Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
File: cu8y2vToP5AZKWMgh047RFAI7Dk.mft (raw, json)
Hash identifier: RzKcrw+PRtvcHMX/7NB/pjKKS1dX5DEnloCK7LLH4oc=
Subject key identifier: BA:6F:BA:95:1A:F7:5A:1C:2A:3C:63:9B:15:75:8B:1B:94:BE:62:09
Authority key identifier: 72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39
Certificate issuer: /CN=A919ED93/serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39
Certificate serial: 0120
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
Manifest number: 0119
Signing time: Sat 29 Mar 2025 04:17:23 +0000
Manifest this update: Sat 29 Mar 2025 04:17:23 +0000
Manifest next update: Sat 05 Apr 2025 04:17:23 +0000
Files and hashes: 1: cu8y2vToP5AZKWMgh047RFAI7Dk.crl (hash: TYMPQpyVc/LuFA9VaoQW+3HR/HUHo8OzLw6ve6yzZmE=)
2: 9436AC3668C711EE8C53A031C4F9AE02.roa (hash: YwXGuIwLbAOZzPiPRemoc11a6IYzMpgzJQrMI7kN5fw=)
3: 94A6144A68C711EE8C53A031C4F9AE02.roa (hash: NFu6vOIdrlQETQmdi2ziHOwoF9spOq/YA6DUc9jHTPM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288 (0x120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919ED93
Validity
Not Before: Mar 29 04:17:23 2025 GMT
Not After : Apr 5 04:17:23 2025 GMT
Subject: CN=67e77453-8cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9e:63:2b:2a:56:ee:c4:bb:f8:bf:75:8e:fb:
3f:f1:a9:74:36:e9:e5:8b:c5:f0:c5:0e:f6:2b:64:
22:d9:83:52:77:25:07:d3:1a:bd:f4:e2:74:d9:71:
ce:95:7e:46:f2:2e:5f:59:96:52:75:58:6d:a4:0e:
97:17:fe:4a:db:79:98:d6:09:e8:c3:9d:4d:59:af:
b9:fc:14:bd:d3:d1:47:ec:3b:20:4c:57:f8:c3:a8:
b9:7e:8e:ef:c2:46:80:98:dd:88:8a:24:94:da:2b:
51:2c:f4:bd:7a:f1:8d:80:5d:f3:3f:df:0e:d7:df:
40:0c:47:c5:f0:ab:7d:ef:4b:bb:39:5e:a3:67:70:
a1:4b:27:ad:4b:e6:10:a4:da:f1:b7:34:5e:df:da:
58:0f:03:92:24:c3:80:77:7c:40:63:ab:6e:62:66:
5a:09:69:5a:ef:b5:35:a8:3e:16:9d:c6:3b:63:ea:
42:05:d7:35:bd:ef:c8:62:1c:72:6c:25:c4:8f:c8:
55:8a:e5:9e:4b:2d:6f:82:2c:bb:12:e6:d8:25:1b:
27:67:98:b8:4c:8c:02:d5:0d:7d:bb:3e:0a:e0:d9:
ba:c6:7d:45:d5:e9:1c:1b:1f:b9:b2:85:cf:8e:55:
bc:9a:01:5e:56:38:ac:d2:2b:a4:da:f8:ad:74:4d:
80:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6F:BA:95:1A:F7:5A:1C:2A:3C:63:9B:15:75:8B:1B:94:BE:62:09
X509v3 Authority Key Identifier:
keyid:72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c3:83:94:e4:74:b1:9c:b0:c0:a1:67:56:44:2a:22:be:e8:
f2:8f:13:4d:4c:17:1b:5d:a2:a1:14:21:e7:d0:27:46:8f:42:
42:a2:e5:e7:19:f7:8d:08:2d:4c:06:eb:ea:d8:df:8a:12:86:
32:6e:31:73:6a:c3:8d:ae:db:23:35:48:d5:32:f0:a4:d3:34:
6b:35:99:a7:a7:45:9c:64:e5:0a:0e:79:a8:ed:fb:d8:52:40:
b3:94:39:0e:86:ea:cd:8f:ea:39:22:94:d1:e8:98:6d:73:a0:
43:fe:6f:03:c1:ae:77:00:09:2b:0b:fc:69:8f:ea:60:24:63:
03:45:55:cc:37:5c:9c:bb:b9:91:a0:05:cf:c7:9c:25:cc:64:
19:78:84:e3:05:90:23:ea:f6:f8:2f:28:83:45:2e:0b:3b:be:
bd:cf:7f:2f:b0:32:17:8c:5d:bd:12:36:65:76:f8:0f:86:e6:
15:4b:82:62:7b:8b:95:98:11:a1:72:b8:b9:fc:9f:5f:79:a1:
40:6c:ee:87:c5:3e:04:d5:7c:45:b2:24:d3:e1:e8:2f:bf:0f:
4d:a5:5e:b7:ea:8b:cd:a4:5b:85:e7:31:ed:83:ed:01:ac:15:
0d:df:f5:ef:1e:9b:ca:ae:31:19:2c:c6:54:3d:14:2b:ad:f2:
d6:9f:bb:d0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVEOTMxMTAvBgNVBAUTKDcyRUYzMkRBRjRFODNGOTAxOTI5NjMyMDg3NEUzQjQ0
NTAwOEVDMzkwHhcNMjUwMzI5MDQxNzIzWhcNMjUwNDA1MDQxNzIzWjAYMRYwFAYD
VQQDEw02N2U3NzQ1My04Y2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoJ5jKypW7sS7+L91jvs/8al0Nunli8XwxQ72K2Qi2YNSdyUH0xq99OJ02XHO
lX5G8i5fWZZSdVhtpA6XF/5K23mY1gnow51NWa+5/BS909FH7DsgTFf4w6i5fo7v
wkaAmN2IiiSU2itRLPS9evGNgF3zP98O199ADEfF8Kt970u7OV6jZ3ChSyetS+YQ
pNrxtzRe39pYDwOSJMOAd3xAY6tuYmZaCWla77U1qD4WncY7Y+pCBdc1ve/IYhxy
bCXEj8hViuWeSy1vgiy7EubYJRsnZ5i4TIwC1Q19uz4K4Nm6xn1F1ekcGx+5soXP
jlW8mgFeVjis0iuk2vitdE2A2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLpvupUa
91ocKjxjmxV1ixuUvmIJMB8GA1UdIwQYMBaAFHLvMtr06D+QGSljIIdOO0RQCOw5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUQ5My9BMzZDNjhGNDY4
QzYxMUVFOTU5NjRGN0NDNEY5QUUwMi9jdTh5MnZUb1A1QVpLV01naDA0N1JGQUk3
RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2N1OHkydlRvUDVBWktXTWdoMDQ3UkZBSTdEay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUQ5My9BMzZDNjhGNDY4QzYxMUVFOTU5NjRGN0NDNEY5QUUwMi9jdTh5MnZUb1A1
QVpLV01naDA0N1JGQUk3RGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA6w4OU5HSxnLDAoWdWRCoivujyjxNNTBcbXaKhFCHn0CdGj0JCouXn
GfeNCC1MBuvq2N+KEoYybjFzasONrtsjNUjVMvCk0zRrNZmnp0WcZOUKDnmo7fvY
UkCzlDkOhurNj+o5IpTR6Jhtc6BD/m8Dwa53AAkrC/xpj+pgJGMDRVXMN1ycu7mR
oAXPx5wlzGQZeITjBZAj6vb4LyiDRS4LO769z38vsDIXjF29EjZldvgPhuYVS4Ji
e4uVmBGhcri5/J9feaFAbO6HxT4E1XxFsiTT4egvvw9NpV636ovNpFuF5zHtg+0B
rBUN3/XvHpvKrjEZLMZUPRQrrfLWn7vQ
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:54:18 2025 by rpki-client