Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft
File: JfPSFoirk4Gqi5UrziZBKTVCp_I.mft (raw, json)
Hash identifier: n4IOSW5dmf2ftEoOwSdkzHIyftO3ecENgY0A45PmanE=
Subject key identifier: FC:39:F6:1F:19:79:EB:CC:5A:32:03:A7:FC:3A:03:90:48:E2:15:41
Authority key identifier: 25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2
Certificate issuer: /CN=A91DBAF1/serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2
Certificate serial: 0768
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft
Manifest number: 074B
Signing time: Fri 28 Mar 2025 22:01:11 +0000
Manifest this update: Fri 28 Mar 2025 22:01:10 +0000
Manifest next update: Fri 04 Apr 2025 22:01:10 +0000
Files and hashes: 1: JfPSFoirk4Gqi5UrziZBKTVCp_I.crl (hash: x6ROUwwY/fpeM4/ZdJPd9l/l1NXylyGIKylfx5FcJ5w=)
2: 7C76080E08D611EE82522448C4F9AE02.roa (hash: 8+1XQwF+N1uRgo6m/yuRPrxH+AEwqewgbTlOR/yQ1Is=)
3: 27D76814848711EF8CFAA23AC4F9AE02.roa (hash: oBTylAc0/+wG9PO1+l3Ek9c9prat0lyvUmk+iqPxpuA=)
4: 2A67700A9B4411EFA1772153C4F9AE02.roa (hash: zl+C3NthfIT+XlnjBqg1tdgjzR0Zd+EdwBs85D/sIUU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1896 (0x768)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBAF1
Validity
Not Before: Mar 28 22:01:10 2025 GMT
Not After : Apr 4 22:01:10 2025 GMT
Subject: CN=67e71c26-929f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:91:e9:06:b2:bd:ee:df:3d:91:e4:b3:df:2a:
57:07:1d:21:2b:2a:7b:11:18:65:e5:7a:c2:ca:d4:
af:bc:00:55:26:4c:9c:43:78:fc:ea:1a:ff:c5:ef:
56:c7:5e:c5:db:80:bb:13:42:70:6e:bc:59:00:38:
a9:78:2e:3e:04:2d:fb:02:bd:43:cc:4f:67:19:d7:
fe:3c:fd:96:08:4e:1a:fc:bc:8f:b0:de:87:4a:53:
44:3d:ac:0a:61:b2:7f:4d:75:f4:f3:0a:aa:c7:50:
e9:49:67:5b:24:d3:be:ba:7f:72:10:fd:6c:fe:1b:
0f:34:6a:b5:82:6d:3b:55:00:7b:a4:16:d1:a4:ad:
ab:9f:42:7b:87:ce:1c:97:60:23:9b:4c:4b:53:10:
03:fc:98:4c:92:84:7c:7b:39:e3:f5:69:a3:b4:29:
a7:22:43:a7:b8:db:5a:c3:83:51:d2:ef:64:4d:19:
6a:27:a3:26:d8:b8:21:79:be:99:35:6f:fa:0e:3c:
f3:d5:18:99:d4:ee:d9:8d:f4:f1:e1:ac:9b:66:fa:
5b:7c:7d:9f:6d:ee:af:c7:30:ab:b0:83:ad:31:2e:
f2:c5:19:43:c8:25:17:c7:9b:c0:b0:e8:ab:38:92:
12:37:93:8a:4c:bd:7d:0d:b8:9c:7b:0c:b9:ea:50:
b3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:39:F6:1F:19:79:EB:CC:5A:32:03:A7:FC:3A:03:90:48:E2:15:41
X509v3 Authority Key Identifier:
keyid:25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ce:65:b7:d8:e2:e6:19:1e:b1:12:91:8d:73:54:64:c0:d4:bb:
