Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.mft
File: VZ9R7Isljn6QYp2FYuHblWvA_zc.mft (raw, json)
Hash identifier: oznH6knWAEfWB5+jHyk48Hiq9JJgJR6GYXCoV0/x65g=
Subject key identifier: 7B:E8:20:F7:41:36:06:4A:36:61:87:B0:A4:AB:52:B7:E2:32:5E:79
Authority key identifier: 55:9F:51:EC:8B:25:8E:7E:90:62:9D:85:62:E1:DB:95:6B:C0:FF:37
Certificate issuer: /CN=A916FEAF/serialNumber=559F51EC8B258E7E90629D8562E1DB956BC0FF37
Certificate serial: 093A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZ9R7Isljn6QYp2FYuHblWvA_zc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.mft
Manifest number: 0935
Signing time: Fri 28 Mar 2025 20:31:53 +0000
Manifest this update: Fri 28 Mar 2025 20:31:52 +0000
Manifest next update: Fri 04 Apr 2025 20:31:52 +0000
Files and hashes: 1: VZ9R7Isljn6QYp2FYuHblWvA_zc.crl (hash: 5fBN597ek4xsoMS4wbwbl4UUCNTXcNTHV6pHdN9Nnaw=)
2: 8247E286967711EA81018623C4F9AE02.roa (hash: RuCHBWzDEGb4u8QT2BLmLE3Mq19hnt6+xwynPnruiss=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2362 (0x93a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916FEAF
Validity
Not Before: Mar 28 20:31:52 2025 GMT
Not After : Apr 4 20:31:52 2025 GMT
Subject: CN=67e70738-3517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0f:39:d1:01:6f:f9:d6:38:21:50:bf:dd:0b:
25:8a:94:e3:e2:57:29:d9:d7:14:f8:3a:fe:59:db:
e1:8a:0f:35:86:44:4e:dd:d5:f5:1d:bd:9b:c0:96:
a8:c0:78:17:be:91:16:8f:a2:b3:5a:f4:10:0f:96:
0a:87:f6:cc:14:f6:87:21:ef:bd:ee:51:10:63:52:
3c:7e:7d:0b:a9:47:78:bf:fe:c6:8d:2e:68:a1:22:
cc:cf:63:31:fa:36:f1:1c:4f:61:7a:50:54:64:d4:
15:03:17:b0:78:11:d8:fb:4d:f9:c0:d5:72:c3:d6:
d2:5c:83:b5:d7:46:ba:ec:77:0b:2f:54:b6:1f:18:
cd:7f:cc:d6:3a:10:00:a2:55:d6:df:a6:81:f9:78:
e2:bc:f7:d4:3d:7d:0f:f3:26:da:47:c2:c5:e7:20:
e3:d0:9e:a1:cc:8b:e5:73:1a:46:d3:90:d7:1f:6d:
b8:ab:26:38:50:4b:3d:55:81:84:fa:92:29:b3:38:
83:e8:a0:87:f8:cc:db:e5:21:6f:3b:13:70:40:e1:
70:ff:93:9a:e3:31:38:7e:89:62:53:c3:85:84:29:
d5:ea:9d:1e:e0:2e:03:48:d2:a0:c3:6f:65:f7:a5:
fc:7e:19:9f:ce:c2:38:63:93:f5:99:e4:ef:06:b1:
63:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E8:20:F7:41:36:06:4A:36:61:87:B0:A4:AB:52:B7:E2:32:5E:79
X509v3 Authority Key Identifier:
keyid:55:9F:51:EC:8B:25:8E:7E:90:62:9D:85:62:E1:DB:95:6B:C0:FF:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZ9R7Isljn6QYp2FYuHblWvA_zc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:ee:e5:4b:48:ac:9e:7c:21:2a:4a:03:6b:81:d6:40:42:ca:
6a:d0:83:72:18:aa:35:ba:7b:1a:28:07:f9:d2:04:ce:48:20:
54:92:e9:f8:a9:6e:60:01:45:d9:14:ae:3e:9f:e7:df:37:4c:
2c:db:e2:d4:76:43:0e:d6:d8:96:b6:13:72:a2:ad:6d:01:36:
01:14:3a:59:5d:98:4c:f8:27:1e:bc:0a:bf:d6:1a:f0:64:da:
65:e0:89:c5:02:53:4d:3a:6a:69:1d:8f:ba:b6:bc:d7:fc:1c:
50:a1:17:c1:4d:a4:86:0c:49:1f:e3:69:8e:a4:a1:22:b6:ae:
6b:a1:7b:b0:66:2b:d8:92:e9:e6:a0:2f:b4:7e:3c:d4:83:67:
8a:1e:22:98:e3:08:ed:16:d9:93:f3:47:e3:52:4b:b8:eb:a4:
f4:34:b3:63:b2:dc:66:9f:62:97:12:dd:4e:e9:98:f4:06:33:
ef:0b:e0:78:27:cc:4b:4b:03:4d:96:36:49:ea:d0:be:e9:b5:
bc:89:a4:9b:b3:77:92:0c:2e:50:ed:d2:78:18:e0:8a:f6:17:
83:a4:e8:fc:59:9d:64:6d:54:1a:ea:2e:d2:4c:ab:ca:11:5c:
0a:68:f0:49:41:b7:65:8c:d4:49:10:2e:07:56:d1:21:d5:18:
f7:3f:85:1f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkZFQUYxMTAvBgNVBAUTKDU1OUY1MUVDOEIyNThFN0U5MDYyOUQ4NTYyRTFEQjk1
NkJDMEZGMzcwHhcNMjUwMzI4MjAzMTUyWhcNMjUwNDA0MjAzMTUyWjAYMRYwFAYD
VQQDEw02N2U3MDczOC0zNTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtw850QFv+dY4IVC/3QslipTj4lcp2dcU+Dr+Wdvhig81hkRO3dX1Hb2bwJao
wHgXvpEWj6KzWvQQD5YKh/bMFPaHIe+97lEQY1I8fn0LqUd4v/7GjS5ooSLMz2Mx
+jbxHE9helBUZNQVAxeweBHY+035wNVyw9bSXIO110a67HcLL1S2HxjNf8zWOhAA
olXW36aB+XjivPfUPX0P8ybaR8LF5yDj0J6hzIvlcxpG05DXH224qyY4UEs9VYGE
+pIpsziD6KCH+Mzb5SFvOxNwQOFw/5Oa4zE4foliU8OFhCnV6p0e4C4DSNKgw29l
96X8fhmfzsI4Y5P1meTvBrFj9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHvoIPdB
NgZKNmGHsKSrUrfiMl55MB8GA1UdIwQYMBaAFFWfUeyLJY5+kGKdhWLh25VrwP83
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkVBRi9ERDYwRDRBNDk2
NzUxMUVBODYwMjJBMUVDNEY5QUUwMi9WWjlSN0lzbGpuNlFZcDJGWXVIYmxXdkFf
emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZaOVI3SXNsam42UVlwMkZZdUhibFd2QV96Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RkVBRi9ERDYwRDRBNDk2NzUxMUVBODYwMjJBMUVDNEY5QUUwMi9WWjlSN0lzbGpu
NlFZcDJGWXVIYmxXdkFfemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAj7uVLSKyefCEqSgNrgdZAQspq0INyGKo1unsaKAf50gTOSCBUkun4
qW5gAUXZFK4+n+ffN0ws2+LUdkMO1tiWthNyoq1tATYBFDpZXZhM+CcevAq/1hrw
ZNpl4InFAlNNOmppHY+6trzX/BxQoRfBTaSGDEkf42mOpKEitq5roXuwZivYkunm
oC+0fjzUg2eKHiKY4wjtFtmT80fjUku466T0NLNjstxmn2KXEt1O6Zj0BjPvC+B4
J8xLSwNNljZJ6tC+6bW8iaSbs3eSDC5Q7dJ4GOCK9heDpOj8WZ1kbVQa6i7STKvK
EVwKaPBJQbdljNRJEC4HVtEh1Rj3P4Uf
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:21:50 2025 by rpki-client