Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft
File: nzVmCVwLDAIx0LuWkl4DidHCbFc.mft (raw, json)
Hash identifier: GijEJ2VQHGNVgSSN1Wr0U5ph/hkq5eqPhYmcNhihNx8=
Subject key identifier: CA:49:26:F8:28:C2:A6:FB:9B:4D:14:73:51:79:DC:38:74:20:9D:60
Authority key identifier: 9F:35:66:09:5C:0B:0C:02:31:D0:BB:96:92:5E:03:89:D1:C2:6C:57
Certificate issuer: /CN=A911403B/serialNumber=9F3566095C0B0C0231D0BB96925E0389D1C26C57
Certificate serial: 03EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nzVmCVwLDAIx0LuWkl4DidHCbFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft
Manifest number: 03EB
Signing time: Fri 31 Jan 2025 00:36:42 +0000
Manifest this update: Fri 31 Jan 2025 00:36:42 +0000
Manifest next update: Fri 07 Feb 2025 00:36:42 +0000
Files and hashes: 1: nzVmCVwLDAIx0LuWkl4DidHCbFc.crl (hash: WoFACxc5cg4XAPy8C009yBSJKNny177BwQHrwytYn+k=)
2: 2D8428C662F511ECA1FC5A6CC4F9AE02.roa (hash: hiz8orQvD2O6/cswN3b9tybf+/qTphdbwHRPLrZEniY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1006 (0x3ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911403B/serialNumber=9F3566095C0B0C0231D0BB96925E0389D1C26C57
Validity
Not Before: Jan 31 00:36:42 2025 GMT
Not After : Feb 7 00:36:42 2025 GMT
Subject: CN=679c1b1a-fb5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ba:31:33:ee:7f:07:fb:0a:3c:76:4e:fd:f5:
9d:7c:31:b0:5e:e4:51:a4:d1:68:85:c6:69:45:5e:
c7:82:f6:31:01:d3:e9:cc:54:ca:87:ff:17:d5:cf:
56:f9:39:6e:f1:69:89:6a:d2:62:91:75:d0:45:17:
0f:ec:08:c1:c1:c3:2c:e2:d1:b5:11:f4:b2:0c:4e:
b6:f1:9d:14:df:7c:5e:49:20:d4:93:2f:26:7d:80:
88:3b:8d:8e:a4:1c:36:40:2e:36:ab:55:68:e4:cd:
1c:d9:92:fb:c5:a7:2f:fc:c9:b3:67:12:1c:80:0f:
fd:88:6c:52:61:3e:b4:f9:de:3c:e0:7f:ea:e8:f6:
72:28:19:c0:2d:89:f2:ee:3f:e0:80:97:a1:06:ea:
6b:27:80:e1:b0:f2:b2:19:df:19:f0:e0:25:93:8e:
14:a0:e9:0c:d3:21:7d:f7:09:0d:b3:fd:e1:3d:6e:
30:8b:71:ae:75:c0:8e:76:01:2f:14:bf:be:4e:8b:
bd:96:45:4b:99:b2:dd:4d:eb:c6:28:5b:2e:99:f3:
35:22:fb:ec:1b:f0:33:39:75:0c:0c:76:83:69:78:
fd:a2:d8:4a:af:53:d8:05:fe:cd:51:11:a8:02:bc:
d7:35:bc:f0:a1:ed:ae:a1:49:b4:ed:1e:c9:52:a0:
4d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:49:26:F8:28:C2:A6:FB:9B:4D:14:73:51:79:DC:38:74:20:9D:60
X509v3 Authority Key Identifier:
keyid:9F:35:66:09:5C:0B:0C:02:31:D0:BB:96:92:5E:03:89:D1:C2:6C:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nzVmCVwLDAIx0LuWkl4DidHCbFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:2c:58:fe:7f:b6:a4:19:f6:ea:16:df:ff:c3:30:7f:2d:6c:
88:1b:60:16:9a:72:18:d5:75:68:49:a6:01:8d:7a:d7:e5:d0:
56:d6:30:01:5e:59:15:49:23:e6:cb:84:bb:77:55:bf:2c:98:
c9:26:37:23:a5:dd:ab:e7:31:c2:10:2a:b1:a2:a6:02:0e:2f:
8a:3e:60:bb:1d:29:e7:36:9c:58:de:ca:43:f7:4b:29:65:f5:
07:10:8f:2f:16:e5:7d:d9:b3:c8:7d:4f:b7:70:6f:32:57:22:
a2:63:2b:0a:61:9f:55:b2:f1:aa:e5:d7:04:ac:87:42:e9:7a:
90:49:ec:58:4f:99:99:fa:c3:c9:bd:6b:18:1a:9f:49:5d:ae:
a6:f8:4a:3e:fa:90:b0:f4:22:0f:e5:b3:0a:a8:fc:9a:58:50:
4d:4f:08:d8:16:e0:62:a7:fa:1b:96:52:b9:73:3c:24:30:2b:
c1:8d:f6:b9:3f:ad:cf:1b:ad:5e:ab:91:14:f0:de:5b:0a:e3:
a3:60:a0:2c:3c:ee:00:df:b2:d5:be:9b:09:55:b0:ca:1a:c5:
12:18:ff:0a:c7:c3:8a:96:34:68:3a:1c:92:80:1d:b5:dd:77:
2b:8d:c6:dd:4f:0b:c0:42:e6:e5:d2:2e:ed:22:de:ff:90:b0:
63:97:33:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:49:38 2025 by rpki-client