
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft
File: eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft (raw, json)
Hash identifier: 1zpbL63Gg4ZFW8Vg7exPbNZgm7M3WW95bdmVWyzyOMk=
Subject key identifier: BE:38:CA:83:1B:ED:F9:88:DE:B2:36:82:72:AE:B5:1A:F0:FD:5A:1B
Authority key identifier: 79:E5:63:2A:F2:9B:AE:64:E5:F9:F1:9C:57:5B:C5:A9:95:E2:05:50
Certificate issuer: /CN=A91FEB27/serialNumber=79E5632AF29BAE64E5F9F19C575BC5A995E20550
Certificate serial: 2D02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft
Manifest number: 2CE6
Signing time: Fri 28 Mar 2025 15:37:28 +0000
Manifest this update: Fri 28 Mar 2025 15:37:28 +0000
Manifest next update: Fri 04 Apr 2025 15:37:28 +0000
Files and hashes: 1: eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl (hash: czVcZ3zWG+jsykdc34jclDpNQSFOlQfl3EOwCYnM1ow=)
2: 6CB78E8E967811EA92E45A27C4F9AE02.roa (hash: Vd/aN0N0PZj/2E1lobGPke/BU2o5Mlhxl5a5kuQS0uQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11522 (0x2d02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEB27
Validity
Not Before: Mar 28 15:37:28 2025 GMT
Not After : Apr 4 15:37:28 2025 GMT
Subject: CN=67e6c238-2390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e3:8d:01:34:8c:67:97:20:7e:c4:77:b8:f5:
d1:43:bb:8c:87:4c:13:13:dd:80:20:1b:67:35:ed:
6d:30:4f:f7:ad:dc:09:85:b6:43:a3:55:72:51:1c:
3b:3b:b5:94:83:e2:4b:2a:6c:68:08:7f:04:a6:ff:
61:cf:fa:b2:fd:5e:9f:4b:bc:ae:a9:ea:01:f4:84:
42:0e:b3:4d:e7:b2:94:5c:73:b9:77:ad:1f:c9:a5:
63:17:88:ca:96:02:5a:42:cf:fc:b7:b8:bc:5f:92:
21:dc:6c:09:29:d7:f4:6b:46:b5:65:05:1e:6d:a7:
5e:6f:a4:04:c2:9d:87:9d:73:48:90:e2:99:7a:9f:
fd:b9:a3:a2:e7:0c:fa:e5:81:2e:63:ad:45:ea:15:
88:e6:7e:29:43:36:63:da:6d:be:b0:5a:a3:79:1a:
1e:b4:ad:ef:7d:6f:4c:e0:e3:41:8d:34:b1:4a:5a:
3a:20:ee:36:02:34:50:94:16:e8:3c:cd:b2:00:52:
43:96:b5:d2:81:d9:cd:df:ff:3f:3e:e3:02:7c:64:
14:6f:7e:dd:ca:ef:a5:67:52:6a:09:2a:9c:da:81:
d7:37:74:4a:da:d3:dc:d8:82:23:e3:1a:a5:94:b2:
b0:f4:79:03:e0:46:7c:9b:34:1a:93:af:af:ed:86:
12:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:38:CA:83:1B:ED:F9:88:DE:B2:36:82:72:AE:B5:1A:F0:FD:5A:1B
X509v3 Authority Key Identifier:
keyid:79:E5:63:2A:F2:9B:AE:64:E5:F9:F1:9C:57:5B:C5:A9:95:E2:05:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:32:76:86:90:56:ac:21:91:27:48:f8:a7:2d:ad:12:68:b3:
e6:97:1d:b7:42:80:f8:02:f1:3b:05:a1:93:58:09:9e:25:fc:
