Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft
File: zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft (raw, json)
Hash identifier: 8vcTX4VKJB61Ho4bbTz7niG7ujFQBT/OdAbGB2DQ/hc=
Subject key identifier: C0:52:8D:4A:10:7A:FC:C2:D5:C7:06:C9:5A:BE:88:B4:8A:A2:81:5C
Authority key identifier: CF:21:52:6D:92:6C:B8:32:37:4C:8E:9B:D5:CE:1D:5B:BC:D6:60:84
Certificate issuer: /CN=A9112407/serialNumber=CF21526D926CB832374C8E9BD5CE1D5BBCD66084
Certificate serial: 0630
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft
Manifest number: 0628
Signing time: Fri 28 Mar 2025 22:59:46 +0000
Manifest this update: Fri 28 Mar 2025 22:59:45 +0000
Manifest next update: Fri 04 Apr 2025 22:59:45 +0000
Files and hashes: 1: zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl (hash: E7PCxzWPWqLRceWKSvE0MrJJ/ST/Ry/yOMQR+OiBt3o=)
2: 3DF2A2EC3AB311EC977A5D60C4F9AE02.roa (hash: Ccp5i/dm7+8eXzkZNFr+8Fkp38efiWixun6YhIXlQUA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1584 (0x630)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112407
Validity
Not Before: Mar 28 22:59:45 2025 GMT
Not After : Apr 4 22:59:45 2025 GMT
Subject: CN=67e729e1-8849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2a:6b:98:f1:ba:73:67:25:78:ce:ce:a9:5c:
75:61:c0:77:d6:9d:e3:58:8e:c2:8a:4b:98:fa:2e:
19:7b:af:31:dd:bc:b1:c4:7d:06:01:8c:1d:8b:99:
08:b9:29:90:a1:68:2c:58:bf:f5:fe:c6:71:f6:31:
d9:b2:e2:d8:25:df:ff:70:24:a2:71:82:6e:5a:cd:
cc:71:3a:6a:a2:24:a7:b0:a2:dd:ba:9d:70:1d:e1:
c9:cd:ea:a8:ec:13:ac:10:84:73:ed:29:34:4d:d3:
1e:e9:2d:37:18:b4:c1:da:52:49:f7:17:b9:f8:30:
bc:1e:9c:12:de:2c:1d:b6:37:d5:5f:b3:73:c3:3e:
24:59:92:65:4e:6f:89:50:57:13:ea:fc:39:65:e4:
bb:ad:d9:6f:b9:98:9b:e6:6b:c6:e2:da:17:58:d0:
c6:09:8d:2b:13:3b:2b:dd:3d:48:5a:eb:77:4a:80:
e2:d5:9b:cc:6b:51:ee:18:14:1d:87:09:3b:ec:f4:
e5:77:dd:d2:69:9e:9e:a9:ab:96:63:40:89:e8:9e:
65:1a:0f:81:c1:c8:30:29:97:97:08:e2:6e:a2:28:
7a:d2:bd:d7:f5:11:01:de:6e:b3:22:78:a4:d4:88:
ef:fd:8f:2e:f6:53:20:57:68:6d:e7:f6:34:fa:aa:
59:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:52:8D:4A:10:7A:FC:C2:D5:C7:06:C9:5A:BE:88:B4:8A:A2:81:5C
X509v3 Authority Key Identifier:
keyid:CF:21:52:6D:92:6C:B8:32:37:4C:8E:9B:D5:CE:1D:5B:BC:D6:60:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:6c:4b:45:85:41:5d:da:c8:7d:50:6e:61:0b:56:26:fe:bb:
47:29:34:7f:71:a3:ec:d5:3a:b4:ef:68:f8:1f:29:77:8a:e1:
b1:14:fc:76:25:8d:f1:43:bb:67:25:a1:3b:0c:a7:58:c3:78:
60:71:e7:01:8b:77:3c:28:fd:b5:83:70:57:7d:d1:6b:95:76:
c9:51:5c:62:2c:78:2c:b5:6d:61:e8:6c:75:0e:e8:96:64:00:
4d:64:78:13:d0:98:e8:1f:ec:71:10:95:59:2a:4c:dc:52:b6:
ce:73:3e:d2:aa:96:0c:62:b8:77:c3:4a:6a:c6:54:77:57:23:
6b:9b:1f:06:21:16:4c:8c:25:c1:9f:f2:06:df:a6:8d:3b:b0:
8a:86:0c:98:ef:6e:cd:84:72:92:62:ec:f4:5c:5d:23:25:26:
b9:ae:d4:7f:de:7f:fc:f7:31:c1:41:18:5d:0b:a6:94:a5:fa:
00:59:af:62:9d:cc:13:c2:ad:2c:76:32:ed:41:b4:59:38:05:
8c:db:97:17:d8:c7:36:35:b3:17:04:a9:9a:c3:16:ec:af:dc:
23:05:94:01:ad:a4:01:fc:c2:38:93:88:40:05:8a:c1:6f:dc:
e0:49:48:5c:b5:30:44:7a:64:06:66:f2:94:43:d8:42:ca:41:
d6:cb:0f:12
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTI0MDcxMTAvBgNVBAUTKENGMjE1MjZEOTI2Q0I4MzIzNzRDOEU5QkQ1Q0UxRDVC
QkNENjYwODQwHhcNMjUwMzI4MjI1OTQ1WhcNMjUwNDA0MjI1OTQ1WjAYMRYwFAYD
VQQDEw02N2U3MjllMS04ODQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2yprmPG6c2cleM7OqVx1YcB31p3jWI7CikuY+i4Ze68x3byxxH0GAYwdi5kI
uSmQoWgsWL/1/sZx9jHZsuLYJd//cCSicYJuWs3McTpqoiSnsKLdup1wHeHJzeqo
7BOsEIRz7Sk0TdMe6S03GLTB2lJJ9xe5+DC8HpwS3iwdtjfVX7Nzwz4kWZJlTm+J
UFcT6vw5ZeS7rdlvuZib5mvG4toXWNDGCY0rEzsr3T1IWut3SoDi1ZvMa1HuGBQd
hwk77PTld93SaZ6eqauWY0CJ6J5lGg+BwcgwKZeXCOJuoih60r3X9REB3m6zInik
1Ijv/Y8u9lMgV2ht5/Y0+qpZSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMBSjUoQ
evzC1ccGyVq+iLSKooFcMB8GA1UdIwQYMBaAFM8hUm2SbLgyN0yOm9XOHVu81mCE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjQwNy85MDBERkY1RTkw
NTkxMUVCOEYxRUVFMTBDNEY5QUUwMi96eUZTYlpKc3VESTNUSTZiMWM0ZFc3eldZ
SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3p5RlNiWkpzdURJM1RJNmIxYzRkVzd6V1lJUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MjQwNy85MDBERkY1RTkwNTkxMUVCOEYxRUVFMTBDNEY5QUUwMi96eUZTYlpKc3VE
STNUSTZiMWM0ZFc3eldZSVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAjbEtFhUFd2sh9UG5hC1Ym/rtHKTR/caPs1Tq072j4Hyl3iuGxFPx2
JY3xQ7tnJaE7DKdYw3hgcecBi3c8KP21g3BXfdFrlXbJUVxiLHgstW1h6Gx1DuiW
ZABNZHgT0JjoH+xxEJVZKkzcUrbOcz7SqpYMYrh3w0pqxlR3VyNrmx8GIRZMjCXB
n/IG36aNO7CKhgyY727NhHKSYuz0XF0jJSa5rtR/3n/89zHBQRhdC6aUpfoAWa9i
ncwTwq0sdjLtQbRZOAWM25cX2Mc2NbMXBKmawxbsr9wjBZQBraQB/MI4k4hABYrB
b9zgSUhctTBEemQGZvKUQ9hCykHWyw8S
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:35:55 2025 by rpki-client