Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft
File: ztCtuZ-AP0QfUNzLg87nIHbcMog.mft (raw, json)
Hash identifier: 6uD9xQmsABpQM4kh1BLDa6V9xvo85DVNqCYY3d9I7J4=
Subject key identifier: 8C:CE:DA:83:C3:9E:20:A1:05:CB:52:EA:23:6C:2D:5A:F4:4D:70:B8
Authority key identifier: CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88
Certificate issuer: /CN=A9158D5B/serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288
Certificate serial: 6C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft
Manifest number: 69
Signing time: Fri 31 Jan 2025 06:02:55 +0000
Manifest this update: Fri 31 Jan 2025 06:02:55 +0000
Manifest next update: Fri 07 Feb 2025 06:02:55 +0000
Files and hashes: 1: ztCtuZ-AP0QfUNzLg87nIHbcMog.crl (hash: tR2VAto5piBMMpAkok/QcPfo/8RYSRlS7n2tqMaYhtw=)
2: 1B2031C645B911EFB15BD970C4F9AE02.roa (hash: fy81kcQtJyhVO+fvODwc2WOxwPZRecsJs8C7sFTUZrw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158D5B/serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288
Validity
Not Before: Jan 31 06:02:55 2025 GMT
Not After : Feb 7 06:02:55 2025 GMT
Subject: CN=679c678f-707d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a1:9e:ce:25:fe:b9:75:f9:11:19:85:2e:50:
a9:e8:60:30:cb:73:53:b9:09:fa:ca:6e:27:4d:fa:
3a:71:f5:58:22:d7:74:e5:23:45:dd:1c:18:a7:c2:
59:ae:21:ec:05:e1:d6:3d:f9:b9:dd:f5:df:57:a4:
63:55:39:26:a9:36:04:fa:b8:06:22:04:35:55:9c:
0f:9a:7a:04:f6:35:f4:65:90:9a:fb:11:35:30:d7:
ee:aa:5f:96:96:f3:ea:fa:bc:df:10:48:03:5a:1e:
07:a0:4f:37:bf:e4:ce:f4:d9:99:00:09:2f:a2:7b:
62:96:72:37:67:e5:87:e8:79:89:d3:e0:f7:06:0f:
cf:13:b4:07:a3:98:b7:90:7f:64:bb:e3:35:35:14:
06:61:8f:88:50:7a:03:5a:79:c7:3d:d1:e8:9a:fa:
1d:f0:b9:73:c7:29:e1:c8:84:10:e2:74:60:46:0b:
c8:ef:34:f4:04:b5:98:2c:f5:8f:60:dc:0e:db:f6:
af:1e:01:c4:65:20:32:76:35:6f:c8:cb:8c:ab:dc:
bf:59:fe:e0:4c:f8:c9:42:3f:96:ec:b4:89:ad:de:
ee:6f:ea:69:3c:a2:d9:7c:78:bc:a5:7d:2d:81:8a:
f0:cd:b3:af:b1:fe:55:06:fa:d2:0b:15:5a:4e:ca:
72:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CE:DA:83:C3:9E:20:A1:05:CB:52:EA:23:6C:2D:5A:F4:4D:70:B8
X509v3 Authority Key Identifier:
keyid:CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:63:67:61:72:99:45:13:0f:e4:d6:34:7a:1d:55:4d:38:f0:
39:29:a4:12:ac:b1:21:77:a1:bd:d1:d8:a3:1c:d7:cd:7b:a1:
