Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft
File: ZajQiy7I9C1Duap6QjUXK7ftFmU.mft (raw, json)
Hash identifier: 6oY2vsLHlM6SvpSWIcxLU28Qd/u7jNy6RySI2O1iFWQ=
Subject key identifier: FE:D2:A4:FD:2A:0D:18:E0:9B:A2:A7:AE:7A:7B:CD:B1:AE:3E:24:48
Authority key identifier: 65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65
Certificate issuer: /CN=A912C7DC/serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665
Certificate serial: 14
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft
Manifest number: 13
Signing time: Fri 31 Jan 2025 07:04:12 +0000
Manifest this update: Fri 31 Jan 2025 07:04:11 +0000
Manifest next update: Fri 07 Feb 2025 07:04:11 +0000
Files and hashes: 1: ZajQiy7I9C1Duap6QjUXK7ftFmU.crl (hash: 5V/4xSZJFJIEGXqtlotf/bpsKfZ7c1mb9aKM2LzNi7A=)
2: E29CD82EC58B11EFBA44DE34C4F9AE02.roa (hash: Dm+Qler0DP4/BlS/cktwlrkhP2z4/Lue67gvK431F+w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C7DC/serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665
Validity
Not Before: Jan 31 07:04:11 2025 GMT
Not After : Feb 7 07:04:11 2025 GMT
Subject: CN=679c75eb-a63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:dd:e2:91:54:28:26:e6:47:df:8f:35:ad:7f:
58:6a:b4:d9:8f:6a:9b:67:87:9d:99:8c:6d:bb:23:
b0:41:b5:ad:66:4a:c3:89:c0:36:7a:7b:2a:32:07:
31:35:0f:dd:5b:d7:78:62:88:4a:de:72:71:88:34:
26:6b:cd:89:2f:21:9c:3c:f5:ba:7a:33:24:d8:7b:
2b:33:f8:97:e8:8b:a0:73:38:be:3b:69:dc:91:35:
7a:57:da:75:00:b9:92:7a:f9:84:40:56:25:e0:81:
60:d8:e6:1c:77:11:ea:e7:8e:b9:d0:4a:14:95:50:
bb:b4:2b:e5:8c:1c:78:ea:83:05:1c:94:97:c0:a0:
e3:6c:3e:46:79:12:f4:7c:03:56:bd:e6:35:30:92:
a0:a6:19:85:a9:a9:ac:da:b0:d2:2e:d0:05:28:46:
65:3e:a2:fd:3e:b1:b9:d5:a0:65:25:d2:61:62:f8:
6b:9a:fc:6d:ab:8d:26:ce:fd:24:8b:5e:71:ba:22:
d7:2d:b4:80:08:1a:20:8f:84:03:c8:28:18:c0:bc:
f3:d5:1f:83:fe:3c:e2:b9:d5:2f:67:11:51:c8:8d:
ee:ca:36:39:5b:75:ec:9e:2e:b0:cd:ae:cc:98:25:
74:62:f2:90:15:c5:86:4c:ce:32:26:b5:42:3f:56:
5e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D2:A4:FD:2A:0D:18:E0:9B:A2:A7:AE:7A:7B:CD:B1:AE:3E:24:48
X509v3 Authority Key Identifier:
keyid:65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:0c:07:7b:a7:91:96:15:7b:04:54:f7:bd:ab:21:e7:8e:ed:
da:72:04:ce:84:0f:34:f0:a6:88:f6:33:af:93:a1:86:90:21:
8e:66:b9:2a:09:4b:01:9e:ee:09:f2:f7:1f:14:df:c1:7a:f1:
fe:4d:ff:fe:6f:86:5b:61:77:da:bd:27:d4:48:31:14:43:ff:
76:a9:51:d2:e2:cd:03:e9:8e:70:e6:3c:00:3e:74:41:51:8a:
5a:ee:e0:3a:98:0c:cf:a8:ee:e0:e2:44:1b:5e:ed:2b:ec:88:
e6:33:da:a6:90:57:1d:91:ab:78:d3:4c:f9:9d:5a:6e:8b:c7:
21:a0:36:92:eb:26:b7:04:85:f4:68:13:3a:8b:95:91:74:03:
0c:9b:e0:cd:34:d4:e1:c1:77:26:64:7a:da:58:76:09:00:0e:
8e:f6:41:ea:f7:ae:eb:a4:2a:a1:65:ca:cc:13:26:5d:3e:83:
bc:41:68:22:f5:9d:ba:61:91:5a:00:05:c2:c2:45:95:da:f1:
a8:7d:70:11:a5:bd:84:66:c5:d1:d0:e5:22:97:f9:23:c7:9f:
9d:dc:e8:54:69:0c:0f:5e:23:a4:a6:97:6e:38:cb:fd:32:12:
a0:1f:ec:68:07:d0:04:56:fc:c4:e0:a9:ec:74:ec:3f:b4:1f:
24:c9:d1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:47:46 2025 by rpki-client