Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft
File: znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft (raw, json)
Hash identifier: jomidEXGIXLoKDHQ5EzgNmCBBqdSnZ2n9HpFLjhnPUM=
Subject key identifier: 1F:A3:CF:54:5D:2A:FA:06:90:6A:A9:5D:05:71:0E:00:A0:87:AE:27
Authority key identifier: CE:70:3E:4E:F9:DF:2E:BE:38:65:0A:70:4A:4A:01:9C:2A:66:43:50
Certificate issuer: /CN=A9136C5E/serialNumber=CE703E4EF9DF2EBE38650A704A4A019C2A664350
Certificate serial: 0188
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft
Manifest number: 0185
Signing time: Sat 29 Mar 2025 03:06:51 +0000
Manifest this update: Sat 29 Mar 2025 03:06:50 +0000
Manifest next update: Sat 05 Apr 2025 03:06:50 +0000
Files and hashes: 1: znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl (hash: Ra5g2WOBOGDnn3664K5Ta1Ia66xJxVzViuZcXXT5FZI=)
2: 9BCEEFF4BC6911ED9B0FC554C4F9AE02.roa (hash: HpSulYTKjWi9yozCtLRgfGwwq/HpvwINJQ7fctCpbuc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392 (0x188)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136C5E
Validity
Not Before: Mar 29 03:06:50 2025 GMT
Not After : Apr 5 03:06:50 2025 GMT
Subject: CN=67e763cb-efbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:00:f2:64:59:16:9c:04:62:30:34:d2:ef:c3:
6d:4a:17:47:3b:03:b3:a1:41:02:0e:fd:d8:ac:93:
7f:01:56:cc:d0:ed:65:d9:b7:da:51:e0:2c:b2:8b:
8e:7c:a6:64:b8:a6:94:92:e7:13:24:7a:03:0b:e5:
81:ff:ac:2c:fa:bf:77:37:16:5c:ec:84:80:96:11:
9c:6b:20:31:f9:a5:af:ec:53:50:a2:18:0b:f8:df:
9d:e1:89:61:92:80:52:5e:ad:34:ce:e0:bf:c7:31:
77:92:8b:d8:54:08:72:b2:53:1b:8c:b1:3e:51:c3:
5b:d0:d6:f6:5b:6c:c2:89:b4:a4:79:1c:e5:37:6c:
a4:4b:d1:8a:71:ca:3b:a4:ce:47:78:f6:e3:06:30:
d0:54:09:a4:4f:ed:a6:3f:20:87:ff:8b:7f:2b:25:
d4:16:a0:24:55:9f:b0:79:0f:ee:b0:26:26:b8:93:
d5:b9:d6:e2:ba:b1:33:59:8b:f1:26:5d:67:a3:df:
fa:0c:38:61:3e:53:a7:05:dc:dd:c2:99:93:f8:96:
40:8b:7c:cb:f6:74:d3:48:e1:f5:ab:82:b7:9f:57:
15:c5:3f:40:4f:9e:a9:f7:4a:c1:f3:0f:b1:7f:d8:
16:a3:d7:b2:29:01:13:5a:6d:a2:f1:4e:75:2b:a9:
4e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A3:CF:54:5D:2A:FA:06:90:6A:A9:5D:05:71:0E:00:A0:87:AE:27
X509v3 Authority Key Identifier:
keyid:CE:70:3E:4E:F9:DF:2E:BE:38:65:0A:70:4A:4A:01:9C:2A:66:43:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:86:38:6d:b7:06:0d:df:48:3c:4e:77:f2:d6:e1:63:ab:62:
69:a1:6f:f2:65:bf:6d:79:cd:7a:6c:5d:63:3d:e7:97:51:4c:
11:4b:4c:0d:62:b8:2c:44:45:4c:06:b8:07:f5:5f:6a:8e:9b:
d1:1a:3f:6a:e7:2c:85:e0:99:e1:56:cf:9d:05:38:fc:19:22:
d5:6f:be:9e:6d:63:86:c9:8c:9b:70:2f:03:dc:c0:26:0d:9d:
77:a5:05:ad:73:8c:26:41:c3:a4:bd:9e:87:a2:ce:99:fe:ed:
f6:3e:72:5c:e8:f8:58:6b:f8:08:3c:c2:76:1b:d6:71:92:b0:
a2:66:1a:7d:a4:49:8b:57:1e:19:14:f6:9b:e1:fe:4a:4d:25:
df:0f:49:1b:94:88:be:bf:75:03:94:58:1d:82:41:70:bc:30:
a3:c1:8f:67:72:cd:36:2d:c1:f7:71:82:c5:ec:31:ad:77:a1:
36:93:f4:57:8d:20:ba:5d:28:43:cf:88:9f:c7:4f:05:a7:ab:
30:9d:33:13:3b:9d:6c:f3:81:e4:84:47:d1:2c:f5:70:1f:ba:
50:50:57:da:59:8f:84:26:85:ee:01:28:b6:79:de:25:06:aa:
de:69:ce:6e:a5:3e:b4:2a:f9:78:7d:58:a4:47:a1:e0:76:9e:
f3:78:9f:3f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzZDNUUxMTAvBgNVBAUTKENFNzAzRTRFRjlERjJFQkUzODY1MEE3MDRBNEEwMTlD
MkE2NjQzNTAwHhcNMjUwMzI5MDMwNjUwWhcNMjUwNDA1MDMwNjUwWjAYMRYwFAYD
VQQDEw02N2U3NjNjYi1lZmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnwDyZFkWnARiMDTS78NtShdHOwOzoUECDv3YrJN/AVbM0O1l2bfaUeAssouO
fKZkuKaUkucTJHoDC+WB/6ws+r93NxZc7ISAlhGcayAx+aWv7FNQohgL+N+d4Ylh
koBSXq00zuC/xzF3kovYVAhyslMbjLE+UcNb0Nb2W2zCibSkeRzlN2ykS9GKcco7
pM5HePbjBjDQVAmkT+2mPyCH/4t/KyXUFqAkVZ+weQ/usCYmuJPVudbiurEzWYvx
Jl1no9/6DDhhPlOnBdzdwpmT+JZAi3zL9nTTSOH1q4K3n1cVxT9AT56p90rB8w+x
f9gWo9eyKQETWm2i8U51K6lOWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+jz1Rd
KvoGkGqpXQVxDgCgh64nMB8GA1UdIwQYMBaAFM5wPk753y6+OGUKcEpKAZwqZkNQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkM1RS8zRUE2QTI1MEI5
NzAxMUVEODkxODQ2N0NDNEY5QUUwMi96bkEtVHZuZkxyNDRaUXB3U2tvQm5DcG1R
MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3puQS1Udm5mTHI0NFpRcHdTa29CbkNwbVExQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NkM1RS8zRUE2QTI1MEI5NzAxMUVEODkxODQ2N0NDNEY5QUUwMi96bkEtVHZuZkxy
NDRaUXB3U2tvQm5DcG1RMUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA4hjhttwYN30g8Tnfy1uFjq2JpoW/yZb9tec16bF1jPeeXUUwRS0wN
YrgsREVMBrgH9V9qjpvRGj9q5yyF4JnhVs+dBTj8GSLVb76ebWOGyYybcC8D3MAm
DZ13pQWtc4wmQcOkvZ6Hos6Z/u32PnJc6PhYa/gIPMJ2G9ZxkrCiZhp9pEmLVx4Z
FPab4f5KTSXfD0kblIi+v3UDlFgdgkFwvDCjwY9ncs02LcH3cYLF7DGtd6E2k/RX
jSC6XShDz4ifx08Fp6swnTMTO51s84HkhEfRLPVwH7pQUFfaWY+EJoXuASi2ed4l
Bqreac5upT60Kvl4fVikR6Hgdp7zeJ8/
-----END CERTIFICATE-----
Generated at Fri Apr 11 18:23:12 2025 by rpki-client