Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft
File: ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft (raw, json)
Hash identifier: UxGSpEbeE0b55JBZPbXpjqbP+PkuVwRtceoohz6bIpk=
Subject key identifier: 0E:75:0F:F5:AA:5A:C4:0C:0C:54:8C:D5:D9:87:48:83:47:D9:1B:79
Authority key identifier: 66:C2:CD:1D:2B:AC:78:26:48:52:F1:2D:18:B2:18:C0:5E:44:88:49
Certificate issuer: /CN=A9123DB1/serialNumber=66C2CD1D2BAC78264852F12D18B218C05E448849
Certificate serial: 138C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLNHSuseCZIUvEtGLIYwF5EiEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft
Manifest number: 1385
Signing time: Fri 31 Jan 2025 16:58:31 +0000
Manifest this update: Fri 31 Jan 2025 16:58:30 +0000
Manifest next update: Fri 07 Feb 2025 16:58:30 +0000
Files and hashes: 1: ZsLNHSuseCZIUvEtGLIYwF5EiEk.crl (hash: gqTydK6BWnl+AAipho+88REbAPwdZujfutsD8eh5tRI=)
2: A59866188BC311E88445685EC4F9AE02.roa (hash: UY4nyIE+VkK/iFAfXsE3PqiNSHJ4rK/Ulyy62xkzmis=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5004 (0x138c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123DB1/serialNumber=66C2CD1D2BAC78264852F12D18B218C05E448849
Validity
Not Before: Jan 31 16:58:30 2025 GMT
Not After : Feb 7 16:58:30 2025 GMT
Subject: CN=679d0136-6899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:61:c4:7a:a3:f9:20:a4:bf:d0:fa:e3:67:28:
af:09:b1:05:74:78:f0:e8:9d:a4:06:ef:1c:0f:1f:
7f:a2:16:b8:47:63:41:17:6f:21:80:de:ad:82:d0:
2a:ae:98:57:24:76:30:57:6d:22:c3:e0:07:61:dd:
dc:89:73:d3:21:fa:a6:32:e1:95:89:36:d1:7e:51:
86:ee:07:26:e7:af:26:4b:df:f4:1b:bb:35:58:b6:
8c:48:e7:2f:a7:3e:84:0b:68:c3:b8:b3:bf:2a:dc:
5a:c3:0d:de:9e:1c:3c:df:8b:70:f2:27:21:83:d1:
53:d7:58:73:0f:8d:b1:c2:6b:9f:bf:30:95:79:f8:
d0:1c:a2:89:2f:d2:1d:ff:58:a8:74:7e:ee:74:7e:
e4:7d:0f:8c:83:df:60:3e:1a:79:6c:a4:d0:f3:4d:
78:ae:6e:65:18:a2:30:5e:30:93:ba:d4:e4:14:d8:
84:e0:91:28:99:96:c6:cc:e7:eb:f6:95:f4:99:aa:
3e:54:e8:52:3b:4a:7b:ef:1f:53:28:3e:87:55:b6:
30:bc:0b:d4:81:fb:a0:62:5a:ee:d9:02:13:8a:d7:
6b:a1:d6:ac:45:fc:12:52:44:6b:52:85:cb:2a:ea:
28:5c:24:65:4e:37:64:4c:aa:8f:8c:32:86:91:9c:
12:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:75:0F:F5:AA:5A:C4:0C:0C:54:8C:D5:D9:87:48:83:47:D9:1B:79
X509v3 Authority Key Identifier:
keyid:66:C2:CD:1D:2B:AC:78:26:48:52:F1:2D:18:B2:18:C0:5E:44:88:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLNHSuseCZIUvEtGLIYwF5EiEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:2c:78:b1:2a:9f:67:02:8d:b8:c9:9d:69:62:61:32:f8:13:
46:4e:37:27:b9:c1:4b:bc:e1:b2:eb:ac:ee:a6:84:7b:9b:2a:
d7:13:82:af:1b:4b:47:44:f0:83:1f:99:b9:03:96:60:8d:7b:
61:92:66:cb:37:9f:41:8e:e5:bf:c5:f2:da:c0:6a:95:a6:bd:
d9:00:23:5a:95:9e:31:74:aa:cc:f1:38:36:42:19:d0:95:ff:
08:c8:f8:76:fb:72:43:f2:c7:ca:4b:bb:e6:f9:12:f3:60:cc:
98:22:73:8b:40:58:74:9a:f8:2b:e3:99:23:5a:b3:ac:67:00:
e5:04:52:fc:5e:12:13:8f:4b:00:f7:f7:2a:60:f0:4a:e8:44:
15:f1:e7:23:30:66:26:f3:ea:fa:9a:87:3d:36:31:32:ca:06:
de:6d:e5:16:06:87:15:34:9e:fc:f7:e4:69:6e:cb:b0:bc:e9:
7f:79:a8:de:3a:6a:57:85:c6:3b:5c:72:93:df:72:1e:21:68:
79:19:04:df:34:7a:ff:2b:36:6f:7e:aa:78:a5:a2:91:88:76:
7f:0b:41:3e:c7:f0:b2:88:dd:c1:fe:18:db:2d:73:9a:29:c2:
fe:bb:da:00:5f:9a:8d:99:2a:ef:ac:00:69:1b:40:8b:2f:c8:
cd:fc:60:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:52:01 2025 by rpki-client