Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft
File: HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft (raw, json)
Hash identifier: Ts2LCbWku/1mZCtHRVZ+3me1wP/VOGRT61rWCrgVOwE=
Subject key identifier: A3:1B:9D:B2:FC:C3:59:0F:78:1F:1F:F3:07:C3:1A:94:B8:AB:21:6D
Authority key identifier: 1C:3F:99:A0:C1:82:B5:8C:C4:5B:81:12:F2:91:E1:2A:15:33:31:E9
Certificate issuer: /CN=A918742C/serialNumber=1C3F99A0C182B58CC45B8112F291E12A153331E9
Certificate serial: 166D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft
Manifest number: 1664
Signing time: Fri 28 Mar 2025 16:48:58 +0000
Manifest this update: Fri 28 Mar 2025 16:48:58 +0000
Manifest next update: Fri 04 Apr 2025 16:48:58 +0000
Files and hashes: 1: HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl (hash: OJ+eds8WAzFnao3ibiSMG9c1FKVlyZhDDVJJA5n5NMA=)
2: 8DFAE1DA019D11E8A7804A1EC4F9AE02.roa (hash: DwaSXkwadhXmFgNGjila+YsFoYHDPOwpBM4h3mtwuos=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5741 (0x166d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918742C
Validity
Not Before: Mar 28 16:48:58 2025 GMT
Not After : Apr 4 16:48:58 2025 GMT
Subject: CN=67e6d2fa-e223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:51:a3:f2:1f:e3:f9:a6:be:34:6f:95:92:58:
24:07:3f:23:a5:a3:7b:95:8f:48:00:f1:a6:7b:ca:
20:ea:eb:e2:85:4d:97:83:ae:6e:d5:6b:4e:bc:14:
3f:40:21:c9:7e:95:8c:e6:2e:0e:a1:c7:b3:fc:14:
a3:b0:df:40:be:3f:91:f1:07:d8:82:91:72:1f:4b:
f2:03:2e:5c:c1:21:6f:6b:38:50:2c:12:fd:31:bd:
c0:15:58:70:24:df:47:1b:04:6e:73:64:29:73:8f:
13:f7:3c:2e:c3:35:7f:b6:0c:f6:11:be:90:47:a2:
26:76:a5:b2:0b:d7:b0:3d:63:1f:42:4a:37:4d:59:
bc:c9:b6:2f:9f:dc:7a:1d:9b:09:95:c5:3e:56:5f:
a1:87:85:70:8e:14:07:7d:f6:5c:42:36:f7:ab:c8:
6a:01:e2:21:2d:a8:fb:29:0c:c8:8e:af:50:94:98:
a1:8e:b3:21:8f:48:27:33:f4:e1:b1:c2:6b:97:18:
ba:e5:de:9b:f4:cd:3a:28:f6:cc:5a:1a:43:6d:40:
85:83:b5:ec:cd:f7:6d:e7:34:a6:21:bd:75:28:82:
98:00:7f:d8:45:ac:e9:7c:75:24:d8:fe:33:4c:d6:
b7:1c:57:04:b8:cb:af:54:5b:0b:56:47:8b:31:10:
8a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:1B:9D:B2:FC:C3:59:0F:78:1F:1F:F3:07:C3:1A:94:B8:AB:21:6D
X509v3 Authority Key Identifier:
keyid:1C:3F:99:A0:C1:82:B5:8C:C4:5B:81:12:F2:91:E1:2A:15:33:31:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:97:4d:a4:06:90:24:6a:cd:17:65:7c:33:c6:e0:66:87:31:
