Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft
File: oiiPiWTWFpqHlfL07wXg1ebhOwk.mft (raw, json)
Hash identifier: TkBmhwEH81WzUtgYTmB0bhHEKEV/3KyZTfJ/l7nEx4Y=
Subject key identifier: 70:CC:E2:49:23:D8:9F:5A:D9:FD:CF:C3:60:02:2E:F1:BA:8D:9B:6D
Authority key identifier: A2:28:8F:89:64:D6:16:9A:87:95:F2:F4:EF:05:E0:D5:E6:E1:3B:09
Certificate issuer: /CN=A91FB68C/serialNumber=A2288F8964D6169A8795F2F4EF05E0D5E6E13B09
Certificate serial: 1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiiPiWTWFpqHlfL07wXg1ebhOwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft
Manifest number: 1A
Signing time: Sat 29 Mar 2025 07:17:16 +0000
Manifest this update: Sat 29 Mar 2025 07:17:15 +0000
Manifest next update: Sat 05 Apr 2025 07:17:15 +0000
Files and hashes: 1: oiiPiWTWFpqHlfL07wXg1ebhOwk.crl (hash: ZpzHo8Us8U/MPI0OaIaCvrEwxdSzxwI0UKstkicOXeA=)
2: 72294810EAB211EF902A7E27C4F9AE02.roa (hash: FSFReYDaeQFvJdY+hyjPH64a3aCnAjTrkrMSrqHp11w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB68C
Validity
Not Before: Mar 29 07:17:15 2025 GMT
Not After : Apr 5 07:17:15 2025 GMT
Subject: CN=67e79e7b-2eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:25:63:86:7f:74:f2:d5:04:bb:5f:50:4e:f9:
4a:6b:9a:ab:61:8d:46:ab:1f:6e:05:5e:4e:17:1a:
d3:0d:74:e8:13:08:36:53:5f:f9:60:61:3b:c5:18:
ca:08:bf:45:1a:7c:9d:39:a4:b1:16:f1:f4:cb:34:
4a:63:7b:88:7e:8e:4f:01:78:90:ae:1c:3f:00:b4:
89:48:b3:6a:5f:61:5c:8d:f1:f3:e2:eb:ac:9d:0e:
b4:8d:a4:b5:d9:d1:74:27:3e:e8:92:25:e5:ff:59:
9c:bd:89:ce:f7:2b:3b:cc:aa:73:58:a5:be:ae:af:
c1:45:7d:3f:38:56:ab:2a:bb:a7:f6:5c:27:9d:19:
ca:ce:94:a1:7f:b3:aa:d8:9f:cd:7e:0d:f9:ca:d2:
6f:7a:09:3b:00:29:94:b8:a0:f0:a0:d3:ba:7a:a9:
3a:37:df:f5:67:8a:70:c5:56:ea:dc:d8:13:10:11:
34:1c:01:2f:69:77:e7:90:77:32:fc:e7:38:93:f1:
8c:81:be:64:94:fd:81:65:e0:14:45:a9:71:00:cd:
a4:d1:a0:f8:58:26:cf:9d:f8:0d:f6:b9:ae:95:15:
dc:a5:53:d8:81:a2:7d:f2:7f:e2:d8:89:c3:87:07:
2c:b4:f8:26:74:7b:eb:9c:f7:b1:82:b8:6f:4d:62:
51:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CC:E2:49:23:D8:9F:5A:D9:FD:CF:C3:60:02:2E:F1:BA:8D:9B:6D
X509v3 Authority Key Identifier:
keyid:A2:28:8F:89:64:D6:16:9A:87:95:F2:F4:EF:05:E0:D5:E6:E1:3B:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiiPiWTWFpqHlfL07wXg1ebhOwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:71:5a:b7:67:9c:e6:26:fe:7f:42:f6:bf:31:55:76:5a:d1:
