Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft
File: 7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft (raw, json)
Hash identifier: XeYd6Ri2VuKFug4cfqg/syg6syE+kF9J2KBFilGq2BU=
Subject key identifier: 6E:C1:72:A6:8E:7C:8C:53:14:1E:CA:00:D3:07:66:ED:30:F4:D7:95
Authority key identifier: EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C
Certificate issuer: /CN=A91F9F87/serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C
Certificate serial: 0B68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft
Manifest number: 0B62
Signing time: Fri 28 Mar 2025 19:15:07 +0000
Manifest this update: Fri 28 Mar 2025 19:15:06 +0000
Manifest next update: Fri 04 Apr 2025 19:15:06 +0000
Files and hashes: 1: 7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl (hash: aE94HTeTQKcuZ6eVuworY0r98hlbmrZnoJ+3mkyq20c=)
2: 001209082A2111EAB1BF9C2EC4F9AE02.roa (hash: vpJeDwiHWNxR3ZSraALkWmUoFKXJKlqfWZWB6I2fGis=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2920 (0xb68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9F87
Validity
Not Before: Mar 28 19:15:06 2025 GMT
Not After : Apr 4 19:15:06 2025 GMT
Subject: CN=67e6f53b-68bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d0:17:22:b7:58:a5:c6:a7:6b:31:32:07:2a:
bb:a8:eb:9a:a3:d1:91:6c:1a:97:d1:ad:ce:2f:64:
e5:e8:e6:b4:78:7f:5f:d6:83:ad:2f:1a:c0:a1:05:
61:8a:c1:f9:a2:9b:01:56:a8:ce:e4:13:c3:26:7a:
c4:70:e3:22:2e:fa:17:ea:e6:74:92:51:e9:67:fb:
15:b6:9b:7d:32:01:18:64:ff:18:46:dd:a0:aa:0a:
1e:8a:47:e4:e8:ef:a2:af:a7:96:b6:5c:e8:7f:14:
55:e3:e2:ca:7f:5f:ad:58:a6:55:c4:99:d5:92:f2:
6d:9e:92:07:c4:16:8b:4b:93:72:d9:18:44:2b:dd:
5a:65:47:40:c2:da:b6:6f:38:64:95:cc:f1:08:63:
bc:98:2d:6e:91:b0:fb:17:14:a8:7c:ea:a4:94:23:
1a:92:f6:e9:4c:29:e7:f6:b5:14:96:eb:52:65:61:
74:17:f2:67:89:71:86:b5:55:15:a0:0e:07:a2:ba:
cf:4b:c2:0f:e0:a5:39:fb:34:dd:51:7e:e3:9c:16:
ed:e0:78:3c:6e:56:d0:d0:36:6e:4a:d1:fa:23:e6:
c4:4b:03:c2:2e:ef:9e:72:4a:b7:07:08:41:fb:14:
69:79:1b:a4:96:db:5b:1d:3c:ef:c8:41:74:cb:f9:
71:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C1:72:A6:8E:7C:8C:53:14:1E:CA:00:D3:07:66:ED:30:F4:D7:95
X509v3 Authority Key Identifier:
keyid:EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:0a:20:63:ba:98:cc:ac:e1:da:e3:f9:68:75:c2:6d:36:c9:
ab:0e:03:79:a4:1b:c6:a7:c4:2a:f4:3b:eb:16:1f:61:dc:f3:
15:6c:c4:a9:c5:de:96:b1:72:db:46:12:78:47:f5:9f:b1:b4:
d5:a7:55:ce:36:f7:09:d0:3a:fd:9d:4c:0a:54:b9:7e:d9:14:
e7:9e:61:24:39:c9:f6:7b:4b:45:cd:f1:c2:9f:4f:be:e8:e0:
52:92:85:6c:43:27:bf:64:df:51:99:e5:92:91:53:24:e8:3d:
34:62:36:ce:6a:46:7e:88:f4:ba:1b:08:6d:8c:19:85:0c:bb:
a2:02:4b:e0:b3:e3:70:64:dd:d9:73:90:a0:15:78:c2:1d:8b:
6e:9f:21:2e:2e:94:dd:7c:6c:bf:8f:07:b5:13:7a:7c:19:cf:
29:61:e7:af:74:bb:44:84:13:2a:c2:f9:a3:8e:94:53:28:7f:
a3:92:26:c8:7b:c5:7d:4d:f5:ce:bb:51:31:b9:17:15:a9:1e:
50:85:56:93:6d:ef:26:51:b7:7f:0f:39:5a:da:30:c6:d1:7b:
7f:e3:b6:97:f0:27:f2:c2:82:e9:9b:90:65:60:52:28:6e:19:
2b:bb:01:52:1d:06:63:3a:7b:a8:f9:42:2e:dc:07:4a:8d:2e:
90:87:41:3a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjlGODcxMTAvBgNVBAUTKEVDQzFEQzgyODhGODQ1QTkxQzlGNkNDMTg3QTk5Qzk5
RDkwOThDMUMwHhcNMjUwMzI4MTkxNTA2WhcNMjUwNDA0MTkxNTA2WjAYMRYwFAYD
VQQDEw02N2U2ZjUzYi02OGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1dAXIrdYpcanazEyByq7qOuao9GRbBqX0a3OL2Tl6Oa0eH9f1oOtLxrAoQVh
isH5opsBVqjO5BPDJnrEcOMiLvoX6uZ0klHpZ/sVtpt9MgEYZP8YRt2gqgoeikfk
6O+ir6eWtlzofxRV4+LKf1+tWKZVxJnVkvJtnpIHxBaLS5Ny2RhEK91aZUdAwtq2
bzhklczxCGO8mC1ukbD7FxSofOqklCMakvbpTCnn9rUUlutSZWF0F/JniXGGtVUV
oA4HorrPS8IP4KU5+zTdUX7jnBbt4Hg8blbQ0DZuStH6I+bESwPCLu+eckq3BwhB
+xRpeRuklttbHTzvyEF0y/lxlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG7BcqaO
fIxTFB7KANMHZu0w9NeVMB8GA1UdIwQYMBaAFOzB3IKI+EWpHJ9swYepnJnZCYwc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUY4Ny83MDI3QzI5QzJB
MjAxMUVBQTExNTJDMkVDNEY5QUUwMi83TUhjZ29qNFJha2NuMnpCaDZtY21ka0pq
QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdNSGNnb2o0UmFrY24yekJoNm1jbWRrSmpCdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
OUY4Ny83MDI3QzI5QzJBMjAxMUVBQTExNTJDMkVDNEY5QUUwMi83TUhjZ29qNFJh
a2NuMnpCaDZtY21ka0pqQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA9CiBjupjMrOHa4/lodcJtNsmrDgN5pBvGp8Qq9DvrFh9h3PMVbMSp
xd6WsXLbRhJ4R/WfsbTVp1XONvcJ0Dr9nUwKVLl+2RTnnmEkOcn2e0tFzfHCn0++
6OBSkoVsQye/ZN9RmeWSkVMk6D00YjbOakZ+iPS6GwhtjBmFDLuiAkvgs+NwZN3Z
c5CgFXjCHYtunyEuLpTdfGy/jwe1E3p8Gc8pYeevdLtEhBMqwvmjjpRTKH+jkibI
e8V9TfXOu1ExuRcVqR5QhVaTbe8mUbd/Dzla2jDG0Xt/47aX8CfywoLpm5BlYFIo
bhkruwFSHQZjOnuo+UIu3AdKjS6Qh0E6
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:25:15 2025 by rpki-client