Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
File: zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft (raw, json)
Hash identifier: mD4xM0ZgExzuN1da+nf89IORpQdCWu4hU9GLUll+hAo=
Subject key identifier: 81:C9:E7:3A:24:72:F9:83:D1:E2:1F:A0:E9:77:C7:7E:69:D7:9B:73
Authority key identifier: CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4
Certificate issuer: /CN=A916EBCB/serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4
Certificate serial: 0BA6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
Manifest number: 0B9E
Signing time: Thu 30 Jan 2025 18:57:36 +0000
Manifest this update: Thu 30 Jan 2025 18:57:35 +0000
Manifest next update: Thu 06 Feb 2025 18:57:35 +0000
Files and hashes: 1: zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl (hash: 7tOV5btUEvg03xf7e7RDLTtgZJ1dh8Sv8VoPMCVwQO8=)
2: 81C5BFF8192811EA9B88D87DC4F9AE02.roa (hash: ZawsauuQVy3/xITjsqsOJpATtDgEASJhh1tB3zSZBaE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2982 (0xba6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EBCB/serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4
Validity
Not Before: Jan 30 18:57:35 2025 GMT
Not After : Feb 6 18:57:35 2025 GMT
Subject: CN=679bcb9f-f6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bf:32:53:a4:4d:6b:db:4f:b5:e3:d1:b0:8f:
2a:a8:0d:28:71:1d:c0:3d:ca:5e:3b:e6:a2:8b:4a:
58:ad:d6:dc:70:86:73:05:05:06:f1:33:19:f1:f7:
a9:e7:6a:0e:40:ec:23:fa:74:35:0f:7d:7a:67:0c:
ec:b3:ba:e9:c0:4d:4c:df:93:73:b4:f3:0d:9f:cc:
77:9a:40:5a:3b:d6:8c:53:c0:27:92:d4:bd:49:ea:
96:5b:4c:c6:f3:57:45:71:db:e5:fa:f9:39:ae:f4:
ff:17:f4:25:b7:57:40:68:90:28:9e:ef:2b:db:ee:
87:c4:f1:c2:58:9e:e8:3b:5e:ff:a0:c8:95:75:8d:
80:d4:d9:68:64:0a:38:fa:bb:46:d4:1e:08:d8:26:
a2:cd:13:9a:36:c6:5d:70:6c:7f:9e:fd:d2:a7:1c:
3a:79:8c:01:cc:60:5e:ef:69:ec:e4:f5:8f:8a:1a:
7f:2f:62:19:7b:a5:87:c6:0d:e5:3e:e2:05:38:48:
49:2e:af:0a:19:6c:bb:38:81:6e:52:46:ad:8e:35:
35:5d:20:3f:b7:a7:91:34:98:17:36:7e:c5:80:b0:
b6:84:bb:d8:d5:77:dd:a6:d4:d8:16:07:16:2b:80:
50:16:3d:db:37:49:9b:36:4f:49:ce:e8:e1:92:7b:
44:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C9:E7:3A:24:72:F9:83:D1:E2:1F:A0:E9:77:C7:7E:69:D7:9B:73
X509v3 Authority Key Identifier:
keyid:CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:c8:71:5b:1e:69:8b:13:e7:56:69:bc:84:45:4e:60:41:8d:
6c:7b:e5:a9:06:50:f8:79:18:02:fb:9e:cc:6e:4c:a3:2d:2d:
62:db:6a:3d:bb:a0:c5:81:2b:8c:7d:a8:d3:80:51:c9:c0:08:
39:fe:4a:af:9b:ec:ba:d5:49:ba:0f:d5:ae:dc:34:ec:74:6f:
b8:b0:1c:03:86:c5:be:a9:b7:04:86:2f:9c:a8:90:84:8b:80:
5f:b3:83:1b:5e:5b:8b:04:9a:29:4d:22:a2:27:68:52:55:7e:
23:ff:fb:49:ac:91:5d:5f:61:91:03:59:8b:c5:e5:5d:eb:67:
f8:ad:9f:bd:17:25:5c:ef:47:53:cc:bd:ff:2a:7a:e3:a4:51:
e8:b5:e2:29:48:57:34:8a:65:e1:0b:46:b6:ac:df:79:0b:54:
43:7a:04:fd:dd:68:80:5a:5a:f9:b0:98:54:8b:c4:c4:7a:97:
88:a0:81:62:5b:22:5b:fd:dc:56:3c:7c:c2:4c:31:32:27:19:
08:d4:03:a1:a7:df:b4:d3:d6:0d:fb:6e:ba:35:7d:e3:1e:af:
a3:77:52:21:46:b5:bf:43:2d:79:e3:60:06:92:26:4f:9f:5c:
fd:24:a2:f6:4a:92:65:95:26:b4:a2:f3:bc:f8:4a:de:81:c3:
f3:6c:e6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:01 2025 by rpki-client