74:dd:eb:4e:84:06:8b:4b:4f:50:ff:2e:8a:84:48:6d:0c:cb:
ef:60:03:3a:93:00:a1:42:ae:f3:5f:e1:a8:b5:9e:33:d0:1c:
87:e1:9e:4b:17:50:57:3e:d8:34:48:41:e7:e4:e0:91:40:2f:
8e:43:19:ba:5f:53:fc:08:70:bd:5c:53:b5:06:11:d1:47:62:
c7:74:91:c0:af:c2:d9:0d:d8:4a:2f:e7:8c:bf:bd:4a:aa:c0:
a2:c5:ad:fc:7d:33:57:77:5f:c7:eb:81:b9:8a:0e:1d:55:49:
90:12:34:28:90:5e:f1:c6:e2:c7:79:05:4a:28:c7:44:f1:50:
ec:86:5b:bc:35:80:30:92:7f:52:42:64:22:d6:20:5a:24:d2:
28:b6:c2:2a:f5:40:90:89:81:b3:06:9b:db:96:c8:1b:3f:a5:
e8:f0:22:79:ea:63:3a:c9:e8:03:41:45:b3:87:ed:b7:6b:24:
5a:05:d5:b3:a6:78:70:2f:e8:27:d5:6b:f8:7b:f3:bd:e3:61:
aa:bf:58:ff:31:fe:86:18:41:e2:ca:72:df:0a:51:91:4c:45:
eb:16:4b:c1:23:fa:39:09:79:48:61:de:ac:f9:a3:12:75:19:
a0:c4:34:b7
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
QjY4QzExMC8GA1UEBRMoQTIyODhGODk2NEQ2MTY5QTg3OTVGMkY0RUYwNUUwRDVF
NkUxM0IwOTAeFw0yNTAzMjkwNzE3MTVaFw0yNTA0MDUwNzE3MTVaMBgxFjAUBgNV
BAMTDTY3ZTc5ZTdiLTJlYjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCxJWOGf3Ty1QS7X1BO+UprmqthjUarH24FXk4XGtMNdOgTCDZTX/lgYTvFGMoI
v0UafJ05pLEW8fTLNEpje4h+jk8BeJCuHD8AtIlIs2pfYVyN8fPi66ydDrSNpLXZ
0XQnPuiSJeX/WZy9ic73KzvMqnNYpb6ur8FFfT84Vqsqu6f2XCedGcrOlKF/s6rY
n81+DfnK0m96CTsAKZS4oPCg07p6qTo33/VninDFVurc2BMQETQcAS9pd+eQdzL8
5ziT8YyBvmSU/YFl4BRFqXEAzaTRoPhYJs+d+A32ua6VFdylU9iBon3yf+LYicOH
Byy0+CZ0e+uc97GCuG9NYlGtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcMziSSPY
n1rZ/c/DYAIu8bqNm20wHwYDVR0jBBgwFoAUoiiPiWTWFpqHlfL07wXg1ebhOwkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCNjhDLzE3RDEwM0E4RUFC
MjExRUY4NDZGMTMzN0M0RjlBRTAyL29paVBpV1RXRnBxSGxmTDA3d1hnMWViaE93
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvb2lpUGlXVFdGcHFIbGZMMDd3WGcxZWJoT3drLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC
NjhDLzE3RDEwM0E4RUFCMjExRUY4NDZGMTMzN0M0RjlBRTAyL29paVBpV1RXRnBx
SGxmTDA3d1hnMWViaE93ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAAFxWrdnnOYm/n9C9r8xVXZa0XTd606EBotLT1D/LoqESG0My+9gAzqT
AKFCrvNf4ai1njPQHIfhnksXUFc+2DRIQefk4JFAL45DGbpfU/wIcL1cU7UGEdFH
Ysd0kcCvwtkN2Eov54y/vUqqwKLFrfx9M1d3X8frgbmKDh1VSZASNCiQXvHG4sd5
BUoox0TxUOyGW7w1gDCSf1JCZCLWIFok0ii2wir1QJCJgbMGm9uWyBs/pejwInnq
YzrJ6ANBRbOH7bdrJFoF1bOmeHAv6CfVa/h7873jYaq/WP8x/oYYQeLKct8KUZFM
ResWS8Ej+jkJeUhh3qz5oxJ1GaDENLc=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:13:30 2025 by rpki-client