Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft
File: tZsFZqgqmDvebfHF3kxYLJvKg5I.mft (raw, json)
Hash identifier: h5xZtUNgLQRYvsQWYDU6ieRjAM22OFEOFa2qtoehIOU=
Subject key identifier: 1A:5F:10:EE:34:8D:D4:14:30:55:22:AA:DE:52:11:67:A1:58:52:69
Authority key identifier: B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92
Certificate issuer: /CN=A917C71E/serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392
Certificate serial: 0BD6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft
Manifest number: 0BBE
Signing time: Fri 28 Mar 2025 19:06:45 +0000
Manifest this update: Fri 28 Mar 2025 19:06:44 +0000
Manifest next update: Fri 04 Apr 2025 19:06:44 +0000
Files and hashes: 1: tZsFZqgqmDvebfHF3kxYLJvKg5I.crl (hash: R9UATSuhI6lq/qtVobfMezeqV8Vd4Yymy8djQyxomJA=)
2: CD843242EF5D11EFA15B580DC4F9AE02.roa (hash: ighwwoIoB/hqwC6NEB1yaB5MkiB7uZW6ja95rSu/mC0=)
3: CB46AC50509111EF9E40402FC4F9AE02.roa (hash: ad0J4ZFgNbW6j5IO3p20cgw4SuRj+wZOS+Yi86cuNgg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3030 (0xbd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C71E
Validity
Not Before: Mar 28 19:06:44 2025 GMT
Not After : Apr 4 19:06:44 2025 GMT
Subject: CN=67e6f345-df80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:41:27:f3:01:20:0f:26:bd:a5:ad:58:cd:b8:
88:58:63:b7:c3:6e:8b:12:05:ea:a4:8b:c7:a0:e9:
11:56:7c:52:38:9c:12:38:2d:df:36:0a:fa:1d:28:
34:26:5f:d4:07:ea:e6:7c:1e:89:ab:92:ba:aa:15:
10:e7:90:9d:e6:11:7d:bb:70:61:39:7c:02:33:0a:
71:fc:d0:0c:02:57:70:2e:75:64:e1:3a:50:dd:d3:
58:ee:89:ed:1e:9b:f2:b3:b3:b5:f4:ea:43:f3:ad:
b6:6e:84:ba:d2:c1:ca:b5:b5:3b:21:dd:95:38:c9:
d0:af:7f:93:79:42:6a:4c:66:58:04:65:6c:f0:71:
da:ef:cc:c5:6a:bd:1e:4e:0c:bb:39:a5:54:0a:23:
f2:bb:0f:d7:da:18:f8:a3:1c:2d:04:fe:ac:ce:5b:
9c:41:ed:0c:e0:39:2b:74:b5:74:f2:97:57:ca:56:
54:74:2b:dd:ee:7f:dc:89:e3:7b:7c:af:60:04:0e:
2f:a7:bb:6e:0d:74:07:6d:cc:d2:c4:ac:3b:48:c5:
11:a8:0f:2d:14:ce:a5:56:38:56:9b:cc:e1:ea:c8:
8a:5c:24:7c:4f:ed:05:e3:4b:52:95:c1:d4:31:63:
b3:5c:69:42:64:1a:05:93:56:2a:19:65:e4:6e:b6:
c2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5F:10:EE:34:8D:D4:14:30:55:22:AA:DE:52:11:67:A1:58:52:69
X509v3 Authority Key Identifier:
keyid:B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:72:9b:73:e2:3e:1a:ab:27:c3:92:9a:91:a2:ac:b0:6e:fb:
4c:fc:da:77:81:bc:24:76:74:27:29:3e:48:aa:1f:65:04:f2:
90:b4:40:ce:39:bc:5a:0a:3f:b6:8b:5e:27:52:81:58:b7:2e:
ef:42:2e:8d:54:43:4a:81:3b:99:8d:2c:b1:bb:53:5b:81:ca:
20:17:49:d3:d2:c8:27:06:60:4f:cb:de:73:ae:07:f4:a4:71:
b1:8c:4e:6d:04:63:dd:5f:55:74:21:76:60:f0:69:cd:e5:b9:
df:89:fb:fc:88:d9:26:ac:66:c6:52:fb:e8:ec:3d:63:7c:f5:
5e:19:50:74:05:4c:ec:a7:a2:c9:fc:8d:48:85:7e:fb:bd:63:
51:ba:f9:0e:d6:c4:8d:51:d0:6a:01:75:56:6b:70:19:83:4d:
ea:47:48:ce:26:83:e9:2e:54:4e:f6:c6:4e:b5:50:fe:dc:5e:
5f:ed:1a:e5:43:f6:1c:04:73:73:91:98:21:f1:5a:8e:41:d6:
0b:ac:c2:ab:84:67:57:cd:29:da:12:0b:fd:45:df:cb:76:7b:
db:90:3f:2f:ed:35:ec:9f:8b:bb:be:d5:0f:5a:44:e3:c3:81:
45:d2:bd:33:2f:af:72:9b:5d:13:24:10:33:c3:cb:59:fb:82:
b6:57:47:b2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0M3MUUxMTAvBgNVBAUTKEI1OUIwNTY2QTgyQTk4M0JERTZERjFDNURFNEM1ODJD
OUJDQTgzOTIwHhcNMjUwMzI4MTkwNjQ0WhcNMjUwNDA0MTkwNjQ0WjAYMRYwFAYD
VQQDEw02N2U2ZjM0NS1kZjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4UEn8wEgDya9pa1YzbiIWGO3w26LEgXqpIvHoOkRVnxSOJwSOC3fNgr6HSg0
Jl/UB+rmfB6Jq5K6qhUQ55Cd5hF9u3BhOXwCMwpx/NAMAldwLnVk4TpQ3dNY7ont
Hpvys7O19OpD8622boS60sHKtbU7Id2VOMnQr3+TeUJqTGZYBGVs8HHa78zFar0e
Tgy7OaVUCiPyuw/X2hj4oxwtBP6szlucQe0M4DkrdLV08pdXylZUdCvd7n/cieN7
fK9gBA4vp7tuDXQHbczSxKw7SMURqA8tFM6lVjhWm8zh6siKXCR8T+0F40tSlcHU
MWOzXGlCZBoFk1YqGWXkbrbClwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpfEO40
jdQUMFUiqt5SEWehWFJpMB8GA1UdIwQYMBaAFLWbBWaoKpg73m3xxd5MWCybyoOS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxRS9DNzhFNEE3MjFD
QTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1EdmViZkhGM2t4WUxKdktn
NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Rac0ZacWdxbUR2ZWJmSEYza3hZTEp2S2c1SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QzcxRS9DNzhFNEE3MjFDQTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1E
dmViZkhGM2t4WUxKdktnNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBZcptz4j4aqyfDkpqRoqywbvtM/Np3gbwkdnQnKT5Iqh9lBPKQtEDO
ObxaCj+2i14nUoFYty7vQi6NVENKgTuZjSyxu1NbgcogF0nT0sgnBmBPy95zrgf0
pHGxjE5tBGPdX1V0IXZg8GnN5bnfifv8iNkmrGbGUvvo7D1jfPVeGVB0BUzsp6LJ
/I1IhX77vWNRuvkO1sSNUdBqAXVWa3AZg03qR0jOJoPpLlRO9sZOtVD+3F5f7Rrl
Q/YcBHNzkZgh8VqOQdYLrMKrhGdXzSnaEgv9Rd/LdnvbkD8v7TXsn4u7vtUPWkTj
w4FF0r0zL69ym10TJBAzw8tZ+4K2V0ey
-----END CERTIFICATE-----
Generated at Fri Apr 11 19:52:16 2025 by rpki-client