Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft
File: Z0wMnS3vgzoswljrseBHBsBztgo.mft (raw, json)
Hash identifier: EkGUB/BzRobR/zTGp0Wr7B4Q1FIpIjIAUvuk7gsbLUc=
Subject key identifier: 53:13:8E:EE:FA:39:B4:D3:0D:A2:D3:38:FF:1B:F7:97:3E:7D:8D:30
Authority key identifier: 67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A
Certificate issuer: /CN=A915CBF6/serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A
Certificate serial: 08D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft
Manifest number: 08D3
Signing time: Thu 30 Jan 2025 20:29:49 +0000
Manifest this update: Thu 30 Jan 2025 20:29:49 +0000
Manifest next update: Thu 06 Feb 2025 20:29:49 +0000
Files and hashes: 1: Z0wMnS3vgzoswljrseBHBsBztgo.crl (hash: mw+ewHNRFLTlTllx1zmworjLZCNvKazChDey4N0Q620=)
2: 026E7E4EA4BE11EA873A5A41C4F9AE02.roa (hash: CqsjKnLyNxMW+zfiZfws10ntuapNIgSqb9GlDOC7IG0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2265 (0x8d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915CBF6/serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A
Validity
Not Before: Jan 30 20:29:49 2025 GMT
Not After : Feb 6 20:29:49 2025 GMT
Subject: CN=679be13d-b49a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:91:c4:11:86:a4:0c:88:3f:84:b2:e0:1e:ad:
82:b0:93:35:1a:8b:de:22:17:f1:2f:04:cf:89:17:
2b:2b:db:56:8a:44:ff:d6:ce:62:68:e8:8a:a9:d8:
1b:22:09:e1:52:b6:84:6a:c5:ca:c0:ea:73:56:17:
43:0c:c4:86:58:e4:ce:fc:60:a7:ce:2d:50:3d:b3:
63:e1:d6:c1:24:3e:b8:da:59:e0:13:5e:90:2b:2f:
65:1b:98:80:84:40:55:d3:a7:a4:b3:12:e2:54:88:
9f:22:83:70:fa:44:f4:da:7f:9b:1d:96:c4:f4:78:
cf:35:e8:28:5d:67:76:be:17:2e:ad:d0:7a:9f:07:
4d:14:b2:57:d7:6f:b2:22:67:4b:e9:35:7c:27:9a:
1a:c4:2a:5e:be:b3:c4:90:22:48:c9:fb:4e:67:b2:
f1:53:4a:9b:25:9b:c6:a6:9c:9b:01:15:e0:2b:13:
f0:3f:d5:43:9f:bc:d8:af:83:db:3d:f5:d2:8e:20:
f2:92:15:07:e7:bb:f2:27:2d:8f:36:b3:ff:d4:84:
d4:2a:93:2f:63:6d:8c:fc:be:6c:28:3f:b0:61:ec:
d1:75:4e:63:70:83:6f:7f:81:97:22:3b:cd:b9:a9:
05:e5:d3:84:e4:29:60:05:4f:c4:b1:e7:f9:87:0e:
39:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:13:8E:EE:FA:39:B4:D3:0D:A2:D3:38:FF:1B:F7:97:3E:7D:8D:30
X509v3 Authority Key Identifier:
keyid:67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:75:22:b7:a0:14:aa:97:62:b0:76:9f:f3:fe:13:98:2d:2c:
fc:4f:ad:04:bf:30:08:c2:7d:47:ab:88:c8:fb:db:81:7a:d8:
a0:15:71:48:77:55:f3:5e:4c:1e:a0:9e:4a:60:4c:e1:ec:16:
5c:12:75:32:c4:88:84:41:e9:ee:69:22:00:b6:5d:3d:ba:eb:
86:f3:d7:f4:9d:b9:4e:d2:b2:61:76:92:70:d8:7d:b6:3d:6d:
09:b9:25:41:b3:2e:0e:18:4e:59:77:a2:b4:b3:e7:02:02:a8:
65:b2:57:c1:2e:6b:2a:d7:e9:ff:e7:cb:fa:6e:bf:a1:33:58:
d6:52:18:8f:5b:85:ee:e9:f5:58:7e:24:87:cc:57:41:3b:ff:
13:bc:39:1e:e9:9d:ed:3c:5f:6f:b5:59:f1:d7:bd:bc:a2:7b:
ff:b1:f4:cc:42:b6:3b:68:18:87:38:f0:f0:3e:7a:7e:3b:7f:
68:bb:d1:55:af:e8:31:0a:dd:cc:f9:72:57:35:33:c4:28:57:
11:ce:74:79:4a:af:85:1a:04:29:ab:fa:a0:5c:16:c1:3e:9b:
29:b8:67:90:ca:41:52:b5:3e:1b:96:f8:d6:c0:de:ab:09:ca:
89:d3:4a:ad:cf:92:38:0c:28:63:f4:ac:c9:e4:6f:df:0c:34:
83:cc:4b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:48:53 2025 by rpki-client