Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
File: cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft (raw, json)
Hash identifier: 6fXC6k3b9AATxE11nnDNbAkqpq2sCnkxIjC8+xCHBq8=
Subject key identifier: 8E:D5:DD:5C:1A:A4:CA:36:CC:4C:19:B9:0C:7F:40:AF:78:A8:AB:A1
Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7
Certificate issuer: /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
Certificate serial: 04D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
Manifest number: 04C1
Signing time: Sat 29 Mar 2025 00:09:36 +0000
Manifest this update: Sat 29 Mar 2025 00:09:36 +0000
Manifest next update: Sat 05 Apr 2025 00:09:36 +0000
Files and hashes: 1: cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl (hash: ZUvB0t9Iwlo+S9OwL7vInRbfjoyc5hiqDiqA9d/bo4c=)
2: 17E03256B62811EF8D234218C4F9AE02.roa (hash: K58ualcAz/8vUOZws7f1WHAGLYLtETkXGgN3zPvTq4E=)
3: 67624B6088B611EFA5F28A68C4F9AE02.roa (hash: qxNt5X+NJ/lDZV/a3w6QhqphN2TIJWTmHt+XWPeL2Fw=)
4: 345F56F87FE311EF80C0F71FC4F9AE02.roa (hash: GPBxxSS7tjXB56EHA0eFK8gRXpMRgACbmw5NUyFguDY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1238 (0x4d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0D87
Validity
Not Before: Mar 29 00:09:36 2025 GMT
Not After : Apr 5 00:09:36 2025 GMT
Subject: CN=67e73a40-f558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:60:e9:c2:a5:0c:d5:e2:f3:9e:32:e9:49:1d:
b0:63:0b:d1:75:3a:89:1a:68:e3:42:7d:be:61:cb:
42:ab:ae:20:57:9d:e3:79:3e:76:f5:3b:0b:a2:25:
8f:aa:ec:47:e2:26:50:93:d7:81:fd:f9:b5:cc:93:
1d:b9:21:09:c0:3b:c1:1a:01:fb:ab:7d:ad:37:8e:
62:5d:65:20:f9:3c:a1:c2:68:a3:8f:f4:26:3c:06:
38:23:e4:ae:39:6f:d0:28:4a:d3:97:f4:16:c9:05:
38:37:71:3b:40:ee:55:eb:02:ee:f7:24:e4:2e:bd:
ee:73:e8:22:75:f5:d8:c3:53:62:69:76:db:19:92:
43:d4:a7:1b:09:13:e0:b6:f7:f1:4a:e3:24:cf:6a:
6c:6d:ef:1f:b2:bf:cc:9e:c2:a1:c5:a4:6a:3e:44:
c3:7e:a9:af:b0:f6:04:6a:12:fb:f3:2b:87:16:17:
c3:9f:57:a4:ef:d2:fe:7c:05:2d:04:7e:3b:44:b2:
e1:a3:45:c0:d7:20:08:41:1a:48:37:42:62:ab:15:
11:26:63:bd:70:e0:ef:cb:20:23:bf:76:f6:48:4f:
83:60:ad:06:09:d8:2a:0c:d8:30:eb:62:8b:c3:78:
a8:13:52:6c:d7:ca:6f:b0:3c:dc:6e:bd:ac:1b:ff:
f9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D5:DD:5C:1A:A4:CA:36:CC:4C:19:B9:0C:7F:40:AF:78:A8:AB:A1
X509v3 Authority Key Identifier:
keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:fa:7c:20:9f:7a:81:3d:e4:69:98:06:72:e0:8c:aa:73:5c:
ff:20:b5:63:57:6b:73:8e:e5:73:8c:2b:3f:9d:4d:19:6e:02:
7c:25:58:ac:81:d8:54:36:97:55:d6:58:bc:34:8e:8d:16:f1:
e8:6a:7c:f0:f0:43:8d:73:3a:1c:fd:82:c7:5a:59:66:8d:32:
6a:45:52:b8:6b:b2:99:2f:0d:56:c5:d2:79:63:38:af:03:e4:
61:f4:ec:ad:6e:b3:da:bc:be:9c:32:e7:07:f8:86:75:68:05:
78:c3:a8:81:98:af:84:4f:22:d0:b1:1d:1d:24:5b:ed:d1:86:
2e:2d:1e:58:ca:50:c7:86:a0:90:ca:1e:fc:4d:77:9a:34:57:
b7:95:f1:90:32:a2:32:56:5a:73:ff:dc:bf:f6:d2:e1:08:f0:
0c:f9:b2:fe:b7:8e:47:b4:57:99:12:18:f3:2b:2f:a0:64:2b:
7b:5f:be:f0:af:c6:6d:3b:42:98:71:17:ac:05:6a:bc:d9:b9:
52:e1:53:21:99:75:bf:4a:5a:78:22:2f:11:d8:d2:58:be:27:
1e:8d:cd:6a:ac:4d:5b:12:62:b4:56:f1:b8:e2:73:20:68:c8:
84:50:3e:22:be:d2:e7:e3:0a:15:6d:17:06:d5:80:2d:d1:29:
11:50:24:6f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTBEODcxMTAvBgNVBAUTKDcyNUZEOTc3Q0U3MzRCQkE5OTMzRjI5NDNEQzI2OTM5
RkEwNjA4QTcwHhcNMjUwMzI5MDAwOTM2WhcNMjUwNDA1MDAwOTM2WjAYMRYwFAYD
VQQDEw02N2U3M2E0MC1mNTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt2DpwqUM1eLznjLpSR2wYwvRdTqJGmjjQn2+YctCq64gV53jeT529TsLoiWP
quxH4iZQk9eB/fm1zJMduSEJwDvBGgH7q32tN45iXWUg+Tyhwmijj/QmPAY4I+Su
OW/QKErTl/QWyQU4N3E7QO5V6wLu9yTkLr3uc+gidfXYw1NiaXbbGZJD1KcbCRPg
tvfxSuMkz2psbe8fsr/MnsKhxaRqPkTDfqmvsPYEahL78yuHFhfDn1ek79L+fAUt
BH47RLLho0XA1yAIQRpIN0JiqxURJmO9cODvyyAjv3b2SE+DYK0GCdgqDNgw62KL
w3ioE1Js18pvsDzcbr2sG//5ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7V3Vwa
pMo2zEwZuQx/QK94qKuhMB8GA1UdIwQYMBaAFHJf2XfOc0u6mTPylD3CaTn6Bgin
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEQ4Ny9GNjgzQ0VGMjIx
RUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3cVpNX0tVUGNKcE9mb0dD
S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NsX1pkODV6UzdxWk1fS1VQY0pwT2ZvR0NLYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MEQ4Ny9GNjgzQ0VGMjIxRUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3
cVpNX0tVUGNKcE9mb0dDS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBC+nwgn3qBPeRpmAZy4Iyqc1z/ILVjV2tzjuVzjCs/nU0ZbgJ8JVis
gdhUNpdV1li8NI6NFvHoanzw8EONczoc/YLHWllmjTJqRVK4a7KZLw1WxdJ5Yziv
A+Rh9OytbrPavL6cMucH+IZ1aAV4w6iBmK+ETyLQsR0dJFvt0YYuLR5YylDHhqCQ
yh78TXeaNFe3lfGQMqIyVlpz/9y/9tLhCPAM+bL+t45HtFeZEhjzKy+gZCt7X77w
r8ZtO0KYcResBWq82blS4VMhmXW/Slp4Ii8R2NJYvicejc1qrE1bEmK0VvG44nMg
aMiEUD4ivtLn4woVbRcG1YAt0SkRUCRv
-----END CERTIFICATE-----
Generated at Tue Apr 8 12:52:18 2025 by rpki-client