30:79:7e:21:aa:9e:4f:df:2a:96:3e:e1:d3:3f:c0:9a:07:89:
7a:b1:62:bc:1d:fa:18:b0:04:43:20:e2:50:ff:e8:66:2c:b9:
90:be:3b:3f:b6:d9:23:37:71:b6:16:45:ef:76:75:36:ed:db:
b2:20:bb:81:f1:40:3e:1a:e2:b9:29:88:87:12:de:6e:03:23:
90:62:ba:6a:fa:96:f9:f1:6a:84:2f:86:26:9f:2f:26:49:12:
f9:f5:d8:64:31:07:2b:da:8f:88:39:7e:6f:12:ef:2a:38:cc:
4b:75:71:75:47:6c:29:8a:46:ee:5d:e4:8a:ab:b9:a3:3d:25:
53:d2:9f:d6:ac:83:e6:c6:a9:19:8b:52:8b:dd:25:b6:ba:f5:
44:21:f3:85:db:b9:77:9c:ec:92:0c:39:1a:24:e6:67:5c:d5:
ea:41:81:af:e0:7b:0b:fd:92:53:1c:9c:26:a1:10:02:57:7e:
74:fe:89:eb:4f:32:fa:09:f3:94:0b:d7:a2:9f:5c:54:6c:89:
9a:29:ba:24:0d:04:2f:eb:b2:bf:04:c7:7e:77:d1:a1:75:22:
3e:12:71:ec:da:b3:33:a9:f5:1a:c6:a9:77:33:09:3a:6f:26:
0b:00:96:76
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REJBRjExMTAvBgNVBAUTKDI1RjNEMjE2ODhBQjkzODFBQThCOTUyQkNFMjY0MTI5
MzU0MkE3RjIwHhcNMjUwMzI4MjIwMTEwWhcNMjUwNDA0MjIwMTEwWjAYMRYwFAYD
VQQDEw02N2U3MWMyNi05MjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq5HpBrK97t89keSz3ypXBx0hKyp7ERhl5XrCytSvvABVJkycQ3j86hr/xe9W
x17F24C7E0JwbrxZADipeC4+BC37Ar1DzE9nGdf+PP2WCE4a/LyPsN6HSlNEPawK
YbJ/TXX08wqqx1DpSWdbJNO+un9yEP1s/hsPNGq1gm07VQB7pBbRpK2rn0J7h84c
l2Ajm0xLUxAD/JhMkoR8eznj9WmjtCmnIkOnuNtaw4NR0u9kTRlqJ6Mm2Lgheb6Z
NW/6Djzz1RiZ1O7ZjfTx4aybZvpbfH2fbe6vxzCrsIOtMS7yxRlDyCUXx5vAsOir
OJISN5OKTL19Dbicewy56lCz0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPw59h8Z
eevMWjIDp/w6A5BI4hVBMB8GA1UdIwQYMBaAFCXz0haIq5OBqouVK84mQSk1Qqfy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84NkRCMkNDQzI0
OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0R3FpNVVyemlaQktUVkNw
X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0pmUFNGb2lyazRHcWk1VXJ6aVpCS1RWQ3BfSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QkFGMS84NkRCMkNDQzI0OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0
R3FpNVVyemlaQktUVkNwX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDOZbfY4uYZHrESkY1zVGTA1LsweX4hqp5P3yqWPuHTP8CaB4l6sWK8
HfoYsARDIOJQ/+hmLLmQvjs/ttkjN3G2FkXvdnU27duyILuB8UA+GuK5KYiHEt5u
AyOQYrpq+pb58WqEL4Ymny8mSRL59dhkMQcr2o+IOX5vEu8qOMxLdXF1R2wpikbu
XeSKq7mjPSVT0p/WrIPmxqkZi1KL3SW2uvVEIfOF27l3nOySDDkaJOZnXNXqQYGv
4HsL/ZJTHJwmoRACV350/onrTzL6CfOUC9ein1xUbImaKbokDQQv67K/BMd+d9Gh
dSI+EnHs2rMzqfUaxql3Mwk6byYLAJZ2
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:01 2025 by rpki-client