Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft
File: ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft (raw, json)
Hash identifier: Lx7sW0z6kpP2U096apDguys5hiGIq0IwLMfGdIPDNPc=
Subject key identifier: 50:AF:B1:EC:E3:D8:49:55:7C:17:72:29:A5:D9:CF:30:91:B8:50:8E
Authority key identifier: 65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB
Certificate issuer: /CN=A9157A68/serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB
Certificate serial: 07DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft
Manifest number: 07D0
Signing time: Thu 30 Jan 2025 21:01:55 +0000
Manifest this update: Thu 30 Jan 2025 21:01:54 +0000
Manifest next update: Thu 06 Feb 2025 21:01:54 +0000
Files and hashes: 1: ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl (hash: EvLmLGVlKBBZdyAH9/6aClyIJDc0sYuVuFeO/cJGc7w=)
2: 294CEBA68FDD11EDBC45E84DC4F9AE02.roa (hash: OOAGuEy3dNxhof0DuDCrqOBB7Z16rn3wikl56pkPDKs=)
3: E228BE42DBDB11EA9D395E41C4F9AE02.roa (hash: iklcKY1p6cUV63DgFPNd0VTuCZO3jzabdmCYH2W3rsU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2010 (0x7da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157A68/serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB
Validity
Not Before: Jan 30 21:01:54 2025 GMT
Not After : Feb 6 21:01:54 2025 GMT
Subject: CN=679be8c3-e903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:da:13:cf:03:52:2b:24:64:13:9a:93:7e:27:
e4:b9:51:c1:17:c2:c1:c3:b8:8e:b1:20:7e:3a:7b:
37:0c:a9:30:3b:e6:7e:3b:19:ff:9e:c2:3b:e2:18:
24:89:03:06:4d:3e:c6:d8:b5:d8:12:49:d0:31:60:
d9:59:92:d3:80:3f:6a:60:62:25:58:f4:9d:12:9a:
39:d2:61:c3:f3:28:08:82:03:a7:1b:d6:00:99:9a:
66:2c:cd:8f:59:23:2e:ea:19:00:86:58:45:cb:14:
be:37:10:d3:79:af:19:25:37:51:15:80:1b:91:40:
07:88:d5:3d:f6:a6:eb:26:1e:10:1e:3c:e9:ee:63:
13:2f:f0:26:a6:42:da:4a:87:f3:76:ea:c8:78:72:
bb:a6:9b:76:0e:66:41:ee:e3:f0:99:01:9f:71:52:
ee:46:0e:86:13:ef:81:d9:8f:91:36:ba:4b:16:b3:
e6:e4:17:09:4e:61:0e:86:a8:79:f6:61:33:50:6c:
db:0e:82:e1:af:21:73:7b:c4:67:3a:56:e3:e5:50:
09:9c:17:51:5a:4f:ca:58:b0:4c:dc:7e:ad:bd:3f:
b3:8c:c2:79:99:b8:75:b2:91:dd:cc:39:85:f5:a5:
8c:da:5d:52:72:62:7e:d0:f3:8b:55:ed:17:40:33:
f5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AF:B1:EC:E3:D8:49:55:7C:17:72:29:A5:D9:CF:30:91:B8:50:8E
X509v3 Authority Key Identifier:
keyid:65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:60:7f:e0:c9:16:c1:b2:ba:1f:ab:c4:5c:8c:f1:91:2b:ab:
