Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft
File: CZLDze-CUAZzzNehdgX9M9hk_wE.mft (raw, json)
Hash identifier: 59oDb6OJUwnHl0IEHn9ALEPeFMyqIvFPU5+CuRWx2vM=
Subject key identifier: E6:74:45:A4:84:47:E8:4A:67:BC:E5:A7:55:1D:50:B1:9D:2D:C5:89
Authority key identifier: 09:92:C3:CD:EF:82:50:06:73:CC:D7:A1:76:05:FD:33:D8:64:FF:01
Certificate issuer: /CN=A9112804/serialNumber=0992C3CDEF82500673CCD7A17605FD33D864FF01
Certificate serial: 075F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft
Manifest number: 1398
Signing time: Fri 31 Jan 2025 18:12:42 +0000
Manifest this update: Fri 31 Jan 2025 18:12:42 +0000
Manifest next update: Fri 07 Feb 2025 18:12:42 +0000
Files and hashes: 1: CZLDze-CUAZzzNehdgX9M9hk_wE.crl (hash: NhKn6I3Hg1Hzp7eK6XQfmUg2iqi40b7dpu5TNHZARvg=)
2: AB3040224C0211EF84B00D1EC4F9AE02.roa (hash: noVdM6ngikXxZBW4pTHIBoQSLKize1jndamJhpeixzc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1887 (0x75f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112804/serialNumber=0992C3CDEF82500673CCD7A17605FD33D864FF01
Validity
Not Before: Jan 31 18:12:42 2025 GMT
Not After : Feb 7 18:12:42 2025 GMT
Subject: CN=679d129a-8662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a2:f7:a9:6a:5f:39:9a:2c:f4:b6:db:10:28:
79:b9:3a:a6:4c:a7:6b:8a:9e:7e:07:ab:15:f1:3c:
17:b8:3a:a7:66:3c:24:e0:53:24:1d:40:35:38:76:
da:90:1e:a7:8e:d9:d6:ac:cf:fa:cc:7a:f8:38:82:
e7:09:e8:a8:2c:12:5f:7e:b9:ad:9a:ed:75:0f:eb:
5b:f5:53:57:09:eb:a3:c5:2d:32:f9:b0:a7:ad:c4:
e8:e6:2e:2e:8b:b0:23:38:56:08:54:82:c4:20:30:
7f:10:ad:2a:46:d2:8c:00:fa:5a:e2:3b:76:92:5b:
2c:50:4a:09:f3:fc:e3:8d:fa:b1:2c:03:d6:6f:8a:
b8:c8:94:33:e4:f2:99:0c:61:9d:20:28:00:2c:be:
64:8b:c8:e8:f8:a6:6f:f3:af:1a:e0:60:78:a4:bc:
85:81:77:89:2d:f6:7c:30:81:a5:12:32:6b:1a:5e:
00:d2:bc:fd:8e:4e:cb:76:4d:41:c5:1a:24:ce:9c:
38:a9:85:b1:ee:a4:c4:8d:2b:23:60:75:e7:7a:88:
d9:b4:4a:78:32:d4:17:c9:46:06:0d:c2:2e:61:89:
11:2e:6d:29:31:20:96:ad:64:d9:73:02:47:4d:dc:
65:05:0e:ae:4d:ff:5d:d9:a3:00:6e:9e:e3:06:2f:
f1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:74:45:A4:84:47:E8:4A:67:BC:E5:A7:55:1D:50:B1:9D:2D:C5:89
X509v3 Authority Key Identifier:
keyid:09:92:C3:CD:EF:82:50:06:73:CC:D7:A1:76:05:FD:33:D8:64:FF:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:fa:2a:85:86:1e:e5:a9:58:97:34:fc:34:4d:d4:91:b1:c0:
63:ab:4a:99:15:0b:15:b1:24:f0:4b:1b:8f:1a:d8:ce:3b:7c:
67:e4:2c:ca:43:d7:e5:a4:03:8f:b1:a7:c1:dc:f2:87:4a:b8:
e5:4f:2e:9d:f3:3e:0d:5a:2f:13:40:da:5d:2d:09:db:d1:1e:
fa:e1:8b:93:30:00:8a:ce:cb:58:2f:d7:85:a1:23:98:6c:9a:
a5:93:6f:96:50:1a:2f:33:4b:bf:52:18:52:9f:5e:21:69:6f:
e7:3d:46:93:cc:ed:da:1d:4a:7d:bb:52:5b:e5:65:da:6d:49:
1d:37:e2:7f:03:5f:ca:11:dd:ef:33:6d:d7:17:28:bc:df:27:
8e:c2:a4:be:2e:9b:6e:4c:57:32:0c:4d:f5:06:1b:12:80:dc:
db:08:b6:d7:96:6c:5d:47:27:67:ef:e1:1c:1e:8e:14:ba:40:
42:c7:5f:4e:c9:62:c9:88:53:ff:49:00:2c:69:b4:2c:d3:19:
a3:bd:c2:5a:15:58:a8:df:7a:70:ac:6d:45:b6:5e:8d:4c:fe:
5c:77:19:e6:79:94:1a:2e:f0:d3:5f:b9:4a:0b:be:a9:ad:5d:
e1:e0:12:98:d7:21:82:d8:f1:0b:ad:6e:a6:39:fe:8d:20:21:
1b:cd:8b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:27:06 2025 by rpki-client