Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft
File: UmRCqpPf8MUTmmF7DeZFtznmvs0.mft (raw, json)
Hash identifier: BdATN/myK0iUG81vILtOm2AoKqvr0YOEERdN7X9KRJQ=
Subject key identifier: DA:19:D6:25:E9:64:29:7A:37:D6:BF:E3:6B:56:0A:C1:0A:57:BA:20
Authority key identifier: 52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD
Certificate issuer: /CN=A9140D7D/serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD
Certificate serial: 09C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft
Manifest number: 09BE
Signing time: Fri 28 Mar 2025 20:14:12 +0000
Manifest this update: Fri 28 Mar 2025 20:14:12 +0000
Manifest next update: Fri 04 Apr 2025 20:14:12 +0000
Files and hashes: 1: UmRCqpPf8MUTmmF7DeZFtznmvs0.crl (hash: RAonFKctZZNYy6Ks2+L7rZk3pDT+N1+N4yF1GMBtZOw=)
2: 1C9AB3F67D6711EA90858415C4F9AE02.roa (hash: 32MI8zjp+omn2pz5wQODlf3/KMVL7tiwkuXJGcfvP+8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2502 (0x9c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140D7D
Validity
Not Before: Mar 28 20:14:12 2025 GMT
Not After : Apr 4 20:14:12 2025 GMT
Subject: CN=67e70314-162b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ad:ee:04:40:e8:12:15:96:63:96:20:ae:fa:
57:a8:e3:f0:6d:23:26:34:62:75:96:25:3d:b3:1e:
22:db:e6:cb:83:92:30:2d:6c:d0:4b:14:16:ad:e8:
43:23:52:ab:1b:95:d3:28:b0:0d:16:e1:5b:8f:87:
a9:22:65:ef:10:ac:1a:98:28:5b:14:c5:b0:62:81:
41:60:00:ee:89:a9:0d:4f:34:33:40:d4:ae:a2:f9:
68:15:7b:d7:65:23:f5:12:b1:4d:53:0e:f7:a5:12:
4e:24:ea:98:57:b8:6c:9b:c9:a6:23:14:e0:58:24:
81:ed:77:d8:05:b3:a8:d2:43:66:e0:1a:8c:b5:06:
bc:75:b8:45:37:af:75:6a:f3:48:ac:32:3f:87:87:
10:ed:59:21:2c:58:e0:49:18:03:6f:7b:d0:36:04:
90:fb:c8:0a:73:66:65:12:b7:a2:d8:47:20:f8:8a:
c3:3f:5c:51:0a:f7:33:0b:6c:04:df:da:d3:39:db:
dc:e7:28:39:ca:15:1f:bb:56:a7:0a:37:79:61:34:
0f:a3:e8:22:48:ec:c0:72:06:22:f9:f7:84:1a:ec:
80:6d:96:be:4d:08:6f:fb:e5:e6:0e:8e:c6:5b:f2:
6c:34:59:fd:28:38:a1:39:62:76:18:c2:11:66:71:
f9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:19:D6:25:E9:64:29:7A:37:D6:BF:E3:6B:56:0A:C1:0A:57:BA:20
X509v3 Authority Key Identifier:
keyid:52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:b5:4f:9d:bd:45:ea:fb:25:1b:fb:a0:79:97:3c:22:8e:83:
b9:f2:16:a7:82:84:42:f6:6b:dd:e1:7c:de:59:d4:43:26:0c:
6b:7d:f3:e9:b9:89:1c:51:3d:43:03:bc:56:7a:75:a8:fd:51:
32:69:57:05:de:97:8a:c3:f1:a5:a8:3b:1d:f7:f9:fa:7a:50:
f7:55:c6:8b:00:12:1a:ed:07:c8:c0:dd:1c:69:e2:82:2b:45:
14:89:ac:7b:bd:9d:e8:6a:53:bf:da:fd:57:08:d3:78:a7:08:
ba:4b:34:63:36:85:ee:cf:d9:b6:9f:dd:55:c6:9b:6f:5b:5c:
2d:72:59:58:98:24:b7:12:e4:71:4e:f4:da:d9:12:11:17:0f:
9b:96:07:3e:93:52:c7:b3:ae:0a:21:51:70:36:8e:97:2e:7e:
22:55:57:d4:32:7b:ab:7a:a6:5e:7b:d9:0b:90:2d:05:b6:54:
8b:4d:bc:e2:18:ea:a3:61:34:9c:12:5c:89:e0:bb:9a:1f:3d:
68:86:a0:fc:eb:cb:7b:5c:5b:55:90:22:5c:58:62:97:fe:9e:
87:45:ff:ee:8f:42:d1:57:8d:23:90:91:a9:07:fc:b7:af:4d:
41:db:c8:0d:3c:a0:ab:d5:2d:3d:8a:74:f6:aa:1b:4f:6c:2a:
66:b3:10:11
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDBEN0QxMTAvBgNVBAUTKDUyNjQ0MkFBOTNERkYwQzUxMzlBNjE3QjBERTY0NUI3
MzlFNkJFQ0QwHhcNMjUwMzI4MjAxNDEyWhcNMjUwNDA0MjAxNDEyWjAYMRYwFAYD
VQQDEw02N2U3MDMxNC0xNjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2a3uBEDoEhWWY5YgrvpXqOPwbSMmNGJ1liU9sx4i2+bLg5IwLWzQSxQWrehD
I1KrG5XTKLANFuFbj4epImXvEKwamChbFMWwYoFBYADuiakNTzQzQNSuovloFXvX
ZSP1ErFNUw73pRJOJOqYV7hsm8mmIxTgWCSB7XfYBbOo0kNm4BqMtQa8dbhFN691
avNIrDI/h4cQ7VkhLFjgSRgDb3vQNgSQ+8gKc2ZlErei2Ecg+IrDP1xRCvczC2wE
39rTOdvc5yg5yhUfu1anCjd5YTQPo+giSOzAcgYi+feEGuyAbZa+TQhv++XmDo7G
W/JsNFn9KDihOWJ2GMIRZnH5JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNoZ1iXp
ZCl6N9a/42tWCsEKV7ogMB8GA1UdIwQYMBaAFFJkQqqT3/DFE5phew3mRbc55r7N
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQ3RC83MTZEMkYzNjdE
NjYxMUVBQjMyQjNCMTVDNEY5QUUwMi9VbVJDcXBQZjhNVVRtbUY3RGVaRnR6bm12
czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VtUkNxcFBmOE1VVG1tRjdEZVpGdHpubXZzMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MEQ3RC83MTZEMkYzNjdENjYxMUVBQjMyQjNCMTVDNEY5QUUwMi9VbVJDcXBQZjhN
VVRtbUY3RGVaRnR6bm12czAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBJtU+dvUXq+yUb+6B5lzwijoO58hangoRC9mvd4XzeWdRDJgxrffPp
uYkcUT1DA7xWenWo/VEyaVcF3peKw/GlqDsd9/n6elD3VcaLABIa7QfIwN0caeKC
K0UUiax7vZ3oalO/2v1XCNN4pwi6SzRjNoXuz9m2n91VxptvW1wtcllYmCS3EuRx
TvTa2RIRFw+blgc+k1LHs64KIVFwNo6XLn4iVVfUMnureqZee9kLkC0FtlSLTbzi
GOqjYTScElyJ4LuaHz1ohqD868t7XFtVkCJcWGKX/p6HRf/uj0LRV40jkJGpB/y3
r01B28gNPKCr1S09inT2qhtPbCpmsxAR
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:21:24 2025 by rpki-client