Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft
File: bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft (raw, json)
Hash identifier: f6b3MkBEK3KR9RaJ5I/EOmrJBtn9yhMCX4DANQqfpQs=
Subject key identifier: B7:31:E0:BC:C9:38:6A:FA:E2:F6:7E:40:77:4B:DF:FF:A5:0B:F4:3B
Authority key identifier: 6E:48:61:0A:A0:E6:B0:E2:C5:EE:D4:02:DD:07:83:3A:A7:3E:7E:A2
Certificate issuer: /CN=A91FBD28/serialNumber=6E48610AA0E6B0E2C5EED402DD07833AA73E7EA2
Certificate serial: 1A90
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/bkhhCqDmsOLF7tQC3QeDOqc-fqI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft
Manifest number: 1A7B
Signing time: Fri 28 Mar 2025 15:46:54 +0000
Manifest this update: Fri 28 Mar 2025 15:46:54 +0000
Manifest next update: Fri 04 Apr 2025 15:46:54 +0000
Files and hashes: 1: bkhhCqDmsOLF7tQC3QeDOqc-fqI.crl (hash: siOv38sSN02wNCBcXQcZIQF1+WjdDks65Law+YlZaWQ=)
2: D8B92776A16A11EAA517B11EC4F9AE02.roa (hash: Kdp9AKQeL2FX/yJ9dKy0ocxr3Mori7J9VoVLko7H5hQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6800 (0x1a90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBD28
Validity
Not Before: Mar 28 15:46:54 2025 GMT
Not After : Apr 4 15:46:54 2025 GMT
Subject: CN=67e6c46e-34c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3a:53:3c:63:98:82:bb:f5:de:05:cf:5e:3a:
02:f9:ba:99:1f:46:2b:c4:43:19:cb:2a:a4:8b:a7:
0e:b8:49:5c:f3:e9:81:32:e6:58:ce:ae:f8:34:49:
be:62:46:0c:de:bc:79:ba:1d:2e:46:9e:c2:0c:56:
4d:15:6e:ac:84:7d:1f:4c:8f:d4:43:2e:ed:1c:af:
5b:9a:6f:be:f0:9d:25:52:be:a8:86:55:5b:38:1c:
df:e3:c3:03:86:6e:3e:3f:8d:e9:09:0a:1b:9b:7a:
23:9f:19:62:cd:e9:36:12:87:b4:96:4a:cd:0d:cc:
9d:77:16:58:64:77:ee:58:b8:b0:83:35:c6:85:43:
15:a3:2b:1d:cf:b5:ff:ba:d4:ac:87:60:cf:a9:42:
d4:ac:ae:cc:9d:0f:6e:5b:f5:f0:f6:55:81:af:ea:
c8:12:4b:46:ba:6c:3e:0f:c1:e8:4c:98:02:1f:de:
06:15:55:3c:3d:cf:4c:30:1a:bb:86:1d:18:63:ad:
87:9a:96:5f:ca:79:9f:e6:3a:aa:e2:a1:cf:12:ef:
60:12:39:28:86:1e:18:e6:8e:38:b3:63:d6:2b:4b:
0c:47:3b:77:35:2f:b1:19:27:8a:d5:46:b7:7e:c4:
f1:0b:2c:31:f5:68:2d:df:c5:51:6f:da:fe:62:2c:
ee:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:31:E0:BC:C9:38:6A:FA:E2:F6:7E:40:77:4B:DF:FF:A5:0B:F4:3B
X509v3 Authority Key Identifier:
keyid:6E:48:61:0A:A0:E6:B0:E2:C5:EE:D4:02:DD:07:83:3A:A7:3E:7E:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/bkhhCqDmsOLF7tQC3QeDOqc-fqI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:36:7d:cb:c6:4c:eb:9c:c6:55:da:36:1e:41:47:12:0a:20:
87:39:c8:b0:d9:66:14:33:5a:d4:c1:b8:ba:b2:0f:cd:46:d7:
98:ff:35:1e:1b:61:36:1b:3b:91:e4:5f:ef:90:51:6f:16:6d:
26:12:69:23:0a:3d:95:f1:90:2f:a4:3b:f0:87:e1:92:b8:ad:
78:88:9b:05:e2:bf:1e:f7:cf:32:a0:19:56:1c:b5:d6:6d:ac:
14:bd:99:d5:d2:c6:0b:4c:52:91:b2:e8:00:ff:36:87:68:82:
a4:94:69:df:fa:ae:83:f7:90:07:8f:ae:49:60:31:1c:34:7d:
79:03:72:cc:fb:47:d2:f7:c1:fa:0f:69:c0:f7:84:01:76:2e:
5e:e6:fc:d0:a2:91:a2:5a:95:bb:83:07:bf:d8:6f:a1:14:51:
4a:7e:15:06:f0:c3:a8:fc:89:a0:9a:30:72:70:69:ca:2f:f8:
9a:cf:fe:f4:25:6e:4b:db:2e:9d:bb:e5:81:6a:1f:27:61:d9:
12:9f:ba:fa:86:45:5d:ed:09:82:21:f9:3d:8c:1f:b2:58:ef:
2a:ca:7c:76:60:aa:20:46:da:92:80:83:cc:34:08:87:4a:da:
ca:fb:a4:88:85:1d:35:ad:d0:10:94:a9:5f:ec:ce:c2:c4:f1:
94:7d:90:85
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkJEMjgxMTAvBgNVBAUTKDZFNDg2MTBBQTBFNkIwRTJDNUVFRDQwMkREMDc4MzNB
QTczRTdFQTIwHhcNMjUwMzI4MTU0NjU0WhcNMjUwNDA0MTU0NjU0WjAYMRYwFAYD
VQQDEw02N2U2YzQ2ZS0zNGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApzpTPGOYgrv13gXPXjoC+bqZH0YrxEMZyyqki6cOuElc8+mBMuZYzq74NEm+
YkYM3rx5uh0uRp7CDFZNFW6shH0fTI/UQy7tHK9bmm++8J0lUr6ohlVbOBzf48MD
hm4+P43pCQobm3ojnxlizek2Eoe0lkrNDcyddxZYZHfuWLiwgzXGhUMVoysdz7X/
utSsh2DPqULUrK7MnQ9uW/Xw9lWBr+rIEktGumw+D8HoTJgCH94GFVU8Pc9MMBq7
hh0YY62HmpZfynmf5jqq4qHPEu9gEjkohh4Y5o44s2PWK0sMRzt3NS+xGSeK1Ua3
fsTxCywx9Wgt38VRb9r+YizuNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcx4LzJ
OGr64vZ+QHdL3/+lC/Q7MB8GA1UdIwQYMBaAFG5IYQqg5rDixe7UAt0HgzqnPn6i
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQyOC8yNjc1OEJCNDNB
QjUxMUU3Qjg2MDlGMUNDNEY5QUUwMi9ia2hoQ3FEbXNPTEY3dFFDM1FlRE9xYy1m
cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL2JraGhDcURtc09MRjd0UUMzUWVET3FjLWZxSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QkQyOC8yNjc1OEJCNDNBQjUxMUU3Qjg2MDlGMUNDNEY5QUUwMi9ia2hoQ3FEbXNP
TEY3dFFDM1FlRE9xYy1mcUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA+Nn3LxkzrnMZV2jYeQUcSCiCHOciw2WYUM1rUwbi6sg/NRteY/zUe
G2E2GzuR5F/vkFFvFm0mEmkjCj2V8ZAvpDvwh+GSuK14iJsF4r8e988yoBlWHLXW
bawUvZnV0sYLTFKRsugA/zaHaIKklGnf+q6D95AHj65JYDEcNH15A3LM+0fS98H6
D2nA94QBdi5e5vzQopGiWpW7gwe/2G+hFFFKfhUG8MOo/ImgmjBycGnKL/iaz/70
JW5L2y6du+WBah8nYdkSn7r6hkVd7QmCIfk9jB+yWO8qynx2YKogRtqSgIPMNAiH
StrK+6SIhR01rdAQlKlf7M7CxPGUfZCF
-----END CERTIFICATE-----
Generated at Tue Apr 8 19:09:59 2025 by rpki-client