Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
File: ZDqJ6ggKrIb4potVEI53sQahQco.mft (raw, json)
Hash identifier: F6rVEQfXtTzdQN7tqFvWMv+7CWDjS6VuHlWrRWVv1S8=
Subject key identifier: 34:26:09:69:E7:D5:81:F0:9C:0D:B8:57:5B:5A:5B:45:7A:2A:8E:C7
Authority key identifier: 64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA
Certificate issuer: /CN=A914237B/serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA
Certificate serial: 0128
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
Manifest number: 0122
Signing time: Fri 31 Jan 2025 03:55:42 +0000
Manifest this update: Fri 31 Jan 2025 03:55:42 +0000
Manifest next update: Fri 07 Feb 2025 03:55:42 +0000
Files and hashes: 1: ZDqJ6ggKrIb4potVEI53sQahQco.crl (hash: I2T64loAZDv/gj24Bw/rJUQOb4+VQdOAm+C+9C4dUSA=)
2: 4950E3D278DD11EE8A6C4021C4F9AE02.roa (hash: Wqf/UZ8rMgVoYOxFa1Ev+jSS/yI2xrRNpsu2d8EWaHI=)
3: CBCF110C7D1F11EF80D0A264C4F9AE02.roa (hash: t8a9sR6oLKMKZpiGzSHI7sTmBpqhkmpTloPWAXRbA2w=)
4: 47620F428FBB11EF8DDB8746C4F9AE02.roa (hash: WjHWHlMw004j7AFf+/V42umH42AnNHW4KVxKLw4YzKY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 296 (0x128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914237B/serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA
Validity
Not Before: Jan 31 03:55:42 2025 GMT
Not After : Feb 7 03:55:42 2025 GMT
Subject: CN=679c49be-52c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f9:3c:65:f3:3c:5e:16:f4:c6:e2:9f:cf:79:
63:07:d6:5d:ea:82:6e:c6:5a:4d:a1:af:77:f8:56:
26:c2:ba:3f:59:1e:e5:58:78:01:98:b0:f1:fa:79:
56:c9:46:6f:02:8f:c4:d7:83:e4:99:18:8d:b3:73:
0a:63:6c:c8:8e:7c:16:d0:bb:f6:f8:0f:7f:04:90:
f1:d7:7c:41:b6:cc:7b:fa:c4:50:d0:1d:81:f9:0a:
70:16:50:96:59:99:cd:39:a8:9e:74:d2:5e:bd:15:
7e:f7:47:ed:e8:32:b2:e0:6a:cb:58:8f:06:d5:1e:
31:ec:ca:31:e9:45:c9:1a:1d:3f:5f:f8:24:82:59:
d7:f1:5b:75:7c:c2:d4:79:d0:82:68:90:35:6c:70:
f5:15:7d:94:bd:69:0d:b2:ae:c1:6b:29:6a:6c:46:
31:c9:e9:ff:10:28:76:83:f5:01:3f:75:d7:b8:30:
04:d4:df:b6:12:1f:30:83:97:5b:6a:56:e9:db:05:
c5:12:2e:13:f1:1b:90:f8:8c:a3:30:c9:c5:d2:4f:
35:04:cd:c6:1e:7e:6a:8b:e3:0e:b3:6c:38:da:f7:
e2:bb:e0:35:4f:ed:a6:bb:83:0d:f4:53:6a:61:9c:
5b:85:e1:fa:aa:5b:a1:af:b6:00:ac:53:07:53:a3:
2a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:26:09:69:E7:D5:81:F0:9C:0D:B8:57:5B:5A:5B:45:7A:2A:8E:C7
X509v3 Authority Key Identifier:
