Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft
File: ZTiBnzv0kyyggsFGry_qy--HjLg.mft (raw, json)
Hash identifier: M8ezAyE89gl7XGmtY3X35b+Oc705HOm1AKmGaWZN8ss=
Subject key identifier: 52:FD:8F:26:2F:A5:30:C1:F3:C4:F5:49:C2:61:78:C5:CF:AE:E3:21
Authority key identifier: 65:38:81:9F:3B:F4:93:2C:A0:82:C1:46:AF:2F:EA:CB:EF:87:8C:B8
Certificate issuer: /CN=A918134E/serialNumber=6538819F3BF4932CA082C146AF2FEACBEF878CB8
Certificate serial: C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZTiBnzv0kyyggsFGry_qy--HjLg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft
Manifest number: C2
Signing time: Fri 31 Jan 2025 05:00:19 +0000
Manifest this update: Fri 31 Jan 2025 05:00:18 +0000
Manifest next update: Fri 07 Feb 2025 05:00:18 +0000
Files and hashes: 1: ZTiBnzv0kyyggsFGry_qy--HjLg.crl (hash: bYDcR0VnZAICz3HnKBn8ij7PxGa1AUk7ejAo7JFJr+s=)
2: F8672B3EBB5D11EEB6706D74C4F9AE02.roa (hash: swMzWxPUqu2w8enIQOaAGC2JS9Sa03i552bDyyqge7k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918134E/serialNumber=6538819F3BF4932CA082C146AF2FEACBEF878CB8
Validity
Not Before: Jan 31 05:00:18 2025 GMT
Not After : Feb 7 05:00:18 2025 GMT
Subject: CN=679c58e3-acab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:30:d3:be:f5:93:5b:ce:31:3a:5a:a7:83:89:
a5:5a:07:1c:c5:41:49:83:ec:1f:5a:99:b8:87:7a:
9e:8d:02:7f:2f:51:12:e7:1c:62:18:9f:9f:53:a8:
f9:63:09:fc:76:17:ad:22:e1:ac:67:2d:25:93:67:
f8:20:7b:49:15:8e:92:9e:2f:10:fa:26:08:d1:cd:
db:a3:c8:b2:be:55:14:25:7a:fe:d2:e6:3f:a8:20:
d2:a5:46:b6:61:4b:2c:34:9e:73:d8:f4:b3:67:d9:
af:50:5c:64:4a:0b:00:60:e3:9a:9f:a1:a8:95:c0:
b4:02:a6:28:4c:d7:d7:26:7a:7e:4d:be:ad:30:ef:
cf:03:9c:2f:4a:f1:67:4f:0e:dd:37:96:99:43:2b:
08:0b:b1:4f:7e:85:00:a9:b8:ab:ae:7b:6b:97:e8:
7c:ef:53:2f:34:19:54:68:9a:83:d3:99:3f:a4:45:
d5:65:4b:7e:59:75:ad:d2:63:68:4f:0e:c7:fe:d7:
00:7f:ec:14:fb:ce:61:d1:9e:a9:3c:de:cd:0e:e4:
6e:e7:91:44:40:fd:76:d4:15:02:98:1f:eb:c2:d6:
97:d4:6b:48:f7:f4:7f:a9:e9:37:c4:9e:95:a8:bc:
3c:54:6c:fd:bf:54:4b:0e:0d:0c:dc:f7:db:a8:28:
1d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FD:8F:26:2F:A5:30:C1:F3:C4:F5:49:C2:61:78:C5:CF:AE:E3:21
X509v3 Authority Key Identifier:
keyid:65:38:81:9F:3B:F4:93:2C:A0:82:C1:46:AF:2F:EA:CB:EF:87:8C:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZTiBnzv0kyyggsFGry_qy--HjLg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:5a:82:e7:bc:65:a1:b4:d4:03:27:77:56:9f:af:9c:32:a8:
