Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft
File: AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft (raw, json)
Hash identifier: B+yNDCvha7HZQ3eVRCGEUSsiMMkTlwI4txV5yF0TI+k=
Subject key identifier: 64:31:9B:BD:81:5A:FD:62:48:44:01:FF:A0:81:5C:BA:99:0D:20:38
Authority key identifier: 03:35:A4:80:0F:99:41:70:09:D0:85:65:BE:AE:60:29:23:4B:D2:97
Certificate issuer: /CN=A914B46A/serialNumber=0335A4800F99417009D08565BEAE6029234BD297
Certificate serial: 0533
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft
Manifest number: 0533
Signing time: Thu 30 Jan 2025 23:32:52 +0000
Manifest this update: Thu 30 Jan 2025 23:32:51 +0000
Manifest next update: Thu 06 Feb 2025 23:32:51 +0000
Files and hashes: 1: AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.crl (hash: r/r4rzsve4TApUGw5O3Re6ORiPxCwAmRJ83pLTPL700=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1331 (0x533)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B46A/serialNumber=0335A4800F99417009D08565BEAE6029234BD297
Validity
Not Before: Jan 30 23:32:51 2025 GMT
Not After : Feb 6 23:32:51 2025 GMT
Subject: CN=679c0c23-3045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3f:e7:f6:4f:ac:f0:af:6a:7f:0b:dc:30:27:
7f:36:07:d0:b5:40:b5:2f:3d:3b:4f:cb:62:d9:1b:
12:7a:07:02:1f:00:30:75:50:d3:b5:82:3e:e7:14:
b5:30:cd:82:4e:c8:8e:8e:de:45:66:bf:f6:1a:70:
75:be:24:97:65:44:ec:2f:92:02:ac:b9:d7:6a:34:
bc:e7:72:7e:09:f6:1e:fe:32:d9:c9:8b:31:0c:87:
63:b7:be:bd:a6:79:67:fc:f0:aa:5b:bd:b8:a7:f9:
52:b4:a5:74:e0:5f:1f:16:70:cb:6e:a9:c6:da:45:
50:78:76:c2:d5:9e:9e:4d:79:1f:3b:8f:21:e6:92:
f0:e0:b1:de:17:21:c0:63:12:1b:ce:c3:29:e4:b6:
da:a4:58:f5:cc:42:6a:dd:fe:70:9e:b7:6a:66:1e:
52:c3:e0:19:aa:f3:8d:58:c3:ca:23:ca:89:c9:23:
e5:4b:13:59:89:d1:9c:62:57:d2:d7:7d:59:3d:26:
a7:9e:09:96:38:17:09:71:41:51:fd:34:57:f8:c9:
e6:09:78:22:8c:d3:cb:dc:77:37:f5:97:16:82:81:
dc:7e:b8:7b:e0:72:42:85:6b:a3:38:15:72:4d:bd:
be:34:a0:62:44:c4:36:cf:a0:fe:a7:a1:d5:6e:0b:
2b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:31:9B:BD:81:5A:FD:62:48:44:01:FF:A0:81:5C:BA:99:0D:20:38
X509v3 Authority Key Identifier:
keyid:03:35:A4:80:0F:99:41:70:09:D0:85:65:BE:AE:60:29:23:4B:D2:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:ad:99:54:4c:ee:25:d1:64:8c:55:6f:69:b8:f1:ea:bd:c2:
13:fd:93:4e:ca:39:b2:15:80:3a:2e:11:c5:cb:3a:7e:8e:7d:
f5:b2:d3:f7:68:25:22:25:ff:43:fd:ae:56:c6:79:ee:c6:6a:
02:2e:68:e5:0f:f3:a9:df:98:69:30:cc:c4:c6:32:7a:82:70:
67:0f:f0:93:f3:2d:48:9c:32:0f:7b:cb:4a:57:07:d7:3e:7f:
1d:62:9b:94:60:3f:21:85:0d:d8:c9:11:1d:0b:52:a8:7d:c9:
0a:0b:8e:32:87:e7:7d:42:49:e9:36:b9:87:be:1e:94:93:43:
38:aa:95:b0:fd:60:0b:99:ff:4c:06:a5:97:a3:d4:e7:85:1a:
84:38:56:26:ed:ba:6b:b9:23:bd:ed:65:39:77:96:a8:a9:68:
3f:7a:cf:73:64:1d:8c:02:28:b5:0e:a1:48:b1:a4:b1:a4:a0:
bc:67:ca:5a:01:e2:c1:a1:c6:64:8c:e4:2c:55:1b:3f:44:e9:
e0:2f:b2:8f:71:57:1f:c7:10:55:f5:8e:5a:0c:25:8e:ba:3b:
2c:81:d8:2f:37:01:68:17:77:69:c1:83:cc:d5:57:68:da:fd:
d0:70:3b:d7:3d:4d:08:06:75:ff:3a:7c:46:b6:da:06:26:46:
dd:62:6c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:57:08 2025 by rpki-client