Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.mft
File: ZGscQagf9-WCtezcHO9UzmEVJWM.mft (raw, json)
Hash identifier: lWqJF1OeY2rwOBTVjA87Oypf0dnZ9ZDobtHd5rvNhq0=
Subject key identifier: 19:CE:6F:B2:6A:5C:E6:B6:9E:41:77:C8:C3:50:71:48:54:84:72:76
Authority key identifier: 64:6B:1C:41:A8:1F:F7:E5:82:B5:EC:DC:1C:EF:54:CE:61:15:25:63
Certificate issuer: /CN=A9129D4A/serialNumber=646B1C41A81FF7E582B5ECDC1CEF54CE61152563
Certificate serial: 1D1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGscQagf9-WCtezcHO9UzmEVJWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.mft
Manifest number: 1D14
Signing time: Fri 31 Jan 2025 16:09:24 +0000
Manifest this update: Fri 31 Jan 2025 16:09:23 +0000
Manifest next update: Fri 07 Feb 2025 16:09:23 +0000
Files and hashes: 1: ZGscQagf9-WCtezcHO9UzmEVJWM.crl (hash: tw4gsbPCvBDvdyupaoO/qUrCzwpmdgXiyV7vYdUCMpA=)
2: 810AF2B0AC9611E6A37EC415C4F9AE02.roa (hash: mxRFoZlbF7GrkWlo6RWpK5mJSh6VlbtldbAN6DTyqBQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7454 (0x1d1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129D4A/serialNumber=646B1C41A81FF7E582B5ECDC1CEF54CE61152563
Validity
Not Before: Jan 31 16:09:23 2025 GMT
Not After : Feb 7 16:09:23 2025 GMT
Subject: CN=679cf5b4-7761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e9:13:34:10:05:4b:21:4f:ce:97:4f:f1:fb:
17:87:3d:04:8f:ad:31:28:de:46:d4:b5:8a:00:99:
d0:b9:59:21:6b:bc:66:22:fd:0e:94:e8:43:bb:00:
21:e7:6d:9b:ce:82:21:34:66:03:91:ac:d8:8a:b9:
f6:a6:57:81:90:ca:8f:fe:26:d9:58:f0:ea:44:31:
c7:5a:14:bf:3f:ea:b2:e3:bf:c9:09:94:07:e4:bb:
53:b6:d0:98:16:99:ac:20:ad:5c:c2:c6:7b:ef:e3:
77:db:61:7c:a2:26:aa:0d:6e:e5:49:13:3e:c5:35:
6a:78:fd:fb:61:ae:7f:00:78:e3:1f:6d:c6:cc:93:
3c:e8:56:d8:84:31:2e:c8:6e:58:3b:bf:dd:30:80:
03:39:7a:35:14:a9:a7:f6:8b:d4:c0:43:3b:ff:a1:
47:c6:c0:69:79:75:a7:1e:63:1e:59:8d:f1:03:3f:
c6:56:96:53:2b:bf:18:5d:2c:bc:13:88:45:37:17:
8b:af:42:14:08:94:9e:b1:a7:07:16:f2:23:c8:2b:
c9:20:6c:45:c5:02:e8:b5:e5:b4:e2:35:2a:3a:bd:
cb:18:69:19:33:02:cf:76:69:bb:65:ff:fe:3f:81:
f5:bb:f7:3b:f8:fe:1a:4f:f2:33:80:b2:71:37:72:
bc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CE:6F:B2:6A:5C:E6:B6:9E:41:77:C8:C3:50:71:48:54:84:72:76
X509v3 Authority Key Identifier:
keyid:64:6B:1C:41:A8:1F:F7:E5:82:B5:EC:DC:1C:EF:54:CE:61:15:25:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGscQagf9-WCtezcHO9UzmEVJWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:a8:c7:91:64:f5:15:2c:d7:d5:d7:bc:85:06:a8:03:27:9c:
f0:6f:97:af:0e:c6:24:03:75:0e:9c:74:2e:c1:f5:47:cd:43:
27:94:3d:b3:c7:dd:94:4b:4e:b4:b7:3a:38:90:ad:9f:e5:46:
f9:17:a2:c7:57:4e:6f:d8:4b:8e:d6:65:c0:d8:c2:d3:18:ad:
85:96:dd:f9:79:fb:b7:a4:6d:c6:34:13:24:8f:bf:2b:d9:4b:
85:82:07:24:cc:3e:54:a6:bb:83:59:e8:7c:da:55:d9:74:ed:
0b:24:83:12:74:70:45:ab:76:17:c7:57:72:0d:12:ae:61:12:
0c:bb:70:9f:75:fe:05:1d:4b:6e:a3:fa:74:72:61:c5:23:db:
07:2e:78:8e:9b:46:c4:f1:cf:2a:5b:08:20:21:6f:70:df:a3:
c3:f8:6d:7e:b3:1d:ef:e1:f4:71:50:cd:a9:e9:52:28:44:23:
bb:4c:cb:72:a0:45:c0:48:60:73:95:02:67:1e:81:be:4c:68:
f6:54:02:96:ea:34:f6:e3:67:1d:d0:f2:ba:fc:73:89:78:a8:
61:ed:98:4d:f6:43:14:6f:75:39:d8:e2:4f:e9:43:1b:e8:b0:
2c:25:42:44:14:37:34:18:42:ef:ff:a9:5c:36:1e:96:d5:1d:
f1:62:4f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:27:04 2025 by rpki-client