Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft
File: ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft (raw, json)
Hash identifier: Hk59KTNeXBBIthf4DGfbQY9LMyqaLiqzkBJBqrh2WaE=
Subject key identifier: E0:13:B3:DE:84:8B:B3:A2:82:1A:29:83:66:33:A4:D9:C9:1D:41:B9
Authority key identifier: 67:24:BF:40:0F:A6:A4:1C:78:DE:70:31:BF:A4:F9:AF:C8:37:80:CF
Certificate issuer: /CN=A916AFF4/serialNumber=6724BF400FA6A41C78DE7031BFA4F9AFC83780CF
Certificate serial: 5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft
Manifest number: 5B
Signing time: Fri 31 Jan 2025 06:08:13 +0000
Manifest this update: Fri 31 Jan 2025 06:08:13 +0000
Manifest next update: Fri 07 Feb 2025 06:08:13 +0000
Files and hashes: 1: ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl (hash: RmSiJtAevYA0rupRmPDkiiKh3UjWMTgZzfUsOKT4CRQ=)
2: 59B897AE59EE11EFB2872947C4F9AE02.roa (hash: 1pdOgF9NWhDTBBV9RWwEHphdN2HbfeFbB0PL1U6/RqA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916AFF4/serialNumber=6724BF400FA6A41C78DE7031BFA4F9AFC83780CF
Validity
Not Before: Jan 31 06:08:13 2025 GMT
Not After : Feb 7 06:08:13 2025 GMT
Subject: CN=679c68cd-edfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:32:2b:2d:e8:11:a4:01:f8:2b:c2:bf:74:02:
a4:cc:d9:75:ad:ce:e0:ac:55:4f:c1:79:0e:50:7f:
82:72:25:fe:f1:6e:04:5a:df:9b:08:0c:55:1a:3e:
fa:cf:0b:58:38:15:ff:e1:d6:12:f9:c1:53:65:81:
ba:c5:d2:11:6b:8d:e8:44:03:7e:5a:bc:59:ac:52:
6e:b2:e0:97:eb:fe:fb:83:63:ee:50:26:b6:9e:a1:
65:05:8d:58:8a:35:8c:bd:c9:a4:da:e0:cf:07:db:
5a:c5:62:6b:16:c0:df:df:15:8c:0d:ba:97:65:9b:
20:c0:aa:ed:ba:ad:76:d9:71:98:dc:66:da:96:74:
df:6f:2a:6b:b2:36:3e:07:b6:51:b7:3f:08:11:92:
50:ca:89:b6:b6:f4:17:6a:5f:71:01:44:65:e8:6d:
63:c3:1f:66:d0:86:90:02:c0:7c:c1:0b:06:65:37:
11:e2:32:26:c3:47:ad:c1:a8:07:87:9d:98:cc:f7:
12:2a:2b:5d:e2:0d:cc:50:ff:ee:d3:8c:3b:56:1c:
da:b3:f0:1e:4a:6e:3d:fb:00:2e:55:4a:76:13:98:
85:95:d7:3a:60:9b:71:c2:6a:6c:ef:d3:47:75:67:
34:dd:a8:24:a9:27:09:b3:9f:6c:86:07:e8:58:cf:
bc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:13:B3:DE:84:8B:B3:A2:82:1A:29:83:66:33:A4:D9:C9:1D:41:B9
X509v3 Authority Key Identifier:
keyid:67:24:BF:40:0F:A6:A4:1C:78:DE:70:31:BF:A4:F9:AF:C8:37:80:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d7:a7:32:79:35:ec:58:26:98:86:95:92:43:e2:ca:a4:ed:
e7:88:f3:32:cc:56:bb:ea:81:69:1c:76:f2:ea:47:ba:3e:82:
16:cb:63:6e:10:a4:cc:cd:ec:00:31:22:b1:ee:c4:22:d6:fa:
80:32:d4:73:18:50:0d:97:a1:73:51:37:93:ad:dd:1f:e3:8c:
cc:d0:a5:84:9e:58:6f:50:6b:e7:7a:1c:5f:44:09:45:ce:d3:
1d:f2:ab:0e:9d:0b:01:89:20:bb:f1:59:8d:21:ba:c7:9b:b9:
d9:7f:18:ce:03:bc:c1:22:7b:a5:a6:b8:a7:51:ca:d8:a2:85:
17:dc:2e:40:0e:a3:7d:b7:46:20:9c:e3:33:b4:42:0f:4d:0c:
d0:71:7e:c7:3a:65:62:fe:08:99:94:26:b9:06:16:96:2d:de:
05:7b:04:ae:57:a7:9c:be:8e:5e:da:31:01:9d:97:f9:90:91:
20:53:f3:0d:32:6b:2f:7c:62:3c:b7:60:d2:46:7d:7d:45:1e:
f1:51:d2:2d:42:9b:3f:c1:2c:ed:01:d8:70:f4:60:30:82:d9:
3f:a3:3f:54:ff:f0:ac:be:03:6d:00:89:5e:86:74:7c:cd:b1:
f8:2d:2e:0a:4c:75:f0:85:ed:58:40:f5:6b:e5:a1:16:3a:dc:
2f:29:c0:2b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
QUZGNDExMC8GA1UEBRMoNjcyNEJGNDAwRkE2QTQxQzc4REU3MDMxQkZBNEY5QUZD
ODM3ODBDRjAeFw0yNTAxMzEwNjA4MTNaFw0yNTAyMDcwNjA4MTNaMBgxFjAUBgNV
BAMTDTY3OWM2OGNkLWVkZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCsMist6BGkAfgrwr90AqTM2XWtzuCsVU/BeQ5Qf4JyJf7xbgRa35sIDFUaPvrP
C1g4Ff/h1hL5wVNlgbrF0hFrjehEA35avFmsUm6y4Jfr/vuDY+5QJraeoWUFjViK
NYy9yaTa4M8H21rFYmsWwN/fFYwNupdlmyDAqu26rXbZcZjcZtqWdN9vKmuyNj4H
tlG3PwgRklDKiba29BdqX3EBRGXobWPDH2bQhpACwHzBCwZlNxHiMibDR63BqAeH
nZjM9xIqK13iDcxQ/+7TjDtWHNqz8B5Kbj37AC5VSnYTmIWV1zpgm3HCamzv00d1
ZzTdqCSpJwmzn2yGB+hYz7z1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4BOz3oSL
s6KCGimDZjOk2ckdQbkwHwYDVR0jBBgwFoAUZyS/QA+mpBx43nAxv6T5r8g3gM8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZBRkY0LzBFNjIyOEM0NTlF
RTExRUY5MTAyN0I0NkM0RjlBRTAyL1p5U19RQS1tcEJ4NDNuQXh2NlQ1cjhnM2dN
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWnlTX1FBLW1wQng0M25BeHY2VDVyOGczZ004LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZB
RkY0LzBFNjIyOEM0NTlFRTExRUY5MTAyN0I0NkM0RjlBRTAyL1p5U19RQS1tcEJ4
NDNuQXh2NlQ1cjhnM2dNOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAI/XpzJ5NexYJpiGlZJD4sqk7eeI8zLMVrvqgWkcdvLqR7o+ghbLY24Q
pMzN7AAxIrHuxCLW+oAy1HMYUA2XoXNRN5Ot3R/jjMzQpYSeWG9Qa+d6HF9ECUXO
0x3yqw6dCwGJILvxWY0husebudl/GM4DvMEie6WmuKdRytiihRfcLkAOo323RiCc
4zO0Qg9NDNBxfsc6ZWL+CJmUJrkGFpYt3gV7BK5Xp5y+jl7aMQGdl/mQkSBT8w0y
ay98Yjy3YNJGfX1FHvFR0i1Cmz/BLO0B2HD0YDCC2T+jP1T/8Ky+A20AiV6GdHzN
sfgtLgpMdfCF7VhA9WvloRY63C8pwCs=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:41:13 2025 by rpki-client