fb:3e:b9:25:ad:81:df:f6:4d:e0:56:b9:cf:85:07:82:85:51:
c3:2f:ad:9c:b4:3d:15:68:f3:5e:37:71:77:36:f0:bd:f3:e5:
86:d9:d8:aa:2a:6a:7b:9a:1b:f3:f2:c0:72:d6:d6:20:90:f6:
1a:47:fd:47:d3:53:d3:f3:35:77:67:15:8c:92:dc:7f:c4:51:
85:87:fe:75:c3:32:28:cb:5a:95:69:3c:ea:ee:a1:02:ce:3c:
74:0a:c8:18:8a:35:a2:f9:55:f2:52:c4:d2:7c:db:f6:c7:f8:
61:b0:7d:b7:08:b2:d8:de:4e:95:e0:fa:40:99:d5:e7:6e:3c:
c6:9e:24:6a:66:e5:0c:5d:b5:17:43:55:fc:92:b0:b5:89:1b:
3b:79:f0:40:4e:6b:97:bd:7d:1e:a4:a0:d0:a8:cc:65:af:16:
40:de:e0:32:39:dd:8f:a1:7a:a3:24:00:69:6b:77:79:9e:85:
5a:20:01:36:f3:86:7d:84:c8:23:8b:d1:f7:27:2b:71:59:33:
8a:3f:9d:b1:9d:53:76:6b:d2:58:fd:d5:b9:4e:f5:3a:9e:98:
19:a1:4b:75
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICLQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkVCMjcxMTAvBgNVBAUTKDc5RTU2MzJBRjI5QkFFNjRFNUY5RjE5QzU3NUJDNUE5
OTVFMjA1NTAwHhcNMjUwMzI4MTUzNzI4WhcNMjUwNDA0MTUzNzI4WjAYMRYwFAYD
VQQDEw02N2U2YzIzOC0yMzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyeONATSMZ5cgfsR3uPXRQ7uMh0wTE92AIBtnNe1tME/3rdwJhbZDo1VyURw7
O7WUg+JLKmxoCH8Epv9hz/qy/V6fS7yuqeoB9IRCDrNN57KUXHO5d60fyaVjF4jK
lgJaQs/8t7i8X5Ih3GwJKdf0a0a1ZQUebadeb6QEwp2HnXNIkOKZep/9uaOi5wz6
5YEuY61F6hWI5n4pQzZj2m2+sFqjeRoetK3vfW9M4ONBjTSxSlo6IO42AjRQlBbo
PM2yAFJDlrXSgdnN3/8/PuMCfGQUb37dyu+lZ1JqCSqc2oHXN3RK2tPc2IIj4xql
lLKw9HkD4EZ8mzQak6+v7YYS9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL44yoMb
7fmI3rI2gnKutRrw/VobMB8GA1UdIwQYMBaAFHnlYyrym65k5fnxnFdbxamV4gVQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUIyNy8xNjdBOTdFQzlB
RTMxMUUzQTVBMjU3QTc1OTExRUEzMi9lZVZqS3ZLYnJtVGwtZkdjVjF2RnFaWGlC
VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VlVmpLdkticm1UbC1mR2NWMXZGcVpYaUJWQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RUIyNy8xNjdBOTdFQzlBRTMxMUUzQTVBMjU3QTc1OTExRUEzMi9lZVZqS3ZLYnJt
VGwtZkdjVjF2RnFaWGlCVkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBpMnaGkFasIZEnSPinLa0SaLPmlx23QoD4AvE7BaGTWAmeJfz7Prkl
rYHf9k3gVrnPhQeChVHDL62ctD0VaPNeN3F3NvC98+WG2diqKmp7mhvz8sBy1tYg
kPYaR/1H01PT8zV3ZxWMktx/xFGFh/51wzIoy1qVaTzq7qECzjx0CsgYijWi+VXy
UsTSfNv2x/hhsH23CLLY3k6V4PpAmdXnbjzGniRqZuUMXbUXQ1X8krC1iRs7efBA
TmuXvX0epKDQqMxlrxZA3uAyOd2PoXqjJABpa3d5noVaIAE284Z9hMgji9H3Jytx
WTOKP52xnVN2a9JY/dW5TvU6npgZoUt1
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:07:03 2025 by rpki-client