Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft
File: Z7qlic6898PyfVPZjqxMEEzAkTU.mft (raw, json)
Hash identifier: 3EBJBt/4UmEIwr7OhMi6FsARIvUqQ0MjqPvZPGpFDrY=
Subject key identifier: B0:EF:B2:3F:7A:85:5C:1A:00:BF:68:4E:0E:05:E4:F6:34:F1:3F:6B
Authority key identifier: 67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35
Certificate issuer: /CN=A9152E29/serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135
Certificate serial: 0C0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft
Manifest number: 0C06
Signing time: Fri 31 Jan 2025 18:26:05 +0000
Manifest this update: Fri 31 Jan 2025 18:26:04 +0000
Manifest next update: Fri 07 Feb 2025 18:26:04 +0000
Files and hashes: 1: Z7qlic6898PyfVPZjqxMEEzAkTU.crl (hash: aUhNotF5na2bnITGcza4MTd+defdlepPa5loXYD696c=)
2: 94EA7370050111EA9BDD372BC4F9AE02.roa (hash: dMPlbwZZJ9a9ifwF8f+1OVtKYmpgj8cV+d0a3+m/kqY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3084 (0xc0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152E29/serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135
Validity
Not Before: Jan 31 18:26:04 2025 GMT
Not After : Feb 7 18:26:04 2025 GMT
Subject: CN=679d15bd-352b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:db:5f:65:40:f6:4c:e9:96:ac:5c:65:ed:83:
2d:1d:b9:8a:fa:07:61:99:92:a9:d2:e0:5c:f9:ef:
86:be:2c:28:44:b3:11:88:7a:e4:c6:52:55:ae:7e:
c7:10:5d:85:2c:9f:3c:97:c8:23:3b:35:28:32:0c:
9f:c3:a3:5b:4d:bc:76:1d:52:5f:fb:94:78:b4:ee:
a0:0f:23:b7:1d:3a:48:f8:c7:08:ee:87:12:89:9a:
f6:69:ab:d5:99:85:a1:f6:42:f1:3d:cb:7b:ef:d8:
08:ab:33:dc:1e:71:b1:69:cb:36:99:fe:a9:00:fe:
30:08:d2:5c:b7:4b:17:f5:fb:e5:8b:35:74:3a:62:
a5:df:97:9b:e3:24:24:05:94:be:47:38:c2:af:fa:
3b:4f:31:c2:a7:e7:f9:c4:1b:43:91:8d:72:74:1b:
82:4b:1c:7c:d6:29:13:cd:ca:fb:5a:7a:6b:b7:cc:
de:d5:29:62:30:06:8f:1e:d3:b6:49:97:85:60:af:
cc:3b:f4:c5:b8:2c:8d:a0:c9:04:7f:af:cd:4b:e7:
4e:c3:4a:a2:6a:63:90:8d:d5:ee:17:c7:5b:b5:e5:
1d:08:6d:41:da:62:97:10:a0:16:3c:5a:05:83:63:
79:a0:f2:31:c7:93:8b:f3:f1:ea:3d:e0:79:df:70:
b1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EF:B2:3F:7A:85:5C:1A:00:BF:68:4E:0E:05:E4:F6:34:F1:3F:6B
X509v3 Authority Key Identifier:
keyid:67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:86:d0:2e:dd:73:3f:67:5a:8f:65:4b:38:46:fc:05:e0:1f:
10:00:cb:18:29:43:c1:9e:cf:be:a0:49:40:2b:66:59:37:2e:
44:19:1e:13:46:90:8b:f5:b8:94:2f:5b:30:cc:d0:4a:cf:c5:
d1:ff:37:62:86:f8:f1:44:25:4c:fd:99:3e:07:64:44:b9:b1:
4c:ba:0d:7e:9f:34:b5:b1:80:33:fe:c3:8b:5b:c8:2e:82:24:
e3:b4:32:e4:58:ca:41:a3:5f:51:6e:60:ad:07:56:8e:c6:08:
b8:73:08:29:78:85:2d:88:30:a4:75:eb:25:ab:68:0b:dd:4c:
2a:eb:3f:af:ea:c9:79:67:1a:d4:d8:c7:70:7d:e1:4e:d3:f2:
1e:4c:bb:ae:29:d4:50:e2:30:ae:06:0e:56:0e:80:f0:16:1f:
44:46:36:da:fc:e7:2a:b5:83:56:7d:e4:f6:12:63:67:44:c5:
2a:ca:1b:a3:26:73:15:8c:78:f8:78:e1:77:cf:1c:93:ba:9a:
b6:69:ce:72:ba:0f:0e:e1:8b:a9:23:db:3c:b9:e7:16:ef:d9:
76:d2:eb:26:df:60:83:ba:aa:f0:98:08:79:cf:1d:9a:c5:08:
6b:de:db:69:1d:65:4b:4c:bd:13:be:73:14:83:cc:05:3a:a7:
8e:5c:ae:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:48:00 2025 by rpki-client