Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft
File: znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft (raw, json)
Hash identifier: mEWrYh5j7Xm6iwq0tkBJXnpRwQ8TKdFt+kD8kEACN8Y=
Subject key identifier: 8B:67:03:6B:D7:2F:B4:14:31:F7:FB:1F:FF:6F:B5:31:62:9D:81:00
Authority key identifier: CE:70:3E:4E:F9:DF:2E:BE:38:65:0A:70:4A:4A:01:9C:2A:66:43:50
Certificate issuer: /CN=A9136C5E/serialNumber=CE703E4EF9DF2EBE38650A704A4A019C2A664350
Certificate serial: 016B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft
Manifest number: 0168
Signing time: Fri 31 Jan 2025 03:09:38 +0000
Manifest this update: Fri 31 Jan 2025 03:09:37 +0000
Manifest next update: Fri 07 Feb 2025 03:09:37 +0000
Files and hashes: 1: znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl (hash: hwx8OkA30kw3F1ixVhQwBvrZ8lCpPdOW3qIx3Y95SfY=)
2: 9BCEEFF4BC6911ED9B0FC554C4F9AE02.roa (hash: HpSulYTKjWi9yozCtLRgfGwwq/HpvwINJQ7fctCpbuc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 363 (0x16b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136C5E/serialNumber=CE703E4EF9DF2EBE38650A704A4A019C2A664350
Validity
Not Before: Jan 31 03:09:37 2025 GMT
Not After : Feb 7 03:09:37 2025 GMT
Subject: CN=679c3ef1-c447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1b:22:8e:f6:9d:97:d9:f6:a3:0a:38:35:a3:
66:e5:8a:87:0b:21:06:51:71:a6:5c:a8:92:52:bc:
ea:ec:94:31:3b:8d:56:0f:ef:cf:a5:07:c5:e0:35:
92:a3:41:28:6a:64:3e:4b:3d:57:64:90:3a:de:e2:
01:56:1f:a0:55:43:18:f1:c5:aa:0b:5e:25:d5:3c:
82:26:be:16:46:ad:84:e4:d5:58:64:aa:2a:dd:f6:
7b:69:f3:ad:93:ce:45:f8:fd:e8:2b:4e:78:e3:67:
ec:f7:d5:07:6e:7a:da:0f:c2:09:72:06:9f:44:2c:
ab:7a:b2:26:df:64:d9:73:c0:d5:ec:6d:04:ca:3a:
ca:8f:ba:c5:8d:6b:43:c5:68:ce:ea:5f:0c:8c:69:
ff:1c:d0:86:b8:5a:9c:06:7e:71:12:57:d7:ab:9c:
4b:9d:5f:77:2f:7d:8a:45:e1:08:13:e8:af:fe:04:
23:8d:75:96:4f:89:b1:5f:ac:56:c2:5b:5d:87:65:
eb:95:1c:92:d5:31:b8:3d:43:2a:1e:d2:86:41:41:
a2:2d:92:4e:0e:fb:30:f9:b5:d9:22:82:d6:6c:5f:
bd:cf:ca:c9:3d:da:9c:0f:c5:8a:cc:ef:11:16:70:
9a:44:a8:f8:0d:6d:98:a7:91:51:ea:85:a0:91:78:
e2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:67:03:6B:D7:2F:B4:14:31:F7:FB:1F:FF:6F:B5:31:62:9D:81:00
X509v3 Authority Key Identifier:
keyid:CE:70:3E:4E:F9:DF:2E:BE:38:65:0A:70:4A:4A:01:9C:2A:66:43:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:70:ee:72:4f:33:ff:fe:22:11:74:9c:b4:ca:32:5c:48:a5:
f5:37:8f:9f:2c:36:a5:28:a6:31:20:e1:fb:26:4e:90:2f:7a:
55:bb:45:c7:e3:e5:4a:75:2e:d3:d9:25:f3:05:7c:e1:c5:39:
a4:d4:43:14:d4:eb:d4:f8:7f:8e:07:08:c3:24:20:db:fb:03:
7c:13:d1:58:cf:77:13:9d:51:90:85:8e:8e:2c:6a:f8:09:15:
c4:9e:8d:40:49:c4:ae:fa:db:13:92:a4:17:b5:33:bd:0f:66:
a9:83:fc:99:8b:78:52:20:eb:63:d5:c6:13:6f:e1:29:b6:b4:
4e:99:9a:73:31:86:d0:95:08:8e:be:a9:0e:fd:15:ac:26:5f:
34:2b:4b:7d:dd:5e:e6:d0:6f:44:5c:d2:b2:00:14:e0:65:ed:
a9:fe:19:1b:74:4b:db:24:bf:c4:59:79:b2:1d:62:48:58:5d:
5b:c3:15:09:04:85:83:ac:2b:ac:54:fa:63:6f:bd:3f:fb:cf:
9b:8b:dc:1f:60:98:d6:10:5d:03:82:30:c6:7f:79:ea:53:95:
57:a7:c2:df:9b:53:54:92:9a:91:b4:1c:db:78:06:84:b4:4e:
9f:4b:37:0c:a0:0a:23:2b:70:1b:9c:b5:f0:b7:9d:05:d3:6c:
da:e8:ca:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:36:23 2025 by rpki-client