Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft
File: z-PzHk8zetOBIBvzOgGmhfsBal4.mft (raw, json)
Hash identifier: wj3NubdD4oaQnH8jOnRp3k3Ggoa9CD+lqcx77SxtE1s=
Subject key identifier: 6F:5D:B3:5C:55:0D:B2:4E:D5:99:9B:74:56:88:67:63:07:5E:C4:A9
Authority key identifier: CF:E3:F3:1E:4F:33:7A:D3:81:20:1B:F3:3A:01:A6:85:FB:01:6A:5E
Certificate issuer: /CN=A9128E00/serialNumber=CFE3F31E4F337AD381201BF33A01A685FB016A5E
Certificate serial: 0CCB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-PzHk8zetOBIBvzOgGmhfsBal4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft
Manifest number: 0CC4
Signing time: Fri 31 Jan 2025 18:05:26 +0000
Manifest this update: Fri 31 Jan 2025 18:05:26 +0000
Manifest next update: Fri 07 Feb 2025 18:05:26 +0000
Files and hashes: 1: z-PzHk8zetOBIBvzOgGmhfsBal4.crl (hash: 63Czl3mgHxv4Ek3JPW8yIxJGGOhQ6teAFtpHXfSSpOY=)
2: D23C5270E02111E9B4A3923FC4F9AE02.roa (hash: vQUUglkdMv/072cNIafcYwyV+Or+HuBH/Aor98sulsc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3275 (0xccb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128E00/serialNumber=CFE3F31E4F337AD381201BF33A01A685FB016A5E
Validity
Not Before: Jan 31 18:05:26 2025 GMT
Not After : Feb 7 18:05:26 2025 GMT
Subject: CN=679d10e6-6081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5c:a4:ab:c1:8e:c2:70:33:fa:8c:a3:d9:33:
c0:a8:c8:c7:9f:9c:3c:29:a6:96:12:94:ca:08:9b:
04:f1:04:0d:81:15:00:4d:ab:30:4d:3d:60:f5:e7:
96:3f:5e:84:f0:3e:44:1a:bc:00:74:2a:75:6e:97:
af:53:67:e9:5d:7b:8b:c1:55:73:7c:e3:f7:9e:4d:
59:33:93:4a:f5:d9:4f:2b:29:90:a0:71:4e:ee:19:
8b:18:cd:f4:0f:50:f2:6e:b1:8f:c4:b7:bc:89:37:
b5:c1:df:b1:7d:a3:47:19:b5:dc:3a:6a:bc:0c:e4:
80:f8:00:9f:9e:a1:24:95:20:95:86:66:8f:c0:cb:
d1:00:c7:0a:e3:35:d4:8b:5c:35:36:fd:b7:bf:48:
9b:86:c6:a3:00:fa:d0:29:4c:5a:25:3a:15:0e:0d:
85:76:96:17:92:cd:48:20:0a:be:4f:ec:66:16:d0:
1e:66:07:9d:0b:dc:2f:fd:f5:7c:2f:3e:be:eb:24:
cb:71:ba:96:87:47:8a:10:4f:27:1c:8f:9e:02:4d:
6b:83:b3:d3:1b:88:17:a7:8d:94:40:d1:96:f9:fa:
00:48:68:96:f5:ab:01:e4:bd:69:79:19:0f:09:96:
46:64:ec:71:f3:7d:8f:fa:33:51:59:93:f4:8a:d4:
8b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5D:B3:5C:55:0D:B2:4E:D5:99:9B:74:56:88:67:63:07:5E:C4:A9
X509v3 Authority Key Identifier:
keyid:CF:E3:F3:1E:4F:33:7A:D3:81:20:1B:F3:3A:01:A6:85:FB:01:6A:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-PzHk8zetOBIBvzOgGmhfsBal4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:95:c4:65:4d:db:3f:dd:ee:54:76:eb:d3:5f:9c:ca:79:aa:
b1:bf:82:98:a6:89:a5:e8:fe:c2:a2:8d:bc:d7:8c:5e:53:e3:
36:5f:6a:80:dd:2b:9c:5f:ab:83:48:28:24:69:35:dc:81:ad:
bd:87:6a:83:ef:bb:ea:ba:49:0a:2b:d1:aa:4b:27:b4:90:9d:
54:be:35:06:be:86:09:ee:2f:1c:0c:03:00:3a:ee:bd:8f:80:
87:c5:bc:58:5e:e6:a8:12:b5:c9:a0:5d:ab:80:d4:ae:bb:dd:
df:2d:39:47:57:7a:a2:cd:1d:09:ea:68:fe:4d:37:3e:d9:1f:
1a:d0:b1:b1:b5:16:3e:fe:fa:7b:a9:51:01:c5:45:8b:46:4d:
2a:5a:5c:72:f9:26:0b:d0:29:82:fb:d6:25:3c:e8:43:11:1f:
a8:68:1b:97:15:44:8f:3c:c7:bc:01:e2:c4:a0:12:13:75:98:
f7:f7:48:27:c1:28:21:7a:31:bd:5f:23:37:a0:08:26:44:28:
df:63:64:a5:be:c2:a7:e2:26:40:9c:09:93:67:e6:64:8e:a8:
82:0d:96:17:01:da:fa:bb:6e:88:e3:18:2c:40:07:78:10:10:
1d:ab:26:73:e0:59:06:08:ec:0b:3b:05:6f:9b:1f:b1:24:b6:
87:59:f4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:18:10 2025 by rpki-client