a2:e9:4e:3c:36:45:23:6a:b9:2c:9f:14:28:f0:a9:1f:ab:72:
3f:45:9b:7c:9a:13:a6:51:de:fb:54:f5:8b:2c:54:61:5d:7a:
42:98:08:e9:e6:fb:3e:5b:dc:c7:58:11:b3:ce:0b:36:ae:dd:
8c:f6:76:20:9c:ab:9d:61:ad:3c:50:04:4d:bf:f3:bc:24:e5:
92:0b:2b:db:5a:3c:70:f5:d5:43:94:c7:fa:c6:14:2d:04:fc:
51:54:bf:79:17:27:c8:4b:c0:d9:5d:66:91:f0:f7:40:2d:32:
a6:02:e4:06:b6:04:38:91:38:a7:ce:f2:c1:44:10:6a:29:88:
4c:fa:3f:57:29:eb:b1:1f:42:c3:6a:5e:b2:ba:81:81:a0:89:
f8:8e:f1:f0:39:c3:ec:4b:83:d0:24:1d:ba:fc:2b:83:bf:b6:
30:f7:c4:28:01:cb:45:ca:71:93:b0:1f:a7:70:b3:14:0a:33:
7c:9b:10:63:7a:96:13:05:ea:86:0d:f1:28:5e:7f:b3:4d:86:
78:41:29:0f:ed:b3:ab:4a:f9:94:4a:ab:a0:3c:16:85:71:29:
e7:0b:8d:77:c1:be:9b:2b:55:32:45:19:40:6b:e0:83:e4:3c:
91:28:9c:94
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODc0MkMxMTAvBgNVBAUTKDFDM0Y5OUEwQzE4MkI1OENDNDVCODExMkYyOTFFMTJB
MTUzMzMxRTkwHhcNMjUwMzI4MTY0ODU4WhcNMjUwNDA0MTY0ODU4WjAYMRYwFAYD
VQQDEw02N2U2ZDJmYS1lMjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAplGj8h/j+aa+NG+VklgkBz8jpaN7lY9IAPGme8og6uvihU2Xg65u1WtOvBQ/
QCHJfpWM5i4Oocez/BSjsN9Avj+R8QfYgpFyH0vyAy5cwSFvazhQLBL9Mb3AFVhw
JN9HGwRuc2Qpc48T9zwuwzV/tgz2Eb6QR6ImdqWyC9ewPWMfQko3TVm8ybYvn9x6
HZsJlcU+Vl+hh4VwjhQHffZcQjb3q8hqAeIhLaj7KQzIjq9QlJihjrMhj0gnM/Th
scJrlxi65d6b9M06KPbMWhpDbUCFg7Xszfdt5zSmIb11KIKYAH/YRazpfHUk2P4z
TNa3HFcEuMuvVFsLVkeLMRCKJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKMbnbL8
w1kPeB8f8wfDGpS4qyFtMB8GA1UdIwQYMBaAFBw/maDBgrWMxFuBEvKR4SoVMzHp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQyQy9GMjhDODlDNDAx
OUMxMUU4OTAzNUY5MTlDNEY5QUUwMi9IRC1ab01HQ3RZekVXNEVTOHBIaEtoVXpN
ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hELVpvTUdDdFl6RVc0RVM4cEhoS2hVek1lay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NzQyQy9GMjhDODlDNDAxOUMxMUU4OTAzNUY5MTlDNEY5QUUwMi9IRC1ab01HQ3RZ
ekVXNEVTOHBIaEtoVXpNZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBal02kBpAkas0XZXwzxuBmhzGi6U48NkUjarksnxQo8Kkfq3I/RZt8
mhOmUd77VPWLLFRhXXpCmAjp5vs+W9zHWBGzzgs2rt2M9nYgnKudYa08UARNv/O8
JOWSCyvbWjxw9dVDlMf6xhQtBPxRVL95FyfIS8DZXWaR8PdALTKmAuQGtgQ4kTin
zvLBRBBqKYhM+j9XKeuxH0LDal6yuoGBoIn4jvHwOcPsS4PQJB26/CuDv7Yw98Qo
ActFynGTsB+ncLMUCjN8mxBjepYTBeqGDfEoXn+zTYZ4QSkP7bOrSvmUSqugPBaF
cSnnC413wb6bK1UyRRlAa+CD5DyRKJyU
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:50:16 2025 by rpki-client