3e:2c:80:09:d8:48:cc:57:31:63:1c:68:88:2c:ae:3a:03:a1:
1e:46:f2:f9:c1:00:a0:fb:95:62:f3:9b:ad:35:6b:ea:5e:8a:
b8:30:0d:4b:f1:17:be:fc:5d:6e:48:86:64:29:75:c8:b2:48:
5e:99:fe:83:73:8b:90:8a:3d:77:57:12:5d:32:60:c7:c9:40:
02:77:47:0f:ad:5f:d5:ed:8c:a4:6d:04:c6:fc:35:c3:04:0c:
03:d1:dc:67:b8:8e:15:a7:e0:4d:30:33:01:cd:06:07:57:9f:
36:0d:3b:d1:70:30:9c:de:f0:c6:16:52:36:6d:da:64:6a:30:
53:ec:b6:6d:00:69:db:57:63:a7:da:56:09:24:26:ad:42:bd:
1c:a8:78:fc:2d:80:fd:6f:6c:37:8c:a7:ef:83:bc:22:0b:27:
34:c5:9f:0f:01:ee:b5:a5:9a:be:27:ae:bb:f6:4c:53:b2:cc:
87:69:ea:c9:a7:e6:a2:73:ec:cf:23:e4:1b:c0:f1:c2:fa:f2:
f7:de:ab:78:e3:ac:03:cd:f0:4c:8c:d4:15:cd:ba:87:3a:b3:
47:10:aa:af:3a:c2:0d:ef:c4:0d:ea:3e:91:55:98:77:88:ac:
4c:ae:53:4c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdBNjgxMTAvBgNVBAUTKDY1QjdBRDk2NzVCMzgwOUVDRTA0QUYzMDFDMkVCNzAz
N0ZGMDJCQkIwHhcNMjUwMTMwMjEwMTU0WhcNMjUwMjA2MjEwMTU0WjAYMRYwFAYD
VQQDEw02NzliZThjMy1lOTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA79oTzwNSKyRkE5qTfifkuVHBF8LBw7iOsSB+Ons3DKkwO+Z+Oxn/nsI74hgk
iQMGTT7G2LXYEknQMWDZWZLTgD9qYGIlWPSdEpo50mHD8ygIggOnG9YAmZpmLM2P
WSMu6hkAhlhFyxS+NxDTea8ZJTdRFYAbkUAHiNU99qbrJh4QHjzp7mMTL/AmpkLa
SofzdurIeHK7ppt2DmZB7uPwmQGfcVLuRg6GE++B2Y+RNrpLFrPm5BcJTmEOhqh5
9mEzUGzbDoLhryFze8RnOlbj5VAJnBdRWk/KWLBM3H6tvT+zjMJ5mbh1spHdzDmF
9aWM2l1ScmJ+0POLVe0XQDP1RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCvsezj
2ElVfBdyKaXZzzCRuFCOMB8GA1UdIwQYMBaAFGW3rZZ1s4CezgSvMBwutwN/8Cu7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0E2OC80QjM2QjlCOERC
REExMUVBOUE4RDI4NDBDNEY5QUUwMi9aYmV0bG5XemdKN09CSzh3SEM2M0EzX3dL
N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1piZXRsbld6Z0o3T0JLOHdIQzYzQTNfd0s3cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
N0E2OC80QjM2QjlCOERCREExMUVBOUE4RDI4NDBDNEY5QUUwMi9aYmV0bG5XemdK
N09CSzh3SEM2M0EzX3dLN3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCCYH/gyRbBsrofq8RcjPGRK6s+LIAJ2EjMVzFjHGiILK46A6EeRvL5
wQCg+5Vi85utNWvqXoq4MA1L8Re+/F1uSIZkKXXIskhemf6Dc4uQij13VxJdMmDH
yUACd0cPrV/V7YykbQTG/DXDBAwD0dxnuI4Vp+BNMDMBzQYHV582DTvRcDCc3vDG
FlI2bdpkajBT7LZtAGnbV2On2lYJJCatQr0cqHj8LYD9b2w3jKfvg7wiCyc0xZ8P
Ae61pZq+J6679kxTssyHaerJp+aic+zPI+QbwPHC+vL33qt446wDzfBMjNQVzbqH
OrNHEKqvOsIN78QN6j6RVZh3iKxMrlNM
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:48:40 2025 by rpki-client