Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.mft
File: zaR-Ch7rUl87Wg-vsvoNuzY7-k0.mft (raw, json)
Hash identifier: jDyRkRpwu+mNBZmwxIPsI1UoR5KWft09v6FbM2B7lnU=
Subject key identifier: 83:A1:D7:2B:67:2D:C5:F9:56:F2:F4:C8:DD:F0:30:A0:C5:95:A2:4B
Authority key identifier: CD:A4:7E:0A:1E:EB:52:5F:3B:5A:0F:AF:B2:FA:0D:BB:36:3B:FA:4D
Certificate issuer: /CN=A91594AE/serialNumber=CDA47E0A1EEB525F3B5A0FAFB2FA0DBB363BFA4D
Certificate serial: 0A7D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.mft
Manifest number: 0A76
Signing time: Thu 30 Jan 2025 19:43:59 +0000
Manifest this update: Thu 30 Jan 2025 19:43:59 +0000
Manifest next update: Thu 06 Feb 2025 19:43:59 +0000
Files and hashes: 1: zaR-Ch7rUl87Wg-vsvoNuzY7-k0.crl (hash: GHRmaJvzVGXyky8EHzV/+RS7PC99RZMc/FeO6C4sFtE=)
2: 38CAF4EC52B911EAACE8041BC4F9AE02.roa (hash: melr0OdWnM49IUzlU41JvKNY+g7F2hByLSoyY38bhQA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2685 (0xa7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91594AE/serialNumber=CDA47E0A1EEB525F3B5A0FAFB2FA0DBB363BFA4D
Validity
Not Before: Jan 30 19:43:59 2025 GMT
Not After : Feb 6 19:43:59 2025 GMT
Subject: CN=679bd67f-7ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d4:8f:7b:00:4c:88:11:db:3c:49:dc:15:aa:
d4:43:0b:76:e2:ef:04:dd:a5:bb:ee:39:a0:4a:4f:
f6:96:2c:83:9d:0d:10:fe:63:1b:b5:5f:1b:8a:2c:
cd:60:57:b5:41:9a:f5:23:1b:11:7d:bb:14:13:f3:
c8:f7:8d:bf:26:83:f9:29:64:85:29:95:94:ec:88:
8b:ad:ed:01:52:5e:39:09:53:a1:1c:9f:4c:8b:29:
ec:d8:bc:f1:88:7d:bb:8c:52:8c:c2:9a:5a:ea:9f:
6f:7a:13:a6:cc:ee:da:3b:d0:32:26:10:a7:2c:05:
7b:ce:88:b8:52:ba:fa:70:d1:eb:50:72:ea:f7:5c:
45:af:07:17:af:e7:7b:39:ca:20:d4:4c:95:84:c8:
91:1c:30:cb:07:0c:64:98:88:d2:a3:57:60:24:56:
42:92:29:c2:1d:33:ed:a9:52:3b:06:5d:d9:90:5e:
86:91:86:a5:26:d0:e8:4e:ae:1e:86:77:f5:3a:17:
07:0e:34:84:46:40:39:fe:f9:57:02:32:d7:06:c5:
78:69:18:a6:b9:0b:7a:77:bc:fd:8d:10:b8:f5:50:
71:eb:13:96:57:b7:f2:1d:31:fc:80:3f:cd:d0:7c:
95:1d:df:11:69:e1:d3:97:af:0f:f6:81:84:03:25:
44:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A1:D7:2B:67:2D:C5:F9:56:F2:F4:C8:DD:F0:30:A0:C5:95:A2:4B
X509v3 Authority Key Identifier:
keyid:CD:A4:7E:0A:1E:EB:52:5F:3B:5A:0F:AF:B2:FA:0D:BB:36:3B:FA:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:2c:ba:e1:5a:b6:b7:ed:87:42:f8:2a:15:a4:06:08:98:e2:
c9:05:88:aa:9f:0c:4f:fc:d7:d3:79:64:1c:ff:00:41:9b:4d:
bd:99:8f:06:39:d5:0d:82:a2:d3:41:25:8f:cd:79:96:42:da:
ee:ed:b8:f6:c2:11:15:60:1b:aa:0e:8f:ba:82:c5:e1:18:1f:
6d:0a:59:18:e6:7d:b8:ae:76:a9:36:17:1e:2b:ca:67:04:4b:
57:e3:2a:d0:82:ec:81:84:2a:4c:e1:6c:24:31:69:16:c0:5a:
e7:69:87:e4:da:f8:be:b9:80:5a:e0:d2:58:62:d4:62:58:d4:
2a:5e:da:35:7e:44:06:ea:53:60:1c:ca:19:c0:88:a0:4e:90:
ca:fe:18:6e:93:50:3b:6a:5a:90:c5:03:5b:27:5b:1b:bc:a9:
88:e3:71:3a:6f:b5:1d:1a:3e:eb:6c:a3:28:a7:6e:0f:40:f7:
1d:b0:9b:59:5b:49:18:7c:e3:ad:c8:6f:33:31:8a:61:c7:af:
a9:47:d6:57:f7:79:98:fe:48:3c:56:ee:11:77:68:74:63:1a:
c9:d7:60:aa:0c:aa:07:ec:a8:1f:ae:69:3a:6b:37:fb:89:42:
d7:fb:ab:b5:9b:c4:0b:a7:ae:78:e6:ae:b4:36:9d:b7:3b:35:
f8:e4:b4:fb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTk0QUUxMTAvBgNVBAUTKENEQTQ3RTBBMUVFQjUyNUYzQjVBMEZBRkIyRkEwREJC
MzYzQkZBNEQwHhcNMjUwMTMwMTk0MzU5WhcNMjUwMjA2MTk0MzU5WjAYMRYwFAYD
VQQDEw02NzliZDY3Zi03ZWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu9SPewBMiBHbPEncFarUQwt24u8E3aW77jmgSk/2liyDnQ0Q/mMbtV8biizN
YFe1QZr1IxsRfbsUE/PI942/JoP5KWSFKZWU7IiLre0BUl45CVOhHJ9Miyns2Lzx
iH27jFKMwppa6p9vehOmzO7aO9AyJhCnLAV7zoi4Urr6cNHrUHLq91xFrwcXr+d7
Ocog1EyVhMiRHDDLBwxkmIjSo1dgJFZCkinCHTPtqVI7Bl3ZkF6GkYalJtDoTq4e
hnf1OhcHDjSERkA5/vlXAjLXBsV4aRimuQt6d7z9jRC49VBx6xOWV7fyHTH8gD/N
0HyVHd8RaeHTl68P9oGEAyVEtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIOh1ytn
LcX5VvL0yN3wMKDFlaJLMB8GA1UdIwQYMBaAFM2kfgoe61JfO1oPr7L6Dbs2O/pN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTRBRS8zRDhCOEM0ODUy
QjUxMUVBQTRBOUQyMEVDNEY5QUUwMi96YVItQ2g3clVsODdXZy12c3ZvTnV6WTct
azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3phUi1DaDdyVWw4N1dnLXZzdm9OdXpZNy1rMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
OTRBRS8zRDhCOEM0ODUyQjUxMUVBQTRBOUQyMEVDNEY5QUUwMi96YVItQ2g3clVs
ODdXZy12c3ZvTnV6WTctazAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCdLLrhWra37YdC+CoVpAYImOLJBYiqnwxP/NfTeWQc/wBBm029mY8G
OdUNgqLTQSWPzXmWQtru7bj2whEVYBuqDo+6gsXhGB9tClkY5n24rnapNhceK8pn
BEtX4yrQguyBhCpM4WwkMWkWwFrnaYfk2vi+uYBa4NJYYtRiWNQqXto1fkQG6lNg
HMoZwIigTpDK/hhuk1A7alqQxQNbJ1sbvKmI43E6b7UdGj7rbKMop24PQPcdsJtZ
W0kYfOOtyG8zMYphx6+pR9ZX93mY/kg8Vu4Rd2h0YxrJ12CqDKoH7Kgfrmk6azf7
iULX+6u1m8QLp6545q60Np23OzX45LT7
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:35:28 2025 by rpki-client