Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft
File: zpBWtMZd44V9TQ4dsAI9YLb30ww.mft (raw, json)
Hash identifier: ocPBylWRtfAu/MPUTA1wX3yPosDcd5bIV/Y2cquCbR8=
Subject key identifier: C8:28:F7:CF:9E:A1:BD:5A:67:BC:67:80:69:C4:9F:7D:A9:CE:96:4D
Authority key identifier: CE:90:56:B4:C6:5D:E3:85:7D:4D:0E:1D:B0:02:3D:60:B6:F7:D3:0C
Certificate issuer: /CN=A91DD125/serialNumber=CE9056B4C65DE3857D4D0E1DB0023D60B6F7D30C
Certificate serial: 179C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zpBWtMZd44V9TQ4dsAI9YLb30ww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft
Manifest number: 174C
Signing time: Fri 31 Jan 2025 16:37:32 +0000
Manifest this update: Fri 31 Jan 2025 16:37:32 +0000
Manifest next update: Fri 07 Feb 2025 16:37:32 +0000
Files and hashes: 1: zpBWtMZd44V9TQ4dsAI9YLb30ww.crl (hash: 7dN1/ElRwngtGam39zXuV7ocgrHCbGE/CpPHoDa/3CU=)
2: 3F43565CB4A711EFA3D95012C4F9AE02.roa (hash: OELdD8LbVgXXbJX6bTHTOCI+oCTaXDP2euo2Avh/+Rk=)
3: C4C407A6ABFE11EF8BC3AC17C4F9AE02.roa (hash: EhC7Iw3SYEkIxbf/jSCiFbV/awgcX2mr9+KQdTNr1bg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6044 (0x179c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD125/serialNumber=CE9056B4C65DE3857D4D0E1DB0023D60B6F7D30C
Validity
Not Before: Jan 31 16:37:32 2025 GMT
Not After : Feb 7 16:37:32 2025 GMT
Subject: CN=679cfc4c-bcf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:61:fb:16:51:4d:c9:28:86:cc:5a:f6:24:78:
fd:c0:5d:95:2a:5f:f5:f4:47:7c:b8:08:ca:50:00:
b1:c1:0c:86:96:21:eb:76:f2:a4:30:7e:ee:e7:c1:
89:e1:6a:99:42:3e:3d:41:e1:c6:a9:62:de:c8:55:
ab:f8:33:eb:f2:d4:b9:54:d3:e8:3e:43:71:6e:3e:
56:00:c5:ca:0a:32:e7:94:e8:f4:2b:5f:2c:fa:ee:
97:25:59:03:7b:49:4a:26:36:d9:ac:65:c5:ad:e2:
06:f9:fe:36:b7:25:91:f9:50:2a:21:1a:13:83:3b:
29:e8:c6:d0:07:0d:01:80:b7:63:3e:84:69:ec:e9:
67:55:78:bd:10:cd:a9:0d:04:01:23:a8:e9:21:9b:
43:d0:55:c5:4d:d5:83:48:5c:a2:e5:79:de:7f:83:
20:57:04:97:10:71:8c:a2:9d:c9:5c:3f:7d:8f:ba:
e4:23:7d:6a:4b:15:01:0f:d5:8b:e9:63:2d:1b:6b:
02:5b:e4:8a:df:ab:73:d9:fa:fe:b5:52:dd:f5:0e:
2c:67:8f:95:0b:54:72:5d:47:03:77:b7:69:df:ce:
4c:a7:b5:df:f8:09:86:aa:1f:f3:df:3e:a9:3e:2d:
42:ec:b4:9a:18:dc:46:5c:f9:2f:39:85:2d:29:49:
a9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:28:F7:CF:9E:A1:BD:5A:67:BC:67:80:69:C4:9F:7D:A9:CE:96:4D
X509v3 Authority Key Identifier:
keyid:CE:90:56:B4:C6:5D:E3:85:7D:4D:0E:1D:B0:02:3D:60:B6:F7:D3:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zpBWtMZd44V9TQ4dsAI9YLb30ww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:93:9a:8a:5f:5c:39:20:bd:27:e9:86:6c:93:6c:b5:7f:f8:
76:c9:4e:40:3b:39:17:80:b0:5f:37:f1:cd:e7:09:d0:ed:32:
fa:45:e0:64:7d:4d:7a:da:2b:18:2c:aa:20:39:8c:31:f4:20:
56:32:8f:67:c5:22:36:db:16:c4:7f:e4:45:0b:a9:59:aa:50:
1e:ff:21:b4:ee:fa:7c:2f:8c:6e:30:8e:22:29:02:af:b8:df:
6d:5c:a4:da:32:57:67:65:31:b1:5f:58:cc:76:62:82:88:c6:
59:22:6f:fd:d3:95:69:7b:d3:63:6c:15:c7:6d:65:d8:88:55:
a0:e0:4f:26:26:26:06:56:e1:48:7a:6f:a1:90:83:ab:52:b0:
e2:10:c2:ff:c1:87:5f:04:96:3c:3a:b9:c8:5d:4f:a7:ee:1e:
7e:69:7c:cd:df:a5:28:ea:14:02:66:f0:6f:2e:d4:f9:39:ce:
aa:cd:4e:44:f2:3e:84:73:d3:ef:ac:db:ff:d2:00:ee:da:7f:
18:cb:54:ef:43:5a:a5:b8:55:47:03:f7:52:25:c4:a8:26:30:
67:26:87:3e:22:68:f3:41:12:b5:9a:92:fb:da:aa:f9:49:a5:
cb:d5:9e:d2:70:8f:4d:e5:2d:fe:3b:ed:50:2b:cd:ca:ec:8f:
78:f9:c2:00
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICF5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REQxMjUxMTAvBgNVBAUTKENFOTA1NkI0QzY1REUzODU3RDREMEUxREIwMDIzRDYw
QjZGN0QzMEMwHhcNMjUwMTMxMTYzNzMyWhcNMjUwMjA3MTYzNzMyWjAYMRYwFAYD
VQQDEw02NzljZmM0Yy1iY2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzWH7FlFNySiGzFr2JHj9wF2VKl/19Ed8uAjKUACxwQyGliHrdvKkMH7u58GJ
4WqZQj49QeHGqWLeyFWr+DPr8tS5VNPoPkNxbj5WAMXKCjLnlOj0K18s+u6XJVkD
e0lKJjbZrGXFreIG+f42tyWR+VAqIRoTgzsp6MbQBw0BgLdjPoRp7OlnVXi9EM2p
DQQBI6jpIZtD0FXFTdWDSFyi5Xnef4MgVwSXEHGMop3JXD99j7rkI31qSxUBD9WL
6WMtG2sCW+SK36tz2fr+tVLd9Q4sZ4+VC1RyXUcDd7dp385Mp7Xf+AmGqh/z3z6p
Pi1C7LSaGNxGXPkvOYUtKUmp/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMgo98+e
ob1aZ7xngGnEn32pzpZNMB8GA1UdIwQYMBaAFM6QVrTGXeOFfU0OHbACPWC299MM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDEyNS83QTE0MkQwMEQ5
NUUxMUU3ODdBMUE3NjZDNEY5QUUwMi96cEJXdE1aZDQ0VjlUUTRkc0FJOVlMYjMw
d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pwQld0TVpkNDRWOVRRNGRzQUk5WUxiMzB3dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RDEyNS83QTE0MkQwMEQ5NUUxMUU3ODdBMUE3NjZDNEY5QUUwMi96cEJXdE1aZDQ0
VjlUUTRkc0FJOVlMYjMwd3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBSk5qKX1w5IL0n6YZsk2y1f/h2yU5AOzkXgLBfN/HN5wnQ7TL6ReBk
fU162isYLKogOYwx9CBWMo9nxSI22xbEf+RFC6lZqlAe/yG07vp8L4xuMI4iKQKv
uN9tXKTaMldnZTGxX1jMdmKCiMZZIm/905Vpe9NjbBXHbWXYiFWg4E8mJiYGVuFI
em+hkIOrUrDiEML/wYdfBJY8OrnIXU+n7h5+aXzN36Uo6hQCZvBvLtT5Oc6qzU5E
8j6Ec9PvrNv/0gDu2n8Yy1TvQ1qluFVHA/dSJcSoJjBnJoc+ImjzQRK1mpL72qr5
SaXL1Z7ScI9N5S3+O+1QK83K7I94+cIA
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:45:13 2025 by rpki-client