Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft
File: _yC8N52JoNs75vzykPo91S63-iA.mft (raw, json)
Hash identifier: pOlX4ltphqytJ4Cl6+MQUaUu7WNmDhC2gSkQT3/dpVY=
Subject key identifier: F0:4F:09:15:10:4E:55:F8:FE:92:AD:F4:B6:E7:7F:7A:CB:91:C2:22
Authority key identifier: FF:20:BC:37:9D:89:A0:DB:3B:E6:FC:F2:90:FA:3D:D5:2E:B7:FA:20
Certificate issuer: /CN=A91FC4FB/serialNumber=FF20BC379D89A0DB3BE6FCF290FA3DD52EB7FA20
Certificate serial: 25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft
Manifest number: 23
Signing time: Sat 29 Mar 2025 07:10:14 +0000
Manifest this update: Sat 29 Mar 2025 07:10:13 +0000
Manifest next update: Sat 05 Apr 2025 07:10:13 +0000
Files and hashes: 1: _yC8N52JoNs75vzykPo91S63-iA.crl (hash: WNgYzL971kgvw94AxqK8mlZjkImTbQZvW6sQoqWzTQc=)
2: F20BD4DEDD5C11EFAA80BB1AC4F9AE02.roa (hash: v5aAOYFTKYQs9mswlL+k53rGpICa845yISkOLh9tIAI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC4FB
Validity
Not Before: Mar 29 07:10:13 2025 GMT
Not After : Apr 5 07:10:13 2025 GMT
Subject: CN=67e79cd5-32ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e2:db:60:95:2e:7c:08:e5:d6:4c:d3:5c:bd:
4e:89:bd:59:67:9a:b3:07:44:3c:92:38:e1:74:77:
7e:c3:c9:a6:ef:df:72:0f:10:2b:90:13:95:29:cd:
fd:5c:60:9f:90:0a:6e:60:fe:66:a9:53:0e:ef:91:
03:c7:6f:f5:1d:3f:48:f6:77:5c:98:44:ec:f5:5b:
42:0b:30:a2:90:3b:36:bc:ef:f6:b4:cf:c1:6d:48:
4d:4e:59:44:77:57:99:36:de:5e:71:12:f7:bd:c4:
0e:e8:53:4f:3d:2a:5d:cc:3d:cb:ba:fa:45:0f:eb:
89:26:19:ed:c4:53:b7:e2:fb:88:5d:d2:e1:d6:48:
f5:6f:24:fa:00:fd:02:36:3f:20:76:3b:81:20:13:
ad:5e:4a:21:a7:d4:ab:df:90:70:1f:19:ec:33:9d:
6e:bf:fb:57:a1:00:a3:c3:90:e3:b8:b4:26:aa:e4:
be:fe:8c:82:05:24:ca:07:72:cb:28:c4:ae:b2:66:
ee:cf:41:f4:9a:98:5e:29:36:37:48:14:1b:1d:47:
93:ab:ce:6c:72:8a:fd:13:05:51:60:1f:0c:f8:ea:
0b:a4:4f:ae:de:08:e6:3f:ae:b6:92:42:98:38:3e:
70:a9:67:31:f1:35:ce:f2:8f:c9:ba:f5:64:bf:e4:
85:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:4F:09:15:10:4E:55:F8:FE:92:AD:F4:B6:E7:7F:7A:CB:91:C2:22
X509v3 Authority Key Identifier:
keyid:FF:20:BC:37:9D:89:A0:DB:3B:E6:FC:F2:90:FA:3D:D5:2E:B7:FA:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:2b:15:43:a6:04:fa:1a:25:8b:26:d8:86:bf:e3:f7:5a:9d:
1a:5e:01:8b:d0:a5:16:12:59:14:5d:1a:73:bf:3f:70:0e:05:
80:0a:30:43:79:da:24:fb:14:4f:4e:62:d5:dc:0e:49:58:58:
a6:5d:4b:d5:e7:73:0d:9e:b0:f2:8c:c8:45:08:6e:7f:3e:bc:
43:7e:02:35:a3:91:d7:30:3c:f2:3f:44:dc:e8:1f:ae:41:0c:
a5:1b:76:35:38:94:f1:ad:f4:b1:0c:1d:4b:2e:18:88:5a:f3:
02:77:0d:1b:18:d1:f2:91:92:bd:12:d5:df:98:19:10:ac:4d:
a4:17:30:bd:57:bb:aa:8c:e8:6d:f3:a7:bd:64:36:a7:c7:42:
af:18:32:7e:1b:9c:8c:d0:3e:ed:91:3a:51:73:93:12:ca:6b:
96:98:21:eb:a8:29:e9:87:b8:33:ba:b1:5e:37:60:fe:d3:33:
5d:7e:ac:28:17:05:1e:5b:76:27:77:84:65:9b:58:30:62:09:
b7:e7:e6:19:70:c8:e1:a7:79:02:9e:d6:90:d9:9a:a4:86:4b:
85:2f:c5:be:2b:16:36:dd:1e:16:4c:4e:ec:f7:6b:01:15:9c:
28:d6:03:3e:c5:9f:12:c9:d6:60:7f:22:01:1a:2a:ee:50:3c:
4c:16:98:6e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
QzRGQjExMC8GA1UEBRMoRkYyMEJDMzc5RDg5QTBEQjNCRTZGQ0YyOTBGQTNERDUy
RUI3RkEyMDAeFw0yNTAzMjkwNzEwMTNaFw0yNTA0MDUwNzEwMTNaMBgxFjAUBgNV
BAMTDTY3ZTc5Y2Q1LTMyZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDn4ttglS58COXWTNNcvU6JvVlnmrMHRDySOOF0d37Dyabv33IPECuQE5Upzf1c
YJ+QCm5g/mapUw7vkQPHb/UdP0j2d1yYROz1W0ILMKKQOza87/a0z8FtSE1OWUR3
V5k23l5xEve9xA7oU089Kl3MPcu6+kUP64kmGe3EU7fi+4hd0uHWSPVvJPoA/QI2
PyB2O4EgE61eSiGn1KvfkHAfGewznW6/+1ehAKPDkOO4tCaq5L7+jIIFJMoHcsso
xK6yZu7PQfSamF4pNjdIFBsdR5Orzmxyiv0TBVFgHwz46gukT67eCOY/rraSQpg4
PnCpZzHxNc7yj8m69WS/5IW5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8E8JFRBO
Vfj+kq30tud/esuRwiIwHwYDVR0jBBgwFoAU/yC8N52JoNs75vzykPo91S63+iAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDNEZCLzA5OEZFMkU4RENE
QzExRUY4RTI5MTg0NEM0RjlBRTAyL195QzhONTJKb05zNzV2enlrUG85MVM2My1p
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvX3lDOE41MkpvTnM3NXZ6eWtQbzkxUzYzLWlBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD
NEZCLzA5OEZFMkU4RENEQzExRUY4RTI5MTg0NEM0RjlBRTAyL195QzhONTJKb05z
NzV2enlrUG85MVM2My1pQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAGYrFUOmBPoaJYsm2Ia/4/danRpeAYvQpRYSWRRdGnO/P3AOBYAKMEN5
2iT7FE9OYtXcDklYWKZdS9Xncw2esPKMyEUIbn8+vEN+AjWjkdcwPPI/RNzoH65B
DKUbdjU4lPGt9LEMHUsuGIha8wJ3DRsY0fKRkr0S1d+YGRCsTaQXML1Xu6qM6G3z
p71kNqfHQq8YMn4bnIzQPu2ROlFzkxLKa5aYIeuoKemHuDO6sV43YP7TM11+rCgX
BR5bdid3hGWbWDBiCbfn5hlwyOGneQKe1pDZmqSGS4Uvxb4rFjbdHhZMTuz3awEV
nCjWAz7FnxLJ1mB/IgEaKu5QPEwWmG4=
-----END CERTIFICATE-----
Generated at Fri Apr 11 08:25:45 2025 by rpki-client