Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft
File: zupmODV1Y6xVdo8A2E0nezpjxEk.mft (raw, json)
Hash identifier: OgPZO5IR2FE6nBlgWwoGV8qffCMsSIynzSQuMSzi8/4=
Subject key identifier: 41:0C:1A:11:A7:E7:32:E4:3E:30:4B:97:5C:BE:A3:B1:89:AA:CE:20
Authority key identifier: CE:EA:66:38:35:75:63:AC:55:76:8F:00:D8:4D:27:7B:3A:63:C4:49
Certificate issuer: /CN=A91F2F18/serialNumber=CEEA6638357563AC55768F00D84D277B3A63C449
Certificate serial: 0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft
Manifest number: 0D
Signing time: Sat 29 Mar 2025 07:25:35 +0000
Manifest this update: Sat 29 Mar 2025 07:25:34 +0000
Manifest next update: Sat 05 Apr 2025 07:25:34 +0000
Files and hashes: 1: zupmODV1Y6xVdo8A2E0nezpjxEk.crl (hash: iuqX67p30AHifeyP1hgw+OrGrVN7HhKDy7Bfb5RHj8Y=)
2: 65FCC030FB6511EF88F1AD24C4F9AE02.roa (hash: 2AzcWDQppJmuezlbwVz+XBibo6nd4SBXfykYXbtUpSQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2F18
Validity
Not Before: Mar 29 07:25:34 2025 GMT
Not After : Apr 5 07:25:34 2025 GMT
Subject: CN=67e7a06f-1eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7e:07:48:96:74:83:34:f4:59:27:c0:92:86:
26:4a:e6:75:8d:40:04:5a:b9:65:a5:62:5b:4d:65:
f3:f8:3f:3e:55:6b:5a:1a:e2:b0:75:21:0a:87:fd:
59:85:85:5f:42:13:17:bf:fc:98:ea:f6:69:4d:13:
0f:31:8c:2d:28:ee:7f:83:c9:45:86:a2:72:09:07:
b8:2a:5e:9d:84:e9:d9:07:fb:32:4a:b6:c0:59:80:
0b:4f:ae:6b:bc:9a:31:a7:66:95:ff:33:c6:91:b7:
07:21:1c:13:30:dc:c1:97:cc:24:67:ef:3b:de:e1:
74:2d:78:70:75:f0:44:4f:82:76:56:a0:0a:70:4a:
2a:57:d5:02:0b:42:bc:d3:3f:c1:9f:ec:cf:47:e3:
4b:95:08:03:7b:48:00:fb:a6:6d:1b:5e:d1:ff:39:
0a:5a:3d:a4:74:4d:d1:7e:4c:7b:17:fd:55:d5:97:
d5:0f:38:cd:65:6e:d3:f3:5a:05:c0:f7:1e:22:09:
e3:c4:d3:0a:e1:1b:87:e1:58:2b:3c:19:06:7e:41:
a0:6b:f6:d4:27:31:38:39:f4:09:f0:d9:84:08:ac:
4b:9b:d1:25:32:39:35:47:7c:9a:76:f4:32:65:6e:
75:fe:7b:7b:8d:1c:d4:ab:42:af:2e:16:e4:02:e2:
ee:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0C:1A:11:A7:E7:32:E4:3E:30:4B:97:5C:BE:A3:B1:89:AA:CE:20
X509v3 Authority Key Identifier:
keyid:CE:EA:66:38:35:75:63:AC:55:76:8F:00:D8:4D:27:7B:3A:63:C4:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:1e:39:7a:2f:ec:91:71:92:f5:aa:32:43:3a:25:78:ce:12:
0f:d6:38:ce:ba:ba:e0:05:02:a9:30:bf:3f:20:80:df:ef:ab:
5f:26:01:e1:e1:99:df:73:a9:d7:f6:1e:3e:cd:37:1a:d4:9b:
7b:60:03:ca:00:f3:8c:e6:9a:53:dd:a2:5f:98:89:6a:b2:3f:
e9:d0:e3:04:57:e3:a8:82:d8:ea:c1:44:83:62:8c:12:47:fa:
9d:54:e3:ee:dd:66:6d:d2:be:f5:0b:b5:fd:b4:4d:af:cf:b9:
df:43:c7:32:78:0f:83:da:49:9a:d7:e6:be:cd:8d:79:93:90:
a1:f1:97:f7:56:ca:6b:ea:27:ef:aa:45:50:26:19:df:ae:30:
34:8c:fc:28:13:fd:7d:2f:e7:55:d3:f0:b5:1c:c1:19:0b:9e:
e9:8a:52:11:be:3a:db:4c:49:18:11:c8:e3:01:d7:59:23:2c:
4d:83:d0:5e:78:60:bc:71:0b:b3:fb:96:d5:49:12:9a:ba:ea:
69:df:9c:86:3c:cc:8d:3b:04:80:17:e3:f7:dc:b1:ec:e7:a1:
8d:95:89:ff:b4:95:78:07:f3:0b:6b:d6:bc:1c:be:28:75:88:
f3:d1:ef:dc:6d:8a:02:67:74:e1:5d:8a:b6:ef:d0:9a:93:86:
60:85:ea:05
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
MkYxODExMC8GA1UEBRMoQ0VFQTY2MzgzNTc1NjNBQzU1NzY4RjAwRDg0RDI3N0Iz
QTYzQzQ0OTAeFw0yNTAzMjkwNzI1MzRaFw0yNTA0MDUwNzI1MzRaMBgxFjAUBgNV
BAMTDTY3ZTdhMDZmLTFlYjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDBfgdIlnSDNPRZJ8CShiZK5nWNQARauWWlYltNZfP4Pz5Va1oa4rB1IQqH/VmF
hV9CExe//Jjq9mlNEw8xjC0o7n+DyUWGonIJB7gqXp2E6dkH+zJKtsBZgAtPrmu8
mjGnZpX/M8aRtwchHBMw3MGXzCRn7zve4XQteHB18ERPgnZWoApwSipX1QILQrzT
P8Gf7M9H40uVCAN7SAD7pm0bXtH/OQpaPaR0TdF+THsX/VXVl9UPOM1lbtPzWgXA
9x4iCePE0wrhG4fhWCs8GQZ+QaBr9tQnMTg59Anw2YQIrEub0SUyOTVHfJp29DJl
bnX+e3uNHNSrQq8uFuQC4u5TAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQQwaEafn
MuQ+MEuXXL6jsYmqziAwHwYDVR0jBBgwFoAUzupmODV1Y6xVdo8A2E0nezpjxEkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYyRjE4LzA5NTA0MzQ4RkI2
NTExRUZCNDVBODk2NkM0RjlBRTAyL3p1cG1PRFYxWTZ4VmRvOEEyRTBuZXpwanhF
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvenVwbU9EVjFZNnhWZG84QTJFMG5lenBqeEVrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYy
RjE4LzA5NTA0MzQ4RkI2NTExRUZCNDVBODk2NkM0RjlBRTAyL3p1cG1PRFYxWTZ4
VmRvOEEyRTBuZXpwanhFay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBACgeOXov7JFxkvWqMkM6JXjOEg/WOM66uuAFAqkwvz8ggN/vq18mAeHh
md9zqdf2Hj7NNxrUm3tgA8oA84zmmlPdol+YiWqyP+nQ4wRX46iC2OrBRINijBJH
+p1U4+7dZm3SvvULtf20Ta/Pud9DxzJ4D4PaSZrX5r7NjXmTkKHxl/dWymvqJ++q
RVAmGd+uMDSM/CgT/X0v51XT8LUcwRkLnumKUhG+OttMSRgRyOMB11kjLE2D0F54
YLxxC7P7ltVJEpq66mnfnIY8zI07BIAX4/fcseznoY2Vif+0lXgH8wtr1rwcvih1
iPPR79xtigJndOFdirbv0JqThmCF6gU=
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:01:40 2025 by rpki-client