Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft
File: ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft (raw, json)
Hash identifier: nCgU8jxJWcimubHseWujhhQ3LTqe48lQxxiFcUAFLdA=
Subject key identifier: 5F:9A:D6:E0:22:4A:92:22:3D:8B:2B:A5:83:8E:06:0D:23:F1:62:1E
Authority key identifier: 66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3
Certificate issuer: /CN=A91EB7BD/serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3
Certificate serial: 1148
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft
Manifest number: 1140
Signing time: Fri 31 Jan 2025 17:15:24 +0000
Manifest this update: Fri 31 Jan 2025 17:15:23 +0000
Manifest next update: Fri 07 Feb 2025 17:15:23 +0000
Files and hashes: 1: ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl (hash: SjQxJvNQPzBIX5vLbJ4vnNRQkyszJs97rdmvVYx70IQ=)
2: 84121C245CE111E9824BCF76C4F9AE02.roa (hash: leXjljNrFgUPywu1Fh/An2qOclMc2UjOvRA+isA8p/I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4424 (0x1148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB7BD/serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3
Validity
Not Before: Jan 31 17:15:23 2025 GMT
Not After : Feb 7 17:15:23 2025 GMT
Subject: CN=679d052c-239f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a3:ff:ad:a1:6a:47:ff:23:03:61:f5:d9:51:
89:71:8d:7a:c4:81:bf:2e:2a:35:cb:6c:c7:e8:21:
b8:56:b3:db:f2:02:1f:ec:21:da:37:66:c5:63:91:
cf:01:36:07:7e:d9:f7:90:25:bb:fb:1c:db:42:b1:
1a:9a:bd:0a:b1:a9:0b:3c:85:4b:7d:58:c2:bf:00:
57:94:e9:07:60:eb:a6:90:33:2a:5c:22:f0:1f:95:
6b:df:f4:aa:bb:b2:3f:bb:e9:a4:a1:18:db:9d:02:
52:cc:2a:fe:3c:1f:cd:25:85:43:66:46:34:3a:3f:
a3:4b:06:23:af:2e:f7:dd:f3:fc:45:2a:18:88:83:
80:e5:f1:e6:80:7b:20:02:63:4d:d4:ec:63:88:11:
5e:fb:80:2f:ad:44:09:a9:6b:67:e0:ec:ef:2d:86:
c0:3d:5d:b3:11:f9:a7:6f:db:4a:96:3e:af:6f:d1:
a8:ab:a4:ca:c4:6e:df:dc:9a:66:17:89:c7:ae:2f:
67:78:88:9e:ed:fb:09:c7:9f:74:03:a2:88:4b:13:
18:1e:bd:dd:e0:37:94:cf:cb:e7:14:db:80:fe:b5:
50:2c:35:ef:5d:8f:77:f8:39:cd:cf:86:5e:ac:cd:
e3:85:c0:69:53:c9:65:02:50:4c:83:39:f4:61:20:
76:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9A:D6:E0:22:4A:92:22:3D:8B:2B:A5:83:8E:06:0D:23:F1:62:1E
X509v3 Authority Key Identifier:
keyid:66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:dc:b7:0e:1b:0f:6b:d5:a7:02:2d:81:41:f5:b2:c8:60:05:
df:bd:de:78:de:ac:0a:7a:4b:27:16:c5:81:e2:1a:71:37:19:
d3:a7:db:b0:6f:30:c9:6c:fb:87:2d:bc:ac:62:44:0d:78:ef:
ed:13:bd:db:4c:bc:5a:bd:a6:83:f0:66:16:5f:bf:74:ea:11:
86:e5:8a:7e:40:6c:49:ce:48:05:89:04:ec:b6:a6:a4:91:1a:
cc:09:cc:8a:b6:ab:26:c9:b7:0f:97:84:f5:86:d2:33:e6:d8:
ea:50:bb:35:f3:e6:ed:ab:d9:e4:09:51:ae:84:07:7b:4b:0d:
84:44:85:bc:19:43:1a:37:e7:f9:98:64:0c:ac:3f:80:1f:ef:
4e:16:8f:97:fa:86:ec:6a:7a:3c:68:42:3a:a1:32:0f:4a:0c:
92:be:ab:eb:c9:45:dd:d9:e1:4d:54:cc:50:de:22:d8:ca:8a:
5b:e0:01:5a:89:ca:af:da:ee:6c:b2:b3:cf:0a:93:5a:2a:0b:
02:49:54:63:4b:31:34:95:95:b9:f1:19:f2:37:4b:65:d3:10:
42:09:89:ce:cf:e1:42:ba:28:a8:bc:25:c2:f8:8b:37:51:bb:
84:dd:38:4a:f1:1c:12:a3:76:5c:f4:1b:f8:a1:35:a9:0c:c2:
bd:92:fe:3e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUI3QkQxMTAvBgNVBAUTKDY2MDM0RDIxMzZDNDNCMTQzODIxNTdFMTJCQjc0QjJD
QkE5RDk3QTMwHhcNMjUwMTMxMTcxNTIzWhcNMjUwMjA3MTcxNTIzWjAYMRYwFAYD
VQQDEw02NzlkMDUyYy0yMzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3aP/raFqR/8jA2H12VGJcY16xIG/Lio1y2zH6CG4VrPb8gIf7CHaN2bFY5HP
ATYHftn3kCW7+xzbQrEamr0KsakLPIVLfVjCvwBXlOkHYOumkDMqXCLwH5Vr3/Sq
u7I/u+mkoRjbnQJSzCr+PB/NJYVDZkY0Oj+jSwYjry733fP8RSoYiIOA5fHmgHsg
AmNN1OxjiBFe+4AvrUQJqWtn4OzvLYbAPV2zEfmnb9tKlj6vb9Goq6TKxG7f3Jpm
F4nHri9neIie7fsJx590A6KISxMYHr3d4DeUz8vnFNuA/rVQLDXvXY93+DnNz4Ze
rM3jhcBpU8llAlBMgzn0YSB2vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+a1uAi
SpIiPYsrpYOOBg0j8WIeMB8GA1UdIwQYMBaAFGYDTSE2xDsUOCFX4Su3Syy6nZej
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjdCRC80MzE3Mjc4Q0ZF
OTAxMUU4QkJCOTVBMTRDNEY5QUUwMi9aZ05OSVRiRU94UTRJVmZoSzdkTExMcWRs
Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pnTk5JVGJFT3hRNElWZmhLN2RMTExxZGw2TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QjdCRC80MzE3Mjc4Q0ZFOTAxMUU4QkJCOTVBMTRDNEY5QUUwMi9aZ05OSVRiRU94
UTRJVmZoSzdkTExMcWRsNk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCD3LcOGw9r1acCLYFB9bLIYAXfvd543qwKeksnFsWB4hpxNxnTp9uw
bzDJbPuHLbysYkQNeO/tE73bTLxavaaD8GYWX7906hGG5Yp+QGxJzkgFiQTstqak
kRrMCcyKtqsmybcPl4T1htIz5tjqULs18+btq9nkCVGuhAd7Sw2ERIW8GUMaN+f5
mGQMrD+AH+9OFo+X+obsano8aEI6oTIPSgySvqvryUXd2eFNVMxQ3iLYyopb4AFa
icqv2u5ssrPPCpNaKgsCSVRjSzE0lZW58RnyN0tl0xBCCYnOz+FCuiiovCXC+Is3
UbuE3ThK8RwSo3Zc9Bv4oTWpDMK9kv4+
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:30:57 2025 by rpki-client