Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft
File: zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft (raw, json)
Hash identifier: 5AosodX9dwJ1pzm+4BP/SK2/Rq+b/RT0FcZ0hLy2CAA=
Subject key identifier: E5:6F:97:63:7E:33:13:AD:29:92:09:1A:4F:C8:55:40:22:4E:33:73
Authority key identifier: CD:A0:3F:65:F4:D3:3A:33:99:69:97:3F:6A:9B:D0:7D:AF:9E:37:24
Certificate issuer: /CN=A9154D26/serialNumber=CDA03F65F4D33A339969973F6A9BD07DAF9E3724
Certificate serial: 0456
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft
Manifest number: 044A
Signing time: Fri 31 Jan 2025 00:18:39 +0000
Manifest this update: Fri 31 Jan 2025 00:18:38 +0000
Manifest next update: Fri 07 Feb 2025 00:18:38 +0000
Files and hashes: 1: zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl (hash: 7VjYNorpdftIi6Z09X5qFznIan9XbsrUkBiqw9RfhNU=)
2: AA5485827F3611ECBED94963C4F9AE02.roa (hash: 6fC5uJsYuT7amsDta892a0EU/d7pcupqa3A43Hhp7pY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1110 (0x456)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154D26/serialNumber=CDA03F65F4D33A339969973F6A9BD07DAF9E3724
Validity
Not Before: Jan 31 00:18:38 2025 GMT
Not After : Feb 7 00:18:38 2025 GMT
Subject: CN=679c16df-9938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:d1:ea:85:c1:97:8e:ba:35:56:36:81:29:
f7:fa:82:5a:e7:96:10:aa:4d:28:0e:ea:b6:7d:12:
58:10:21:26:0d:20:9d:ca:a7:44:77:8a:f5:cc:3d:
44:96:9b:f2:56:bf:da:2f:b4:d1:29:7f:78:d7:c6:
1e:77:96:69:fe:76:b7:48:58:e1:61:aa:a1:47:2c:
cb:b6:cc:1e:2d:d9:ca:e6:2d:07:3d:c6:1e:5e:54:
b6:27:1e:d7:74:92:01:f2:44:53:f2:14:fe:41:f1:
4e:25:ad:af:58:67:02:51:57:11:de:d3:82:0d:88:
78:10:93:fc:d4:b9:dd:16:53:0a:33:e5:c8:a3:64:
d3:0b:87:3f:9a:ed:2a:77:ae:fe:b9:28:19:61:29:
f8:0e:e5:39:e1:94:34:70:dd:58:43:1b:43:8f:ec:
1f:70:83:ab:06:b6:47:57:cb:f0:e5:2e:16:0b:4d:
6a:83:90:1f:38:21:3e:8a:82:dd:1e:a3:5a:ab:cc:
13:4d:d0:2d:7d:f2:27:90:a4:b9:c8:10:d0:fd:73:
6a:29:aa:6a:6d:da:30:f2:2c:ce:a6:13:4b:30:86:
a5:88:9e:c5:34:60:d7:37:25:c8:90:5f:85:e8:1c:
5c:87:a9:66:aa:17:98:a2:12:3b:c0:29:91:f2:df:
14:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6F:97:63:7E:33:13:AD:29:92:09:1A:4F:C8:55:40:22:4E:33:73
X509v3 Authority Key Identifier:
keyid:CD:A0:3F:65:F4:D3:3A:33:99:69:97:3F:6A:9B:D0:7D:AF:9E:37:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:f2:3c:2d:02:f9:a1:b8:d5:43:f4:2c:0d:72:d3:de:43:77:
