Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
File: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft (raw, json)
Hash identifier: 2wFfR0cfD0JrXJEPMfc73IsE9UfhZeYVcovmCyF5Qrs=
Subject key identifier: D5:FF:7D:2B:FC:76:CD:F8:B7:E4:B2:D7:AD:C3:5B:54:2E:41:E8:48
Authority key identifier: DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20
Certificate issuer: /CN=A91A300F/serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520
Certificate serial: 041C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
Manifest number: 0418
Signing time: Sat 29 Mar 2025 00:40:13 +0000
Manifest this update: Sat 29 Mar 2025 00:40:12 +0000
Manifest next update: Sat 05 Apr 2025 00:40:12 +0000
Files and hashes: 1: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl (hash: 2RhzepBNtkIzGxplCoaQv7Ed0VbmeR8+g750IkjvLW0=)
2: 9C2DE17A5D9311ECB2ABB63FC4F9AE02.roa (hash: NlMZe5gqmVPJHi7tBl3pc3oKWd3PWEvyri4lhroQCrA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1052 (0x41c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A300F
Validity
Not Before: Mar 29 00:40:12 2025 GMT
Not After : Apr 5 00:40:12 2025 GMT
Subject: CN=67e7416c-7ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:94:45:11:ef:4c:9c:63:2b:4a:81:71:72:38:
67:42:1f:47:05:df:2d:c5:0e:e0:dc:6e:0f:20:f2:
09:73:8c:1c:94:1b:3d:78:b3:fe:39:67:ee:61:ed:
17:93:a9:d0:70:8d:6e:a7:61:92:10:92:4e:e8:d1:
83:25:47:f2:20:0e:50:c1:11:fa:98:a7:f0:f5:21:
21:e4:85:7f:00:c6:ac:f1:77:c9:f8:b9:17:86:6f:
9b:39:c5:39:6f:f3:5b:b9:de:e5:a1:19:bc:06:07:
66:01:95:38:52:ab:f5:36:07:13:61:43:73:8e:43:
59:96:04:88:00:20:16:99:8d:de:a4:10:ea:ef:3c:
5e:54:6a:ab:5b:1d:55:b9:9c:7a:09:13:34:ea:98:
45:6f:4a:1e:1d:1a:9b:bc:d9:2f:f3:bf:c1:cd:d0:
c2:1a:fe:8c:5a:14:b5:ab:ab:e8:34:63:2c:1d:4b:
89:70:9d:ab:62:90:ad:87:17:6b:b6:ee:c2:a1:5a:
d4:96:48:71:f5:79:b5:da:33:ae:cd:2a:c5:49:6c:
1e:ea:d8:a5:65:da:3f:a7:ee:c3:af:1a:bc:1d:9e:
fc:49:68:8f:54:b9:17:b4:79:a7:9f:87:89:9e:c0:
7b:6f:d4:e9:bc:bc:ff:75:58:94:95:02:8e:97:af:
e2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FF:7D:2B:FC:76:CD:F8:B7:E4:B2:D7:AD:C3:5B:54:2E:41:E8:48
X509v3 Authority Key Identifier:
keyid:DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e1:40:1b:68:a1:0c:9f:9f:5d:0a:fc:90:99:6f:2f:b6:59:
cb:19:15:08:a8:e2:18:b3:6d:64:9d:75:09:3b:a7:42:be:c1:
96:13:aa:f6:27:f4:af:0c:ee:7c:24:a7:73:83:ec:a5:b8:49:
4d:77:1c:c8:36:fd:85:14:f5:dc:f8:a4:d2:41:ad:d7:06:48:
76:f2:cf:ed:aa:53:79:d6:45:f7:04:32:59:2f:07:48:04:99:
ed:2e:a1:48:3d:d5:18:32:1f:5b:30:e8:4d:de:2c:4f:9a:97:
68:e1:1a:f3:af:41:6a:66:bf:5e:e4:17:4e:96:dc:9f:73:33:
c2:5c:56:85:20:7b:82:61:fc:e9:f1:9e:05:9c:1b:91:a6:08:
74:3b:de:2d:13:23:ce:64:c9:80:39:c0:c3:30:fa:a4:41:c2:
6b:9b:15:31:4c:c6:0b:83:e0:e9:d4:c4:eb:a1:8f:20:d4:a1:
07:8d:70:62:df:b7:78:0b:91:bd:62:69:7a:4b:f1:35:d1:fa:
a8:37:90:ca:e4:5e:c7:8c:19:fa:8d:44:c9:90:53:c3:14:37:
b6:83:23:d7:3b:77:22:cb:c9:2c:2b:88:d4:38:0e:6c:00:6a:
e2:b0:7b:af:4f:57:9c:20:7b:38:ed:e8:11:2c:50:8a:1f:a3:
e4:38:c3:0a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTMwMEYxMTAvBgNVBAUTKERCRUVFQkMyNUE3QTlCOUI2NzVBMDRFMkY0MjFFRkU0
NkVBNzI1MjAwHhcNMjUwMzI5MDA0MDEyWhcNMjUwNDA1MDA0MDEyWjAYMRYwFAYD
VQQDEw02N2U3NDE2Yy03YWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2ZRFEe9MnGMrSoFxcjhnQh9HBd8txQ7g3G4PIPIJc4wclBs9eLP+OWfuYe0X
k6nQcI1up2GSEJJO6NGDJUfyIA5QwRH6mKfw9SEh5IV/AMas8XfJ+LkXhm+bOcU5
b/Nbud7loRm8BgdmAZU4Uqv1NgcTYUNzjkNZlgSIACAWmY3epBDq7zxeVGqrWx1V
uZx6CRM06phFb0oeHRqbvNkv87/BzdDCGv6MWhS1q6voNGMsHUuJcJ2rYpCthxdr
tu7CoVrUlkhx9Xm12jOuzSrFSWwe6tilZdo/p+7Drxq8HZ78SWiPVLkXtHmnn4eJ
nsB7b9TpvLz/dViUlQKOl6/iCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNX/fSv8
ds34t+Sy163DW1QuQehIMB8GA1UdIwQYMBaAFNvu68JaepubZ1oE4vQh7+RupyUg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzAwRi8xQUQ1QUY3NDVE
OTExMUVDOUFGQjhEM0RDNEY5QUUwMi8yLTdyd2xwNm01dG5XZ1RpOUNIdjVHNm5K
U0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzItN3J3bHA2bTV0bldnVGk5Q0h2NUc2bkpTQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MzAwRi8xQUQ1QUY3NDVEOTExMUVDOUFGQjhEM0RDNEY5QUUwMi8yLTdyd2xwNm01
dG5XZ1RpOUNIdjVHNm5KU0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBq4UAbaKEMn59dCvyQmW8vtlnLGRUIqOIYs21knXUJO6dCvsGWE6r2
J/SvDO58JKdzg+yluElNdxzINv2FFPXc+KTSQa3XBkh28s/tqlN51kX3BDJZLwdI
BJntLqFIPdUYMh9bMOhN3ixPmpdo4Rrzr0FqZr9e5BdOltyfczPCXFaFIHuCYfzp
8Z4FnBuRpgh0O94tEyPOZMmAOcDDMPqkQcJrmxUxTMYLg+Dp1MTroY8g1KEHjXBi
37d4C5G9Yml6S/E10fqoN5DK5F7HjBn6jUTJkFPDFDe2gyPXO3ciy8ksK4jUOA5s
AGrisHuvT1ecIHs47egRLFCKH6PkOMMK
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:18:52 2025 by rpki-client