Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft
File: ZeUkJf-EHg40jVL7EXypaQogvlQ.mft (raw, json)
Hash identifier: m3zVeLIf2GpGYeQWST3E5s/RZWRLa0I16Dw2wSbAERw=
Subject key identifier: FC:52:EA:5E:7C:AC:93:65:AA:F5:B3:EE:BE:0A:B9:8D:6A:F0:E6:92
Authority key identifier: 65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54
Certificate issuer: /CN=A91889C2/serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54
Certificate serial: 02B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft
Manifest number: 02AE
Signing time: Fri 31 Jan 2025 01:35:52 +0000
Manifest this update: Fri 31 Jan 2025 01:35:52 +0000
Manifest next update: Fri 07 Feb 2025 01:35:52 +0000
Files and hashes: 1: ZeUkJf-EHg40jVL7EXypaQogvlQ.crl (hash: UzYEgHkE+UuA3t7nlOZhdP63WM+rDKMsoDNBwQg1URg=)
2: 0B014EBA408E11EDA80A5272C4F9AE02.roa (hash: saU/mKblZfuPXjfaCBZNvJjF3cnnkkpxvAWRjd4uqyc=)
3: 0E0E73A8EBFB11ED8184D438C4F9AE02.roa (hash: GOPGKEBm5eskFEYXZyjw1YogofV1M4ZMcIp168cRTSU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 696 (0x2b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91889C2/serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54
Validity
Not Before: Jan 31 01:35:52 2025 GMT
Not After : Feb 7 01:35:52 2025 GMT
Subject: CN=679c28f8-c909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:80:ea:8d:b6:e1:c3:35:f9:2b:07:80:e3:30:
44:b2:2a:0e:77:c4:95:c2:aa:1e:0b:b0:0e:bc:2e:
02:b8:24:2f:f3:31:0c:da:fd:e4:c7:0b:03:29:99:
b7:81:a1:78:9d:a4:0a:f9:d0:08:5a:9e:5c:2f:79:
32:ac:52:46:40:7d:98:62:f4:9a:af:48:8d:42:36:
f6:e4:fc:d8:56:78:44:39:a5:33:cb:db:d5:eb:fd:
b2:d5:16:13:fc:a4:5a:b1:43:4b:f8:cf:c1:66:58:
d3:53:b1:9e:87:04:e9:71:aa:69:47:40:e0:35:35:
e5:07:b3:1e:d8:43:55:9b:f8:24:e7:b6:8e:6d:85:
44:3d:5b:2f:8b:e5:af:e9:be:e0:63:27:2f:15:d9:
13:16:7b:cb:e0:36:f3:81:57:c3:38:54:4b:53:b7:
30:68:b1:9c:1a:bb:f2:1d:94:87:5e:be:49:f3:b3:
52:b6:de:3d:80:4f:8c:58:85:a5:b6:cc:23:35:1c:
07:8c:47:03:ae:c6:af:ab:92:ba:0f:51:0f:93:51:
e7:0d:ba:59:68:aa:da:89:ad:00:ea:63:01:ef:e5:
76:d1:72:11:c2:d8:97:b7:17:2c:8c:1e:ee:ed:6a:
66:e2:32:1a:a9:36:98:a1:89:23:4d:7b:d1:8d:e4:
bb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:52:EA:5E:7C:AC:93:65:AA:F5:B3:EE:BE:0A:B9:8D:6A:F0:E6:92
X509v3 Authority Key Identifier:
keyid:65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:05:7f:b4:af:f2:ad:2f:e6:4f:6a:fb:8c:b2:13:b9:a7:8f:
b5:a9:d8:b7:cd:c0:2c:5c:f7:45:4e:1f:9a:b5:47:d0:bd:80:
69:73:3c:c5:c9:e1:50:da:cc:ca:59:13:a4:e1:82:04:b8:5b:
54:5b:e0:51:77:1c:dc:ce:ec:03:bc:61:02:c8:fd:81:c6:12:
96:a5:cb:a3:97:7e:c4:21:28:a5:47:8b:e4:e7:45:0d:2b:44:
b1:8a:3c:eb:8b:19:64:76:73:2a:2b:83:b7:88:a1:ed:6f:38:
a6:ae:a2:7f:d7:b8:6f:ab:66:17:81:b3:85:3a:50:78:5b:0c:
53:af:ef:78:a9:08:76:9a:d1:63:6e:c8:e3:0f:73:69:43:c6:
3e:9b:ac:7c:be:f4:5a:d3:74:d0:60:3c:4f:5d:4d:db:dc:21:
4a:98:52:fe:db:49:ca:08:db:31:45:db:de:77:79:e7:fd:79:
1d:7f:37:97:1d:71:e1:82:a0:a6:16:12:68:f9:5c:21:8b:52:
2b:d8:8b:66:37:9f:f7:25:ed:d3:8e:0a:b3:4c:09:05:4f:b4:
ad:73:7c:9e:9d:e1:a6:75:45:e2:19:25:8c:ac:b9:29:ab:72:
b0:b5:e4:c0:d3:11:37:79:28:2e:e8:25:f1:fd:d1:5d:07:6a:
4b:e4:32:52
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICArgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODg5QzIxMTAvBgNVBAUTKDY1RTUyNDI1RkY4NDFFMEUzNDhENTJGQjExN0NBOTY5
MEEyMEJFNTQwHhcNMjUwMTMxMDEzNTUyWhcNMjUwMjA3MDEzNTUyWjAYMRYwFAYD
VQQDEw02NzljMjhmOC1jOTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuYDqjbbhwzX5KweA4zBEsioOd8SVwqoeC7AOvC4CuCQv8zEM2v3kxwsDKZm3
gaF4naQK+dAIWp5cL3kyrFJGQH2YYvSar0iNQjb25PzYVnhEOaUzy9vV6/2y1RYT
/KRasUNL+M/BZljTU7GehwTpcappR0DgNTXlB7Me2ENVm/gk57aObYVEPVsvi+Wv
6b7gYycvFdkTFnvL4DbzgVfDOFRLU7cwaLGcGrvyHZSHXr5J87NStt49gE+MWIWl
tswjNRwHjEcDrsavq5K6D1EPk1HnDbpZaKraia0A6mMB7+V20XIRwtiXtxcsjB7u
7Wpm4jIaqTaYoYkjTXvRjeS7ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPxS6l58
rJNlqvWz7r4KuY1q8OaSMB8GA1UdIwQYMBaAFGXlJCX/hB4ONI1S+xF8qWkKIL5U
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlDMi9CRDczNjA0NEUy
MzYxMUVDOEM3Rjg1MjBDNEY5QUUwMi9aZVVrSmYtRUhnNDBqVkw3RVh5cGFRb2d2
bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1plVWtKZi1FSGc0MGpWTDdFWHlwYVFvZ3ZsUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
ODlDMi9CRDczNjA0NEUyMzYxMUVDOEM3Rjg1MjBDNEY5QUUwMi9aZVVrSmYtRUhn
NDBqVkw3RVh5cGFRb2d2bFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAhBX+0r/KtL+ZPavuMshO5p4+1qdi3zcAsXPdFTh+atUfQvYBpczzF
yeFQ2szKWROk4YIEuFtUW+BRdxzczuwDvGECyP2BxhKWpcujl37EISilR4vk50UN
K0SxijzrixlkdnMqK4O3iKHtbzimrqJ/17hvq2YXgbOFOlB4WwxTr+94qQh2mtFj
bsjjD3NpQ8Y+m6x8vvRa03TQYDxPXU3b3CFKmFL+20nKCNsxRdved3nn/XkdfzeX
HXHhgqCmFhJo+Vwhi1Ir2ItmN5/3Je3TjgqzTAkFT7Stc3yeneGmdUXiGSWMrLkp
q3KwteTA0xE3eSgu6CXx/dFdB2pL5DJS
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:44:39 2025 by rpki-client