Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.mft
File: i-zDY4Bwprefbc4ioOZbsh4Ndyk.mft (raw, json)
Hash identifier: XMxKBXSxIdj/xC7gJJrgZBaEOMlRAg9DC0R/cO7Z5b8=
Subject key identifier: E9:01:01:BA:9C:AD:5D:9B:FF:36:26:87:CD:01:F1:F4:E0:FD:70:CC
Authority key identifier: 8B:EC:C3:63:80:70:A6:B7:9F:6D:CE:22:A0:E6:5B:B2:1E:0D:77:29
Certificate issuer: /CN=A914E1A8/serialNumber=8BECC3638070A6B79F6DCE22A0E65BB21E0D7729
Certificate serial: 016F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-zDY4Bwprefbc4ioOZbsh4Ndyk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.mft
Manifest number: 016C
Signing time: Fri 31 Jan 2025 03:06:25 +0000
Manifest this update: Fri 31 Jan 2025 03:06:25 +0000
Manifest next update: Fri 07 Feb 2025 03:06:24 +0000
Files and hashes: 1: i-zDY4Bwprefbc4ioOZbsh4Ndyk.crl (hash: 6XvDg4qzXDx3Rw2jh75EOHP0KrxIIBfdxfFadI2nm4Y=)
2: 5D35DEC8B13411EDB6BEF584C4F9AE02.roa (hash: ZhZoS47eW55Sb0A3HFtpa7Yi+4nkSuzaZKzeUrzoAng=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 367 (0x16f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E1A8/serialNumber=8BECC3638070A6B79F6DCE22A0E65BB21E0D7729
Validity
Not Before: Jan 31 03:06:25 2025 GMT
Not After : Feb 7 03:06:24 2025 GMT
Subject: CN=679c3e31-924a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f5:d2:46:06:a7:f6:9f:d2:80:52:36:31:68:
c4:3d:64:01:9c:43:27:42:4f:4a:72:79:cb:a2:99:
be:d1:d0:10:61:30:b8:96:a6:19:73:a3:66:13:c7:
c4:84:76:a2:65:8c:2f:2d:19:60:1d:43:10:00:37:
9d:e9:00:ec:c6:85:26:d0:5c:58:3e:f7:43:20:29:
ba:6e:bc:9d:05:40:87:d4:db:91:a6:66:21:5f:61:
de:62:d7:f5:aa:a7:41:8f:17:73:83:8d:6b:11:c9:
b7:d6:a2:ea:05:c3:05:46:01:a1:05:a1:f5:f1:d2:
9a:6c:33:45:3a:32:31:49:67:bb:a1:e1:57:e0:10:
77:26:5c:5e:13:37:97:f0:e4:de:15:0e:1e:e0:73:
79:10:9b:12:4a:d1:bc:be:a2:4c:2f:f4:28:c4:a5:
c0:bf:a4:fd:bf:14:e5:75:8d:6a:d8:f1:1a:e1:bd:
35:cd:65:99:18:0c:88:ac:f5:19:eb:fc:a2:f5:3c:
a3:58:31:dd:5d:8a:26:3b:c7:02:72:93:ce:01:c6:
a5:11:f9:1e:c4:5f:c8:52:91:da:fa:e3:f1:3a:2c:
b8:df:5d:25:89:13:32:99:34:fd:f9:71:96:6a:54:
7d:90:7a:94:3d:4d:ac:fa:26:62:a8:47:6a:33:ba:
16:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:01:01:BA:9C:AD:5D:9B:FF:36:26:87:CD:01:F1:F4:E0:FD:70:CC
X509v3 Authority Key Identifier:
keyid:8B:EC:C3:63:80:70:A6:B7:9F:6D:CE:22:A0:E6:5B:B2:1E:0D:77:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-zDY4Bwprefbc4ioOZbsh4Ndyk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:22:54:0f:c8:d9:74:32:50:d3:14:0e:8b:14:78:f2:4e:f5:
8c:23:88:14:91:22:14:3b:d3:b6:36:0a:9f:71:bc:2b:66:2a:
fa:d0:af:6b:a8:b4:bf:38:54:9c:6d:ae:2e:86:dd:4d:52:db:
7f:80:04:bc:87:00:5c:94:3e:ee:07:2c:93:91:31:ee:48:3d:
3b:37:44:6c:35:85:f9:3c:dc:8b:6b:85:38:d5:25:da:46:f7:
8f:f9:a3:c0:8d:d2:83:33:53:0f:d1:70:be:3b:d7:a1:5b:ac:
8f:42:3e:4b:69:c4:b9:3c:bb:46:f9:aa:dc:b8:1a:0d:03:9c:
75:87:ea:c7:45:9c:65:8e:cf:4a:cf:dc:5f:ac:68:1b:a5:24:
f1:e2:9c:29:2f:26:2a:5a:99:f2:4a:4d:b3:10:f5:93:6a:ab:
b6:6d:bf:48:af:ac:dd:f2:f7:6c:d8:32:dd:f9:38:be:ee:fa:
9d:da:8a:44:00:09:c3:0f:7b:1d:91:6a:1d:d0:93:7e:ac:1d:
11:24:df:69:2d:d8:b5:7e:ce:1f:12:8c:ce:1e:52:ff:af:ea:
95:2e:cb:3b:84:87:01:4d:d0:5e:82:b7:ae:1b:53:19:98:ba:
11:20:c6:26:33:8b:53:20:e8:12:c5:78:c0:71:1d:e7:f0:c1:
d5:ad:1f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:46 2025 by rpki-client