83:3a:09:55:22:79:0f:b0:7e:2f:5a:2a:28:08:7a:44:d0:2d:
4c:5c:ff:a8:f5:5c:fd:7c:55:e6:2a:e5:75:de:64:26:ed:cc:
07:aa:80:be:d5:8f:ae:b3:30:4b:da:7b:cc:4e:16:27:6b:41:
15:39:b5:58:a1:34:d9:3a:04:ab:2b:71:8c:52:38:7f:db:97:
f2:52:8c:f5:75:7a:73:ab:d9:7a:b5:4f:7a:69:b8:24:90:64:
bd:7a:dc:4e:00:f3:13:95:ca:10:82:f6:04:1f:76:18:90:94:
bf:56:fb:e5:91:f5:22:1a:80:6f:0f:20:2b:f8:d1:62:f1:59:
b5:80:ae:02:78:af:5d:d1:68:01:f8:d4:e7:4c:bc:3c:fc:c7:
b8:6b:62:cc:8f:d6:fc:79:e0:4f:7e:80:d6:97:e7:d4:81:32:
18:20:01:40:3b:02:91:25:58:66:23:3d:b9:77:81:14:13:11:
5a:60:7f:3a:41:fd:6d:53:05:ce:df:1e:a2:cf:4f:b1:5b:0f:
36:1e:f1:f6:9a:1d:45:b5:96:90:69:fd:1d:9c:35:68:53:5e:
c6:f6:fa:b3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
OEQ1QjExMC8GA1UEBRMoQ0VEMEFEQjk5RjgwM0Y0NDFGNTBEQ0NCODNDRUU3MjA3
NkRDMzI4ODAeFw0yNTAxMzEwNjAyNTVaFw0yNTAyMDcwNjAyNTVaMBgxFjAUBgNV
BAMTDTY3OWM2NzhmLTcwN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDJoZ7OJf65dfkRGYUuUKnoYDDLc1O5CfrKbidN+jpx9Vgi13TlI0XdHBinwlmu
IewF4dY9+bnd9d9XpGNVOSapNgT6uAYiBDVVnA+aegT2NfRlkJr7ETUw1+6qX5aW
8+r6vN8QSANaHgegTze/5M702ZkACS+ie2KWcjdn5YfoeYnT4PcGD88TtAejmLeQ
f2S74zU1FAZhj4hQegNaecc90eia+h3wuXPHKeHIhBDidGBGC8jvNPQEtZgs9Y9g
3A7b9q8eAcRlIDJ2NW/Iy4yr3L9Z/uBM+MlCP5bstImt3u5v6mk8otl8eLylfS2B
ivDNs6+x/lUG+tILFVpOynKBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjM7ag8Oe
IKEFy1LqI2wtWvRNcLgwHwYDVR0jBBgwFoAUztCtuZ+AP0QfUNzLg87nIHbcMogw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4RDVCLzdDQzhGMTlFNDVC
NzExRUZBNkRGRDAzMkM0RjlBRTAyL3p0Q3R1Wi1BUDBRZlVOekxnODduSUhiY01v
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvenRDdHVaLUFQMFFmVU56TGc4N25JSGJjTW9nLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4
RDVCLzdDQzhGMTlFNDVCNzExRUZBNkRGRDAzMkM0RjlBRTAyL3p0Q3R1Wi1BUDBR
ZlVOekxnODduSUhiY01vZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJ9jZ2FymUUTD+TWNHodVU048DkppBKssSF3ob3R2KMc1817oYM6CVUi
eQ+wfi9aKigIekTQLUxc/6j1XP18VeYq5XXeZCbtzAeqgL7Vj66zMEvae8xOFidr
QRU5tVihNNk6BKsrcYxSOH/bl/JSjPV1enOr2Xq1T3ppuCSQZL163E4A8xOVyhCC
9gQfdhiQlL9W++WR9SIagG8PICv40WLxWbWArgJ4r13RaAH41OdMvDz8x7hrYsyP
1vx54E9+gNaX59SBMhggAUA7ApElWGYjPbl3gRQTEVpgfzpB/W1TBc7fHqLPT7Fb
DzYe8faaHUW1lpBp/R2cNWhTXsb2+rM=
-----END CERTIFICATE-----
Generated at Tue Apr 29 18:11:41 2025 by rpki-client