Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
File: c1jmvCkIxoFAvzuKgV9pXcsqiks.mft (raw, json)
Hash identifier: gnV9hf18s2jd+Tf40Fg5Ej+jekb0j4Swl5Ixdhh9u9o=
Subject key identifier: DD:52:67:A4:25:A5:0A:93:14:6B:2B:CB:F4:7C:2A:86:9B:25:FC:2F
Authority key identifier: 73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B
Certificate issuer: /CN=A91BB227/serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B
Certificate serial: 0121
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
Manifest number: 011C
Signing time: Sat 29 Mar 2025 04:12:37 +0000
Manifest this update: Sat 29 Mar 2025 04:12:37 +0000
Manifest next update: Sat 05 Apr 2025 04:12:37 +0000
Files and hashes: 1: c1jmvCkIxoFAvzuKgV9pXcsqiks.crl (hash: SZ7eYM2jg3RfAzjPLjZh+heWs62wQRrA6ol5BOCp5uc=)
2: 71014290D87411EE97234F5CC4F9AE02.roa (hash: UriYheink9mBFpQsL32JX0ce8LUKE4XsmIwp1611QqI=)
3: C01378B2D87411EE85EACB5CC4F9AE02.roa (hash: jh0oO56JyhcPYhu6/Q/RMYfmAkOnoy1yyTgFcYp5ApY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 289 (0x121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB227
Validity
Not Before: Mar 29 04:12:37 2025 GMT
Not After : Apr 5 04:12:37 2025 GMT
Subject: CN=67e77335-6590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:44:34:c2:07:c4:b3:80:8c:46:9a:62:0b:4a:
aa:52:4d:0f:0a:fd:78:59:c6:35:55:c2:a7:8d:c3:
b5:d1:b1:23:e8:28:a6:c4:4a:32:28:a2:a6:f8:48:
b2:4e:e5:af:5a:a7:94:27:64:1e:92:30:d9:8d:cf:
05:9f:5c:49:4d:06:7d:8d:34:42:30:fd:3a:15:d2:
36:fb:52:65:d9:af:7b:c6:2f:36:9e:73:72:49:23:
35:b2:41:19:6c:40:a4:6f:c3:13:5b:49:0a:15:1c:
2c:7f:2f:4c:42:fb:48:9e:5c:5c:0b:38:a3:a0:95:
a7:a7:44:07:4a:ef:0f:41:bd:61:6b:7c:d9:47:c7:
c6:bf:6b:9c:45:aa:a4:33:66:ea:68:6f:21:7c:af:
6d:01:e9:fe:a2:a6:2b:3a:bd:0e:2b:90:28:58:9b:
96:46:7c:fc:40:60:4c:c5:6b:cd:9b:4e:7f:72:cd:
25:06:21:29:23:ce:34:64:7e:45:17:2d:b2:f1:ae:
14:c1:6f:1a:81:38:a3:55:51:2d:80:d0:3f:e3:16:
39:ea:c6:93:84:c6:1b:21:19:10:50:78:89:e6:f3:
93:ac:61:6b:45:5c:d5:8b:b5:db:9b:30:8f:1d:99:
42:80:75:64:ef:a4:9f:15:ce:d9:ab:ee:1a:ac:ed:
53:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:52:67:A4:25:A5:0A:93:14:6B:2B:CB:F4:7C:2A:86:9B:25:FC:2F
X509v3 Authority Key Identifier:
keyid:73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:52:22:85:dc:81:d3:96:9e:09:bf:89:6b:04:70:f2:09:88:
20:33:d8:57:98:24:bc:ce:17:d8:34:87:46:2e:3f:bc:15:4d:
b0:36:d3:89:3e:9d:cc:01:19:fc:e1:bf:f6:e1:c6:6a:60:09:
23:e2:31:2b:c5:ce:98:f0:66:35:63:40:f4:f7:40:53:04:5a:
e4:12:d9:1a:5d:60:f8:19:6d:74:a2:e4:95:28:7c:2b:8e:85:
b4:ba:2c:73:c1:0b:b9:0b:77:ec:af:3b:3d:85:89:d5:a0:0e:
f5:b2:75:aa:85:8b:59:91:bc:c9:f1:db:48:9e:00:d4:ca:1b:
7f:88:6d:56:8c:68:0d:b6:06:25:fe:29:1c:30:ce:92:e6:11:
7a:3a:a5:0f:fc:28:0c:fe:77:36:4b:bc:ae:ff:b6:67:1b:1a:
61:cd:b1:26:fd:c5:e6:53:0a:d6:bc:9e:81:7d:fd:a7:69:d1:
11:d9:06:f2:3e:e5:36:fc:64:51:73:f2:3b:c7:10:05:54:a8:
62:e7:6d:05:7c:93:4c:65:d4:0c:f4:f5:18:09:3e:5e:5a:d0:
42:ad:5c:b3:78:7c:67:25:e6:3e:ba:51:22:d8:89:29:81:56:
00:6d:06:5b:fe:5d:8c:a6:07:21:7e:59:9e:c4:8f:2d:14:13:
3e:d2:6b:65
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkIyMjcxMTAvBgNVBAUTKDczNThFNkJDMjkwOEM2ODE0MEJGM0I4QTgxNUY2OTVE
Q0IyQThBNEIwHhcNMjUwMzI5MDQxMjM3WhcNMjUwNDA1MDQxMjM3WjAYMRYwFAYD
VQQDEw02N2U3NzMzNS02NTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwUQ0wgfEs4CMRppiC0qqUk0PCv14WcY1VcKnjcO10bEj6CimxEoyKKKm+Eiy
TuWvWqeUJ2QekjDZjc8Fn1xJTQZ9jTRCMP06FdI2+1Jl2a97xi82nnNySSM1skEZ
bECkb8MTW0kKFRwsfy9MQvtInlxcCzijoJWnp0QHSu8PQb1ha3zZR8fGv2ucRaqk
M2bqaG8hfK9tAen+oqYrOr0OK5AoWJuWRnz8QGBMxWvNm05/cs0lBiEpI840ZH5F
Fy2y8a4UwW8agTijVVEtgNA/4xY56saThMYbIRkQUHiJ5vOTrGFrRVzVi7XbmzCP
HZlCgHVk76SfFc7Zq+4arO1TqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN1SZ6Ql
pQqTFGsry/R8KoabJfwvMB8GA1UdIwQYMBaAFHNY5rwpCMaBQL87ioFfaV3LKopL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjIyNy9ENUE1NTM5ODVE
MkQxMUVFQTNFMzlGNTdDNEY5QUUwMi9jMWptdkNrSXhvRkF2enVLZ1Y5cFhjc3Fp
a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Mxam12Q2tJeG9GQXZ6dUtnVjlwWGNzcWlrcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QjIyNy9ENUE1NTM5ODVEMkQxMUVFQTNFMzlGNTdDNEY5QUUwMi9jMWptdkNrSXhv
RkF2enVLZ1Y5cFhjc3Fpa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBkUiKF3IHTlp4Jv4lrBHDyCYggM9hXmCS8zhfYNIdGLj+8FU2wNtOJ
Pp3MARn84b/24cZqYAkj4jErxc6Y8GY1Y0D090BTBFrkEtkaXWD4GW10ouSVKHwr
joW0uixzwQu5C3fsrzs9hYnVoA71snWqhYtZkbzJ8dtIngDUyht/iG1WjGgNtgYl
/ikcMM6S5hF6OqUP/CgM/nc2S7yu/7ZnGxphzbEm/cXmUwrWvJ6Bff2nadER2Qby
PuU2/GRRc/I7xxAFVKhi520FfJNMZdQM9PUYCT5eWtBCrVyzeHxnJeY+ulEi2Ikp
gVYAbQZb/l2MpgchflmexI8tFBM+0mtl
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:14:23 2025 by rpki-client