Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft
File: ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft (raw, json)
Hash identifier: +UNYWcSMFhOLu2VT5P0HN2Ylowjcr61Pi6Trw1FWhwE=
Subject key identifier: A9:C6:EE:7E:C5:04:74:61:83:6D:55:41:54:B9:ED:B1:0E:B4:BB:13
Authority key identifier: 65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2
Certificate issuer: /CN=A915FE77/serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2
Certificate serial: 0C53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft
Manifest number: 0C4F
Signing time: Fri 28 Mar 2025 18:29:34 +0000
Manifest this update: Fri 28 Mar 2025 18:29:34 +0000
Manifest next update: Fri 04 Apr 2025 18:29:34 +0000
Files and hashes: 1: ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl (hash: zjbe1ctSa96O2KcWhqhk0cs25FrJO3tka5X3di2V3ik=)
2: 357D722C67D911EEA787145FC4F9AE02.roa (hash: SQXs/tY3XOSQNHiYfHzxydfLP1PY6AbFebk6F2wwSZM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3155 (0xc53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FE77
Validity
Not Before: Mar 28 18:29:34 2025 GMT
Not After : Apr 4 18:29:34 2025 GMT
Subject: CN=67e6ea8e-aa6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:65:e0:39:b5:40:0d:0e:c3:df:61:ec:49:cb:
c9:7c:3e:9b:b2:c9:56:4e:6f:e1:bb:bc:a8:cb:33:
d9:01:39:24:92:27:a7:43:b0:6a:8e:0f:5b:93:fc:
57:e4:e6:b3:c5:7d:e8:a3:b3:bd:3d:81:57:b1:8c:
6e:48:01:72:b6:27:e3:e9:37:e2:7c:76:46:00:b2:
1b:c9:c3:ac:4b:2f:82:e7:39:c5:b1:27:bc:f3:a4:
2f:95:f2:26:d1:58:80:f2:23:70:66:5e:2a:97:95:
2a:33:60:2c:6e:9d:4b:bc:b8:6d:b4:f8:a7:72:22:
c9:6e:70:de:a2:88:bf:ef:76:04:9d:cd:be:ab:ba:
92:e3:92:a2:56:f1:ab:71:1c:73:9f:d7:97:eb:e9:
d7:27:b4:3a:dd:25:68:63:8d:13:f0:37:85:f5:f0:
44:db:c0:12:f1:6b:4c:2d:e6:bb:5e:91:b4:44:8a:
67:3e:b1:15:78:80:f1:05:12:c2:98:5d:22:54:fe:
f1:c9:fa:94:45:e7:0f:e0:43:3c:89:54:8c:91:ca:
95:37:29:14:e4:d8:a8:98:34:3f:a4:c3:29:12:1d:
4a:cc:bd:70:0a:90:32:8a:5d:f6:71:5e:f2:2f:e6:
0b:c8:0e:d5:a7:52:48:19:99:ae:3b:33:9b:bc:76:
19:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C6:EE:7E:C5:04:74:61:83:6D:55:41:54:B9:ED:B1:0E:B4:BB:13
X509v3 Authority Key Identifier:
keyid:65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:9a:6b:75:aa:91:69:e9:f0:0c:6a:3a:e8:29:0a:5d:ad:89:
b5:84:5c:6a:4c:c6:96:a2:f3:ed:6d:da:fd:a5:60:d4:d0:81:
c7:62:79:cf:85:a7:e3:e0:e2:9e:27:0f:44:77:f4:97:8f:8e:
09:db:d7:db:2a:19:54:f3:04:cc:d3:7d:07:d9:72:3f:4e:89:
a8:6f:6b:3f:7b:36:a5:ea:14:f8:3a:e8:d0:be:13:bd:61:37:
ec:73:a0:aa:11:16:7d:a2:f4:2d:8b:4b:41:7e:2f:c6:63:a4:
f2:48:1a:2c:09:97:e0:df:37:90:00:3e:f8:48:88:78:e6:cf:
f5:ff:fb:59:58:99:de:76:30:c1:6f:0c:24:e3:fc:0e:b1:6b:
18:c6:1c:12:76:b9:4c:4c:b5:89:83:e5:2b:b9:e7:58:db:a0:
5c:54:85:75:2d:fc:2c:37:d7:d5:5f:e1:ba:88:fb:f9:b0:65:
82:1b:ab:52:00:58:97:23:d9:08:22:7d:83:42:dc:89:bb:65:
17:67:09:ed:2a:3a:1f:9c:30:f7:3e:98:67:f7:53:19:df:ee:
1c:43:31:de:2d:0e:3e:36:4b:27:14:9c:f3:c3:ee:7e:97:e5:
14:b4:9d:5f:ff:42:c9:a4:c6:14:bf:09:75:67:7a:3e:96:70:
ad:4a:94:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:41:50 2025 by rpki-client