Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft
File: _0lSk8tfFeXRS6zC2xBSsuLIJcg.mft (raw, json)
Hash identifier: ZLDBJ8bmt55S58scf4CwvCfiiBJOFlFsC/wlh+nM4VU=
Subject key identifier: 5C:D2:26:6A:73:87:5F:13:63:F5:F6:C1:E1:2C:DA:05:66:78:FB:00
Authority key identifier: FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8
Certificate issuer: /CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8
Certificate serial: 3499
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft
Manifest number: 347F
Signing time: Fri 28 Mar 2025 14:59:40 +0000
Manifest this update: Fri 28 Mar 2025 14:59:40 +0000
Manifest next update: Fri 04 Apr 2025 14:59:40 +0000
Files and hashes: 1: _0lSk8tfFeXRS6zC2xBSsuLIJcg.crl (hash: jZxTt6B4INL5tm710HTMgcWAnzAUXvzjL5UB5ehz5Yk=)
2: 767E7B3CA60211EFBFCDB65FC4F9AE02.roa (hash: sDAVT78GpTIvV3Pk7DGbULa+i4kn7uu7qVMnxNmpH28=)
3: B2306182F3F911EAB9D11D26C4F9AE02.roa (hash: XuAw72l1y8+xZhjG02bLa91Tpql6DxMPw1rT8RJ+tTY=)
4: 0DEF13D4FC1711EC919B6757C4F9AE02.roa (hash: ZplEo/zP0jHGZr0dLBLSTaxCxcoclbSDg8qfGUwBkSQ=)
5: 75906378FC1F11ECAD09AF21C4F9AE02.roa (hash: KUnun5lZEQw4kuW5EOrvbt/fHn0giqX+CGkWFRK4Ts8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13465 (0x3499)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEAA2
Validity
Not Before: Mar 28 14:59:40 2025 GMT
Not After : Apr 4 14:59:40 2025 GMT
Subject: CN=67e6b95c-575d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:41:6b:e0:77:6a:27:17:1c:a7:d6:a5:ef:2e:
48:bf:a0:3b:94:d0:f3:f7:20:15:fc:2a:19:db:94:
ec:1a:0c:f8:14:d4:79:e1:d8:f3:9b:04:23:f8:61:
7d:55:48:eb:99:be:0f:aa:f0:7a:37:8e:02:15:b2:
6b:6f:73:a9:1f:dc:a6:6d:4d:7c:9f:6a:71:83:b7:
87:08:6d:26:aa:6f:ca:3b:95:24:4c:08:83:ca:5a:
3d:47:7c:08:28:ab:ba:c7:7c:6f:b0:17:a5:7c:10:
98:87:ec:f5:79:ce:e3:f3:ba:d6:83:30:2a:48:cc:
9c:a4:19:d6:c7:ab:75:a0:d6:ff:8d:85:21:dd:0b:
b7:67:8b:12:40:5d:dd:61:4f:71:2a:e6:fc:7a:fb:
4e:c7:de:84:e0:a5:1a:10:eb:48:92:b4:69:81:01:
48:18:9e:bf:98:ea:84:1e:27:8d:7e:eb:30:66:0f:
3d:de:91:78:a9:e2:7a:06:bf:89:49:b0:d5:06:2e:
ba:40:97:da:24:c1:64:17:df:44:b3:14:42:fe:13:
eb:77:b1:f9:c1:fc:14:27:f2:b1:4a:ce:8e:55:64:
0a:d3:66:a3:9f:b1:2d:1f:5b:7b:da:7e:a6:de:a4:
b6:63:e8:f0:3b:b9:e0:74:d3:77:34:0f:84:90:49:
ea:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D2:26:6A:73:87:5F:13:63:F5:F6:C1:E1:2C:DA:05:66:78:FB:00
X509v3 Authority Key Identifier:
keyid:FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:71:f4:70:7c:df:e6:a5:ab:47:f1:8c:66:a0:57:c7:88:3e:
6f:8a:a7:ac:e8:5c:a9:40:f2:46:d2:74:56:7d:02:61:58:70:
4b:85:3f:9a:b8:f6:c7:4e:9a:b9:2b:a9:31:8a:1e:d8:9c:2a:
bc:ac:d9:39:cc:c5:09:00:95:56:ce:d6:07:77:e3:9e:cb:15:
eb:46:f3:13:99:d9:a9:da:d6:07:85:51:f6:6a:c0:e5:73:e7:
f6:51:b6:b5:f1:ac:7d:92:4c:2b:a5:af:a8:65:84:11:d5:b5:
2d:aa:b6:6f:a3:15:26:0b:d6:96:9b:d2:1b:66:bb:94:46:ae:
5d:45:4c:80:0b:d9:68:37:f1:d5:73:49:67:98:31:a6:6d:ac:
71:10:be:e3:d1:37:55:99:44:ad:d2:a4:37:fa:9a:ef:0a:af:
fd:78:89:1f:95:55:84:89:6b:4c:a7:c5:dd:ea:0e:b0:0a:46:
f0:e1:ef:c3:7f:06:b0:37:24:7e:d8:aa:02:69:19:3f:64:bf:
15:b3:1d:fb:40:66:0c:39:b2:ba:52:cf:fa:94:9d:be:06:91:
f0:c6:86:b8:04:92:33:60:84:7a:8c:6b:ff:06:4b:ef:42:05:
d5:a9:ed:61:a9:93:17:f8:66:96:98:af:38:27:98:3e:fb:5d:
5a:f0:67:3c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0VBQTIxMTAvBgNVBAUTKEZGNDk1MjkzQ0I1RjE1RTVEMTRCQUNDMkRCMTA1MkIy
RTJDODI1QzgwHhcNMjUwMzI4MTQ1OTQwWhcNMjUwNDA0MTQ1OTQwWjAYMRYwFAYD
VQQDEw02N2U2Yjk1Yy01NzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAukFr4HdqJxccp9al7y5Iv6A7lNDz9yAV/CoZ25TsGgz4FNR54djzmwQj+GF9
VUjrmb4PqvB6N44CFbJrb3OpH9ymbU18n2pxg7eHCG0mqm/KO5UkTAiDylo9R3wI
KKu6x3xvsBelfBCYh+z1ec7j87rWgzAqSMycpBnWx6t1oNb/jYUh3Qu3Z4sSQF3d
YU9xKub8evtOx96E4KUaEOtIkrRpgQFIGJ6/mOqEHieNfuswZg893pF4qeJ6Br+J
SbDVBi66QJfaJMFkF99EsxRC/hPrd7H5wfwUJ/KxSs6OVWQK02ajn7EtH1t72n6m
3qS2Y+jwO7ngdNN3NA+EkEnqnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzSJmpz
h18TY/X2weEs2gVmePsAMB8GA1UdIwQYMBaAFP9JUpPLXxXl0UuswtsQUrLiyCXI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFBMi9EMkFCMjkyQzFE
OTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZlWFJTNnpDMnhCU3N1TElK
Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL18wbFNrOHRmRmVYUlM2ekMyeEJTc3VMSUpjZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RUFBMi9EMkFCMjkyQzFEOTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZl
WFJTNnpDMnhCU3N1TElKY2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCPcfRwfN/mpatH8YxmoFfHiD5viqes6FypQPJG0nRWfQJhWHBLhT+a
uPbHTpq5K6kxih7YnCq8rNk5zMUJAJVWztYHd+OeyxXrRvMTmdmp2tYHhVH2asDl
c+f2Uba18ax9kkwrpa+oZYQR1bUtqrZvoxUmC9aWm9IbZruURq5dRUyAC9loN/HV
c0lnmDGmbaxxEL7j0TdVmUSt0qQ3+prvCq/9eIkflVWEiWtMp8Xd6g6wCkbw4e/D
fwawNyR+2KoCaRk/ZL8Vsx37QGYMObK6Us/6lJ2+BpHwxoa4BJIzYIR6jGv/Bkvv
QgXVqe1hqZMX+GaWmK84J5g++11a8Gc8
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:34:14 2025 by rpki-client