Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft
File: zpBWtMZd44V9TQ4dsAI9YLb30ww.mft (raw, json)
Hash identifier: J36c/+WzrHP9Ml8tv/2I+GjBia9ozj++qrzg42CQe1E=
Subject key identifier: 86:8B:4A:55:BD:AE:CD:37:46:CE:9C:C2:3F:1A:AE:84:5A:40:C7:68
Authority key identifier: CE:90:56:B4:C6:5D:E3:85:7D:4D:0E:1D:B0:02:3D:60:B6:F7:D3:0C
Certificate issuer: /CN=A91DD125/serialNumber=CE9056B4C65DE3857D4D0E1DB0023D60B6F7D30C
Certificate serial: 17E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zpBWtMZd44V9TQ4dsAI9YLb30ww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft
Manifest number: 1793
Signing time: Tue 17 Jun 2025 03:17:08 +0000
Manifest this update: Tue 17 Jun 2025 03:17:07 +0000
Manifest next update: Tue 24 Jun 2025 03:17:07 +0000
Files and hashes: 1: zpBWtMZd44V9TQ4dsAI9YLb30ww.crl (hash: jyQEUbCyAbRdcqcviIohYbmf3wJkdYl/JdVN/heUNzg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6115 (0x17e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD125, serialNumber=CE9056B4C65DE3857D4D0E1DB0023D60B6F7D30C
Validity
Not Before: Jun 17 03:17:07 2025 GMT
Not After : Jun 24 03:17:07 2025 GMT
Subject: CN=6850de33-a553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:04:0c:73:2e:c7:ce:c6:7f:04:d2:bd:4b:ad:
3d:18:ca:22:5b:cf:85:b1:b7:4e:fb:32:dd:18:01:
a8:52:89:4d:1c:65:24:c4:17:65:dd:1e:11:10:f0:
a8:62:e5:86:64:84:64:4b:cc:79:f1:43:1f:56:29:
5b:82:a9:a1:7e:a2:c1:86:71:40:82:c9:ae:02:cb:
ae:f4:68:c8:cc:bd:dd:0c:62:8d:72:8f:93:85:d8:
d9:c4:7f:cf:a7:9c:6a:14:39:b9:ec:09:bf:67:03:
55:f8:12:11:af:1f:7f:b5:d6:f8:3a:55:ea:2e:e9:
7d:b5:dd:5e:bd:d0:bb:70:ff:2a:34:11:03:87:01:
03:40:04:a1:1e:91:4b:6d:a3:33:ad:77:d6:ab:16:
89:3b:82:72:2f:1f:40:30:7c:8f:09:37:04:00:f0:
4f:ba:17:47:ec:a1:23:9f:5e:97:a3:a5:01:51:01:
a6:96:ec:56:55:a1:38:30:9a:83:5e:b3:38:fc:47:
10:31:ff:47:2e:8a:f5:03:0e:e0:62:56:7f:b7:14:
29:f2:c0:0e:e9:c3:7c:ad:27:4a:e7:cd:74:c4:fd:
d4:93:a2:dc:e7:0e:b4:7c:ac:58:40:a3:7b:38:fe:
39:2a:f5:15:a0:55:94:ed:21:17:09:07:d6:30:ba:
41:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8B:4A:55:BD:AE:CD:37:46:CE:9C:C2:3F:1A:AE:84:5A:40:C7:68
X509v3 Authority Key Identifier:
keyid:CE:90:56:B4:C6:5D:E3:85:7D:4D:0E:1D:B0:02:3D:60:B6:F7:D3:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zpBWtMZd44V9TQ4dsAI9YLb30ww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ca:e1:45:75:b3:d8:21:e4:95:54:e5:12:f2:55:15:a0:38:
3e:6b:67:d5:1d:3a:ac:45:26:93:46:a9:1a:7b:f4:31:50:4b:
0d:87:25:6b:fb:03:5d:6d:b7:49:d0:e9:fe:8f:07:84:6d:64:
ec:b2:3c:fb:b6:d5:89:c2:d9:46:ee:77:9e:ee:e0:16:04:07:
27:01:9e:cf:0c:73:a5:1f:5d:e1:e5:8b:8b:fe:81:47:80:2e:
e1:25:22:51:4b:2a:4b:0c:12:ae:e9:d1:b8:f4:9f:a6:4e:05:
ec:78:3e:46:7f:1f:21:c6:2c:28:6e:f0:4c:46:76:5e:ba:55:
2e:8c:a3:46:7d:c4:47:cc:8a:31:64:19:4b:82:84:a1:f8:68:
d3:0c:38:03:3e:3b:b0:af:f2:6c:6c:9e:d8:6d:3d:71:2f:91:
71:03:2c:a8:e5:5f:d3:c4:b9:f1:f7:68:88:b3:10:5c:94:c1:
02:c6:77:7d:0a:47:29:0d:02:dd:fc:b5:5f:b3:d5:2f:35:df:
89:f8:a1:aa:75:6b:d6:0e:48:d2:6e:0a:f3:ac:a6:f3:06:41:
77:94:11:ef:9a:4e:0a:a6:e7:3c:98:4e:08:b7:66:a2:1d:c9:
2c:45:f8:88:f3:0a:cf:88:03:91:b4:c3:57:3a:22:d5:d9:47:
7c:a4:21:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 12:16:04 2025 by rpki-client