Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft
File: z3nGX0tVAQ-yXObEW4yRnbCToy0.mft (raw, json)
Hash identifier: A9vTyTAmCPGCKQlxrS8+TIODez+7LG4tsJC+b/7pL5w=
Subject key identifier: 6B:97:A6:D1:53:CC:C6:3F:EA:D2:9D:2B:FF:85:5A:70:30:02:EE:33
Authority key identifier: CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D
Certificate issuer: /CN=A912E87E/serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D
Certificate serial: 2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft
Manifest number: 2C
Signing time: Fri 31 Jan 2025 06:47:37 +0000
Manifest this update: Fri 31 Jan 2025 06:47:36 +0000
Manifest next update: Fri 07 Feb 2025 06:47:36 +0000
Files and hashes: 1: z3nGX0tVAQ-yXObEW4yRnbCToy0.crl (hash: ks9MtnMHuRB1/dofBiR4IDGTxdpSZ/f1iY3mURMOx10=)
2: A48892E4DE4A11EFACE66748C4F9AE02.roa (hash: pAKMszCIjt6MmJA/GOLnpRTl7JGqEZooCz2JSaSabrA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E87E/serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D
Validity
Not Before: Jan 31 06:47:36 2025 GMT
Not After : Feb 7 06:47:36 2025 GMT
Subject: CN=679c7208-95ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e0:f7:e0:41:74:32:e6:21:4a:82:17:be:de:
79:9b:fa:b3:ea:a7:2f:b1:cb:2c:e2:66:9a:26:47:
37:ff:69:8a:a3:2f:ea:1f:6c:4c:9e:7c:53:1f:0a:
09:6c:de:c3:48:b7:f4:87:1e:ab:9e:4b:85:28:b5:
91:92:99:7c:37:c5:da:0d:18:05:2f:42:64:31:05:
b5:6d:93:a4:74:92:2e:7e:0a:a2:1a:8a:c4:85:79:
f0:34:6b:52:4d:7e:28:59:37:7b:2f:c8:5d:02:52:
b1:0d:ba:7d:e3:ea:3f:3b:5a:47:ca:eb:85:6f:f6:
ec:ad:cf:74:63:02:cd:e2:6e:33:f4:39:42:c7:8a:
31:f9:7c:75:87:1c:5f:77:79:ae:71:a2:04:a2:b2:
f7:f2:66:2b:bf:d4:3a:55:0f:8a:bc:74:b9:3d:46:
c9:9d:ef:cd:61:20:c5:e6:0c:8e:3e:66:fa:d4:db:
e7:ac:92:c4:e8:5f:41:ed:7e:cc:1d:b7:48:58:0e:
46:44:59:cf:db:82:ce:2a:17:88:d4:12:52:11:80:
ec:12:0d:47:5d:6a:c4:ba:35:42:4c:d5:53:d9:fc:
78:18:d2:10:ee:13:18:b3:84:99:7d:10:02:78:1d:
58:93:9c:aa:fd:a7:2b:87:f2:5d:ba:7e:e9:34:ea:
58:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:97:A6:D1:53:CC:C6:3F:EA:D2:9D:2B:FF:85:5A:70:30:02:EE:33
X509v3 Authority Key Identifier:
keyid:CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:0c:9e:dc:11:34:96:f6:f9:c6:c1:e0:97:89:32:ee:37:7d:
76:58:ca:6e:2e:98:28:4c:f8:9e:ed:2c:7a:28:00:7b:63:2d:
16:88:8e:9f:47:59:da:d8:cf:39:a3:ee:69:fe:46:8f:82:a4:
f2:9f:62:aa:4f:65:8b:a3:fe:c1:b2:7d:35:58:8f:b8:e6:05:
c7:e9:8a:37:81:04:95:53:5e:52:da:05:3e:f1:8c:24:dd:7b:
13:f3:22:91:7b:43:4f:99:86:8d:18:ef:c2:89:dc:e1:03:d6:
fb:43:aa:d1:83:bb:60:27:ce:ab:e8:53:00:dd:0d:1a:4f:36:
23:3d:92:67:cb:e5:35:41:8a:ea:5b:20:dd:c3:48:33:71:2e:
9a:1e:eb:4c:e6:71:ec:5b:ed:e9:c5:28:4b:c0:d8:c1:bf:6d:
1e:fc:a8:46:d5:cb:64:cb:71:f0:9e:25:5a:94:7d:b4:f4:d4:
73:ef:5b:01:3b:44:3f:08:f9:9d:d7:1e:34:20:b3:bd:21:61:
eb:8b:f8:10:24:49:70:93:8d:7e:23:95:51:34:45:1c:e1:ad:
e7:75:dc:34:70:f5:21:90:9a:ad:df:a8:e7:96:0a:4e:f2:57:
fc:58:f4:b4:a0:c9:3c:74:0c:7e:97:ac:32:df:a1:99:4e:4b:
66:c8:9b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:41:18 2025 by rpki-client