keyid:64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b0:4b:71:32:d4:7e:c4:5c:14:70:01:a2:d3:5d:07:98:75:
4b:89:4a:f4:07:2c:90:86:dc:bd:6d:26:79:6e:3a:52:97:d0:
a0:a7:76:c4:e0:2e:20:a3:fa:21:ec:82:06:e3:db:c0:6c:db:
8b:0a:48:3d:05:e0:8b:de:44:30:46:4f:6d:57:4a:3e:91:44:
25:d7:73:2f:f1:22:e6:a0:25:e9:00:78:d2:f2:81:2d:d0:46:
fe:00:79:34:3e:88:71:bb:2c:65:06:fa:7f:ea:52:6e:18:8e:
ac:52:d4:57:12:8d:f9:98:a1:45:47:49:56:7c:54:8d:ac:a5:
b6:b9:88:b4:61:92:0c:5b:70:56:e6:19:88:37:3b:d5:63:51:
fc:f7:1f:8f:64:bc:bd:ee:1f:3b:12:c5:0c:dc:6c:40:32:36:
8c:fb:97:ac:d4:1d:9d:e3:28:52:45:d9:59:26:ba:59:be:09:
4d:91:39:99:6c:e5:d0:2f:32:cb:e8:e7:b8:e2:dc:50:50:b6:
19:f2:12:48:87:38:71:c2:2c:f1:d7:ef:32:3e:7f:95:1e:1b:
55:01:d4:f5:da:5d:57:c7:de:41:18:92:08:37:7f:65:2a:ac:
54:f9:b8:43:b6:ea:e5:34:42:df:d7:3c:b2:38:26:60:37:c0:
af:ca:cf:8f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDIzN0IxMTAvBgNVBAUTKDY0M0E4OUVBMDgwQUFDODZGOEE2OEI1NTEwOEU3N0Ix
MDZBMTQxQ0EwHhcNMjUwMTMxMDM1NTQyWhcNMjUwMjA3MDM1NTQyWjAYMRYwFAYD
VQQDEw02NzljNDliZS01MmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxPk8ZfM8Xhb0xuKfz3ljB9Zd6oJuxlpNoa93+FYmwro/WR7lWHgBmLDx+nlW
yUZvAo/E14PkmRiNs3MKY2zIjnwW0Lv2+A9/BJDx13xBtsx7+sRQ0B2B+QpwFlCW
WZnNOaiedNJevRV+90ft6DKy4GrLWI8G1R4x7Mox6UXJGh0/X/gkglnX8Vt1fMLU
edCCaJA1bHD1FX2UvWkNsq7BaylqbEYxyen/ECh2g/UBP3XXuDAE1N+2Eh8wg5db
albp2wXFEi4T8RuQ+IyjMMnF0k81BM3GHn5qi+MOs2w42vfiu+A1T+2mu4MN9FNq
YZxbheH6qluhr7YArFMHU6Mq8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQmCWnn
1YHwnA24V1taW0V6Ko7HMB8GA1UdIwQYMBaAFGQ6ieoICqyG+KaLVRCOd7EGoUHK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjM3Qi9BQTg2QjExRTMx
QjAxMUVFOUE1MEQ3NjFDNEY5QUUwMi9aRHFKNmdnS3JJYjRwb3RWRUk1M3NRYWhR
Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pEcUo2Z2dLckliNHBvdFZFSTUzc1FhaFFjby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjM3Qi9BQTg2QjExRTMxQjAxMUVFOUE1MEQ3NjFDNEY5QUUwMi9aRHFKNmdnS3JJ
YjRwb3RWRUk1M3NRYWhRY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQClsEtxMtR+xFwUcAGi010HmHVLiUr0ByyQhty9bSZ5bjpSl9Cgp3bE
4C4go/oh7IIG49vAbNuLCkg9BeCL3kQwRk9tV0o+kUQl13Mv8SLmoCXpAHjS8oEt
0Eb+AHk0PohxuyxlBvp/6lJuGI6sUtRXEo35mKFFR0lWfFSNrKW2uYi0YZIMW3BW
5hmINzvVY1H89x+PZLy97h87EsUM3GxAMjaM+5es1B2d4yhSRdlZJrpZvglNkTmZ
bOXQLzLL6Oe44txQULYZ8hJIhzhxwizx1+8yPn+VHhtVAdT12l1Xx95BGJIIN39l
KqxU+bhDturlNELf1zyyOCZgN8Cvys+P
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:33:48 2025 by rpki-client