Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/ZyEk9jPIkZyl12bYnpzP8LIfDI0.mft
File: ZyEk9jPIkZyl12bYnpzP8LIfDI0.mft (raw, json)
Hash identifier: 8BF3/5sIFqaHfHS+xl2s2hieeyQaLcwYhMleQAZwC8w=
Subject key identifier: 91:FB:32:75:CD:9C:EF:DA:CF:B1:B7:4E:1C:E8:F0:6D:39:E8:C7:52
Authority key identifier: 67:21:24:F6:33:C8:91:9C:A5:D7:66:D8:9E:9C:CF:F0:B2:1F:0C:8D
Certificate issuer: /CN=A91CAA4E/serialNumber=672124F633C8919CA5D766D89E9CCFF0B21F0C8D
Certificate serial: 1312
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyEk9jPIkZyl12bYnpzP8LIfDI0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/ZyEk9jPIkZyl12bYnpzP8LIfDI0.mft
Manifest number: 1A05
Signing time: Fri 28 Mar 2025 17:09:12 +0000
Manifest this update: Fri 28 Mar 2025 17:09:12 +0000
Manifest next update: Fri 04 Apr 2025 17:09:12 +0000
Files and hashes: 1: ZyEk9jPIkZyl12bYnpzP8LIfDI0.crl (hash: f44lW3z2wDnKXC5q98UwUEe4e6vVoerZaWTzc0KG1Ms=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4882 (0x1312)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CAA4E
Validity
Not Before: Mar 28 17:09:12 2025 GMT
Not After : Apr 4 17:09:12 2025 GMT
Subject: CN=67e6d7b8-5261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e3:4d:dc:47:4f:f1:98:e3:12:9c:87:a8:53:
ab:2f:b8:b7:f3:c5:88:33:b0:c5:23:b6:29:dd:77:
77:f9:38:4c:14:c9:5d:f1:e9:c4:fb:0f:27:02:20:
e0:b8:5a:42:a7:b5:08:8d:df:69:f8:16:93:52:c0:
bb:55:f4:1f:5e:41:28:19:cf:04:dd:61:89:6a:b8:
b7:13:0a:99:94:4c:45:a4:7d:e8:33:38:58:8d:a5:
b8:ce:08:c7:16:3e:b9:7f:09:1f:a7:78:0b:4f:05:
83:bd:f0:4d:0d:1e:0b:80:3c:e7:b6:49:79:d1:64:
ae:80:07:38:86:5d:6d:9d:0e:c0:c5:3c:80:1c:5b:
e8:75:16:07:09:40:a1:e9:ca:96:07:23:17:07:1d:
0f:49:5e:c1:f9:81:58:7a:6b:13:11:c2:cd:b5:9f:
0e:85:9f:e8:e9:93:06:24:51:9a:0c:f2:23:97:8a:
4e:df:8a:4c:47:3e:de:7f:d0:97:39:eb:ad:d5:4e:
5c:f6:80:2e:84:bc:a7:b2:55:67:59:6d:41:49:59:
d6:a7:5e:2d:a9:63:9c:87:5f:64:73:d9:2c:2b:7b:
dd:31:7b:81:fc:5c:66:61:69:3f:af:e8:5d:b5:09:
2b:ed:d0:f6:7f:a5:e6:ab:a0:a2:d7:60:ff:ec:73:
43:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:FB:32:75:CD:9C:EF:DA:CF:B1:B7:4E:1C:E8:F0:6D:39:E8:C7:52
X509v3 Authority Key Identifier:
keyid:67:21:24:F6:33:C8:91:9C:A5:D7:66:D8:9E:9C:CF:F0:B2:1F:0C:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/ZyEk9jPIkZyl12bYnpzP8LIfDI0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyEk9jPIkZyl12bYnpzP8LIfDI0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/ZyEk9jPIkZyl12bYnpzP8LIfDI0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:37:73:91:72:a5:4c:71:d1:64:fa:f1:f1:0c:ec:56:56:53:
e1:8a:f0:fc:34:fb:ff:d0:33:92:d3:26:ad:40:ce:e5:d7:d7:
86:12:f2:a9:ed:02:28:2c:aa:51:0e:27:b8:33:40:45:d4:20:
73:24:f2:81:af:38:4d:57:f5:56:74:17:35:b3:e7:4c:8b:69:
e6:d2:ca:60:81:ca:57:82:b6:7c:bd:a3:25:78:58:b6:7e:f4:
59:02:e4:8e:d5:45:b6:df:e2:ad:76:b0:a7:bf:f0:fe:39:d8:
1f:94:e6:eb:2a:10:c8:8a:4f:6d:f3:6e:5e:94:dd:87:bb:4e:
28:43:70:08:68:03:23:5d:19:da:5e:c8:94:3f:2a:af:51:b3:
da:71:dc:23:d4:94:d1:5d:a6:f2:dc:29:e7:0d:67:55:40:30:
43:55:38:72:50:80:79:88:23:8f:d7:09:25:7d:23:75:db:94:
df:8e:37:ab:ec:16:49:2b:4a:fd:13:30:18:ac:fd:52:95:f5:
4f:ae:d4:0b:6e:0a:38:e7:fe:0c:8d:f6:95:e9:05:75:83:52:
eb:8c:6f:56:cc:e7:2a:e7:10:ab:a0:38:4a:19:66:92:18:1a:
dd:cd:ad:94:2d:22:c2:7c:a0:79:58:fd:1f:92:0a:f7:e8:8a:
a8:03:e3:0d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICExIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0FBNEUxMTAvBgNVBAUTKDY3MjEyNEY2MzNDODkxOUNBNUQ3NjZEODlFOUNDRkYw
QjIxRjBDOEQwHhcNMjUwMzI4MTcwOTEyWhcNMjUwNDA0MTcwOTEyWjAYMRYwFAYD
VQQDEw02N2U2ZDdiOC01MjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv+NN3EdP8ZjjEpyHqFOrL7i388WIM7DFI7Yp3Xd3+ThMFMld8enE+w8nAiDg
uFpCp7UIjd9p+BaTUsC7VfQfXkEoGc8E3WGJari3EwqZlExFpH3oMzhYjaW4zgjH
Fj65fwkfp3gLTwWDvfBNDR4LgDzntkl50WSugAc4hl1tnQ7AxTyAHFvodRYHCUCh
6cqWByMXBx0PSV7B+YFYemsTEcLNtZ8OhZ/o6ZMGJFGaDPIjl4pO34pMRz7ef9CX
Oeut1U5c9oAuhLynslVnWW1BSVnWp14tqWOch19kc9ksK3vdMXuB/FxmYWk/r+hd
tQkr7dD2f6Xmq6Ci12D/7HND5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJH7MnXN
nO/az7G3Thzo8G056MdSMB8GA1UdIwQYMBaAFGchJPYzyJGcpddm2J6cz/CyHwyN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUE0RS81NUU5Nzk1QUE5
NEYxMUU4QUEwQzkwMEVDNEY5QUUwMi9aeUVrOWpQSWtaeWwxMmJZbnB6UDhMSWZE
STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1p5RWs5alBJa1p5bDEyYllucHpQOExJZkRJMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QUE0RS81NUU5Nzk1QUE5NEYxMUU4QUEwQzkwMEVDNEY5QUUwMi9aeUVrOWpQSWta
eWwxMmJZbnB6UDhMSWZESTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCHN3ORcqVMcdFk+vHxDOxWVlPhivD8NPv/0DOS0yatQM7l19eGEvKp
7QIoLKpRDie4M0BF1CBzJPKBrzhNV/VWdBc1s+dMi2nm0spggcpXgrZ8vaMleFi2
fvRZAuSO1UW23+KtdrCnv/D+OdgflObrKhDIik9t825elN2Hu04oQ3AIaAMjXRna
XsiUPyqvUbPacdwj1JTRXaby3CnnDWdVQDBDVThyUIB5iCOP1wklfSN125Tfjjer
7BZJK0r9EzAYrP1SlfVPrtQLbgo45/4MjfaV6QV1g1LrjG9WzOcq5xCroDhKGWaS
GBrdza2ULSLCfKB5WP0fkgr36IqoA+MN
-----END CERTIFICATE-----
Generated at Sat Apr 5 05:52:27 2025 by rpki-client