Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft
File: 2z39hs6_6u06rxXeruaWUjR0aik.mft (raw, json)
Hash identifier: 3sJ1ZxUqgOZAiZom5a1TfX4H1gnEgt9qNE9GCZ0pHEQ=
Subject key identifier: F3:94:6D:60:9D:38:7B:E6:51:05:D6:55:68:E2:48:64:73:A6:96:F4
Authority key identifier: DB:3D:FD:86:CE:BF:EA:ED:3A:AF:15:DE:AE:E6:96:52:34:74:6A:29
Certificate issuer: /CN=A9171BF0/serialNumber=DB3DFD86CEBFEAED3AAF15DEAEE6965234746A29
Certificate serial: 2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft
Manifest number: 29
Signing time: Fri 31 Jan 2025 06:49:23 +0000
Manifest this update: Fri 31 Jan 2025 06:49:22 +0000
Manifest next update: Fri 07 Feb 2025 06:49:22 +0000
Files and hashes: 1: 2z39hs6_6u06rxXeruaWUjR0aik.crl (hash: wcMxomBjs/3AZGzABP1NeVfz1OS8lfYl4sslVu3mPVE=)
2: 12004368A41611EFA0D7CD42C4F9AE02.roa (hash: 9YzGJkxen0bF7ZOSO15+u2xKU2H/RKyzN947mBYbnYU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171BF0/serialNumber=DB3DFD86CEBFEAED3AAF15DEAEE6965234746A29
Validity
Not Before: Jan 31 06:49:22 2025 GMT
Not After : Feb 7 06:49:22 2025 GMT
Subject: CN=679c7273-93e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a1:2f:73:59:f8:71:48:bf:5d:2f:ff:f5:4a:
33:57:8d:cb:c2:ee:18:2e:32:eb:28:52:28:0c:1d:
b2:89:ae:e0:3f:e2:55:2f:b8:c7:b7:a5:13:9e:2e:
62:16:d9:75:ae:40:3e:99:a8:9e:03:b5:3b:45:ff:
4e:cd:1d:87:df:09:fe:d9:4b:74:74:69:ed:f7:b9:
e5:eb:fe:dd:02:28:5c:19:d8:36:ef:72:1d:a6:8e:
fe:ec:53:0f:7c:a8:9c:f7:11:fb:5b:9b:aa:63:1d:
ac:43:d9:17:24:6f:6b:e8:7a:73:fd:d7:e1:8d:83:
9e:a8:54:a3:ce:3b:8f:76:c6:9d:fe:e8:93:53:c0:
0a:a5:00:11:c9:56:1b:1d:e9:1c:32:bb:8b:05:28:
cf:08:ae:88:a2:fb:66:c7:f8:55:ac:ba:7d:77:bf:
39:8a:47:92:a8:b7:59:73:5b:61:59:4c:4c:c4:14:
01:40:a1:4f:22:13:e2:08:84:d5:08:ee:28:d4:e9:
09:84:ff:55:d0:b3:c4:5e:88:e0:b1:5a:a7:d8:d5:
23:88:ca:a1:68:02:f8:a1:e7:1f:cd:43:1e:5c:ba:
1b:14:22:d7:ec:f5:42:65:a7:12:fd:2a:23:ca:7a:
98:85:4e:36:0b:5c:ef:35:bc:85:39:d1:61:21:32:
b4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:94:6D:60:9D:38:7B:E6:51:05:D6:55:68:E2:48:64:73:A6:96:F4
X509v3 Authority Key Identifier:
keyid:DB:3D:FD:86:CE:BF:EA:ED:3A:AF:15:DE:AE:E6:96:52:34:74:6A:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:79:bd:f6:f5:40:37:3e:42:15:b3:e5:28:a6:9e:b8:f2:8a:
13:74:be:89:27:0b:93:82:7d:18:17:41:c7:5c:ec:4a:93:18:
c4:a0:3d:08:3c:85:79:53:32:a3:6f:a3:11:a1:ef:d1:48:33:
3d:bd:df:6b:68:77:85:de:57:21:23:ae:04:b4:5e:2c:a5:d3:
6d:0f:bf:8d:cd:1f:68:3d:c1:b3:6b:1d:bc:6c:22:b2:b5:77:
db:bd:c4:9d:3b:24:ff:2e:24:2d:60:21:bf:92:90:2b:77:e1:
bf:24:53:81:2f:43:ba:fa:15:60:10:df:67:95:79:85:90:1d:
7a:8e:48:23:5b:ef:02:01:9d:ca:40:4e:b5:7d:3b:26:08:98:
2b:ed:5f:3c:c1:29:34:5e:36:d3:6d:5a:f7:40:e7:5e:9a:7a:
ec:04:83:e1:65:90:1f:b8:60:26:72:b5:cc:b2:9b:62:f7:8b:
77:70:bf:f8:a5:70:69:06:7f:23:81:f2:ba:be:bf:9e:fc:2c:
53:20:04:c6:c3:96:fc:ef:db:7c:f3:50:98:57:5b:6d:3f:5f:
da:1a:3b:8f:07:97:2e:85:9d:97:98:b9:62:06:01:7e:0b:a0:
3c:52:9e:c0:aa:46:ae:22:b8:3c:56:b6:c8:32:85:78:d6:4f:
10:95:d8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:02:27 2025 by rpki-client