Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft
File: z7b2KJfnSw0H75YAuncJOQXLh1s.mft (raw, json)
Hash identifier: l9EgPL5baDfJRNu4RDSOWyIepqp2PvVxUQoFEfJmkpI=
Subject key identifier: 10:22:8F:62:07:17:E2:90:77:C7:7C:72:13:88:72:A1:9E:14:E5:2D
Authority key identifier: CF:B6:F6:28:97:E7:4B:0D:07:EF:96:00:BA:77:09:39:05:CB:87:5B
Certificate issuer: /CN=A91463ED/serialNumber=CFB6F62897E74B0D07EF9600BA77093905CB875B
Certificate serial: 012A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft
Manifest number: 01E2
Signing time: Fri 31 Jan 2025 03:47:46 +0000
Manifest this update: Fri 31 Jan 2025 03:47:45 +0000
Manifest next update: Fri 07 Feb 2025 03:47:45 +0000
Files and hashes: 1: z7b2KJfnSw0H75YAuncJOQXLh1s.crl (hash: cGBMDzrv2y7OfRdk9KCcoFomkCmQw/1YJWOTmQJsRbw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298 (0x12a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91463ED/serialNumber=CFB6F62897E74B0D07EF9600BA77093905CB875B
Validity
Not Before: Jan 31 03:47:45 2025 GMT
Not After : Feb 7 03:47:45 2025 GMT
Subject: CN=679c47e2-4240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2e:97:63:5d:bc:23:17:ed:59:d4:05:02:b2:
15:29:e3:4f:0e:2f:b3:fd:c6:41:c6:4c:74:22:78:
b6:67:0c:18:03:12:70:d7:d3:af:02:c0:92:ae:ac:
2e:1b:92:47:28:ca:6e:73:ff:7a:6e:04:7b:34:20:
67:6b:c4:90:2a:d6:f5:88:c3:4a:11:d9:ae:bf:d7:
4c:0e:8e:ff:12:6e:b7:52:d6:c7:cd:ef:39:a9:01:
f6:4c:c1:4e:0e:08:a2:7a:20:a8:f0:b8:e2:b0:df:
0a:5c:c3:7f:01:f6:d3:74:7f:d2:af:48:60:f0:ce:
77:55:92:c4:f9:25:dc:bf:dd:b0:c6:a1:9f:6f:73:
e7:67:32:a0:78:e5:5a:47:17:8a:a4:d8:14:7e:4b:
da:ee:2c:ca:52:f0:d4:e2:97:66:53:40:90:01:ec:
b4:f0:10:12:ff:5b:c2:aa:9e:53:f9:52:57:c7:ff:
19:0a:84:ce:aa:53:16:45:0e:ac:65:43:cd:d7:cb:
76:01:be:a4:65:50:19:93:f0:4e:5f:4c:7e:6f:68:
70:9c:14:c4:a3:b5:31:d4:c0:0a:38:31:99:4e:a3:
4a:32:cd:1e:b6:94:d5:d0:e5:cd:7d:78:29:1a:c4:
a2:cd:53:a9:49:5d:44:11:f7:59:39:72:07:de:a8:
79:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:22:8F:62:07:17:E2:90:77:C7:7C:72:13:88:72:A1:9E:14:E5:2D
X509v3 Authority Key Identifier:
keyid:CF:B6:F6:28:97:E7:4B:0D:07:EF:96:00:BA:77:09:39:05:CB:87:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:b4:e2:45:71:e6:63:8c:fa:bd:06:92:23:ab:cc:f6:c5:d9:
98:24:82:a1:fb:47:c2:2c:e8:ee:d3:54:98:af:c9:d0:32:15:
f6:bf:e5:78:b0:ae:f8:08:03:db:44:0b:28:fd:32:04:77:f2:
87:09:11:11:a8:17:c4:77:80:8a:7b:23:89:48:f4:5a:1b:80:
c8:ba:7a:7f:23:08:3b:0b:42:c6:26:27:5d:51:84:95:a7:99:
6f:28:33:1c:04:33:d4:8c:68:f3:b8:d4:35:43:e2:89:cc:1b:
47:77:5c:46:5a:d8:42:83:49:2c:56:69:f4:8a:40:13:81:fa:
d2:7a:15:33:77:cb:40:70:5a:55:92:55:c3:3e:69:c5:26:1c:
af:e5:54:5b:0e:64:42:7e:f8:b3:83:2d:f1:6a:af:49:ba:69:
f7:07:4d:2b:05:3a:3e:9b:46:c8:e6:27:5a:d4:1c:e6:1c:a7:
bd:15:9b:19:41:f5:86:2c:3f:ab:16:7a:47:8f:ce:97:11:35:
d4:0c:ff:bc:79:91:4f:d3:0a:eb:89:de:7b:32:65:07:37:26:
4b:be:26:b4:c6:a6:96:98:e5:b1:f3:2c:ac:53:52:05:53:08:
05:29:8f:c0:1a:ff:24:f9:7f:da:37:ef:cf:49:bb:aa:40:7e:
21:25:65:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:00:26 2025 by rpki-client