Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft
File: zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft (raw, json)
Hash identifier: A/cfa90V7l3G4LC9CugAmcbOSgJromE2pqNl1/hW/aA=
Subject key identifier: 18:AF:50:04:01:8D:80:10:82:BF:FE:80:2D:9E:D9:DE:4C:7B:54:6C
Authority key identifier: CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5
Certificate issuer: /CN=A91FD39E/serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5
Certificate serial: 20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft
Manifest number: 1F
Signing time: Fri 31 Jan 2025 06:57:26 +0000
Manifest this update: Fri 31 Jan 2025 06:57:25 +0000
Manifest next update: Fri 07 Feb 2025 06:57:25 +0000
Files and hashes: 1: zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl (hash: Eqm45fZ9ZDelH6uVkQ72xdIM2U3CPivmE67fFbKeZRs=)
2: F6935C8EB35911EF96C43242C4F9AE02.roa (hash: RfP72W6bhudJaSAJCzEPZ7/76B0jmak+p8sYVbFBYU0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD39E/serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5
Validity
Not Before: Jan 31 06:57:25 2025 GMT
Not After : Feb 7 06:57:25 2025 GMT
Subject: CN=679c7455-d6e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:60:a7:d8:be:8a:bb:03:ac:34:37:a2:6c:cb:
03:a1:e8:23:46:0f:c3:9e:57:a7:7e:ac:95:0d:13:
9c:0a:1c:91:27:72:1c:db:4f:7d:d8:4d:ab:78:2e:
2f:1e:7f:a6:eb:bc:47:a1:e2:43:d6:ec:e9:21:65:
ea:18:40:69:99:60:75:89:99:18:9f:bf:1a:c8:d8:
8b:a3:38:83:5b:9a:9d:04:54:e6:dc:c4:11:04:48:
0e:09:5c:65:06:bb:30:ec:8b:64:ba:24:d7:cc:fe:
9e:09:7b:4a:5a:bb:7a:1e:55:29:93:7a:10:be:ac:
fa:29:f8:7c:d6:2c:70:6f:10:f9:62:1f:a4:0d:c4:
d9:9f:98:13:e4:59:0e:a9:d6:a1:df:60:41:38:5e:
32:58:c4:ab:3a:18:6e:4f:b8:85:3e:16:bf:db:0c:
bf:83:48:5a:a7:b2:da:86:e4:78:0b:c2:91:25:c3:
84:e7:66:a8:59:8d:77:4a:d0:c6:8b:b9:52:32:1d:
d0:7e:dd:98:ba:7f:88:0d:37:ac:c5:71:37:c4:55:
ee:48:65:77:d4:24:1c:c3:b5:c5:a3:83:42:7c:35:
7a:aa:cb:c9:d6:a4:24:a4:a0:51:fb:11:9d:bb:db:
5e:39:3f:30:e8:d6:b1:96:7e:38:79:81:6f:04:b8:
2f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AF:50:04:01:8D:80:10:82:BF:FE:80:2D:9E:D9:DE:4C:7B:54:6C
X509v3 Authority Key Identifier:
keyid:CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:24:85:3f:e9:3b:2c:68:ae:30:f0:ab:75:b8:01:0f:57:f9:
7a:f8:60:86:08:af:b7:72:39:c5:13:53:2c:6b:5c:09:ff:d2:
88:31:9b:74:e1:40:ba:3b:4e:b6:ab:7b:24:7b:02:7d:c3:d6:
e5:f3:e1:31:b3:16:8a:6d:88:5d:b0:b3:01:5c:79:a0:89:cb:
dd:1b:c1:81:af:48:b6:b8:98:f0:44:19:84:89:a5:7e:c3:95:
78:31:fb:97:70:fc:69:4d:9d:64:0d:5d:16:01:01:79:61:f4:
92:50:33:8a:5a:66:d8:bf:a5:ee:3f:16:e0:22:4d:f6:96:4c:
2e:cb:2b:12:da:c5:74:fb:e6:e6:84:83:22:1c:b1:c5:6f:85:
d0:c7:74:3e:a8:a2:ca:2d:5a:f3:92:df:6b:5c:63:da:3f:20:
7a:01:19:86:ce:f9:04:02:25:db:41:c4:3c:3a:d1:2a:b0:44:
0a:b6:48:0c:3c:8e:54:f8:3d:57:f1:7d:50:10:29:52:65:0c:
d3:ea:cb:f7:0d:7a:ed:fd:d3:5b:c2:db:35:07:09:67:df:b0:
43:4a:96:44:8a:ed:19:f6:8e:f6:25:6e:b4:6f:f1:6f:39:9d:
d2:48:72:e4:54:06:ed:3a:c1:40:16:74:31:65:36:25:76:fd:
53:08:00:47
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
RDM5RTExMC8GA1UEBRMoQ0Q5Mjc4REVEOTE4QjIzNzUwODZCMkNGOEU0RTA2OTE3
RDAyMTFCNTAeFw0yNTAxMzEwNjU3MjVaFw0yNTAyMDcwNjU3MjVaMBgxFjAUBgNV
BAMTDTY3OWM3NDU1LWQ2ZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC9YKfYvoq7A6w0N6JsywOh6CNGD8OeV6d+rJUNE5wKHJEnchzbT33YTat4Li8e
f6brvEeh4kPW7OkhZeoYQGmZYHWJmRifvxrI2IujOINbmp0EVObcxBEESA4JXGUG
uzDsi2S6JNfM/p4Je0pau3oeVSmTehC+rPop+HzWLHBvEPliH6QNxNmfmBPkWQ6p
1qHfYEE4XjJYxKs6GG5PuIU+Fr/bDL+DSFqnstqG5HgLwpElw4TnZqhZjXdK0MaL
uVIyHdB+3Zi6f4gNN6zFcTfEVe5IZXfUJBzDtcWjg0J8NXqqy8nWpCSkoFH7EZ27
2145PzDo1rGWfjh5gW8EuC8HAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGK9QBAGN
gBCCv/6ALZ7Z3kx7VGwwHwYDVR0jBBgwFoAUzZJ43tkYsjdQhrLPjk4GkX0CEbUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEMzlFLzc5ODQ1NzBDQjM1
OTExRUZCNEJFN0Y0MUM0RjlBRTAyL3paSjQzdGtZc2pkUWhyTFBqazRHa1gwQ0Vi
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvelpKNDN0a1lzamRRaHJMUGprNEdrWDBDRWJVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE
MzlFLzc5ODQ1NzBDQjM1OTExRUZCNEJFN0Y0MUM0RjlBRTAyL3paSjQzdGtZc2pk
UWhyTFBqazRHa1gwQ0ViVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAG8khT/pOyxorjDwq3W4AQ9X+Xr4YIYIr7dyOcUTUyxrXAn/0ogxm3Th
QLo7TrareyR7An3D1uXz4TGzFoptiF2wswFceaCJy90bwYGvSLa4mPBEGYSJpX7D
lXgx+5dw/GlNnWQNXRYBAXlh9JJQM4paZti/pe4/FuAiTfaWTC7LKxLaxXT75uaE
gyIcscVvhdDHdD6oosotWvOS32tcY9o/IHoBGYbO+QQCJdtBxDw60SqwRAq2SAw8
jlT4PVfxfVAQKVJlDNPqy/cNeu3901vC2zUHCWffsENKlkSK7Rn2jvYlbrRv8W85
ndJIcuRUBu06wUAWdDFlNiV2/VMIAEc=
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:56:19 2025 by rpki-client