Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft
File: ZI5HI0RBcbar4W19wDDonAbwUNw.mft (raw, json)
Hash identifier: 60z4iHGhDWd0GGx3EApRDazSuGTSnpMn1wlQbH+jDNQ=
Subject key identifier: 86:C3:E4:E3:6D:3E:71:BA:BC:11:61:3C:47:B7:7A:86:5C:DB:71:3C
Authority key identifier: 64:8E:47:23:44:41:71:B6:AB:E1:6D:7D:C0:30:E8:9C:06:F0:50:DC
Certificate issuer: /CN=A91408BE/serialNumber=648E4723444171B6ABE16D7DC030E89C06F050DC
Certificate serial: 0AD6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft
Manifest number: 0AD0
Signing time: Thu 30 Jan 2025 19:25:25 +0000
Manifest this update: Thu 30 Jan 2025 19:25:25 +0000
Manifest next update: Thu 06 Feb 2025 19:25:25 +0000
Files and hashes: 1: ZI5HI0RBcbar4W19wDDonAbwUNw.crl (hash: YWQMtbGhogdwJtDYmi9v9os+SpMXpXh5hCNH5e4emqo=)
2: 5DCB0A0C410C11EA8A6C412DC4F9AE02.roa (hash: J/8oDeRELdGOcwKCSIyZI2ucZRyx8ILa8bbFd/o79oQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2774 (0xad6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91408BE/serialNumber=648E4723444171B6ABE16D7DC030E89C06F050DC
Validity
Not Before: Jan 30 19:25:25 2025 GMT
Not After : Feb 6 19:25:25 2025 GMT
Subject: CN=679bd225-acbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d7:32:a0:24:dc:f9:f2:9a:6e:17:50:50:2a:
b9:2c:f1:20:fb:9f:c9:98:6d:57:45:79:cd:cb:06:
83:63:e3:99:5c:2f:6d:3d:7a:ee:e6:13:d7:ff:7a:
fc:da:93:0b:cc:3e:6b:e3:aa:4c:85:8d:83:5e:b9:
0b:67:6b:50:bd:6b:3b:e9:2c:93:1f:f6:51:62:99:
56:54:e3:a9:43:cf:d2:06:33:28:45:1c:92:ec:ba:
82:b9:65:53:74:86:b6:dd:21:c5:1f:6f:c0:85:f9:
5a:03:50:8d:1a:d1:0d:a8:61:13:df:ab:fa:14:bb:
95:d3:26:e1:8f:92:ba:a9:a2:c0:ea:1e:1e:41:17:
15:60:a8:f7:a2:81:6a:c6:a0:7b:f0:e1:78:77:d4:
82:2c:35:f6:b5:f4:59:90:69:6f:47:f9:39:0d:3d:
5f:d4:4e:00:6a:94:aa:5c:f7:f3:c0:1b:3e:d7:79:
b1:e2:ce:d1:a6:68:c7:04:df:73:d4:8c:c8:af:c1:
1d:94:df:91:6a:ac:ad:9a:01:01:04:38:63:12:af:
66:7c:cc:fd:4b:83:26:bb:31:32:57:26:8d:14:b9:
0c:de:2e:2d:1b:13:aa:25:59:91:b8:4e:1a:f8:6b:
f8:2f:8f:02:09:4a:d9:48:dc:9a:cf:05:3e:43:0d:
9b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C3:E4:E3:6D:3E:71:BA:BC:11:61:3C:47:B7:7A:86:5C:DB:71:3C
X509v3 Authority Key Identifier:
keyid:64:8E:47:23:44:41:71:B6:AB:E1:6D:7D:C0:30:E8:9C:06:F0:50:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:58:8a:1c:66:0a:42:71:ec:cf:e7:1d:3e:1c:85:35:28:c7:
b9:51:e2:51:c4:66:5c:2e:30:13:2c:bc:a9:c6:44:a5:f7:c3:
e1:17:ad:8b:de:19:17:56:33:85:97:c7:6e:c6:22:92:d3:5d:
fb:1a:ea:72:4a:e8:92:15:e8:79:5b:dd:fe:18:dc:36:ff:92:
92:81:df:fa:6b:42:53:52:90:37:9b:ad:a6:d4:ad:32:0b:7a:
5f:5c:75:6d:4f:05:ee:d1:13:8d:39:7f:d5:98:86:68:f5:58:
93:b5:95:9f:29:c0:5d:5b:b6:b0:fd:f6:11:4c:42:cc:83:ae:
85:62:66:7f:fe:e7:c4:67:32:77:c2:36:70:0d:18:79:8b:26:
37:85:3a:86:d8:a5:81:53:fc:2b:55:1f:d7:80:9c:ba:b6:be:
50:24:0a:cf:72:73:38:f3:67:32:d1:3c:b9:2c:a1:25:3e:fd:
92:ce:aa:2d:48:cf:f2:0a:ad:79:24:0c:8c:ac:25:60:09:0c:
70:4d:c4:96:6a:c1:47:fa:4e:e3:48:43:5b:72:83:ac:ac:44:
22:06:20:b8:8b:aa:2f:e9:8b:a6:fc:9e:ec:1a:36:39:d7:4b:
3c:5a:98:82:00:19:03:4c:a5:ef:b0:0d:6c:82:99:15:39:9d:
2a:90:87:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:31:04 2025 by rpki-client