Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft
File: ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft (raw, json)
Hash identifier: 7m/v+9FLN+8z6Im/LCU5yhww8LUTA18/aFCmmtAVraw=
Subject key identifier: 0C:E0:0E:C7:D8:E9:CA:38:56:8E:D8:47:DB:F4:28:0C:C4:5D:6C:7E
Authority key identifier: 64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9
Certificate issuer: /CN=A9148456/serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9
Certificate serial: 0123
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft
Manifest number: 011C
Signing time: Fri 31 Jan 2025 03:55:56 +0000
Manifest this update: Fri 31 Jan 2025 03:55:56 +0000
Manifest next update: Fri 07 Feb 2025 03:55:56 +0000
Files and hashes: 1: ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl (hash: r5/SPz0GswpzoZ/WTZiECkU7LSDdhSKyfe0KSNcPP1M=)
2: BEB0BA5031D711EE8DF6CB20C4F9AE02.roa (hash: 5/5EDXfdidDN1kIIpU6RxLH5nwhq7RavGWsn7HWaobc=)
3: D459D92C31D711EEBE1BFD20C4F9AE02.roa (hash: RQHCuTNnhU+W3QyMF/cWQQa7ATaR8Vs28IecrYMvrEA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291 (0x123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148456/serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9
Validity
Not Before: Jan 31 03:55:56 2025 GMT
Not After : Feb 7 03:55:56 2025 GMT
Subject: CN=679c49cc-2662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:83:a9:54:e4:6e:30:1f:8b:66:2e:d3:54:da:
dc:49:34:a2:de:73:82:3a:7d:f8:19:65:ca:83:52:
70:b2:64:fe:22:a6:36:4a:8e:74:fc:1e:ab:9a:95:
02:2d:a6:61:32:bf:f2:93:b8:b5:17:b0:34:4b:88:
36:40:39:89:df:74:8e:6d:ee:23:df:6c:91:02:32:
00:ec:7f:e5:6d:27:e0:6b:22:ba:a4:15:0a:57:bd:
f9:52:e2:ae:4f:91:39:c2:07:3f:95:fb:fb:5a:12:
8c:12:ea:bc:64:20:59:40:80:46:71:d5:43:f0:67:
bf:11:2c:1b:4d:e7:84:fd:39:90:48:3e:3c:54:4a:
ad:fd:6c:8d:a1:04:01:0d:94:9b:84:2b:cc:1d:2e:
d8:16:d4:34:66:61:fd:08:08:34:4c:9d:5a:b2:fd:
36:4d:30:a8:93:c3:fc:eb:c5:a6:64:cf:c9:3e:2b:
5c:90:f6:60:b8:4a:1e:27:62:4e:a2:56:76:e4:a6:
93:b7:61:69:9d:48:45:b1:a4:20:eb:37:9f:28:ff:
7c:e4:ef:37:86:b0:0a:e9:25:f4:5e:11:23:ac:6c:
1a:0c:ce:55:72:65:a7:98:71:02:41:ea:c0:a6:e1:
8b:02:e4:f4:0d:a6:54:00:da:fb:ef:4f:f7:a0:e0:
a9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E0:0E:C7:D8:E9:CA:38:56:8E:D8:47:DB:F4:28:0C:C4:5D:6C:7E
X509v3 Authority Key Identifier:
keyid:64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c7:44:99:f3:56:96:34:de:77:9a:4d:20:05:93:14:83:f4:
6d:3c:f7:1f:8d:0d:9f:ac:6b:e7:5a:03:32:a1:fa:f6:7d:e7:
a6:36:cd:6a:40:92:3e:ca:cf:b6:f4:8d:51:ec:99:e2:d7:7a:
fa:5c:46:41:a2:2f:d1:b6:2b:43:03:88:56:93:73:d3:1c:04:
96:fd:61:8d:66:dd:f3:1e:04:ee:11:78:47:76:20:53:15:91:
15:2c:b8:3f:8f:b7:b0:41:a8:03:50:19:44:92:a8:63:0b:70:
4a:d5:1c:7e:0b:8f:ad:16:ae:d9:65:a7:10:ef:94:be:7b:dd:
cb:e5:91:78:dc:b7:07:d0:7f:4b:61:7c:6a:ea:6b:e4:9b:44:
36:9d:b3:d1:19:97:b7:6d:b5:8b:78:6e:44:7a:cd:58:6f:7d:
31:d1:61:86:89:7b:d7:27:c7:e8:43:0f:17:8c:b0:69:37:4d:
6c:99:ad:f5:02:ec:c3:ef:db:c8:be:5b:17:26:bf:79:5b:e3:
61:3e:39:7d:71:13:1e:6c:f7:2a:09:0e:8d:ea:e7:12:12:bd:
d4:de:6c:c5:25:d8:93:5f:fa:6e:4a:2c:1c:cb:4d:0a:72:4f:
88:e7:ee:89:6c:51:32:94:37:bf:5e:97:9d:ce:c9:80:c8:2e:
ca:58:d0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:03:58 2025 by rpki-client