Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
File: 81QJOUhm-0CKDRiOC30AzFpzlI4.mft (raw, json)
Hash identifier: eEcHh70eZlgme+hDil5nevzF2LgAMS2b4XYkiOxI4c8=
Subject key identifier: B0:45:84:B0:6E:1B:24:13:7C:49:A0:EC:4B:C2:CD:38:99:02:F8:BB
Authority key identifier: F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E
Certificate issuer: /CN=A91FDBE8/serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E
Certificate serial: 076F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
Manifest number: 0763
Signing time: Fri 28 Mar 2025 21:50:57 +0000
Manifest this update: Fri 28 Mar 2025 21:50:57 +0000
Manifest next update: Fri 04 Apr 2025 21:50:57 +0000
Files and hashes: 1: 81QJOUhm-0CKDRiOC30AzFpzlI4.crl (hash: HXXQ9OJZIykGnFwFEtb9+/TkgDlP1vvPX6HQ/8LAqZk=)
2: 407DD9CED09211EE843A0F22C4F9AE02.roa (hash: DYjETZSzXLPZu6k/scGKmt/lU3UqCl+3wtEbXL9L8Pg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1903 (0x76f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDBE8
Validity
Not Before: Mar 28 21:50:57 2025 GMT
Not After : Apr 4 21:50:57 2025 GMT
Subject: CN=67e719c1-a9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b1:c3:d4:b8:3b:4d:4f:c2:c3:73:25:db:51:
2a:67:a0:71:f3:91:9f:bc:a6:b5:94:e4:12:c9:8f:
66:07:58:c1:bb:cd:00:85:16:69:ca:88:be:ad:87:
91:ab:f8:a2:7f:8c:28:c7:b9:89:b9:0a:ce:0e:18:
c1:09:23:de:8a:cf:42:30:de:6e:a1:cd:cc:d0:d1:
fd:84:3a:fd:dc:cc:e7:38:60:5c:08:25:d2:d7:0a:
2f:f7:01:f1:e4:88:da:50:a7:45:e4:d3:61:18:5f:
b5:81:87:82:dd:70:a1:80:76:80:29:43:d5:e5:0d:
ca:70:6a:36:cc:bf:64:27:f5:81:62:a9:43:04:0a:
9c:5b:3e:eb:0a:21:7c:b1:22:ed:ca:d7:1b:34:d8:
ba:6f:5f:6c:c4:f7:b3:ea:d2:86:40:45:16:28:ad:
4c:35:ab:c1:47:7e:18:22:ad:30:50:ae:f2:7a:dc:
78:20:9b:44:eb:c2:53:4d:13:03:c1:5a:2b:81:89:
a1:fe:5b:03:da:93:86:3f:14:57:a6:d2:14:86:1f:
38:4e:e1:b3:78:92:fe:06:dc:44:e2:c0:dd:f0:b8:
e9:20:3e:e3:94:63:5a:c4:e5:49:45:17:d2:0d:57:
d2:a0:e8:29:d9:be:5c:ae:7e:f2:02:dd:d3:35:cb:
af:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:45:84:B0:6E:1B:24:13:7C:49:A0:EC:4B:C2:CD:38:99:02:F8:BB
X509v3 Authority Key Identifier:
keyid:F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:be:15:16:65:cb:f3:f4:d1:85:f7:5f:ef:17:84:2e:c7:1c:
ee:0a:12:0d:0e:1d:41:75:7a:c5:10:18:92:40:cb:9f:83:f9:
