Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft
File: zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft (raw, json)
Hash identifier: VG4Psvr/QEwMsoYZ60HL+vWw0ESvHmMVud/DpwpC4cE=
Subject key identifier: C2:14:63:1D:18:09:A6:EC:75:D2:38:5F:B2:CF:C5:0A:AD:44:0D:B2
Authority key identifier: CE:52:D8:77:70:A3:25:2B:D1:F4:C9:12:6C:B5:D5:D1:B7:D9:FB:F4
Certificate issuer: /CN=A912BE4E/serialNumber=CE52D87770A3252BD1F4C9126CB5D5D1B7D9FBF4
Certificate serial: 0562
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft
Manifest number: 0561
Signing time: Thu 30 Jan 2025 23:23:07 +0000
Manifest this update: Thu 30 Jan 2025 23:23:06 +0000
Manifest next update: Thu 06 Feb 2025 23:23:06 +0000
Files and hashes: 1: zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl (hash: hU0+sjVByp53zVcOHsQ3cKFs9bU9B13bogrJeqbZt2E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1378 (0x562)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BE4E/serialNumber=CE52D87770A3252BD1F4C9126CB5D5D1B7D9FBF4
Validity
Not Before: Jan 30 23:23:06 2025 GMT
Not After : Feb 6 23:23:06 2025 GMT
Subject: CN=679c09db-21da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:58:54:b3:51:18:4b:58:2c:61:7d:72:e6:6e:
9a:59:62:f2:0e:4c:5c:5e:46:a6:ae:00:41:89:b1:
96:e5:24:84:e8:c3:b9:93:f6:c7:85:32:55:46:10:
33:48:1b:d2:06:11:67:dd:18:23:96:8e:6d:87:3c:
76:a5:cf:a6:cf:ba:6d:f5:35:85:ce:b8:a1:a6:2f:
56:9a:a8:a6:75:09:b1:85:da:7e:fe:05:fb:d9:44:
79:cd:d2:97:55:06:db:2e:00:d1:50:6b:a2:e5:01:
1f:8d:98:06:55:c6:45:d2:62:d5:d3:93:b8:24:9a:
29:8c:6e:d4:80:35:18:e7:cb:6d:b6:c7:66:07:0b:
92:1e:5a:f4:9a:bc:a9:7f:9a:25:a4:71:80:c5:ee:
9d:2d:52:79:21:1e:c8:d0:0c:91:16:3a:7b:70:00:
de:4d:95:a0:f7:cc:24:0f:6d:be:b4:b3:82:2e:fd:
1d:d5:98:a9:ad:29:a5:27:31:a2:70:81:c8:08:7f:
c3:b8:57:12:49:6b:cc:2c:86:f5:d4:49:7e:aa:f4:
e1:84:66:1e:91:d4:ad:d5:75:f6:d2:56:6f:fa:c2:
f2:50:cc:16:12:34:3f:a5:f4:11:d6:01:ac:e1:52:
4f:04:63:9f:3f:b4:40:8e:f5:ee:02:83:6c:70:f5:
0a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:14:63:1D:18:09:A6:EC:75:D2:38:5F:B2:CF:C5:0A:AD:44:0D:B2
X509v3 Authority Key Identifier:
keyid:CE:52:D8:77:70:A3:25:2B:D1:F4:C9:12:6C:B5:D5:D1:B7:D9:FB:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:45:e3:c2:52:92:2d:99:82:b2:20:b5:90:41:79:62:b7:33:
ec:02:e3:91:b9:26:c0:1b:47:19:0b:57:ba:3c:be:49:de:a0:
d9:61:9d:e7:64:12:9c:81:b6:72:1a:c4:74:43:c8:21:9e:2a:
33:da:d6:e2:45:0c:4b:e2:f7:ad:08:5a:20:4b:8b:1f:f7:e3:
49:ea:63:13:0f:65:c3:09:f6:0f:f7:88:c3:6d:43:4b:d5:59:
f6:fc:98:6f:87:e8:47:7d:0a:76:87:93:61:bb:88:0c:4e:87:
11:01:e9:53:b1:d1:c2:99:07:1d:c0:a5:3f:40:22:11:af:4a:
4a:16:2f:b6:0a:86:77:a8:b9:8c:d7:31:e1:ee:3d:71:28:ce:
04:97:7b:37:2f:23:e5:89:24:6a:65:34:c4:0c:bf:9f:74:02:
40:93:3f:81:89:13:aa:d8:70:a6:06:f8:2a:6f:2a:ab:ed:7c:
aa:9c:db:25:4b:d0:47:05:36:9d:26:29:a6:bb:08:2d:1a:db:
2b:ff:c8:1c:3f:ea:ad:3b:ba:03:87:51:c3:5b:b3:9c:c4:05:
ca:2c:48:7e:69:06:36:be:ce:5d:80:88:8b:17:d2:cd:e3:d7:
fb:90:4e:b9:15:0f:96:1e:52:17:fc:be:2b:93:05:24:0e:1d:
fe:53:f9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:47:59 2025 by rpki-client