5d:79:20:4e:b7:5e:59:47:bc:24:5f:df:17:e9:ba:d3:cc:cc:
70:b8:da:c5:39:e6:b6:da:48:7c:82:d4:6c:4e:89:d2:03:df:
4a:2a:5e:e1:5c:ec:90:06:b0:f4:70:c4:80:51:e8:47:03:ba:
ba:b2:94:b6:2f:15:5c:84:20:b9:89:0e:cf:e1:7d:d5:70:1e:
d1:ef:be:a1:91:1b:f8:c5:5c:01:cd:a1:c2:c3:14:b1:5e:48:
68:39:a9:e9:21:ee:da:bf:7f:8f:39:4d:0a:ba:d6:e7:6d:8a:
27:62:41:b1:7b:67:9c:28:23:ee:70:b3:67:65:ae:b0:d5:5e:
82:f4:f8:27:7d:1c:ec:a3:7e:0a:ce:42:24:26:7c:55:d2:78:
a0:f9:0e:e0:8a:ee:56:3f:17:72:0d:0c:23:4e:c8:5c:93:19:
3e:67:95:a8:e8:3e:de:58:80:c4:45:52:53:f2:4a:36:89:31:
be:b6:be:dd:45:6d:cc:82:d4:a4:11:99:1d:7b:0c:3c:bf:35:
58:05:68:03:e0:1a:2c:56:2f:cd:52:6d:15:87:a8:60:61:68:
72:ea:24:7d:2d:20:b1:df:b5:9a:dc:13:01:7c:ac:82:46:dc:
07:8b:a3:6d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODEzNEUxMTAvBgNVBAUTKDY1Mzg4MTlGM0JGNDkzMkNBMDgyQzE0NkFGMkZFQUNC
RUY4NzhDQjgwHhcNMjUwMTMxMDUwMDE4WhcNMjUwMjA3MDUwMDE4WjAYMRYwFAYD
VQQDEw02NzljNThlMy1hY2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAszDTvvWTW84xOlqng4mlWgccxUFJg+wfWpm4h3qejQJ/L1ES5xxiGJ+fU6j5
Ywn8dhetIuGsZy0lk2f4IHtJFY6Sni8Q+iYI0c3bo8iyvlUUJXr+0uY/qCDSpUa2
YUssNJ5z2PSzZ9mvUFxkSgsAYOOan6GolcC0AqYoTNfXJnp+Tb6tMO/PA5wvSvFn
Tw7dN5aZQysIC7FPfoUAqbirrntrl+h871MvNBlUaJqD05k/pEXVZUt+WXWt0mNo
Tw7H/tcAf+wU+85h0Z6pPN7NDuRu55FEQP121BUCmB/rwtaX1GtI9/R/qek3xJ6V
qLw8VGz9v1RLDg0M3PfbqCgdlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFL9jyYv
pTDB88T1ScJheMXPruMhMB8GA1UdIwQYMBaAFGU4gZ879JMsoILBRq8v6svvh4y4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTM0RS8yQkZGMTQxMkJC
NUQxMUVFODMzMDIwNzNDNEY5QUUwMi9aVGlCbnp2MGt5eWdnc0ZHcnlfcXktLUhq
TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pUaUJuenYwa3l5Z2dzRkdyeV9xeS0tSGpMZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MTM0RS8yQkZGMTQxMkJCNUQxMUVFODMzMDIwNzNDNEY5QUUwMi9aVGlCbnp2MGt5
eWdnc0ZHcnlfcXktLUhqTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAIWoLnvGWhtNQDJ3dWn6+cMqhdeSBOt15ZR7wkX98X6brTzMxwuNrF
Oea22kh8gtRsTonSA99KKl7hXOyQBrD0cMSAUehHA7q6spS2LxVchCC5iQ7P4X3V
cB7R776hkRv4xVwBzaHCwxSxXkhoOanpIe7av3+POU0KutbnbYonYkGxe2ecKCPu
cLNnZa6w1V6C9PgnfRzso34KzkIkJnxV0nig+Q7giu5WPxdyDQwjTshckxk+Z5Wo
6D7eWIDERVJT8ko2iTG+tr7dRW3MgtSkEZkdeww8vzVYBWgD4BosVi/NUm0Vh6hg
YWhy6iR9LSCx37Wa3BMBfKyCRtwHi6Nt
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:44:28 2025 by rpki-client