Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft
File: ZmkYZX5BYz4X6shsJrGE26PoHi4.mft (raw, json)
Hash identifier: d95LP/YSTUWzBWeGiEvKqdj+io1JZN90WkPTMfw0Qjs=
Subject key identifier: 7B:56:1B:DC:91:BF:2C:3C:7E:F5:C4:92:4F:BA:A0:35:F1:70:9A:07
Authority key identifier: 66:69:18:65:7E:41:63:3E:17:EA:C8:6C:26:B1:84:DB:A3:E8:1E:2E
Certificate issuer: /CN=A9149907/serialNumber=666918657E41633E17EAC86C26B184DBA3E81E2E
Certificate serial: 02EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft
Manifest number: 02E4
Signing time: Fri 31 Jan 2025 01:25:39 +0000
Manifest this update: Fri 31 Jan 2025 01:25:38 +0000
Manifest next update: Fri 07 Feb 2025 01:25:38 +0000
Files and hashes: 1: ZmkYZX5BYz4X6shsJrGE26PoHi4.crl (hash: WJ0yCQyDI7vCHZwCaMQgcB0p0IjHMihqw9dqsPArYls=)
2: 6EE5FAE4544F11EFA572D230C4F9AE02.roa (hash: nQdK1rGrAZaVn61Rf7mgLuPTTFOBn2cvd3HtJnDtbFM=)
3: 6E4711FE544F11EFA572D230C4F9AE02.roa (hash: SHxodb2YJuOp3jPVIUdHlVxJnzvRTwIkn0lL5MugVgQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 746 (0x2ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149907/serialNumber=666918657E41633E17EAC86C26B184DBA3E81E2E
Validity
Not Before: Jan 31 01:25:38 2025 GMT
Not After : Feb 7 01:25:38 2025 GMT
Subject: CN=679c2692-0456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6d:99:54:bf:68:77:ad:dd:f0:95:a7:c5:3d:
cc:9b:3c:9f:56:0f:66:23:37:94:4d:38:88:11:c7:
dc:ba:a7:57:23:55:60:73:46:fe:c0:6c:0e:1a:ce:
dc:01:51:1a:a9:46:24:40:9f:cd:f9:39:14:56:f0:
f1:72:c7:26:11:7f:1a:a5:6c:39:18:b2:52:2f:9b:
4c:3e:03:d8:a5:41:e5:db:16:94:64:cf:fc:4b:07:
96:5b:f1:e2:89:f1:4a:b9:ab:65:a0:3f:e2:46:b0:
76:7e:4a:65:2d:6a:a4:63:af:40:a8:dc:44:6a:f2:
2b:3c:19:01:b7:4f:88:40:54:27:58:6d:5d:ca:c5:
83:42:3a:99:c5:d0:8c:a3:17:74:78:72:34:7d:d3:
ac:99:04:f4:3d:b6:cc:aa:51:25:be:8d:76:09:66:
5b:8f:12:42:7b:43:c1:96:56:6b:3c:83:b3:e2:64:
91:99:07:d1:1c:cd:70:3f:24:dc:cc:9f:8c:43:f4:
ab:c7:dd:6a:66:c7:de:9a:ef:04:ff:81:39:13:92:
49:f6:77:db:bb:14:64:8f:1c:48:24:3d:50:1a:50:
dd:d1:6a:41:4c:9d:15:91:26:92:77:4c:d7:e4:68:
be:ee:8d:fb:32:6a:86:d8:9f:f0:6f:27:12:da:71:
c7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:56:1B:DC:91:BF:2C:3C:7E:F5:C4:92:4F:BA:A0:35:F1:70:9A:07
X509v3 Authority Key Identifier:
keyid:66:69:18:65:7E:41:63:3E:17:EA:C8:6C:26:B1:84:DB:A3:E8:1E:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:7e:24:cf:2c:37:35:9d:fb:33:b0:95:27:5b:8f:46:94:b4:
