Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft
File: 6XepImIg6MeKHRs74E1gzcyKIYg.mft (raw, json)
Hash identifier: rC6gUcclxoJ6R+0yHo8mchDCQhAyveR3K1eiFyXc4ZY=
Subject key identifier: 1C:B2:E0:E6:E3:0A:25:AD:A0:F6:F8:0C:B1:0E:10:A0:EC:20:7D:61
Authority key identifier: E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88
Certificate issuer: /CN=A91FC5BD/serialNumber=E977A9226220E8C78A1D1B3BE04D60CDCC8A2188
Certificate serial: A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft
Manifest number: 9F
Signing time: Sat 29 Mar 2025 05:35:50 +0000
Manifest this update: Sat 29 Mar 2025 05:35:49 +0000
Manifest next update: Sat 05 Apr 2025 05:35:49 +0000
Files and hashes: 1: 6XepImIg6MeKHRs74E1gzcyKIYg.crl (hash: 0joUUI/qUTFKMAndjetOZJvbzW4/tfVNCYSTLkqW81U=)
2: 1101B5C01CEC11EFA7CDC085C4F9AE02.roa (hash: BZA1P97SNGTrhAAl2/Ui2Ojz/Jo4Dfx0oXuCfnfQd+I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161 (0xa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC5BD
Validity
Not Before: Mar 29 05:35:49 2025 GMT
Not After : Apr 5 05:35:49 2025 GMT
Subject: CN=67e786b6-5a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e1:8e:a6:2a:43:0f:cc:cf:6f:41:9e:5e:a1:
dc:58:08:3c:fa:ef:c1:99:c1:5f:6b:9b:8a:93:7e:
1d:81:13:c1:2b:dc:fe:8b:0b:07:48:d4:2d:59:f9:
6f:77:21:a6:63:c9:a3:26:4a:66:91:51:de:08:84:
59:bd:d1:dd:e2:3f:af:7a:9c:36:13:18:3f:10:0b:
be:c4:a7:2c:43:5c:f1:42:00:7f:88:c9:e3:d2:7f:
b2:6b:20:59:e1:d8:9f:db:df:59:09:43:87:95:38:
f5:a8:d0:da:ad:f5:e3:cd:f9:39:a8:83:e6:de:55:
3e:5e:d8:95:b5:a3:5d:26:30:af:0c:bf:e5:fe:f0:
eb:b0:55:fa:2d:d9:41:74:d2:c7:46:78:be:d3:ad:
dd:d5:01:3b:2b:33:ed:f5:42:21:75:c7:3e:17:21:
1f:2f:eb:91:7e:8b:31:76:8c:cb:b3:87:18:5d:38:
30:d9:50:20:d9:c0:98:11:18:3e:b4:7d:b8:8c:25:
df:67:45:59:e5:ab:5c:32:09:60:e0:41:e7:ca:37:
c9:b0:ce:20:5e:a9:21:44:3b:4a:38:20:5b:c3:cd:
bf:8a:7d:22:01:fa:62:34:53:f1:08:3c:9f:ad:e0:
ba:58:b1:89:04:65:07:a4:ac:91:de:9c:ed:f9:2c:
63:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B2:E0:E6:E3:0A:25:AD:A0:F6:F8:0C:B1:0E:10:A0:EC:20:7D:61
X509v3 Authority Key Identifier:
keyid:E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:bf:86:14:9c:6d:19:bc:44:44:3c:37:81:6a:46:7c:fb:2d:
c3:b0:2d:44:b4:75:74:fa:e2:96:23:ad:82:09:92:ba:59:8e:
bd:6c:bd:24:75:2b:80:6b:15:94:6c:ed:6d:fc:31:f0:8e:37:
81:03:0a:01:fa:b2:f6:a8:1a:df:85:3a:cd:c9:dd:38:bd:a2:
b3:ca:96:1f:d5:00:55:6f:33:b8:64:78:b3:90:48:4e:cd:d6:
49:24:19:01:d8:a4:c6:8d:f6:5e:32:53:bb:fd:0a:5f:d4:40:
64:88:46:cf:ae:4a:8e:40:66:6f:a2:6d:07:71:cb:9b:b6:e9:
98:a0:ca:6a:45:ae:03:ee:cf:66:41:b9:57:ef:ff:f5:62:c8:
07:92:ad:77:44:29:29:46:a3:64:33:2f:70:5a:d2:7b:1c:0d:
97:0e:b3:33:df:da:61:fe:27:31:f1:2c:fd:01:93:4d:9e:0e:
67:22:50:22:91:a6:0f:cf:cf:a8:22:57:73:6b:bb:02:b1:6d:
f4:c0:f8:4e:25:8b:75:11:dd:be:db:db:14:d5:1c:7e:5c:69:
78:0c:ff:7c:bb:ce:9c:c0:a6:a9:46:7c:65:43:00:b0:8c:c4:
85:69:f9:44:2a:fe:d8:22:22:4f:e4:34:95:a7:8f:2a:7e:3d:
b8:83:49:7a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkM1QkQxMTAvBgNVBAUTKEU5NzdBOTIyNjIyMEU4Qzc4QTFEMUIzQkUwNEQ2MENE
Q0M4QTIxODgwHhcNMjUwMzI5MDUzNTQ5WhcNMjUwNDA1MDUzNTQ5WjAYMRYwFAYD
VQQDEw02N2U3ODZiNi01YTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo+GOpipDD8zPb0GeXqHcWAg8+u/BmcFfa5uKk34dgRPBK9z+iwsHSNQtWflv
dyGmY8mjJkpmkVHeCIRZvdHd4j+vepw2Exg/EAu+xKcsQ1zxQgB/iMnj0n+yayBZ
4dif299ZCUOHlTj1qNDarfXjzfk5qIPm3lU+XtiVtaNdJjCvDL/l/vDrsFX6LdlB
dNLHRni+063d1QE7KzPt9UIhdcc+FyEfL+uRfosxdozLs4cYXTgw2VAg2cCYERg+
tH24jCXfZ0VZ5atcMglg4EHnyjfJsM4gXqkhRDtKOCBbw82/in0iAfpiNFPxCDyf
reC6WLGJBGUHpKyR3pzt+SxjRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFByy4Obj
CiWtoPb4DLEOEKDsIH1hMB8GA1UdIwQYMBaAFOl3qSJiIOjHih0bO+BNYM3MiiGI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzVCRC83NkMyQzcyRTFD
RUIxMUVGODVERkQ3NzZDNEY5QUUwMi82WGVwSW1JZzZNZUtIUnM3NEUxZ3pjeUtJ
WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZYZXBJbUlnNk1lS0hSczc0RTFnemN5S0lZZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QzVCRC83NkMyQzcyRTFDRUIxMUVGODVERkQ3NzZDNEY5QUUwMi82WGVwSW1JZzZN
ZUtIUnM3NEUxZ3pjeUtJWWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQABv4YUnG0ZvEREPDeBakZ8+y3DsC1EtHV0+uKWI62CCZK6WY69bL0k
dSuAaxWUbO1t/DHwjjeBAwoB+rL2qBrfhTrNyd04vaKzypYf1QBVbzO4ZHizkEhO
zdZJJBkB2KTGjfZeMlO7/Qpf1EBkiEbPrkqOQGZvom0HccubtumYoMpqRa4D7s9m
QblX7//1YsgHkq13RCkpRqNkMy9wWtJ7HA2XDrMz39ph/icx8Sz9AZNNng5nIlAi
kaYPz8+oIldza7sCsW30wPhOJYt1Ed2+29sU1Rx+XGl4DP98u86cwKapRnxlQwCw
jMSFaflEKv7YIiJP5DSVp48qfj24g0l6
-----END CERTIFICATE-----
Generated at Tue Apr 8 09:22:37 2025 by rpki-client