Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft
File: Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft (raw, json)
Hash identifier: jVVCKSSZwkQ7pXf/MJlABDWXiTjFB1DVcDZUeC+zEcc=
Subject key identifier: 0E:4C:89:0C:EF:56:24:3A:58:41:67:18:B8:00:B8:BF:16:C9:23:38
Authority key identifier: 67:5C:36:7F:60:37:9B:CE:31:DD:93:4F:A4:0C:80:C8:5E:E9:AF:D9
Certificate issuer: /CN=A912F158/serialNumber=675C367F60379BCE31DD934FA40C80C85EE9AFD9
Certificate serial: 0235
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft
Manifest number: 0235
Signing time: Fri 31 Jan 2025 02:00:06 +0000
Manifest this update: Fri 31 Jan 2025 02:00:05 +0000
Manifest next update: Fri 07 Feb 2025 02:00:05 +0000
Files and hashes: 1: Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl (hash: 0ZSEOy17kMxQYF9Ll0bCsCzGn9nX7SetVUT0H+cASYw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 565 (0x235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F158/serialNumber=675C367F60379BCE31DD934FA40C80C85EE9AFD9
Validity
Not Before: Jan 31 02:00:05 2025 GMT
Not After : Feb 7 02:00:05 2025 GMT
Subject: CN=679c2ea5-c2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e1:1d:80:a7:b9:46:32:4e:e8:4f:09:7d:16:
dd:c2:77:70:be:d5:b5:ea:13:64:bc:f6:5b:db:df:
28:c9:c1:33:35:48:4a:58:2d:ec:6a:c9:08:6d:63:
25:10:cb:65:7b:54:e9:a8:60:0b:40:7d:78:ac:ed:
74:fe:e0:c7:08:7e:d7:5a:40:80:4e:56:a3:76:f1:
31:85:5b:e0:b3:01:ed:bc:66:3e:37:40:93:43:aa:
c1:84:de:58:0a:9c:ee:50:bb:07:b3:07:67:bf:8e:
dd:b8:6a:00:61:6c:a2:d1:dc:23:9c:c2:ea:a0:d6:
7f:5a:28:a3:4a:28:88:84:f4:c5:84:24:34:94:59:
c9:70:6a:69:c1:56:37:d7:24:4c:76:0f:8e:d9:5f:
b9:4f:82:11:58:16:d8:6c:4a:34:8b:54:eb:f9:06:
d5:bc:4e:e2:f0:71:35:15:a8:ba:d6:14:65:3e:48:
fa:03:f7:fd:e5:7c:ec:a1:f2:c0:79:7c:2c:d0:74:
b0:6c:c0:7e:e6:c7:4d:0e:b9:4e:5d:e6:a0:23:5f:
6b:86:6a:5e:d2:ef:cb:b6:44:92:37:59:c2:34:29:
13:b5:90:3c:53:2b:f8:6c:2b:67:db:a2:fb:b1:90:
13:7c:e9:7e:61:49:a3:13:f0:b0:92:5b:90:d3:a5:
21:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4C:89:0C:EF:56:24:3A:58:41:67:18:B8:00:B8:BF:16:C9:23:38
X509v3 Authority Key Identifier:
keyid:67:5C:36:7F:60:37:9B:CE:31:DD:93:4F:A4:0C:80:C8:5E:E9:AF:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:0d:80:b2:2f:1e:db:05:0c:00:33:ba:4b:e1:64:86:97:0b:
ab:63:7f:41:42:63:b1:67:6f:a4:ff:58:39:08:a5:94:b8:c1:
02:ef:51:30:5b:8d:9f:8a:cf:06:06:b3:3e:7c:02:bf:4e:d4:
9e:e4:68:ed:e3:a2:a1:3c:48:7f:08:af:a0:6b:68:46:95:17:
18:d0:bf:0a:05:f0:0d:80:6a:51:68:35:73:0d:7a:52:da:f8:
31:a7:7b:41:eb:1e:ed:f6:a0:72:ee:2b:95:ac:a2:e7:bf:2a:
7d:88:77:78:57:28:9f:ff:62:07:e0:55:3e:ce:ea:c0:29:69:
08:6e:71:6d:bf:4e:0a:92:02:0e:27:e8:e4:d6:d0:38:dd:69:
fa:60:93:e1:04:55:f6:f1:c9:b8:7e:fe:2f:f7:6d:22:3f:03:
e6:be:ca:55:a8:8d:e4:a6:78:8b:a5:be:62:ae:8a:e7:41:ee:
d1:3c:57:58:4e:a4:23:eb:a2:3b:a5:68:d1:95:47:63:9a:91:
38:c2:b6:cc:3e:d3:20:d4:58:6a:8d:d2:72:e1:da:bb:62:b9:
54:63:33:8a:aa:93:c8:9d:88:ce:b1:cf:d3:45:8c:7f:b3:76:
58:d5:24:f1:59:73:77:19:58:1e:39:c8:d1:21:fc:df:14:44:
42:68:f7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:52:54 2025 by rpki-client