Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft
File: 9ZvGR-kMztyU6oWmLrjrGL0DUms.mft (raw, json)
Hash identifier: MhHp4vV47xGicIpW+LsAI1/1EX82A3kx1mnzbAtxUO4=
Subject key identifier: E5:EC:C6:B3:33:E8:76:6F:23:9D:95:63:50:F9:0C:F5:D3:A7:DF:13
Authority key identifier: F5:9B:C6:47:E9:0C:CE:DC:94:EA:85:A6:2E:B8:EB:18:BD:03:52:6B
Certificate issuer: /CN=A917CFD2/serialNumber=F59BC647E90CCEDC94EA85A62EB8EB18BD03526B
Certificate serial: 07E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft
Manifest number: 07DB
Signing time: Fri 28 Mar 2025 21:18:33 +0000
Manifest this update: Fri 28 Mar 2025 21:18:33 +0000
Manifest next update: Fri 04 Apr 2025 21:18:33 +0000
Files and hashes: 1: 9ZvGR-kMztyU6oWmLrjrGL0DUms.crl (hash: TUfIlHWegJ0jxAJLH9Ul4sA08MhkcFBgD8LR5Gtusoc=)
2: EED16B2CEC4211EABC227339C4F9AE02.roa (hash: L4B2evBW9dTHQXVqbxeQ4CNrkuNZaT5qA9O5a+LAGeg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2025 (0x7e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CFD2
Validity
Not Before: Mar 28 21:18:33 2025 GMT
Not After : Apr 4 21:18:33 2025 GMT
Subject: CN=67e71229-b5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:49:e9:e4:13:38:f1:11:37:ee:8f:a8:93:c7:
12:c7:5e:03:c7:d1:f2:4c:14:53:11:cd:84:0e:2d:
67:17:18:34:52:32:16:51:a0:b8:aa:98:e6:6a:ea:
da:63:e0:ce:bd:13:c0:21:29:7b:6c:ce:26:76:e1:
16:1c:e0:93:3d:a1:b8:d6:93:25:ed:e7:ff:88:d2:
98:b0:8c:8a:8f:11:2f:c1:86:7a:cf:ad:b9:9c:c2:
53:a9:04:7b:5a:77:bd:2c:47:3a:4b:74:d9:08:f8:
65:97:c0:e3:41:a0:3f:a1:6b:67:94:8a:84:ec:a9:
59:8a:3d:15:72:88:54:4c:12:a8:3d:51:48:2b:a6:
6f:c8:ee:cc:43:2a:55:15:7c:19:95:be:6d:5d:54:
ef:78:6b:4f:bb:b1:47:ea:e5:98:d4:ae:0b:55:9c:
6c:43:0f:cf:bd:bd:5d:79:95:21:a1:de:56:e9:23:
0a:3b:72:2a:fa:d0:2a:be:04:bb:16:1c:f4:88:ad:
6a:5f:0b:69:35:a4:9a:04:80:42:66:6e:4c:bf:34:
1d:3a:19:40:87:dd:d9:53:de:c8:cd:5a:61:d4:8b:
25:14:4b:77:36:ff:45:f4:7a:cd:e6:06:a3:70:b8:
f2:c8:8d:6e:48:03:3d:a0:49:2c:41:b8:01:f1:0e:
96:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:EC:C6:B3:33:E8:76:6F:23:9D:95:63:50:F9:0C:F5:D3:A7:DF:13
X509v3 Authority Key Identifier:
keyid:F5:9B:C6:47:E9:0C:CE:DC:94:EA:85:A6:2E:B8:EB:18:BD:03:52:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:93:20:e6:64:8d:2f:cf:78:1a:49:81:92:9c:bb:e0:08:d8:
7c:69:a3:7e:58:64:3d:62:22:7c:59:7b:f3:6d:8a:9c:15:c8:
cf:c4:00:ad:e7:f7:12:cf:16:79:7d:9d:45:1b:5b:3a:18:b2:
32:25:e2:2d:57:ae:fc:6f:cb:65:f3:31:a1:b4:5d:6d:6e:62:
86:7f:29:b8:82:e5:8d:34:5a:af:e6:82:2c:1c:c1:82:5a:ba:
8d:46:dc:03:e2:8c:20:67:f2:1e:14:ec:c5:aa:9e:92:2a:ed:
30:00:6a:15:84:e0:f6:86:f8:56:72:25:17:9e:b0:77:b6:0c:
71:5d:2e:2e:33:14:e1:63:89:90:7b:7e:dc:06:43:b4:f5:57:
41:79:64:d3:27:43:b5:11:cf:e0:d9:6a:cb:fc:54:bf:80:f3:
5a:8f:a9:97:12:b8:a2:dd:4a:de:4e:5d:2b:9d:d6:19:2f:98:
43:93:44:01:a9:9f:02:ac:4e:4c:7b:51:30:2e:6e:40:d3:0b:
4b:9f:ae:d9:b2:c4:56:5a:1c:c0:d2:32:99:6e:d3:03:97:81:
73:d2:38:fe:8b:3b:90:ce:8d:a7:e9:0a:60:ac:4e:d2:ed:6b:
bc:42:9f:51:27:00:50:e3:17:aa:d2:6e:97:42:f2:43:f4:87:
d2:22:62:fa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0NGRDIxMTAvBgNVBAUTKEY1OUJDNjQ3RTkwQ0NFREM5NEVBODVBNjJFQjhFQjE4
QkQwMzUyNkIwHhcNMjUwMzI4MjExODMzWhcNMjUwNDA0MjExODMzWjAYMRYwFAYD
VQQDEw02N2U3MTIyOS1iNWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvEnp5BM48RE37o+ok8cSx14Dx9HyTBRTEc2EDi1nFxg0UjIWUaC4qpjmaura
Y+DOvRPAISl7bM4mduEWHOCTPaG41pMl7ef/iNKYsIyKjxEvwYZ6z625nMJTqQR7
Wne9LEc6S3TZCPhll8DjQaA/oWtnlIqE7KlZij0VcohUTBKoPVFIK6ZvyO7MQypV
FXwZlb5tXVTveGtPu7FH6uWY1K4LVZxsQw/Pvb1deZUhod5W6SMKO3Iq+tAqvgS7
Fhz0iK1qXwtpNaSaBIBCZm5MvzQdOhlAh93ZU97IzVph1IslFEt3Nv9F9HrN5gaj
cLjyyI1uSAM9oEksQbgB8Q6WzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOXsxrMz
6HZvI52VY1D5DPXTp98TMB8GA1UdIwQYMBaAFPWbxkfpDM7clOqFpi646xi9A1Jr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0ZEMi8xRDJBODk0MkU2
RDMxMUVBQTYzQjI3MTlDNEY5QUUwMi85WnZHUi1rTXp0eVU2b1dtTHJqckdMMERV
bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzladkdSLWtNenR5VTZvV21McmpyR0wwRFVtcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
Q0ZEMi8xRDJBODk0MkU2RDMxMUVBQTYzQjI3MTlDNEY5QUUwMi85WnZHUi1rTXp0
eVU2b1dtTHJqckdMMERVbXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCOkyDmZI0vz3gaSYGSnLvgCNh8aaN+WGQ9YiJ8WXvzbYqcFcjPxACt
5/cSzxZ5fZ1FG1s6GLIyJeItV678b8tl8zGhtF1tbmKGfym4guWNNFqv5oIsHMGC
WrqNRtwD4owgZ/IeFOzFqp6SKu0wAGoVhOD2hvhWciUXnrB3tgxxXS4uMxThY4mQ
e37cBkO09VdBeWTTJ0O1Ec/g2WrL/FS/gPNaj6mXErii3UreTl0rndYZL5hDk0QB
qZ8CrE5Me1EwLm5A0wtLn67ZssRWWhzA0jKZbtMDl4Fz0jj+izuQzo2n6QpgrE7S
7Wu8Qp9RJwBQ4xeq0m6XQvJD9IfSImL6
-----END CERTIFICATE-----
Generated at Fri Apr 11 16:07:29 2025 by rpki-client