Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
File: Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft (raw, json)
Hash identifier: BjCqKaVFjLAU3kGW/r+2vVwuTzpFqrJoxg/TRVokpZ0=
Subject key identifier: 28:5C:C7:CF:E7:70:8E:11:2F:D3:70:B2:BE:45:9F:2B:87:4D:31:25
Authority key identifier: 66:9F:B3:A8:CA:2A:20:EA:3B:81:A6:3A:7F:6D:BB:15:9F:BB:D5:74
Certificate issuer: /CN=A911C812/serialNumber=669FB3A8CA2A20EA3B81A63A7F6DBB159FBBD574
Certificate serial: 0321
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
Manifest number: 0321
Signing time: Thu 30 Jan 2025 21:08:35 +0000
Manifest this update: Thu 30 Jan 2025 21:08:35 +0000
Manifest next update: Thu 06 Feb 2025 21:08:35 +0000
Files and hashes: 1: Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl (hash: XoR/7uL6U7Q9e0WOj4YkccufnAVzPpWnIqqRkQ8AoB4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 801 (0x321)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C812/serialNumber=669FB3A8CA2A20EA3B81A63A7F6DBB159FBBD574
Validity
Not Before: Jan 30 21:08:35 2025 GMT
Not After : Feb 6 21:08:35 2025 GMT
Subject: CN=679bea53-54bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:fe:c2:57:d2:84:71:39:e9:ee:0b:08:dd:
6e:bd:fb:1c:1b:c0:ef:bd:81:06:05:d7:c8:81:ab:
2a:3a:37:43:9b:1d:b3:c2:e1:1a:5d:33:a9:d1:55:
af:de:40:3c:72:15:ef:1b:3d:67:e8:7d:54:e8:66:
00:7c:c1:f8:b3:c2:b6:72:d1:3d:a7:a9:56:72:98:
15:a5:a6:3a:5a:27:fc:c8:41:66:c8:00:d5:2a:b5:
dd:d4:fd:81:58:5b:66:73:5c:d2:f6:11:68:e4:3e:
90:30:20:de:94:66:92:a2:61:52:ae:a2:b9:64:d1:
bd:d3:19:12:da:10:67:dc:f9:dd:93:76:b4:c6:b5:
ed:79:33:c6:7c:aa:25:64:70:eb:75:7e:83:25:06:
5d:c5:a4:8a:b5:cd:82:2a:4f:8f:c4:04:f1:1d:24:
31:ab:83:4f:a9:b1:9d:18:00:6a:3b:e1:cb:44:e1:
51:dd:5d:53:dc:73:a0:02:0e:1d:df:05:a0:e5:92:
fd:76:be:8e:e4:8e:28:ab:54:15:9e:a3:05:8e:45:
dd:46:3b:8c:71:d7:6a:9a:b9:90:55:99:f5:7c:8a:
dc:d1:bb:fe:02:83:b0:04:96:39:87:f5:8c:e1:e9:
e8:3d:26:71:e8:65:b8:7f:9f:12:9e:9c:ed:12:d5:
51:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5C:C7:CF:E7:70:8E:11:2F:D3:70:B2:BE:45:9F:2B:87:4D:31:25
X509v3 Authority Key Identifier:
keyid:66:9F:B3:A8:CA:2A:20:EA:3B:81:A6:3A:7F:6D:BB:15:9F:BB:D5:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f5:e5:23:24:35:16:9a:cf:9b:25:b9:5f:39:dd:c6:ec:fe:
99:9d:2a:49:53:82:1a:b1:e6:be:39:4f:c1:db:11:f6:8b:a3:
db:8b:2a:6b:8e:a7:ab:04:9a:be:df:23:39:00:2c:74:38:f6:
0e:23:d9:b8:d2:49:84:a0:b5:81:fb:6a:15:8b:fd:b9:6e:6b:
a1:48:e7:7d:ea:e8:06:ed:b4:14:ee:c1:2f:05:c7:42:24:72:
17:06:e8:0c:11:bd:e7:d8:78:a4:f0:d2:11:16:39:7a:b7:a8:
85:11:7d:cd:3a:5e:29:46:b9:f2:ef:26:ef:c2:d7:f0:65:29:
f8:53:64:93:ed:c2:74:0e:d7:65:20:e0:bf:97:4c:93:9c:bc:
71:97:39:d1:3c:ec:2d:b8:0d:3e:d1:ac:c3:87:cd:fd:81:86:
7b:78:11:56:c2:89:3b:99:a3:1d:68:67:45:2a:6e:8a:6e:31:
74:47:38:74:de:94:62:e6:b9:42:46:2f:72:7a:60:fc:ce:35:
b7:7f:31:bb:a2:37:01:00:92:41:0f:47:24:32:b7:05:13:12:
8d:f6:67:81:5d:43:28:3c:4e:ad:ca:4a:fb:ed:08:22:21:27:
4d:2a:93:5f:9a:1e:7e:06:f3:be:0a:2a:c2:37:14:6d:a5:54:
72:0f:1d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:40:34 2025 by rpki-client