Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft
File: zPKlJcCQFETKePBbk5LABFeVZ2E.mft (raw, json)
Hash identifier: NsEXHnhYmJV2H48Mg8wVNNJmE/SUsk3uJsbIj4Gq8RE=
Subject key identifier: 3C:1F:00:64:F1:7C:7E:0C:04:B9:8A:47:FF:07:9B:BC:4A:E1:0E:D8
Authority key identifier: CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61
Certificate issuer: /CN=A916A071/serialNumber=CCF2A525C0901444CA78F05B9392C00457956761
Certificate serial: 0983
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft
Manifest number: 097C
Signing time: Thu 30 Jan 2025 20:13:00 +0000
Manifest this update: Thu 30 Jan 2025 20:13:00 +0000
Manifest next update: Thu 06 Feb 2025 20:13:00 +0000
Files and hashes: 1: zPKlJcCQFETKePBbk5LABFeVZ2E.crl (hash: j8ZswyufVO7vbk9uk2MuoNU7fRtDGIPHqGxhbFCotXk=)
2: 9BAC68CC83C211EABCB66612C4F9AE02.roa (hash: W5ePsoGWgomEoWgiTPJkjSegEKVfUxA0uguQndmw+Ac=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2435 (0x983)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A071/serialNumber=CCF2A525C0901444CA78F05B9392C00457956761
Validity
Not Before: Jan 30 20:13:00 2025 GMT
Not After : Feb 6 20:13:00 2025 GMT
Subject: CN=679bdd4c-d471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:78:31:62:9c:2a:72:f0:38:e5:8c:2b:29:01:
3f:9c:08:3e:cd:7d:85:81:21:19:97:a6:0a:c0:4c:
3c:dd:64:15:89:06:b2:e3:43:99:9d:3c:3c:bc:09:
b6:4f:5e:2c:c1:73:83:62:eb:d0:c0:71:cf:c3:a3:
a3:99:d0:3b:e4:da:95:e4:a3:f8:25:ac:cb:7a:b4:
57:fb:24:c2:dc:33:44:db:3b:e4:e7:f9:40:bf:07:
ca:46:71:04:2b:1a:23:3f:11:42:86:9e:21:d4:87:
52:ec:12:4e:3b:c5:7b:3e:b1:29:8e:8b:be:4f:17:
fc:02:42:13:db:c8:91:b4:bf:f8:06:c6:7d:b9:e6:
4d:61:96:fa:06:e8:89:6c:40:24:c2:1e:91:5c:80:
61:b2:4a:72:9e:3d:1d:79:f8:47:ff:ff:28:cd:f8:
3b:7e:b6:54:14:ee:bf:ed:ca:08:1e:e0:65:d8:fa:
e1:8f:88:8e:e7:a0:db:fd:94:6d:a3:54:94:f2:ce:
1f:6f:7a:b9:7c:a6:70:d0:cb:b5:0e:0d:33:da:c4:
e9:a9:25:28:cb:28:2d:13:ca:ae:4e:7a:d5:12:88:
cc:f6:26:7e:3b:3f:3f:58:26:58:9f:5b:65:e4:2c:
8f:7f:8a:c3:96:29:e7:00:90:40:08:9e:25:3a:95:
6a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1F:00:64:F1:7C:7E:0C:04:B9:8A:47:FF:07:9B:BC:4A:E1:0E:D8
X509v3 Authority Key Identifier:
keyid:CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:30:7e:c8:b8:d3:0d:a3:21:76:26:0e:1a:d8:af:10:4a:7a:
f9:9b:c1:a3:e2:38:8b:3e:64:e2:d5:8d:01:14:5b:7f:9b:a2:
55:e1:2b:0c:f9:b7:f8:4d:05:72:2c:24:51:1b:08:07:20:08:
b7:cc:22:a6:2b:d4:1b:c3:b7:fb:81:ef:2c:77:31:24:6c:ba:
34:88:8e:46:2b:19:b2:5a:40:d6:53:39:14:64:e9:eb:34:48:
9d:4f:11:c3:a1:51:60:c4:77:6b:92:52:ee:ef:5d:72:52:90:
d1:50:08:b1:0d:4a:47:6b:22:ee:66:24:55:15:ee:5d:a7:70:
22:c1:3b:e6:8a:b2:25:fb:7f:97:f3:06:8a:67:ab:5e:e6:21:
49:1d:d3:aa:43:07:6c:ed:09:6c:0d:5b:9b:84:f0:87:cd:34:
21:07:57:fc:10:98:df:19:9f:07:a9:53:24:77:22:6e:10:38:
3e:04:bf:49:5f:76:57:76:88:99:89:15:e9:0f:18:1f:31:d7:
dc:20:2f:48:53:b5:8b:b8:a0:09:6e:41:3b:6a:22:3d:85:57:
83:88:af:b3:13:b0:3c:d0:7d:b0:99:98:dc:c7:ed:37:4e:a9:
ca:a2:91:e8:80:34:ba:79:71:56:9d:25:50:f3:3c:ff:31:f9:
e2:40:8b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:18:03 2025 by rpki-client