Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
File: 2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft (raw, json)
Hash identifier: yVOt3WNbnidrJ5cgVwMVTFpGzX732woVInUiYEDTQE4=
Subject key identifier: 91:2F:9B:C2:AE:9F:B6:4F:82:C8:FF:BF:F9:23:CC:D6:E6:63:1F:50
Authority key identifier: D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C
Certificate issuer: /CN=A913664F/serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C
Certificate serial: 0162
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
Manifest number: 0155
Signing time: Fri 31 Jan 2025 03:24:42 +0000
Manifest this update: Fri 31 Jan 2025 03:24:41 +0000
Manifest next update: Fri 07 Feb 2025 03:24:41 +0000
Files and hashes: 1: 2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl (hash: Gx2dunSa8BUQcEeyv35/hoNC5ZZC9GXdnAUkvTgK1fQ=)
2: D2677928DD9811EDB2BBBA09C4F9AE02.roa (hash: YZA05NbdXQqTTqp/56l0zqv1K93ANRNuBAfVzKzDIX8=)
3: D1DDFDECDD9811EDB2BBBA09C4F9AE02.roa (hash: U4XP+q4YcB/6cfAS39rgiX5WO5DuizysSejbMFJaGr0=)
4: B1E75D08DD7F11ED815F9B4DC4F9AE02.roa (hash: U3r7gOdI0y7v58kpvuRKxIkw0qomkyuS/Mmv5pVcbGs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354 (0x162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913664F/serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C
Validity
Not Before: Jan 31 03:24:41 2025 GMT
Not After : Feb 7 03:24:41 2025 GMT
Subject: CN=679c427a-04de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:b6:8e:28:16:d7:30:1c:aa:b3:84:00:0e:c3:
a8:43:a8:99:0f:b4:d3:ea:f5:36:16:57:21:0c:11:
ba:7c:8f:6c:28:f2:7c:b1:3e:b6:b9:90:a8:a2:cc:
4f:0f:34:aa:79:a9:df:11:cd:e6:f3:c9:d0:ee:c6:
f4:26:72:1c:44:83:44:42:89:75:70:2f:53:ea:39:
aa:1e:31:39:33:b1:42:62:c4:87:72:0b:2f:60:8a:
fa:48:8a:25:b8:c0:ac:cf:52:b6:51:da:f5:d7:ea:
83:f0:62:47:d0:21:88:e5:43:bb:94:de:7e:2a:e3:
25:30:78:6f:19:60:3d:8e:99:b0:e1:4f:86:21:94:
2d:25:96:49:e2:00:bf:46:a6:e5:0a:4b:03:8a:61:
61:ed:38:1a:01:51:9a:83:82:86:0c:d0:22:d5:6f:
e3:9c:84:be:8d:d7:c2:b6:2e:02:31:bd:ce:4e:d9:
06:47:17:a7:b5:f5:0f:7d:7c:01:9c:90:18:f9:7c:
00:de:2a:ef:f5:4f:ef:52:65:26:1b:cb:ef:0d:3d:
52:5b:c8:4a:86:38:e0:3a:68:7b:a9:3b:d3:f1:a3:
4c:e7:44:63:17:d8:40:c6:5d:7f:52:3c:fe:3f:0f:
95:88:e9:56:cf:1a:00:ee:a3:96:eb:4a:8b:cf:6f:
9d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2F:9B:C2:AE:9F:B6:4F:82:C8:FF:BF:F9:23:CC:D6:E6:63:1F:50
X509v3 Authority Key Identifier:
keyid:D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:7a:37:69:45:ab:46:68:28:67:5e:3d:2b:eb:11:38:59:64:
28:53:fb:30:53:3e:81:84:4e:4b:14:5c:fe:03:6e:bb:27:41:
0e:36:6a:f2:c5:fb:51:ec:c6:0d:01:77:d6:c0:75:2a:f0:4f:
fe:ff:81:f1:43:64:97:98:d8:cd:eb:a7:a3:35:36:dd:b5:3d:
db:d8:2b:41:e8:b9:6d:05:f8:1d:9f:b4:7d:af:c0:4f:db:67:
de:fa:50:8c:e5:db:ef:bb:cd:49:f7:c8:48:fc:e5:55:ce:d5:
62:24:0c:af:71:c9:1c:b3:e8:f0:49:9f:cc:0c:3b:42:83:35:
91:81:15:34:dc:bd:b9:cf:18:1a:1e:d8:20:3e:25:82:de:51:
58:b7:6d:dd:f4:4e:db:0e:3e:34:51:59:c7:a4:30:dc:e5:00:
03:6c:96:76:04:d8:ea:4d:48:66:6b:18:d3:f7:2b:9d:35:17:
43:92:8f:dc:7c:46:e5:cf:01:e4:24:dc:0a:5c:a2:3d:03:43:
b3:52:4e:39:b7:fe:a9:fa:a0:05:7d:f0:8e:b7:76:50:ec:12:
7e:fd:ab:0f:e5:11:78:b3:43:d0:66:d1:e1:4b:4f:10:74:dc:
f7:04:3b:33:f3:b5:0d:4d:0c:b7:ee:09:da:1d:d1:9a:de:9f:
ec:57:23:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:40:38 2025 by rpki-client