Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft
File: ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft (raw, json)
Hash identifier: W1J5ALeJrma6Lr0EJb/dkTLWwwXEjvG1PGEl4vP4NHU=
Subject key identifier: 52:1F:D1:E9:51:51:24:BA:35:14:8E:5C:2C:51:BA:E0:1B:78:23:1C
Authority key identifier: 64:CE:06:A1:6C:A8:91:23:55:6A:A9:AF:D7:24:8D:BE:F0:E6:9A:86
Certificate issuer: /CN=A9159298/serialNumber=64CE06A16CA89123556AA9AFD7248DBEF0E69A86
Certificate serial: 05A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM4GoWyokSNVaqmv1ySNvvDmmoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft
Manifest number: 05A1
Signing time: Thu 30 Jan 2025 23:09:49 +0000
Manifest this update: Thu 30 Jan 2025 23:09:48 +0000
Manifest next update: Thu 06 Feb 2025 23:09:48 +0000
Files and hashes: 1: ZM4GoWyokSNVaqmv1ySNvvDmmoY.crl (hash: rLLnLZRY5K9YMM+VtGCZIDNlfvYKtEscqHO/+68d2IM=)
2: 3CE37DD8C0F911EBB5625E1CC4F9AE02.roa (hash: lIk4sio4TZruyq4pTpC/V2Gh2NyWW6dRTUh+EqYhKOI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1446 (0x5a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159298/serialNumber=64CE06A16CA89123556AA9AFD7248DBEF0E69A86
Validity
Not Before: Jan 30 23:09:48 2025 GMT
Not After : Feb 6 23:09:48 2025 GMT
Subject: CN=679c06bd-3c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:36:f3:e1:52:58:d2:89:2d:1c:04:4d:8f:38:
d6:f7:a3:c3:25:3b:16:75:b1:53:3e:a6:b9:f0:ab:
db:6e:71:5e:5e:4f:fc:49:b7:e2:22:6f:4f:63:65:
60:70:9e:49:02:aa:06:d8:5f:ea:03:66:7b:a6:93:
65:1c:d1:6b:8f:4b:55:50:21:69:20:00:20:ae:e8:
05:12:6d:ca:95:30:93:2f:27:37:4c:f0:c1:d7:45:
19:73:00:1e:9f:ba:72:9e:56:84:bc:47:e2:e3:cf:
1a:b2:3a:86:d3:6f:f5:cc:c8:89:35:69:17:ec:d8:
c9:cb:51:06:29:0c:09:a6:e5:e9:24:d4:b0:d9:c6:
0f:92:1d:2c:37:5a:f4:27:e0:ed:56:3d:4e:60:f7:
5f:c6:ae:31:ff:b5:8d:e5:2a:6f:09:d2:f7:a9:13:
55:d5:6b:24:bd:41:c6:72:79:5a:3f:e1:31:16:95:
b0:90:f5:2c:fe:0a:d3:cc:5c:d2:e5:82:88:af:c5:
be:8d:a2:fe:cf:5b:cd:6e:05:89:4c:e9:2b:b1:67:
66:3d:51:0f:c2:3a:32:a0:20:bf:d8:a5:fa:84:01:
07:89:a7:05:c9:95:5e:d7:de:98:b8:60:20:6c:2b:
2d:ef:d3:f7:c3:d7:d9:e9:36:e2:51:ef:26:c7:d5:
d3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1F:D1:E9:51:51:24:BA:35:14:8E:5C:2C:51:BA:E0:1B:78:23:1C
X509v3 Authority Key Identifier:
keyid:64:CE:06:A1:6C:A8:91:23:55:6A:A9:AF:D7:24:8D:BE:F0:E6:9A:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM4GoWyokSNVaqmv1ySNvvDmmoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:d0:48:d6:b1:a3:bd:c1:80:2f:7b:24:a1:49:42:97:b3:7e:
e2:f9:8a:c8:b7:4d:f1:2b:1c:aa:57:a8:f8:68:aa:9c:b7:82:
32:53:ac:77:3c:31:9c:a9:79:58:93:d3:ed:a7:23:df:b5:7e:
47:6e:ca:c0:d8:24:1e:94:21:80:1e:81:06:ba:c2:0c:08:30:
91:60:4d:3d:a8:b0:71:0e:9c:dc:7f:67:bd:81:11:90:a4:ea:
47:b3:4a:b9:5b:75:9a:ef:e6:7f:65:02:d8:78:2b:da:f8:ec:
fa:0e:7e:66:2e:bf:3b:0a:d2:b3:c1:90:b4:26:25:28:db:18:
82:25:26:f3:41:11:5c:a9:55:b6:ee:33:71:3a:a0:c9:1c:6b:
26:1b:55:4a:50:63:22:51:c6:f2:bf:70:5a:fa:7d:37:92:9c:
a3:a8:9e:19:8d:7b:d2:90:c0:c9:bc:e1:2c:4f:9d:1d:96:2a:
16:44:be:fd:ff:43:a9:e2:53:63:9a:5a:55:32:a3:9d:22:c1:
6f:cc:83:42:e0:88:c5:a4:99:6a:d8:da:54:0b:a0:a3:ce:9a:
72:cb:dd:1a:0e:0a:15:04:7a:36:70:3a:55:ed:6c:c9:15:41:
aa:9e:45:8c:88:07:a9:ae:67:02:78:b4:6d:4d:df:b1:59:e4:
bd:b7:33:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:22:50 2025 by rpki-client