Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft
File: z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft (raw, json)
Hash identifier: u7JxtwqrHc7ZON48WRqV/wb55WgGpk7LW9wdSRhfHD8=
Subject key identifier: BB:04:D2:72:94:F0:8D:1E:25:94:A3:96:6A:D5:0D:0D:BC:90:A7:04
Authority key identifier: CF:80:4A:6F:3D:86:A1:97:13:A4:E8:86:D5:97:B4:DC:64:45:68:6A
Certificate issuer: /CN=A9149C62/serialNumber=CF804A6F3D86A19713A4E886D597B4DC6445686A
Certificate serial: 32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft
Manifest number: 31
Signing time: Fri 31 Jan 2025 06:42:58 +0000
Manifest this update: Fri 31 Jan 2025 06:42:57 +0000
Manifest next update: Fri 07 Feb 2025 06:42:57 +0000
Files and hashes: 1: z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl (hash: I7Xvr5AQxQk9s/nDhq+WM3HGvf6aLUgwQ/7SF9z28y8=)
2: 088C9298981611EFBE510B59C4F9AE02.roa (hash: qXlLmIEo6DdPF2wbC+hI8xTl9OfbwJAdMpbZ+ukL71g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149C62/serialNumber=CF804A6F3D86A19713A4E886D597B4DC6445686A
Validity
Not Before: Jan 31 06:42:57 2025 GMT
Not After : Feb 7 06:42:57 2025 GMT
Subject: CN=679c70f1-68e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:37:74:4d:a7:b4:50:bd:20:63:e6:2f:98:bc:
16:e1:f3:2b:78:88:43:bb:53:27:22:7c:f4:41:af:
a5:f0:3e:88:2b:62:18:f7:90:40:26:dd:12:f3:ca:
e5:c7:cd:e7:70:72:f4:b7:b6:e2:0b:c6:dc:1f:b4:
6b:fc:30:4b:1a:e8:63:ad:4f:b3:79:90:1a:90:35:
05:a2:4f:64:18:1f:3b:91:e4:b0:27:f4:67:14:40:
b7:a6:9b:2d:99:09:a2:8a:60:65:d9:b7:50:ca:2c:
0c:b9:36:74:2b:81:5e:94:e8:5f:31:21:a6:2d:7d:
c6:8a:77:f8:9f:de:b5:39:e5:1f:8a:2b:cf:1f:54:
8c:47:80:7e:d6:fb:77:e5:2e:20:40:01:33:98:db:
5d:a4:7d:9f:ee:47:15:79:1f:ae:96:f1:37:aa:d9:
c4:38:1b:ef:eb:d6:9c:d5:97:b2:b3:81:2c:c9:63:
67:90:be:a0:be:de:50:49:ca:60:86:3a:17:0a:01:
e6:4a:18:59:58:e1:3f:71:c3:bf:91:99:cc:8f:4f:
80:8a:ad:6d:ad:37:57:ea:65:c6:ae:b8:7a:a7:2d:
41:88:36:0c:13:91:56:6c:9a:8d:89:13:59:66:27:
af:ff:f3:6f:93:a8:f1:e0:07:eb:96:f7:e1:ac:80:
ba:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:04:D2:72:94:F0:8D:1E:25:94:A3:96:6A:D5:0D:0D:BC:90:A7:04
X509v3 Authority Key Identifier:
keyid:CF:80:4A:6F:3D:86:A1:97:13:A4:E8:86:D5:97:B4:DC:64:45:68:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:c5:c0:8a:ff:32:fc:f6:13:70:c3:0b:1d:51:46:40:d5:87:
9c:bc:99:6f:9b:3e:40:b7:64:01:16:07:f2:4c:74:30:cc:26:
05:0a:8a:4b:0a:44:13:c0:71:d9:71:a2:38:4a:1a:c6:fa:07:
56:0f:82:fa:6a:bd:c2:16:26:bf:20:58:ce:da:44:c0:bf:75:
38:87:2d:6b:47:9b:bc:ab:c8:f4:0f:c5:59:e8:81:bb:e6:21:
5e:a2:75:19:74:e3:bd:1c:c2:1e:4c:b5:4a:7f:33:76:d0:56:
ed:fa:5e:aa:b4:4c:0c:8d:7a:10:05:b9:f8:96:38:63:5d:31:
ec:79:7d:6d:77:d5:ff:4f:24:6c:82:61:8c:5e:e9:76:fd:cc:
e0:31:e9:ef:50:ae:18:ab:f5:60:a5:14:d9:85:e4:cb:aa:ca:
70:3c:d5:db:65:e3:cd:c9:8a:d4:f3:39:ee:9b:4c:c6:46:b1:
fc:3d:31:74:ad:b1:1d:d7:94:54:f3:52:69:75:68:c6:ac:e5:
eb:49:82:d4:71:2f:c8:67:c0:e5:50:96:dd:61:ba:f3:16:bd:
ec:49:de:5d:44:36:da:13:88:9c:b0:60:0c:99:0a:7e:41:6c:
69:73:7d:6a:5c:f4:d7:c4:c4:ec:2e:6b:7f:18:ec:18:ad:17:
fe:a4:b9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:18:08 2025 by rpki-client