Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft
File: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft (raw, json)
Hash identifier: RBenLTtYMO0gg9ODiXyp2PgFW25+iR6pd2gtozdOop8=
Subject key identifier: A7:54:4E:84:76:50:CF:96:DA:18:FE:BA:94:55:8E:8C:FE:E9:0B:0F
Authority key identifier: CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01
Certificate issuer: /CN=A912672E/serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801
Certificate serial: 01E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft
Manifest number: 01DD
Signing time: Fri 31 Jan 2025 02:16:37 +0000
Manifest this update: Fri 31 Jan 2025 02:16:36 +0000
Manifest next update: Fri 07 Feb 2025 02:16:36 +0000
Files and hashes: 1: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl (hash: hThk1ZstUh4vWXk7yLe+C06b48GvXkKgJnX/3EvvGCc=)
2: 71CE3962337511EDAE4C4121C4F9AE02.roa (hash: 6NVu2HEI/2vQueP99wzaqxsinrZpCobkN5jNBib82oA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 481 (0x1e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912672E/serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801
Validity
Not Before: Jan 31 02:16:36 2025 GMT
Not After : Feb 7 02:16:36 2025 GMT
Subject: CN=679c3285-805e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b6:d5:70:2a:88:38:63:aa:c3:d7:63:2a:b0:
86:d8:35:25:8a:d5:87:99:f6:2b:d1:3b:6e:8d:a6:
3e:21:44:75:38:fa:c0:f9:ad:fc:e1:10:de:d4:2f:
b2:02:1c:e0:b4:c4:e0:6e:1b:d6:8e:72:9c:79:a1:
12:da:a3:00:a8:d9:ad:a8:32:52:1b:c7:58:26:f1:
4b:20:61:53:e7:65:fb:6b:4b:36:1c:22:e1:4a:9c:
e6:ba:f7:da:f4:8c:19:99:c1:40:bb:93:78:33:f3:
61:d9:5d:c0:62:22:9b:03:df:a3:bb:e3:33:5d:91:
2a:4b:a1:de:9c:b9:48:a8:93:a1:f0:d7:41:1d:8c:
31:c1:6e:3b:32:15:c6:8c:01:dc:51:a9:8b:40:d7:
00:12:4a:f7:6e:1f:3a:eb:c2:93:2b:34:73:18:85:
b2:5c:b4:1a:66:1a:86:63:17:7f:36:c5:4e:1d:91:
74:98:5f:34:14:47:d4:b5:30:51:e3:36:a8:0d:36:
6b:3c:83:ec:af:6e:92:00:f8:d9:1d:18:24:ba:05:
dc:93:6c:97:a4:fc:cd:f0:b1:21:77:7f:a9:53:f6:
de:26:44:5b:16:c8:e4:30:84:f6:72:27:49:f8:77:
3b:e3:ec:81:1e:16:01:32:e5:2c:5b:75:58:bd:fa:
d8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:54:4E:84:76:50:CF:96:DA:18:FE:BA:94:55:8E:8C:FE:E9:0B:0F
X509v3 Authority Key Identifier:
keyid:CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:68:17:42:07:c9:15:97:7d:48:51:c7:45:70:dd:51:fa:18:
ed:b4:ff:03:ce:ef:ed:bd:c9:24:c7:4d:22:cb:c9:00:39:67:
3c:fc:1d:f7:7b:67:74:d9:ce:73:55:96:28:25:12:56:4d:be:
d9:ac:cf:56:f4:22:a0:51:23:a2:c0:62:04:10:81:82:68:70:
dc:e3:9a:2f:cd:4c:07:f9:02:9f:2a:0f:ad:54:b4:7e:21:a6:
3b:36:96:7d:5f:c0:20:e2:ff:eb:66:f2:6a:2e:02:a4:d9:16:
b2:75:ea:36:59:4f:18:38:e0:bc:99:a1:aa:98:7f:a7:e4:a9:
eb:b8:4a:05:b4:7e:48:48:a7:b0:06:fd:f5:8c:37:d3:4a:e6:
eb:f0:e0:da:24:2c:a3:7e:44:f2:4a:0d:c9:09:bd:95:2e:b5:
9f:ee:19:0f:b4:6b:a6:2f:75:ff:fe:a9:6b:1d:19:2d:9f:14:
88:15:5a:0a:1a:b4:b0:03:62:d7:1f:4a:ff:3f:17:e0:6f:42:
ed:ac:1b:c4:aa:d2:c2:1e:bb:0d:97:24:2e:42:fa:96:bf:ae:
b3:98:c0:46:21:e9:35:af:46:8d:cf:83:ba:3c:19:77:cb:27:
27:cd:0f:c5:d7:9b:cd:27:79:0d:41:a4:1a:72:bc:54:04:ea:
a2:41:fa:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:13:59 2025 by rpki-client