Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91540B9/D5C251C85B5311ED978E0577C4F9AE02/zOCDR5xGct-ZKLqoOPKrKAJt7_c.mft
File: zOCDR5xGct-ZKLqoOPKrKAJt7_c.mft (raw, json)
Hash identifier: haFif1f6eEzlmNelN94Jye+jxvgLU0A7QpNreYa2E9s=
Subject key identifier: 54:33:C2:F1:4D:E2:EB:C1:D9:45:CD:5F:61:2F:48:0A:31:64:F1:A6
Authority key identifier: CC:E0:83:47:9C:46:72:DF:99:28:BA:A8:38:F2:AB:28:02:6D:EF:F7
Certificate issuer: /CN=A91540B9/serialNumber=CCE083479C4672DF9928BAA838F2AB28026DEFF7
Certificate serial: 01A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOCDR5xGct-ZKLqoOPKrKAJt7_c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91540B9/D5C251C85B5311ED978E0577C4F9AE02/zOCDR5xGct-ZKLqoOPKrKAJt7_c.mft
Manifest number: 01A5
Signing time: Fri 31 Jan 2025 02:30:28 +0000
Manifest this update: Fri 31 Jan 2025 02:30:28 +0000
Manifest next update: Fri 07 Feb 2025 02:30:28 +0000
Files and hashes: 1: zOCDR5xGct-ZKLqoOPKrKAJt7_c.crl (hash: gTuHeKGEGkzuYvjmJIzpLSepzKD+WRlC8mcEroJuWok=)
2: 0E4247485B5811ED91760C7DC4F9AE02.roa (hash: WBorSPXVDYDVTx8kORLKsbS0gCiSKpWXfDku2GOVqe8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 424 (0x1a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91540B9/serialNumber=CCE083479C4672DF9928BAA838F2AB28026DEFF7
Validity
Not Before: Jan 31 02:30:28 2025 GMT
Not After : Feb 7 02:30:28 2025 GMT
Subject: CN=679c35c4-54cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2c:30:f2:a3:b1:00:e0:5a:df:7d:bb:5e:42:
ed:1d:80:58:56:0d:af:e1:ac:c5:f3:51:68:9f:7e:
a7:3b:88:d8:40:be:9a:f9:3d:b5:41:2f:80:d1:09:
f4:24:12:1b:89:2e:63:f4:b7:34:1b:c9:48:04:68:
bc:9b:82:67:33:82:f8:e5:10:21:1e:ed:cd:fa:7d:
28:09:b9:e9:22:1a:4c:23:8d:97:20:8f:06:98:22:
38:3c:9a:84:e5:07:0c:9e:98:96:0f:17:f2:f6:9e:
c4:6c:f0:9e:41:20:da:33:a9:d6:67:11:27:16:29:
65:69:aa:f6:7d:7a:a6:ed:89:e9:3f:71:c8:77:62:
18:f6:2f:ae:05:ba:25:3e:17:d7:36:3b:63:e5:da:
69:04:82:5a:61:f2:3d:5d:e4:4f:66:da:5d:d5:98:
5d:eb:de:8b:89:96:6a:c1:f9:29:90:28:a0:d0:cc:
09:1d:01:75:bd:c6:02:29:34:1b:c6:42:5a:e9:d3:
f8:9a:63:8e:04:6d:93:13:69:31:19:24:74:39:46:
1b:2e:1a:d3:4f:a6:96:7a:01:de:48:f0:ad:f8:fc:
81:0e:2f:36:5c:19:ee:10:0c:c5:f7:b5:6f:de:b8:
0c:f7:0d:7c:2d:17:b0:87:c2:0f:61:a8:1d:0f:fb:
94:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:33:C2:F1:4D:E2:EB:C1:D9:45:CD:5F:61:2F:48:0A:31:64:F1:A6
X509v3 Authority Key Identifier:
keyid:CC:E0:83:47:9C:46:72:DF:99:28:BA:A8:38:F2:AB:28:02:6D:EF:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91540B9/D5C251C85B5311ED978E0577C4F9AE02/zOCDR5xGct-ZKLqoOPKrKAJt7_c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOCDR5xGct-ZKLqoOPKrKAJt7_c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91540B9/D5C251C85B5311ED978E0577C4F9AE02/zOCDR5xGct-ZKLqoOPKrKAJt7_c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d0:02:7a:d8:09:39:a1:64:24:ff:a9:58:3c:6e:60:17:55:
ce:c9:fe:3d:42:e2:c5:25:f1:6e:6c:86:56:53:02:5c:a1:41:
5e:07:72:59:26:69:58:8a:eb:58:9f:42:cb:c3:7b:26:70:df:
fc:7a:76:66:29:41:de:25:af:92:7f:c4:66:69:de:07:9d:2e:
09:bd:06:32:ae:1f:e0:20:f2:13:47:fa:f8:64:34:3c:be:b3:
4c:e5:9a:5e:43:7e:69:ef:06:d2:79:f5:63:82:86:87:7c:5e:
01:39:1a:26:81:1a:9e:bf:36:9d:f8:1f:c6:ec:d0:cc:0a:4c:
93:84:46:a9:21:c5:10:1b:2d:6e:b3:d6:4c:08:38:7c:0b:4e:
eb:7a:ac:d2:9b:a8:76:7b:54:46:60:12:eb:24:1a:89:9a:ec:
97:7d:d0:5a:bf:2f:72:a8:8d:60:96:14:e7:c4:d5:85:9f:2f:
2b:63:94:e4:8d:7c:db:a9:40:44:85:cf:d8:36:94:d1:2d:a5:
33:85:64:b5:cd:6c:c1:0d:5b:c3:ea:08:ce:29:bf:fd:3b:41:
06:17:4e:68:b9:a7:a0:27:97:9f:dd:a3:58:34:88:25:f5:2d:
dc:df:61:8f:b3:eb:74:c4:52:12:ce:d3:8c:49:da:34:51:8c:
2f:36:92:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:49 2025 by rpki-client