Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft
File: RYSuojlMRtaTTmPtaIfUcm_fehM.mft (raw, json)
Hash identifier: GsJv1+EKZYrCgnxCfmbbkWx+2aqmLtu7ur8EB4fHRFQ=
Subject key identifier: 25:18:72:4B:6A:AE:45:4A:82:CE:A6:22:F9:28:91:E8:6E:E8:5C:44
Authority key identifier: 45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13
Certificate issuer: /CN=A91EAAF5/serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13
Certificate serial: 0427
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft
Manifest number: 0408
Signing time: Sat 29 Mar 2025 00:46:40 +0000
Manifest this update: Sat 29 Mar 2025 00:46:40 +0000
Manifest next update: Sat 05 Apr 2025 00:46:40 +0000
Files and hashes: 1: RYSuojlMRtaTTmPtaIfUcm_fehM.crl (hash: oM6bCdi/QNcP8DSsvYf53OWlVdSyO3WHicdLmG6Z+bU=)
2: BCD8D1DCD22B11EE9443A443C4F9AE02.roa (hash: c6vlUnQWxWwAT8iWt17JqzfF6ipPIApaxLVylf4FJGg=)
3: BC148566D22B11EE9443A443C4F9AE02.roa (hash: +f0SgnVqjTGf0Ix6OCOZmxBPZxff4HtF7xpjcxcn/GE=)
4: 783C88A285FF11EEAFD34A2CC4F9AE02.roa (hash: kTJ8czPgPRYvRUYRTSuFaRzwT5mPZmvDIQm8YSYeRGQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1063 (0x427)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAAF5
Validity
Not Before: Mar 29 00:46:40 2025 GMT
Not After : Apr 5 00:46:40 2025 GMT
Subject: CN=67e742f0-7162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:30:a2:a5:b6:f1:3a:08:69:08:b5:ac:40:e8:
62:06:a6:d3:f2:a7:eb:6b:ad:1b:65:95:dd:74:40:
8c:2d:30:a8:b5:fb:c5:f7:64:d0:f2:94:b8:3b:91:
9d:bc:36:ce:f6:4c:8c:a5:0a:c1:57:3f:78:87:52:
2e:ba:41:ce:d3:26:f1:cd:77:b0:d2:cf:37:0d:69:
9f:99:7d:47:29:aa:3c:7f:32:5f:50:60:ec:d6:73:
ac:2e:66:09:67:f5:da:44:8b:53:5d:9f:6d:b6:49:
52:d3:45:a0:08:a7:b6:fe:7e:9b:72:c6:89:5c:38:
9d:e5:75:20:bb:92:20:c6:eb:f7:df:40:a1:df:a6:
5a:fe:10:62:ec:7b:e4:65:f1:60:0e:38:ac:3f:e2:
58:c4:21:d9:84:71:fe:46:37:71:5e:a5:b5:ad:ee:
a2:ed:9e:40:48:36:5e:b8:0d:82:ac:b5:51:d5:27:
94:2d:73:fd:90:fc:8e:b8:b9:cf:ac:23:3e:ef:db:
21:01:b0:21:b5:44:f8:04:b2:7e:29:e0:65:95:3f:
44:f4:c3:22:14:fd:90:81:f3:01:3d:5f:3a:0b:4b:
b9:e3:0b:d7:4d:b6:71:f0:7c:92:be:99:6f:86:c6:
07:8b:2c:de:82:4d:76:a6:b2:26:16:c0:a6:3a:a8:
56:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:18:72:4B:6A:AE:45:4A:82:CE:A6:22:F9:28:91:E8:6E:E8:5C:44
X509v3 Authority Key Identifier:
keyid:45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:81:26:e6:06:d5:a4:73:17:88:0d:9c:24:1e:f8:85:3f:35:
9f:6b:17:5e:f1:6f:8c:3e:95:bc:26:d6:30:c2:61:6c:39:f8:
ba:fe:8e:3f:8b:cd:c7:ac:e0:e4:9e:02:a9:4f:f4:17:3f:3f:
ed:08:aa:3e:ab:2c:60:b1:7b:bb:6e:9e:b3:91:96:fb:9f:f0:
7d:b1:73:a1:d1:93:11:6c:a0:53:01:db:a7:d3:78:5b:f4:fc:
ff:14:f9:ca:1d:93:e2:60:f6:f4:fd:3f:80:f1:b7:1b:33:fa:
ec:98:9d:34:76:d4:26:e1:0e:af:e8:27:3a:6b:65:60:dc:eb:
c9:3d:6c:02:08:5a:c4:6d:86:10:0c:db:01:a7:b9:23:2f:40:
c6:21:ef:32:1d:ae:01:fa:a3:a1:e4:0c:62:44:c5:be:4d:c0:
c3:5f:8e:39:b7:b5:06:33:56:3b:b2:d3:1d:ed:bb:c6:62:2f:
f4:99:a6:f8:9f:f4:03:6b:24:83:b2:8c:2a:05:6f:12:45:5d:
af:61:0f:da:e9:fc:80:72:40:1c:d3:44:6e:8a:46:6b:ff:28:
06:58:97:ad:3c:e9:6f:37:f0:f8:44:12:d4:bf:b5:eb:d4:d0:
e6:b6:2b:1c:2e:c6:89:68:8c:0e:22:5f:6e:84:e9:ee:1e:b5:
2f:a5:97:c0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUFBRjUxMTAvBgNVBAUTKDQ1ODRBRUEyMzk0QzQ2RDY5MzRFNjNFRDY4ODdENDcy
NkZERjdBMTMwHhcNMjUwMzI5MDA0NjQwWhcNMjUwNDA1MDA0NjQwWjAYMRYwFAYD
VQQDEw02N2U3NDJmMC03MTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvDCipbbxOghpCLWsQOhiBqbT8qfra60bZZXddECMLTCotfvF92TQ8pS4O5Gd
vDbO9kyMpQrBVz94h1IuukHO0ybxzXew0s83DWmfmX1HKao8fzJfUGDs1nOsLmYJ
Z/XaRItTXZ9ttklS00WgCKe2/n6bcsaJXDid5XUgu5Igxuv330Ch36Za/hBi7Hvk
ZfFgDjisP+JYxCHZhHH+RjdxXqW1re6i7Z5ASDZeuA2CrLVR1SeULXP9kPyOuLnP
rCM+79shAbAhtUT4BLJ+KeBllT9E9MMiFP2QgfMBPV86C0u54wvXTbZx8HySvplv
hsYHiyzegk12prImFsCmOqhWvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCUYcktq
rkVKgs6mIvkokehu6FxEMB8GA1UdIwQYMBaAFEWErqI5TEbWk05j7WiH1HJv33oT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUFGNS9FOTlGNTIzQTZF
QzQxMUVDQUZEMjczMzFDNEY5QUUwMi9SWVN1b2psTVJ0YVRUbVB0YUlmVWNtX2Zl
aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JZU3VvamxNUnRhVFRtUHRhSWZVY21fZmVoTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QUFGNS9FOTlGNTIzQTZFQzQxMUVDQUZEMjczMzFDNEY5QUUwMi9SWVN1b2psTVJ0
YVRUbVB0YUlmVWNtX2ZlaE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCCgSbmBtWkcxeIDZwkHviFPzWfaxde8W+MPpW8JtYwwmFsOfi6/o4/
i83HrODkngKpT/QXPz/tCKo+qyxgsXu7bp6zkZb7n/B9sXOh0ZMRbKBTAdun03hb
9Pz/FPnKHZPiYPb0/T+A8bcbM/rsmJ00dtQm4Q6v6Cc6a2Vg3OvJPWwCCFrEbYYQ
DNsBp7kjL0DGIe8yHa4B+qOh5AxiRMW+TcDDX445t7UGM1Y7stMd7bvGYi/0mab4
n/QDaySDsowqBW8SRV2vYQ/a6fyAckAc00RuikZr/ygGWJetPOlvN/D4RBLUv7Xr
1NDmtiscLsaJaIwOIl9uhOnuHrUvpZfA
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:42 2025 by rpki-client