Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
File: ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft (raw, json)
Hash identifier: xHPFCAkH/0pyWphM14ZWZd/oikx2K7DFyCIu0f8SL7E=
Subject key identifier: D4:95:6F:59:9B:C8:EE:D3:4C:D4:2E:C1:7F:CB:FE:AA:D4:2F:71:CA
Authority key identifier: 66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A
Certificate issuer: /CN=A91269B8/serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A
Certificate serial: 231A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
Manifest number: 230A
Signing time: Fri 31 Jan 2025 15:51:14 +0000
Manifest this update: Fri 31 Jan 2025 15:51:13 +0000
Manifest next update: Fri 07 Feb 2025 15:51:13 +0000
Files and hashes: 1: ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl (hash: Ak4KmHU86zite7nYQWb9dMg526A//PoMeN3E320+39Q=)
2: 844E61B635B811EE96EDCC53C4F9AE02.roa (hash: ZUEn5ZlRaiInxXBiSVZ7/rf4gJkd4uF1qxiteovD6sc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8986 (0x231a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91269B8/serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A
Validity
Not Before: Jan 31 15:51:13 2025 GMT
Not After : Feb 7 15:51:13 2025 GMT
Subject: CN=679cf171-6da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:71:00:93:8a:ec:e6:6e:87:9a:c6:81:86:31:
99:f8:10:27:ee:b9:6c:46:f6:a2:4c:97:dd:fc:64:
9b:93:3b:73:5c:c6:ff:34:07:0b:df:9c:30:6b:99:
9a:a8:5f:c4:d2:71:22:9a:88:54:be:6b:f0:7b:d6:
75:ef:87:a0:d9:35:89:ab:87:a7:df:ed:1c:1d:49:
b1:bb:f0:1e:52:cd:35:18:2a:ce:02:a2:6f:3a:20:
06:bd:c5:42:63:9d:04:36:55:0a:ac:ea:31:e9:7d:
7b:92:80:68:8a:12:c2:70:67:03:11:4b:d3:53:af:
7f:05:b3:b6:be:13:f5:05:57:ec:9c:98:7e:87:0b:
d9:c3:23:4f:cc:53:83:3f:13:37:5a:52:18:65:29:
a4:e4:90:3c:61:dd:63:55:5b:b4:83:57:e5:73:60:
21:0d:e5:92:b5:8d:6a:8d:c9:6c:d7:42:57:3c:82:
65:4b:64:da:d8:9d:97:64:af:fe:40:41:1f:b2:68:
7c:c5:9d:4f:f2:ea:fa:b4:a1:20:b0:b0:4a:60:cb:
69:e2:6b:e1:be:23:58:a5:7a:f6:e1:bb:d9:fb:37:
82:bf:44:eb:9f:d1:67:14:6c:8b:d2:0b:09:d0:7a:
d3:6f:69:69:21:67:0c:d8:c7:bc:66:28:94:dc:95:
0f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:95:6F:59:9B:C8:EE:D3:4C:D4:2E:C1:7F:CB:FE:AA:D4:2F:71:CA
X509v3 Authority Key Identifier:
keyid:66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b0:6f:c0:df:87:81:3e:f7:98:24:78:0c:48:79:86:79:0a:
d3:da:6b:c3:d9:a1:a7:eb:db:d6:53:0c:88:ba:e3:e2:2f:f8:
e3:84:64:bb:3c:89:a3:a4:ce:4a:ed:da:22:07:e6:7f:31:12:
90:d1:d1:a8:52:06:24:57:60:95:a1:04:8f:bc:bd:16:1c:0a:
83:fb:c8:a1:6f:fb:17:ae:bc:30:3c:97:3c:ae:0b:6e:9b:42:
ad:4f:7a:d0:ba:68:a5:13:a3:70:0e:6e:51:88:fb:49:86:28:
32:98:8e:24:dd:5c:dc:03:09:55:aa:6b:e5:a8:11:1f:54:d4:
e7:e1:cb:eb:10:de:65:15:61:24:bb:59:c0:b3:c6:c6:48:ff:
67:81:49:1c:48:71:7b:53:fe:9d:fd:3a:c9:b3:b9:92:99:96:
76:4f:e3:d2:7b:ef:ec:13:5c:85:be:34:47:53:01:ae:1d:a4:
78:15:45:b3:0b:66:ed:2d:53:35:c1:0d:ad:8c:a3:fa:74:b6:
11:fc:60:66:ee:b5:d2:4d:0f:49:fd:76:a8:29:31:41:15:f6:
c6:75:53:a3:f3:6a:60:fb:99:ef:50:38:c1:7f:d2:34:a0:47:
6a:e9:6f:32:1d:f5:d6:17:66:aa:31:a6:01:66:23:78:5f:50:
4b:17:90:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:28:07 2025 by rpki-client