3e:9d:0a:b5:e3:5c:a1:34:d0:80:cd:0b:ba:28:8f:af:e4:f1:
cc:26:fa:53:64:29:3f:0a:b0:1f:6d:2a:0a:0c:12:1d:ab:3a:
62:4a:4d:74:91:f5:3c:8c:82:7f:bc:37:ab:2f:d8:27:97:37:
c1:e0:6f:bd:52:75:e2:98:b2:69:30:19:fc:7c:60:3c:98:67:
4f:46:f4:38:9e:4a:6a:52:26:b2:58:59:d9:29:71:b4:8f:02:
94:fc:5e:14:bf:5a:d7:07:29:df:22:29:5e:e8:9f:e2:b7:94:
f3:94:24:0b:f5:50:c3:1b:1a:7a:94:67:02:5f:4e:54:15:62:
6a:a8:4f:91:ad:bd:7c:eb:25:51:2f:69:25:6d:33:36:fd:21:
df:67:34:e6:27:5a:5f:6d:0d:8f:28:6f:a7:36:ab:82:d6:70:
78:cd:6d:4f:e0:25:68:72:a6:d3:d0:d2:a1:52:0b:3f:22:d9:
13:16:a8:c3:b2:73:07:35:f1:ec:ac:78:a9:ba:0c:56:9c:bb:
5b:ae:67:f9:42:14:3f:dc:eb:17:71:fc:b1:54:e5:e8:d0:6d:
d7:5a:fd:67:18:d6:56:b5:0d:eb:50:9a:c1:6f:cb:5e:18:f2:
4b:86:1c:ae
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTREMjYxMTAvBgNVBAUTKENEQTAzRjY1RjREMzNBMzM5OTY5OTczRjZBOUJEMDdE
QUY5RTM3MjQwHhcNMjUwMTMxMDAxODM4WhcNMjUwMjA3MDAxODM4WjAYMRYwFAYD
VQQDEw02NzljMTZkZi05OTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuvHR6oXBl466NVY2gSn3+oJa55YQqk0oDuq2fRJYECEmDSCdyqdEd4r1zD1E
lpvyVr/aL7TRKX9418Yed5Zp/na3SFjhYaqhRyzLtsweLdnK5i0HPcYeXlS2Jx7X
dJIB8kRT8hT+QfFOJa2vWGcCUVcR3tOCDYh4EJP81LndFlMKM+XIo2TTC4c/mu0q
d67+uSgZYSn4DuU54ZQ0cN1YQxtDj+wfcIOrBrZHV8vw5S4WC01qg5AfOCE+ioLd
HqNaq8wTTdAtffInkKS5yBDQ/XNqKapqbdow8izOphNLMIaliJ7FNGDXNyXIkF+F
6Bxch6lmqheYohI7wCmR8t8U7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVvl2N+
MxOtKZIJGk/IVUAiTjNzMB8GA1UdIwQYMBaAFM2gP2X00zozmWmXP2qb0H2vnjck
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEQyNi9DMDBEOTcyNjQx
M0IxMUVDQjA2QUUwMzBDNEY5QUUwMi96YUFfWmZUVE9qT1phWmNfYXB2UWZhLWVO
eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3phQV9aZlRUT2pPWmFaY19hcHZRZmEtZU55US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NEQyNi9DMDBEOTcyNjQxM0IxMUVDQjA2QUUwMzBDNEY5QUUwMi96YUFfWmZUVE9q
T1phWmNfYXB2UWZhLWVOeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAi8jwtAvmhuNVD9CwNctPeQ3c+nQq141yhNNCAzQu6KI+v5PHMJvpT
ZCk/CrAfbSoKDBIdqzpiSk10kfU8jIJ/vDerL9gnlzfB4G+9UnXimLJpMBn8fGA8
mGdPRvQ4nkpqUiayWFnZKXG0jwKU/F4Uv1rXBynfIile6J/it5TzlCQL9VDDGxp6
lGcCX05UFWJqqE+Rrb186yVRL2klbTM2/SHfZzTmJ1pfbQ2PKG+nNquC1nB4zW1P
4CVocqbT0NKhUgs/ItkTFqjDsnMHNfHsrHipugxWnLtbrmf5QhQ/3OsXcfyxVOXo
0G3XWv1nGNZWtQ3rUJrBb8teGPJLhhyu
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:56:47 2025 by rpki-client