Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft
File: Zctcy-UxzE70Kh0wffe0XLDpdNk.mft (raw, json)
Hash identifier: Yz9jU6+TZQkKD4L8LUJQB5488PkqPOPZISBKP/8lVfc=
Subject key identifier: D5:4E:28:4E:70:ED:87:85:C9:90:A8:37:C5:54:9A:20:B6:95:28:E3
Authority key identifier: 65:CB:5C:CB:E5:31:CC:4E:F4:2A:1D:30:7D:F7:B4:5C:B0:E9:74:D9
Certificate issuer: /CN=A915451D/serialNumber=65CB5CCBE531CC4EF42A1D307DF7B45CB0E974D9
Certificate serial: 0871
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft
Manifest number: 086B
Signing time: Thu 30 Jan 2025 20:41:38 +0000
Manifest this update: Thu 30 Jan 2025 20:41:37 +0000
Manifest next update: Thu 06 Feb 2025 20:41:37 +0000
Files and hashes: 1: Zctcy-UxzE70Kh0wffe0XLDpdNk.crl (hash: 7EUvRu8yNeq8it8co2axY8rOriL/vRvSsec/mCxLnG0=)
2: 593FC45EB89011EA8C060064C4F9AE02.roa (hash: GNTtQ5EmAt4jwHyNzDkJrVxnNcCezotTwTzcnNPHMDI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2161 (0x871)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915451D/serialNumber=65CB5CCBE531CC4EF42A1D307DF7B45CB0E974D9
Validity
Not Before: Jan 30 20:41:37 2025 GMT
Not After : Feb 6 20:41:37 2025 GMT
Subject: CN=679be401-8714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:be:9c:d8:a7:90:37:bd:b6:a4:b0:85:17:df:
14:77:65:1c:07:bd:33:e7:cc:77:82:b8:18:99:76:
0f:12:08:93:7b:65:8e:f9:1e:6c:23:48:39:40:75:
fe:14:8b:de:7b:4f:32:5a:da:34:4d:a8:c6:be:15:
8e:52:49:31:e6:03:65:e2:5d:26:61:de:2c:cc:7d:
3d:68:22:d6:11:61:e7:bc:d2:51:58:f2:63:c1:8f:
c4:5a:f9:17:2e:7e:41:63:c7:93:ac:56:a4:44:ba:
e8:27:cf:d6:09:fd:6c:ee:cc:e1:81:bc:e2:e7:44:
fb:45:ac:e5:18:6e:7c:4d:64:8b:09:e7:4a:11:43:
93:57:12:75:ff:d3:45:38:20:f3:ce:54:39:da:a3:
68:f8:f9:99:21:7a:c5:4d:ce:be:b7:6e:7a:90:d9:
2c:9b:b1:2c:a3:62:e0:f9:69:ba:7b:f8:0a:d1:d1:
63:8f:87:02:54:7d:ef:5b:14:4c:57:02:1b:c6:11:
8a:d8:1a:a8:a3:c7:0b:ef:a7:71:78:6f:f5:78:49:
b0:72:4e:56:07:91:75:df:fc:1a:4e:9e:79:e2:2b:
e7:9d:ec:83:a5:fa:e5:85:98:bf:ce:98:f4:e7:c2:
2b:58:8f:11:c1:2d:8d:ce:29:74:27:18:cb:67:73:
b2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4E:28:4E:70:ED:87:85:C9:90:A8:37:C5:54:9A:20:B6:95:28:E3
X509v3 Authority Key Identifier:
keyid:65:CB:5C:CB:E5:31:CC:4E:F4:2A:1D:30:7D:F7:B4:5C:B0:E9:74:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:64:e0:24:0c:ae:b9:8f:de:81:74:34:49:87:79:45:42:c5:
16:46:f1:f1:74:27:cf:77:cd:e5:28:54:1a:81:22:a3:8f:b4:
05:5d:bd:53:95:fb:a8:c5:a8:4f:0f:10:49:fc:fa:57:b0:f2:
71:23:ab:0f:0f:7e:91:2f:7c:84:50:95:26:3c:35:48:d4:04:
f8:63:b1:53:2e:36:60:b5:09:7e:65:fc:c3:d5:1c:ce:0f:87:
59:1f:81:73:61:df:7f:4f:ac:6f:34:fe:f0:59:61:bc:19:e4:
c0:85:b6:90:d5:fd:a1:de:4b:7f:05:ef:72:a1:67:78:e5:75:
c2:dd:07:8a:83:01:8d:01:52:8d:39:e0:6a:d1:6d:66:be:7d:
2f:18:02:fe:0b:a4:fe:be:50:e9:32:1a:8a:01:c4:d8:55:11:
b4:54:ee:fe:01:16:92:84:fb:e7:a8:b1:79:81:1a:c8:52:3f:
75:e5:23:d5:f5:89:d2:83:67:37:24:e9:c4:f3:30:30:3c:2e:
c4:a0:a5:32:70:45:1c:4c:6d:d7:20:b9:14:08:56:db:0f:1c:
38:99:c8:91:74:67:d2:38:62:d1:d9:0b:3d:8f:9f:0e:e5:6e:
cc:35:fc:a5:c4:a4:ae:fe:7c:74:71:93:89:8e:77:a7:e2:80:
b5:63:8f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:54:45 2025 by rpki-client