4c:cd:26:d7:ad:84:5d:c8:2e:cb:f5:c5:4d:8e:80:6c:9d:f3:
9d:b7:42:e6:77:fa:04:6a:46:f1:90:91:5f:f1:f4:57:c9:ce:
f0:cb:2c:f6:31:53:58:08:7a:7a:fc:7e:40:e1:3b:02:50:eb:
c4:b2:2f:23:f0:c8:b7:8d:0c:95:1b:f0:25:da:d5:aa:9c:0f:
d2:7c:7b:dc:b0:b2:f7:29:75:11:1f:63:ae:c6:2c:df:f9:f6:
e5:56:d7:cf:58:6c:09:22:9b:f1:fa:b7:33:9d:8e:a1:66:70:
3c:1f:48:a8:6b:f6:9f:40:35:58:bb:73:c7:19:a8:d8:4f:83:
16:0c:09:92:32:e3:45:fd:9a:b9:90:6a:a6:c6:b5:c5:39:af:
d0:4e:80:14:c5:04:61:81:90:ea:8c:c4:e8:a2:09:43:56:4b:
4f:f9:a7:f0:00:83:5c:7b:6f:3a:3e:73:c2:8c:b7:03:bd:f8:
91:8e:f8:fe:48:4e:98:08:ce:cf:ab:2e:9b:d8:0a:07:9a:ce:
75:05:03:54:a9:65:d9:78:f4:19:93:f1:62:05:96:83:fd:e9:
4d:bc:32:64
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkRCRTgxMTAvBgNVBAUTKEYzNTQwOTM5NDg2NkZCNDA4QTBEMTg4RTBCN0QwMEND
NUE3Mzk0OEUwHhcNMjUwMzI4MjE1MDU3WhcNMjUwNDA0MjE1MDU3WjAYMRYwFAYD
VQQDEw02N2U3MTljMS1hOWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlrHD1Lg7TU/Cw3Ml21EqZ6Bx85GfvKa1lOQSyY9mB1jBu80AhRZpyoi+rYeR
q/iif4wox7mJuQrODhjBCSPeis9CMN5uoc3M0NH9hDr93MznOGBcCCXS1wov9wHx
5IjaUKdF5NNhGF+1gYeC3XChgHaAKUPV5Q3KcGo2zL9kJ/WBYqlDBAqcWz7rCiF8
sSLtytcbNNi6b19sxPez6tKGQEUWKK1MNavBR34YIq0wUK7yetx4IJtE68JTTRMD
wVorgYmh/lsD2pOGPxRXptIUhh84TuGzeJL+BtxE4sDd8LjpID7jlGNaxOVJRRfS
DVfSoOgp2b5crn7yAt3TNcuvWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLBFhLBu
GyQTfEmg7EvCzTiZAvi7MB8GA1UdIwQYMBaAFPNUCTlIZvtAig0Yjgt9AMxac5SO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREJFOC85RDM2MzE3ODE1
MkIxMUVCOUJENEVCNDZDNEY5QUUwMi84MVFKT1VobS0wQ0tEUmlPQzMwQXpGcHps
STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzgxUUpPVWhtLTBDS0RSaU9DMzBBekZwemxJNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
REJFOC85RDM2MzE3ODE1MkIxMUVCOUJENEVCNDZDNEY5QUUwMi84MVFKT1VobS0w
Q0tEUmlPQzMwQXpGcHpsSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBqvhUWZcvz9NGF91/vF4QuxxzuChINDh1BdXrFEBiSQMufg/lMzSbX
rYRdyC7L9cVNjoBsnfOdt0Lmd/oEakbxkJFf8fRXyc7wyyz2MVNYCHp6/H5A4TsC
UOvEsi8j8Mi3jQyVG/Al2tWqnA/SfHvcsLL3KXURH2Ouxizf+fblVtfPWGwJIpvx
+rcznY6hZnA8H0ioa/afQDVYu3PHGajYT4MWDAmSMuNF/Zq5kGqmxrXFOa/QToAU
xQRhgZDqjMTooglDVktP+afwAINce286PnPCjLcDvfiRjvj+SE6YCM7Pqy6b2AoH
ms51BQNUqWXZePQZk/FiBZaD/elNvDJk
-----END CERTIFICATE-----
Generated at Thu Apr 10 19:36:18 2025 by rpki-client