2:5f:0f:
06:21:3e:4a:e6:10:90:98:55:78:72:01:06:07:e9:
24:10:43:b5:22:6b:15:87:dd:15:15:c3:d0:d5:8f:
a6:b0:b3:7f:43:e2:8c:12:de:62:4b:7e:1f:2d:dc:
ff:f8:52:06:cf:78:00:ff:ae:ee:5b:f5:c2:5c:60:
81:f1:af:ff:d3:bc:5c:af:92:79:d6:a0:30:94:2d:
85:04:0e:70:bc:aa:0e:5d:7e:24:73:7d:8f:e2:e7:
96:9a:a0:64:a8:3d:03:5f:2d:57:b6:18:c2:5d:97:
c6:ca:2b:22:4f:ee:29:52:8a:d8:89:db:73:51:c8:
d1:7d:99:4a:63:ca:c3:d3:5a:a6:3a:df:6a:7a:ba:
80:85:31:2c:be:47:79:53:50:f3:96:6c:3a:e3:2c:
44:c5:0f:3a:7e:82:40:ef:d5:f0:7e:05:fa:c2:64:
6e:e0:07:55:d2:4b:af:65:e4:43:18:a1:83:48:94:
40:4e:ef:2d:67:84:7d:45:de:b3:03:22:ee:e8:2d:
bc:f4:6e:c3:dd:f8:70:19:81:6b:2a:fd:c0:a4:e2:
34:67:6a:fe:1a:bc:17:74:4b:82:62:81:89:7a:35:
3f:b3:b2:a4:b4:ad:6e:b0:ff:70:2c:7e:33:58:c7:
c8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8C:28:AA:B9:0D:66:A9:07:65:36:8C:29:AD:EE:C3:97:65:9D:E7
X509v3 Authority Key Identifier:
keyid:9E:15:BC:B9:E3:3A:ED:ED:AC:68:0A:C8:C9:81:6E:11:59:05:CA:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:fd:e6:42:2f:09:b7:3e:d7:e0:cd:56:9a:9a:81:e2:1f:75:
59:2b:61:3a:6f:c9:42:92:43:63:17:ff:b5:13:1e:71:ee:3b:
ee:34:be:b0:af:64:76:40:c0:aa:1e:32:a0:1d:31:f7:2a:e7:
d9:8b:94:f5:3d:ae:41:9b:d1:96:6f:c1:0e:19:04:4c:17:df:
cb:ae:97:1e:22:7b:11:77:e8:96:a8:7d:c4:91:bd:cf:b2:00:
c5:88:19:39:55:40:0e:85:d8:7b:d4:d4:39:8d:81:ef:0a:b3:
40:9c:c2:50:10:28:1d:fc:59:9d:84:9f:42:d9:6e:c4:e2:0a:
5f:fa:d2:f3:ca:fe:8d:8e:c9:f3:32:4b:18:ba:59:87:b0:ab:
47:1c:df:65:80:ed:72:96:d1:70:f5:39:4e:46:f7:cb:19:03:
5f:76:b5:64:fa:f4:9b:fd:4a:bf:e5:2e:b6:0a:80:5a:9b:51:
6f:18:99:17:d5:d7:f9:dc:09:4b:01:b3:a4:ab:b9:c6:ec:a8:
a3:86:98:0b:34:b8:a6:c5:8e:eb:2a:e2:f0:67:15:a3:56:c4:
cc:e6:fb:ed:d0:1d:97:f1:7e:87:5b:b6:0a:e9:0f:02:2d:3a:
f9:e8:b3:ff:df:e8:91:aa:c3:45:86:73:6e:20:99:71:0e:be:
6e:0f:fe:54
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjlCM0ExMTAvBgNVBAUTKDlFMTVCQ0I5RTMzQUVERURBQzY4MEFDOEM5ODE2RTEx
NTkwNUNBMkMwHhcNMjUwMzI4MTY0NjU2WhcNMjUwNDA0MTY0NjU2WjAYMRYwFAYD
VQQDEw02N2U2ZDI4MC0xMjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2H8kJU2hVhzis0jyXw8GIT5K5hCQmFV4cgEGB+kkEEO1ImsVh90VFcPQ1Y+m
sLN/Q+KMEt5iS34fLdz/+FIGz3gA/67uW/XCXGCB8a//07xcr5J51qAwlC2FBA5w
vKoOXX4kc32P4ueWmqBkqD0DXy1XthjCXZfGyisiT+4pUorYidtzUcjRfZlKY8rD
01qmOt9qerqAhTEsvkd5U1Dzlmw64yxExQ86foJA79XwfgX6wmRu4AdV0kuvZeRD
GKGDSJRATu8tZ4R9Rd6zAyLu6C289G7D3fhwGYFrKv3ApOI0Z2r+GrwXdEuCYoGJ
ejU/s7KktK1usP9wLH4zWMfIZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNOMKKq5
DWapB2U2jCmt7sOXZZ3nMB8GA1UdIwQYMBaAFJ4VvLnjOu3trGgKyMmBbhFZBcos
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUIzQS83REVBRTczNEYz
QTMxMUU3QjVEMDlDNzFDNEY5QUUwMi9uaFc4dWVNNjdlMnNhQXJJeVlGdUVWa0Z5
aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25oVzh1ZU02N2Uyc2FBckl5WUZ1RVZrRnlpdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
OUIzQS83REVBRTczNEYzQTMxMUU3QjVEMDlDNzFDNEY5QUUwMi9uaFc4dWVNNjdl
MnNhQXJJeVlGdUVWa0Z5aXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCr/eZCLwm3PtfgzVaamoHiH3VZK2E6b8lCkkNjF/+1Ex5x7jvuNL6w
r2R2QMCqHjKgHTH3KufZi5T1Pa5Bm9GWb8EOGQRMF9/LrpceInsRd+iWqH3Ekb3P
sgDFiBk5VUAOhdh71NQ5jYHvCrNAnMJQECgd/FmdhJ9C2W7E4gpf+tLzyv6Njsnz
MksYulmHsKtHHN9lgO1yltFw9TlORvfLGQNfdrVk+vSb/Uq/5S62CoBam1FvGJkX
1df53AlLAbOkq7nG7KijhpgLNLimxY7rKuLwZxWjVsTM5vvt0B2X8X6HW7YK6Q8C
LTr56LP/3+iRqsNFhnNuIJlxDr5uD/5U
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:25:06 2025 by rpki-client