0f:1f:17:8b:3c:78:7e:27:6e:7f:9d:9d:c7:2f:84:62:02:df:
4e:7f:2c:3d:9a:e0:89:4a:9a:f1:84:c7:ea:4f:fb:cd:b0:ca:
55:be:bf:9f:b7:99:54:9f:95:1e:55:1e:72:66:f1:84:3a:1e:
c8:13:17:4a:70:08:dd:66:7d:3b:92:cf:bc:cc:40:32:bc:95:
17:0c:25:3d:1c:85:c1:44:23:48:22:2d:7a:5b:86:ee:a9:f1:
a8:88:96:a9:8b:23:ac:c0:88:49:4a:a8:95:73:5b:f2:29:0d:
e4:07:49:ee:d2:cd:c7:8d:48:e7:85:15:a0:51:4d:89:cf:46:
00:5d:fa:f3:94:8f:f9:1e:17:7a:e1:06:42:08:3c:07:13:b5:
22:e8:a2:87:b2:77:9a:16:e5:b8:be:11:64:67:6a:b1:1e:22:
ea:2e:a5:65:d8:0e:31:73:4b:bc:58:8f:6d:40:cd:a6:04:73:
91:83:03:38:e6:90:11:8c:ac:66:7f:ca:81:20:ea:3c:2c:b8:
dc:f2:83:60:a7:bc:d5:fa:c0:9b:e6:e5:e9:e0:b7:36:2d:b2:
9e:23:e1:4e:95:13:67:ce:8c:28:c2:65:e6:f6:7c:2f:ef:7b:
8e:91:5b:c4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDk5MDcxMTAvBgNVBAUTKDY2NjkxODY1N0U0MTYzM0UxN0VBQzg2QzI2QjE4NERC
QTNFODFFMkUwHhcNMjUwMTMxMDEyNTM4WhcNMjUwMjA3MDEyNTM4WjAYMRYwFAYD
VQQDEw02NzljMjY5Mi0wNDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0G2ZVL9od63d8JWnxT3MmzyfVg9mIzeUTTiIEcfcuqdXI1Vgc0b+wGwOGs7c
AVEaqUYkQJ/N+TkUVvDxcscmEX8apWw5GLJSL5tMPgPYpUHl2xaUZM/8SweWW/Hi
ifFKuatloD/iRrB2fkplLWqkY69AqNxEavIrPBkBt0+IQFQnWG1dysWDQjqZxdCM
oxd0eHI0fdOsmQT0PbbMqlElvo12CWZbjxJCe0PBllZrPIOz4mSRmQfRHM1wPyTc
zJ+MQ/Srx91qZsfemu8E/4E5E5JJ9nfbuxRkjxxIJD1QGlDd0WpBTJ0VkSaSd0zX
5Gi+7o37MmqG2J/wbycS2nHHOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHtWG9yR
vyw8fvXEkk+6oDXxcJoHMB8GA1UdIwQYMBaAFGZpGGV+QWM+F+rIbCaxhNuj6B4u
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTkwNy9GNzE0QkRDQUND
MkUxMUVDODIzQkVFMzVDNEY5QUUwMi9abWtZWlg1Qll6NFg2c2hzSnJHRTI2UG9I
aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pta1laWDVCWXo0WDZzaHNKckdFMjZQb0hpNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OTkwNy9GNzE0QkRDQUNDMkUxMUVDODIzQkVFMzVDNEY5QUUwMi9abWtZWlg1Qll6
NFg2c2hzSnJHRTI2UG9IaTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB2fiTPLDc1nfszsJUnW49GlLQPHxeLPHh+J25/nZ3HL4RiAt9Ofyw9
muCJSprxhMfqT/vNsMpVvr+ft5lUn5UeVR5yZvGEOh7IExdKcAjdZn07ks+8zEAy
vJUXDCU9HIXBRCNIIi16W4buqfGoiJapiyOswIhJSqiVc1vyKQ3kB0nu0s3HjUjn
hRWgUU2Jz0YAXfrzlI/5Hhd64QZCCDwHE7Ui6KKHsneaFuW4vhFkZ2qxHiLqLqVl
2A4xc0u8WI9tQM2mBHORgwM45pARjKxmf8qBIOo8LLjc8oNgp7zV+sCb5uXp4Lc2
LbKeI+FOlRNnzowowmXm9nwv73uOkVvE
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:26:42 2025 by rpki-client