Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft
File: ztCtuZ-AP0QfUNzLg87nIHbcMog.mft (raw, json)
Hash identifier: B3SC0+Vzl7Ie5A1muIFEcSoX/32rqi6MMcIO0PqOHrM=
Subject key identifier: E4:08:29:5A:FC:04:D0:5C:D0:F4:4D:5E:2E:DD:FB:28:C5:D8:2E:60
Authority key identifier: CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88
Certificate issuer: /CN=A9158D5B/serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288
Certificate serial: 89
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft
Manifest number: 86
Signing time: Sat 29 Mar 2025 05:56:59 +0000
Manifest this update: Sat 29 Mar 2025 05:56:58 +0000
Manifest next update: Sat 05 Apr 2025 05:56:58 +0000
Files and hashes: 1: ztCtuZ-AP0QfUNzLg87nIHbcMog.crl (hash: iKxiTczc/dI5nySjZruwq5o8KJHbzcuhJRszR225u1o=)
2: 1B2031C645B911EFB15BD970C4F9AE02.roa (hash: fy81kcQtJyhVO+fvODwc2WOxwPZRecsJs8C7sFTUZrw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158D5B
Validity
Not Before: Mar 29 05:56:58 2025 GMT
Not After : Apr 5 05:56:58 2025 GMT
Subject: CN=67e78baa-0a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:17:30:d8:2e:07:6e:16:9d:84:2e:04:be:6f:
06:c4:65:b2:c1:3c:14:fb:84:23:8f:2d:98:c7:2b:
32:d2:5b:83:46:75:ef:c4:5f:82:a9:7c:b1:3d:75:
aa:9f:0a:a7:60:ea:35:00:d0:b7:91:e7:d9:27:63:
93:8d:c9:c0:67:40:cc:0c:a8:0d:54:38:2a:f6:44:
d9:74:fe:3c:20:03:63:c9:00:f7:94:bf:a7:a8:fa:
a2:39:e7:dd:50:a6:6b:c0:b2:12:71:50:b6:da:12:
75:16:c8:56:a6:33:45:0e:b9:6b:89:9e:06:2f:32:
5d:da:e9:76:88:24:29:d4:01:91:16:eb:af:9d:c7:
42:f6:d4:8b:3e:17:eb:a5:d3:fb:c3:5d:d0:d0:db:
c6:91:8e:b6:4e:6d:71:18:61:e0:d3:eb:84:47:90:
f4:3a:fb:30:b8:21:10:eb:2a:06:a8:7b:8b:12:03:
8e:90:5a:fb:bc:e1:dd:d7:bc:4b:3a:21:b5:4f:60:
ee:06:d5:d1:3f:59:d4:fa:55:d3:f5:bf:9b:f6:51:
86:ed:47:0f:f9:85:e5:50:93:72:74:f5:f2:11:a0:
7e:4d:b0:82:73:85:88:3a:96:1a:e2:64:87:15:cd:
a3:1a:26:40:e1:5e:6c:d2:ea:21:a5:95:7f:0b:fd:
3a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:08:29:5A:FC:04:D0:5C:D0:F4:4D:5E:2E:DD:FB:28:C5:D8:2E:60
X509v3 Authority Key Identifier:
keyid:CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e9:f9:b2:1a:19:7d:d4:f8:b9:9a:fd:d5:33:60:b9:a3:e1:
1b:7f:29:1e:ab:3f:4a:b1:ca:8b:c4:87:00:ff:4a:36:64:22:
e0:9c:54:e7:f4:68:a7:21:57:50:48:c5:1b:24:d1:6e:2a:c0:
d9:f0:8c:0d:bc:d8:f4:96:7a:59:e5:a8:48:f3:1b:38:2d:18:
a6:b9:97:a8:8c:2b:40:a2:40:bc:fd:d4:08:03:19:58:f8:51:
e3:a5:d9:c7:9a:9d:1d:d4:4f:5b:3f:55:a4:e8:cd:1d:5b:de:
b0:93:61:5c:c4:dd:cf:00:22:30:85:98:93:84:db:4e:07:60:
7f:a1:f2:9c:2c:b8:ab:77:06:d7:ac:82:eb:95:10:d6:19:7b:
68:48:1f:fd:0f:f9:cf:ed:99:34:87:da:17:33:bc:1d:e5:40:
28:97:63:c2:a0:55:a8:ef:bf:cc:82:97:dc:01:fe:bf:36:be:
96:72:95:d5:a9:70:94:6c:b4:f7:29:f0:05:c5:24:e8:14:61:
b5:77:30:36:8f:4d:e1:88:fe:a1:b9:5f:9f:52:42:70:1d:c8:
d2:19:73:8b:ba:28:71:7b:f2:ee:93:fa:5f:d9:35:4b:a6:b8:
4f:a5:38:e3:0b:d3:dc:1c:70:b5:71:90:43:70:2d:91:26:59:
bf:63:a0:20
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NThENUIxMTAvBgNVBAUTKENFRDBBREI5OUY4MDNGNDQxRjUwRENDQjgzQ0VFNzIw
NzZEQzMyODgwHhcNMjUwMzI5MDU1NjU4WhcNMjUwNDA1MDU1NjU4WjAYMRYwFAYD
VQQDEw02N2U3OGJhYS0wYTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwxcw2C4HbhadhC4Evm8GxGWywTwU+4Qjjy2Yxysy0luDRnXvxF+CqXyxPXWq
nwqnYOo1ANC3kefZJ2OTjcnAZ0DMDKgNVDgq9kTZdP48IANjyQD3lL+nqPqiOefd
UKZrwLIScVC22hJ1FshWpjNFDrlriZ4GLzJd2ul2iCQp1AGRFuuvncdC9tSLPhfr
pdP7w13Q0NvGkY62Tm1xGGHg0+uER5D0OvswuCEQ6yoGqHuLEgOOkFr7vOHd17xL
OiG1T2DuBtXRP1nU+lXT9b+b9lGG7UcP+YXlUJNydPXyEaB+TbCCc4WIOpYa4mSH
Fc2jGiZA4V5s0uohpZV/C/06rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQIKVr8
BNBc0PRNXi7d+yjF2C5gMB8GA1UdIwQYMBaAFM7QrbmfgD9EH1Dcy4PO5yB23DKI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEQ1Qi83Q0M4RjE5RTQ1
QjcxMUVGQTZERkQwMzJDNEY5QUUwMi96dEN0dVotQVAwUWZVTnpMZzg3bklIYmNN
b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3p0Q3R1Wi1BUDBRZlVOekxnODduSUhiY01vZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
OEQ1Qi83Q0M4RjE5RTQ1QjcxMUVGQTZERkQwMzJDNEY5QUUwMi96dEN0dVotQVAw
UWZVTnpMZzg3bklIYmNNb2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB96fmyGhl91Pi5mv3VM2C5o+Ebfykeqz9KscqLxIcA/0o2ZCLgnFTn
9GinIVdQSMUbJNFuKsDZ8IwNvNj0lnpZ5ahI8xs4LRimuZeojCtAokC8/dQIAxlY
+FHjpdnHmp0d1E9bP1Wk6M0dW96wk2FcxN3PACIwhZiThNtOB2B/ofKcLLirdwbX
rILrlRDWGXtoSB/9D/nP7Zk0h9oXM7wd5UAol2PCoFWo77/MgpfcAf6/Nr6WcpXV
qXCUbLT3KfAFxSToFGG1dzA2j03hiP6huV+fUkJwHcjSGXOLuihxe/Luk/pf2TVL
prhPpTjjC9PcHHC1cZBDcC2RJlm/Y6Ag
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:20:44 2025 by rpki-client