Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91348DF/E6BF830CC1DD11ECB97B9C7FC4F9AE02/EJRq-RG2VUYsGl7wHWhGiOGWh9M.mft
File: EJRq-RG2VUYsGl7wHWhGiOGWh9M.mft (raw, json)
Hash identifier: uwbtms5PgUoo4maKMCk1nlxOFXeR6wbGKGOPT5l0mw4=
Subject key identifier: AB:D5:EA:46:F8:13:D9:EF:F1:4E:E8:F5:90:D9:4B:1A:4F:58:E8:5E
Authority key identifier: 10:94:6A:F9:11:B6:55:46:2C:1A:5E:F0:1D:68:46:88:E1:96:87:D3
Certificate issuer: /CN=A91348DF/serialNumber=10946AF911B655462C1A5EF01D684688E19687D3
Certificate serial: 031D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJRq-RG2VUYsGl7wHWhGiOGWh9M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91348DF/E6BF830CC1DD11ECB97B9C7FC4F9AE02/EJRq-RG2VUYsGl7wHWhGiOGWh9M.mft
Manifest number: 031A
Signing time: Sat 29 Mar 2025 01:24:28 +0000
Manifest this update: Sat 29 Mar 2025 01:24:27 +0000
Manifest next update: Sat 05 Apr 2025 01:24:27 +0000
Files and hashes: 1: EJRq-RG2VUYsGl7wHWhGiOGWh9M.crl (hash: 5kAmo1JPERvGzNWujb3PQemki/8FjfHLenSLE81Kzh0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 797 (0x31d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91348DF, serialNumber=10946AF911B655462C1A5EF01D684688E19687D3
Validity
Not Before: Mar 29 01:24:27 2025 GMT
Not After : Apr 5 01:24:27 2025 GMT
Subject: CN=67e74bcb-7cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:82:97:ec:26:85:b7:46:68:8a:a2:2c:f1:b1:
da:92:bc:d3:83:62:dd:d6:f5:8a:62:9f:14:d1:d6:
65:dc:fa:e3:45:db:f3:3f:45:4f:64:ca:8a:6f:6b:
75:03:6b:e7:3b:21:3d:0d:0c:d9:83:6e:7c:86:d7:
3c:8e:47:a8:47:1d:6b:71:cf:17:c3:c8:54:81:1e:
51:c9:22:96:6d:36:e0:3c:8d:40:63:7c:3c:21:ce:
dc:08:a9:b7:78:a1:61:f8:7c:69:92:14:25:de:77:
cf:52:50:3f:96:07:60:a3:c9:ad:9a:08:81:72:5d:
49:f8:07:3f:b5:6b:7f:e0:d4:2d:41:75:7e:a2:ac:
b7:4a:a6:2b:38:8d:8f:4f:7d:89:f3:71:22:b8:02:
e3:68:ec:a3:8e:0a:b7:56:bf:f3:61:a2:f3:b4:39:
68:18:7f:1d:43:2f:30:7d:76:f0:9c:91:a4:57:48:
e4:30:c4:b0:54:7b:36:b0:e9:9f:aa:a9:30:cd:15:
15:ae:a6:16:e4:2c:b0:52:b2:4c:5e:23:4f:18:61:
b1:92:95:81:58:b5:32:65:3a:56:f3:a1:79:54:05:
08:7e:48:13:c9:0b:a7:82:93:8d:8b:11:a5:85:49:
8a:e5:ae:f9:73:17:59:bf:da:88:7a:59:e2:4a:eb:
b1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D5:EA:46:F8:13:D9:EF:F1:4E:E8:F5:90:D9:4B:1A:4F:58:E8:5E
X509v3 Authority Key Identifier:
keyid:10:94:6A:F9:11:B6:55:46:2C:1A:5E:F0:1D:68:46:88:E1:96:87:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91348DF/E6BF830CC1DD11ECB97B9C7FC4F9AE02/EJRq-RG2VUYsGl7wHWhGiOGWh9M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJRq-RG2VUYsGl7wHWhGiOGWh9M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348DF/E6BF830CC1DD11ECB97B9C7FC4F9AE02/EJRq-RG2VUYsGl7wHWhGiOGWh9M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:89:71:1c:93:79:fc:aa:8a:78:af:4d:0e:ab:db:2c:f6:e5:
0a:7d:6f:43:a5:e3:b8:e5:f2:b0:52:73:b6:3b:8b:5f:78:80:
ad:6d:5e:40:78:a9:c9:8a:5c:b8:dd:14:fe:78:a5:51:0f:f0:
53:a6:54:35:e4:35:a9:c8:6f:16:83:e5:60:7a:a3:04:00:60:
d9:e5:d0:b3:ba:df:f0:e5:6a:f5:71:4e:d0:ab:1a:86:06:c1:
d0:02:f7:00:dc:ba:cc:f5:1e:8f:16:49:bc:16:8e:c9:2a:38:
a3:4e:f0:86:03:76:ac:c8:32:c0:a6:a0:df:a6:da:28:e7:10:
5a:7e:6b:90:9c:26:0d:b5:b8:0c:68:ef:05:a7:6e:dd:42:6f:
3a:3d:bd:aa:52:21:a0:29:b0:3b:7a:a3:c7:8e:2e:6e:b8:10:
7b:5a:67:85:2a:f5:02:db:13:24:81:70:56:29:55:b6:f9:90:
35:35:89:c6:4e:42:22:6e:e4:27:20:41:65:97:f0:6c:d0:8b:
7b:3a:73:5d:98:d7:e4:db:f9:e6:a4:00:13:67:d9:ae:43:d8:
fe:12:a5:c3:01:68:b3:e6:3a:7b:61:3b:dc:0b:c8:90:a8:22:
80:6f:db:9e:b8:fe:3b:71:2c:32:5c:53:40:fe:98:9b:15:dc:
9f:e9:08:f3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQ4REYxMTAvBgNVBAUTKDEwOTQ2QUY5MTFCNjU1NDYyQzFBNUVGMDFENjg0Njg4
RTE5Njg3RDMwHhcNMjUwMzI5MDEyNDI3WhcNMjUwNDA1MDEyNDI3WjAYMRYwFAYD
VQQDEw02N2U3NGJjYi03Y2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApIKX7CaFt0ZoiqIs8bHakrzTg2Ld1vWKYp8U0dZl3PrjRdvzP0VPZMqKb2t1
A2vnOyE9DQzZg258htc8jkeoRx1rcc8Xw8hUgR5RySKWbTbgPI1AY3w8Ic7cCKm3
eKFh+HxpkhQl3nfPUlA/lgdgo8mtmgiBcl1J+Ac/tWt/4NQtQXV+oqy3SqYrOI2P
T32J83EiuALjaOyjjgq3Vr/zYaLztDloGH8dQy8wfXbwnJGkV0jkMMSwVHs2sOmf
qqkwzRUVrqYW5CywUrJMXiNPGGGxkpWBWLUyZTpW86F5VAUIfkgTyQungpONixGl
hUmK5a75cxdZv9qIelniSuux9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKvV6kb4
E9nv8U7o9ZDZSxpPWOheMB8GA1UdIwQYMBaAFBCUavkRtlVGLBpe8B1oRojhlofT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDhERi9FNkJGODMwQ0Mx
REQxMUVDQjk3QjlDN0ZDNEY5QUUwMi9FSlJxLVJHMlZVWXNHbDd3SFdoR2lPR1do
OU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0VKUnEtUkcyVlVZc0dsN3dIV2hHaU9HV2g5TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NDhERi9FNkJGODMwQ0MxREQxMUVDQjk3QjlDN0ZDNEY5QUUwMi9FSlJxLVJHMlZV
WXNHbDd3SFdoR2lPR1doOU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDEiXEck3n8qop4r00Oq9ss9uUKfW9DpeO45fKwUnO2O4tfeICtbV5A
eKnJily43RT+eKVRD/BTplQ15DWpyG8Wg+VgeqMEAGDZ5dCzut/w5Wr1cU7QqxqG
BsHQAvcA3LrM9R6PFkm8Fo7JKjijTvCGA3asyDLApqDfptoo5xBafmuQnCYNtbgM
aO8Fp27dQm86Pb2qUiGgKbA7eqPHji5uuBB7WmeFKvUC2xMkgXBWKVW2+ZA1NYnG
TkIibuQnIEFll/Bs0It7OnNdmNfk2/nmpAATZ9muQ9j+EqXDAWiz5jp7YTvcC8iQ
qCKAb9ueuP47cSwyXFNA/pibFdyf6Qjz
-----END CERTIFICATE-----
Generated at Sun May 11 21:39:16 2025 by rpki-client