Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
File: Zw46BnIWhKtHO7vlzCLPBdAkv20.mft (raw, json)
Hash identifier: pK06vH2TxS1j8yoYVeAEs3oMpitoyCl/K4iyf6MVXcE=
Subject key identifier: 9E:50:95:25:A3:68:28:8C:7C:75:95:6A:C0:AD:90:CB:91:8D:07:AB
Authority key identifier: 67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D
Certificate issuer: /CN=A91EAE0A/serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D
Certificate serial: 3A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
Manifest number: 39
Signing time: Sat 29 Mar 2025 06:53:42 +0000
Manifest this update: Sat 29 Mar 2025 06:53:42 +0000
Manifest next update: Sat 05 Apr 2025 06:53:42 +0000
Files and hashes: 1: Zw46BnIWhKtHO7vlzCLPBdAkv20.crl (hash: 8OBAHtGE5jcKFhgVSZeDuuMTy97TBq6CP3+IVywNumI=)
2: 9C532970B72311EFBA17AB72C4F9AE02.roa (hash: V8Oi/Zt9u9c7P3V5ZEct3r3+92oknInn9a1C4JSyxzA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE0A
Validity
Not Before: Mar 29 06:53:42 2025 GMT
Not After : Apr 5 06:53:42 2025 GMT
Subject: CN=67e798f6-d3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3c:b0:27:5a:db:5e:84:a0:8d:2c:67:a8:4d:
d0:95:0b:a3:5b:be:ba:b5:e9:52:0d:88:4e:7d:ae:
cf:4b:64:2d:26:12:fb:0a:a7:30:83:bc:40:8e:8a:
c1:b2:d1:c1:12:10:11:ba:bc:4b:31:9e:9e:e4:c7:
c1:cb:5c:8f:0c:19:db:03:6f:04:1f:ad:57:0a:20:
10:a0:df:ea:10:7c:11:07:43:f2:0f:7e:5a:72:2f:
35:21:d7:9e:25:69:ef:77:e5:2e:83:e4:25:26:0a:
c2:d3:28:76:b7:95:a1:72:39:e8:86:36:9c:5c:32:
79:23:85:45:7d:fe:f6:00:2c:98:5c:01:08:a6:24:
c8:71:2a:b2:7a:4c:50:c1:13:33:e6:95:02:9a:0c:
37:44:f1:d2:1a:25:c5:eb:56:92:94:0c:6b:a3:62:
3a:dc:25:ce:93:71:cc:df:11:b4:e9:b0:e4:40:22:
20:33:d1:4b:46:ab:66:ba:3f:5b:29:76:03:aa:74:
34:34:93:69:c1:47:c1:d7:f0:9e:33:a4:39:18:19:
3d:d4:de:3f:f2:d9:5e:1b:78:0c:74:01:eb:29:6c:
89:90:21:89:41:2d:b6:aa:8f:01:da:79:fc:79:a9:
0a:e5:2a:5d:d5:dd:90:da:7c:df:49:a6:ce:2b:62:
88:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:50:95:25:A3:68:28:8C:7C:75:95:6A:C0:AD:90:CB:91:8D:07:AB
X509v3 Authority Key Identifier:
keyid:67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:00:81:82:ef:0f:51:8f:f2:06:bf:c2:49:88:3b:d4:16:62:
0f:34:af:99:48:8a:82:25:50:6d:26:af:b6:72:ce:b5:da:42:
d6:bc:cf:6f:ab:75:59:cf:2e:57:4f:dd:95:33:d1:2c:ce:07:
62:5b:3c:78:0a:d1:0c:63:3f:10:81:1d:79:15:51:1b:25:64:
98:6c:09:54:79:0d:ea:41:75:58:28:cf:61:e0:07:d6:f9:34:
23:5a:e7:58:7e:92:f6:52:f6:5e:6e:5b:5e:19:26:36:65:73:
53:e0:5b:b7:41:05:c8:96:55:f1:31:97:56:29:eb:9d:b4:b6:
60:2c:87:ad:41:ef:19:0a:a5:1e:9d:b7:22:f7:c3:dc:18:fc:
37:33:1c:e3:55:e3:f2:1c:c8:07:92:e8:4d:99:56:4c:78:b2:
f5:bd:b5:cd:a2:a2:4f:b2:67:5d:7c:f7:bf:14:6a:d2:cb:83:
dd:d6:d9:22:86:15:0a:0d:10:69:70:99:32:7e:a1:e7:5f:41:
52:18:45:a4:3c:e1:d7:22:fa:e4:50:c5:71:86:b6:6d:88:9e:
1a:a0:2e:94:a3:a7:d4:e6:ae:23:8d:b8:75:65:2c:22:72:fc:
bb:a2:97:97:72:e3:a1:da:c4:0b:d2:82:5a:ad:67:af:41:98:
15:59:9a:4a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
QUUwQTExMC8GA1UEBRMoNjcwRTNBMDY3MjE2ODRBQjQ3M0JCQkU1Q0MyMkNGMDVE
MDI0QkY2RDAeFw0yNTAzMjkwNjUzNDJaFw0yNTA0MDUwNjUzNDJaMBgxFjAUBgNV
BAMTDTY3ZTc5OGY2LWQzYTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCjPLAnWttehKCNLGeoTdCVC6Nbvrq16VINiE59rs9LZC0mEvsKpzCDvECOisGy
0cESEBG6vEsxnp7kx8HLXI8MGdsDbwQfrVcKIBCg3+oQfBEHQ/IPflpyLzUh154l
ae935S6D5CUmCsLTKHa3laFyOeiGNpxcMnkjhUV9/vYALJhcAQimJMhxKrJ6TFDB
EzPmlQKaDDdE8dIaJcXrVpKUDGujYjrcJc6TcczfEbTpsORAIiAz0UtGq2a6P1sp
dgOqdDQ0k2nBR8HX8J4zpDkYGT3U3j/y2V4beAx0AespbImQIYlBLbaqjwHaefx5
qQrlKl3V3ZDafN9Jps4rYoi9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnlCVJaNo
KIx8dZVqwK2Qy5GNB6swHwYDVR0jBBgwFoAUZw46BnIWhKtHO7vlzCLPBdAkv20w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBRTBBL0RBRjZENzM2Qjcy
MjExRUZCQzM2QTc0OEM0RjlBRTAyL1p3NDZCbklXaEt0SE83dmx6Q0xQQmRBa3Yy
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvWnc0NkJuSVdoS3RITzd2bHpDTFBCZEFrdjIwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB
RTBBL0RBRjZENzM2QjcyMjExRUZCQzM2QTc0OEM0RjlBRTAyL1p3NDZCbklXaEt0
SE83dmx6Q0xQQmRBa3YyMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBACgAgYLvD1GP8ga/wkmIO9QWYg80r5lIioIlUG0mr7ZyzrXaQta8z2+r
dVnPLldP3ZUz0SzOB2JbPHgK0QxjPxCBHXkVURslZJhsCVR5DepBdVgoz2HgB9b5
NCNa51h+kvZS9l5uW14ZJjZlc1PgW7dBBciWVfExl1Yp6520tmAsh61B7xkKpR6d
tyL3w9wY/DczHONV4/IcyAeS6E2ZVkx4svW9tc2iok+yZ118978UatLLg93W2SKG
FQoNEGlwmTJ+oedfQVIYRaQ84dci+uRQxXGGtm2InhqgLpSjp9TmriONuHVlLCJy
/Luil5dy46HaxAvSglqtZ69BmBVZmko=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:29:55 2025 by rpki-client