Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft
File: CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft (raw, json)
Hash identifier: KHk+zbwqm24xiZN8pfbcwZGtwBMFgrb/T91ih7fRMq4=
Subject key identifier: 6A:B0:CB:8D:03:03:85:83:67:91:20:8E:F0:AB:46:A7:6F:CA:32:72
Authority key identifier: 09:95:06:EC:98:7C:8B:19:40:58:53:B0:8C:71:8B:5B:BE:4A:C6:92
Certificate issuer: /CN=A9143B0A/serialNumber=099506EC987C8B19405853B08C718B5BBE4AC692
Certificate serial: 56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZUG7Jh8ixlAWFOwjHGLW75KxpI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft
Manifest number: 55
Signing time: Fri 31 Jan 2025 06:15:48 +0000
Manifest this update: Fri 31 Jan 2025 06:15:47 +0000
Manifest next update: Fri 07 Feb 2025 06:15:47 +0000
Files and hashes: 1: CZUG7Jh8ixlAWFOwjHGLW75KxpI.crl (hash: vYcsvom6SoBBD/LGNhcENXZ0t1Nd4buW/8s7pJXuoN0=)
2: 485B32A8607B11EFB27C6C5DC4F9AE02.roa (hash: g7W9G3ij02vVGRhQiw6Ym1yygIWGPWKSpCEET+ZTaHQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143B0A/serialNumber=099506EC987C8B19405853B08C718B5BBE4AC692
Validity
Not Before: Jan 31 06:15:47 2025 GMT
Not After : Feb 7 06:15:47 2025 GMT
Subject: CN=679c6a94-e078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fb:15:6a:fd:e9:64:b0:40:31:0d:3d:53:cd:
aa:10:e5:4e:ec:7f:b7:d7:f9:a4:11:5a:db:f9:36:
e8:33:84:f0:19:9f:92:66:5b:e7:cf:f1:34:09:0a:
ac:c1:7b:04:10:f3:e6:dc:85:ae:1c:0a:8d:32:a1:
ee:8c:1e:b7:9d:7a:e2:ca:b5:7f:24:c5:b4:cd:10:
43:04:cd:ae:48:f4:f2:c9:08:26:30:c4:0d:10:35:
6f:17:e6:26:12:b2:32:39:8e:d7:0f:00:59:b2:35:
9b:ae:4b:ab:8b:12:9f:fa:df:17:2f:9f:87:11:a1:
d9:50:2b:6f:5d:2d:38:8d:c6:a4:d5:dc:79:02:c4:
6a:b1:d7:d4:8e:1a:76:60:b2:c4:e1:c8:75:a4:c5:
7f:67:ec:c9:f6:5d:fe:bb:c7:ee:e4:1e:14:f3:18:
51:c5:d8:07:7b:b9:d9:44:59:dc:a2:c2:f5:62:23:
37:47:64:bb:a4:0e:f7:d8:d7:14:dc:91:f5:dc:60:
20:4f:0f:0c:e2:9f:42:8f:cd:1e:b7:cc:a3:5a:02:
27:72:04:0a:e5:09:64:ed:df:a5:c9:62:77:df:eb:
ef:62:a9:e1:3d:bb:8e:c5:a2:4c:93:27:97:82:40:
72:c0:d7:61:39:5a:e4:97:bf:35:15:bd:88:9d:f1:
b6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B0:CB:8D:03:03:85:83:67:91:20:8E:F0:AB:46:A7:6F:CA:32:72
X509v3 Authority Key Identifier:
keyid:09:95:06:EC:98:7C:8B:19:40:58:53:B0:8C:71:8B:5B:BE:4A:C6:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZUG7Jh8ixlAWFOwjHGLW75KxpI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:2d:c0:7e:52:78:6d:e3:ea:7d:90:1f:2b:7a:84:d0:84:57:
e5:31:09:02:96:ef:cb:3f:7b:9c:c1:58:a8:12:aa:d1:f1:44:
24:2c:ae:28:a2:09:c5:39:52:95:e7:a0:a6:be:07:c9:ab:8e:
e4:8a:bf:97:1a:9b:39:bf:42:2b:68:a5:ee:72:ca:9b:fc:0d:
c3:14:e1:6e:77:a2:34:41:11:f6:49:2e:cc:a0:39:c8:95:5f:
0c:1f:58:bf:29:31:f6:99:87:db:a6:2b:b7:de:61:c4:10:da:
46:ad:59:c9:29:03:ad:57:31:42:59:39:75:bd:65:47:9d:b8:
04:40:c1:5e:26:6f:e5:fb:25:70:b9:ea:e9:a4:04:1f:9a:4b:
8b:14:e5:1b:84:fb:ab:e1:61:6f:e4:98:ab:49:bb:ea:3c:ec:
51:37:9f:1e:58:a1:d0:39:b1:b2:45:3b:51:32:9f:7d:cd:91:
3a:6b:79:fc:d4:0c:ce:ab:75:09:14:1a:10:18:b2:00:bd:c4:
b0:8d:cb:59:c1:09:b4:50:c4:32:76:ff:fd:9c:52:74:62:bf:
08:51:30:f6:93:1d:9a:c3:64:7d:18:85:fe:1a:af:f7:74:6d:
bb:88:f0:b7:b6:f0:5a:fe:20:24:04:9f:e0:50:20:de:10:64:
89:75:72:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:42:07 2025 by rpki-client