
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.mft
File: mzDlUwzhTILM3z53pTDnP9QQ43c.mft (raw, json)
Hash identifier: f376X6r8K5lcS6gATmd7w/p/sChrcjBg8K7pzUZiQJA=
Subject key identifier: D3:0F:9D:3A:E7:F3:4D:57:C0:2D:42:DF:98:53:00:DC:7B:B2:05:82
Authority key identifier: 9B:30:E5:53:0C:E1:4C:82:CC:DF:3E:77:A5:30:E7:3F:D4:10:E3:77
Certificate issuer: /CN=A91A98E5/serialNumber=9B30E5530CE14C82CCDF3E77A530E73FD410E377
Certificate serial: 019E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzDlUwzhTILM3z53pTDnP9QQ43c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.mft
Manifest number: 019A
Signing time: Sun 19 Oct 2025 23:09:25 +0000
Manifest this update: Sun 19 Oct 2025 23:09:24 +0000
Manifest next update: Sun 26 Oct 2025 23:09:24 +0000
Files and hashes: 1: mzDlUwzhTILM3z53pTDnP9QQ43c.crl (hash: WIYOyDwq0nApjh+VN15ZMdLt+JffME8uhdsUjtM55qA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414 (0x19e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A98E5, serialNumber=9B30E5530CE14C82CCDF3E77A530E73FD410E377
Validity
Not Before: Oct 19 23:09:24 2025 GMT
Not After : Oct 26 23:09:24 2025 GMT
Subject: CN=68f56fa4-2487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f7:84:10:84:0b:71:cd:52:05:f3:b3:92:31:
14:19:a4:dd:67:cd:2b:29:e7:a8:1f:e5:70:d4:da:
f3:f3:ce:da:28:8d:60:f3:c2:2e:38:64:d1:bd:b9:
d1:3e:48:aa:da:fb:44:94:f0:54:c0:49:a4:87:df:
db:57:d6:6c:7f:21:70:cd:08:65:43:05:20:9d:a2:
ec:1a:b7:46:dc:39:89:cb:e4:81:3f:76:fb:07:ca:
d3:26:ac:42:14:48:2d:c9:7b:25:05:d5:34:41:43:
1d:0a:bb:dc:9b:b0:89:33:11:81:02:8c:51:9e:63:
4f:1e:51:3e:55:c8:05:93:9f:3d:9d:a2:e9:a9:40:
bb:fa:af:32:42:37:a3:2d:3e:9b:8d:12:7a:17:92:
e2:e2:01:81:59:47:0c:7a:c1:70:87:d0:c1:e3:fd:
49:73:48:19:64:5e:36:8b:d0:61:1a:95:0d:e1:f3:
8a:30:fb:c4:9e:f3:d4:f5:5c:1c:6d:ce:83:e6:76:
38:91:0e:15:3b:2d:f9:82:f0:7d:6d:64:90:a8:48:
39:a7:19:fa:eb:8b:85:27:ee:3d:33:81:43:9b:c8:
5a:31:64:41:6b:9e:24:35:58:b6:a8:b5:99:38:08:
e4:fe:9f:85:3f:94:7a:bc:63:b8:3a:0f:c2:db:35:
20:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0F:9D:3A:E7:F3:4D:57:C0:2D:42:DF:98:53:00:DC:7B:B2:05:82
X509v3 Authority Key Identifier:
keyid:9B:30:E5:53:0C:E1:4C:82:CC:DF:3E:77:A5:30:E7:3F:D4:10:E3:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzDlUwzhTILM3z53pTDnP9QQ43c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:18:0d:ae:31:50:5a:16:89:c2:bf:31:e9:9c:19:55:0d:7f:
50:c2:bf:13:f7:ba:2b:90:6c:2c:16:55:7b:a6:77:ef:21:1e:
df:e8:25:82:d6:68:ab:58:e2:a9:5f:e8:33:74:23:37:fe:6a:
3f:57:d2:5e:d5:e4:40:5f:3a:20:8a:46:a3:6b:ee:8a:7a:3d:
6c:11:76:80:a5:bb:96:64:d3:e6:7f:67:13:f5:93:a0:c1:d2:
2b:91:dd:e1:43:31:a0:6e:66:19:24:cb:db:55:7e:77:21:9b:
58:54:8c:33:5d:a0:4a:1f:5d:5c:ac:e4:c7:40:42:d7:ec:39:
59:d8:99:ab:1f:c1:dc:17:77:39:ef:21:d4:99:b2:b3:83:a9:
32:76:53:c7:73:58:1e:ad:78:17:af:e5:f7:02:4b:49:a5:8d:
22:36:a2:43:69:fb:66:89:b4:7c:93:03:58:cc:da:40:e7:6f:
02:95:da:76:86:b9:c0:43:82:91:d1:9c:6e:47:24:b1:35:3e:
28:20:b0:ce:b6:61:fa:6f:d2:3b:c3:7c:a1:37:32:3e:f1:0f:
ff:8f:7a:a2:73:ff:e5:0c:0e:92:ce:31:61:d0:90:21:48:33:
2b:8f:76:44:50:4e:06:46:6f:f5:ad:13:4f:f7:1d:4e:2e:7f:
d6:ed:45:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:56:57 2025 by rpki-client