Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft
File: ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft (raw, json)
Hash identifier: I5I9KY8veYkU3VaqzV+fKh5bcJTjum5lzW3LGxggZ3M=
Subject key identifier: DA:9B:53:B6:AF:97:73:D0:A0:B4:89:EF:3D:4F:BF:4F:2E:72:CB:2C
Authority key identifier: 65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2
Certificate issuer: /CN=A915FE77/serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2
Certificate serial: 0C37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft
Manifest number: 0C33
Signing time: Fri 31 Jan 2025 18:15:36 +0000
Manifest this update: Fri 31 Jan 2025 18:15:35 +0000
Manifest next update: Fri 07 Feb 2025 18:15:35 +0000
Files and hashes: 1: ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl (hash: uT8DqB/YxB/mtNaYP7PI9AWFcxXEzYaXO0DG5I4ER3o=)
2: 357D722C67D911EEA787145FC4F9AE02.roa (hash: SQXs/tY3XOSQNHiYfHzxydfLP1PY6AbFebk6F2wwSZM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3127 (0xc37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FE77/serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2
Validity
Not Before: Jan 31 18:15:35 2025 GMT
Not After : Feb 7 18:15:35 2025 GMT
Subject: CN=679d1348-27cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cd:e2:a1:9f:21:e1:e6:68:26:41:aa:48:62:
14:ac:c4:bf:45:85:88:74:ce:2f:d1:cc:7c:73:3a:
6f:d6:4c:8b:f6:35:1b:9b:32:a4:90:d7:04:e8:b1:
ab:f5:3f:71:69:fc:6d:b5:5e:87:61:c0:6e:e0:17:
02:cd:02:b1:35:fb:96:8c:07:03:58:01:30:50:cd:
28:38:e0:61:c7:f9:d3:18:b3:84:a4:01:77:fa:e1:
a0:e6:f6:8a:8d:ee:bb:ac:51:9f:44:79:35:f4:50:
e0:d1:82:7c:3d:e5:52:53:de:b1:36:6f:5f:1d:0f:
ad:af:b0:1d:2c:7b:70:16:be:07:37:73:24:d1:5a:
da:1b:a0:31:b4:5b:c7:a0:bd:be:f2:a4:6a:8a:fa:
02:38:bb:5e:ea:be:73:ba:e2:00:5d:4e:da:2e:96:
1b:d1:66:31:5a:fb:e4:63:3d:8f:71:0b:40:99:5a:
64:97:00:67:9b:3c:37:9e:89:c5:d3:80:9c:aa:40:
1a:59:6b:6b:c5:31:c0:34:73:79:c8:4b:9c:72:a8:
bd:73:73:52:03:89:41:4f:29:d8:09:ae:0c:bf:88:
ae:c0:a4:d6:f8:43:b4:12:13:f0:e2:7c:49:9c:c8:
5f:01:9a:18:22:43:02:1c:3d:33:e0:d4:d6:84:4d:
9a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:9B:53:B6:AF:97:73:D0:A0:B4:89:EF:3D:4F:BF:4F:2E:72:CB:2C
X509v3 Authority Key Identifier:
keyid:65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:64:d0:41:f8:8f:2f:a7:79:dd:02:ab:9e:0b:b2:31:4d:fb:
95:58:14:43:8b:1c:e3:22:fa:3c:82:e7:77:d6:ce:e0:4d:58:
98:f1:81:f7:ac:d0:7a:94:94:ff:bf:1a:3a:82:78:af:41:7d:
d3:91:d0:d4:3e:e8:2c:94:ac:c3:f6:18:85:c8:e7:6e:c6:54:
88:a0:32:e0:a1:6e:21:2e:15:fd:1f:92:83:44:d0:3d:59:c4:
59:93:2d:9f:3a:aa:cd:54:54:45:ac:8e:ca:9b:c4:01:cb:b6:
c2:82:69:46:7b:bf:8f:cf:ae:b5:66:82:0f:ae:8a:b9:2d:eb:
e1:7a:9b:1a:f2:6a:05:3c:45:88:53:6a:dd:2d:99:63:d5:9c:
35:36:9b:77:19:3b:af:69:66:d0:f2:b9:13:6b:09:15:5f:bb:
83:6f:5d:84:dd:13:0c:f8:d4:5c:5c:ac:bf:24:0b:b4:5f:2f:
2c:d2:dd:e7:17:d6:f8:2d:cb:e0:58:cc:7f:05:27:7b:ad:29:
93:d4:7f:b1:e8:44:14:1e:22:ea:83:f1:aa:c4:ba:53:a8:69:
1b:4f:3e:82:af:11:d8:a9:ca:75:b1:0a:43:28:a6:5d:ed:76:
dc:53:2e:50:ab:09:3e:26:33:24:6d:fe:70:4c:c3:d0:f2:cf:
92:d1:c0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:52:04 2025 by rpki-client