Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft
File: zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft (raw, json)
Hash identifier: kxVvjBjCvR+0oJduqmLsCB9kl6IlQZPOy7wRjZBYZyM=
Subject key identifier: 61:FC:34:6C:0B:55:47:20:1B:6C:E4:9C:1A:8D:AD:9C:90:AE:84:4B
Authority key identifier: CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88
Certificate issuer: /CN=A9172951/serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088
Certificate serial: 05FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft
Manifest number: 05F6
Signing time: Thu 30 Jan 2025 22:54:13 +0000
Manifest this update: Thu 30 Jan 2025 22:54:12 +0000
Manifest next update: Thu 06 Feb 2025 22:54:12 +0000
Files and hashes: 1: zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl (hash: UNry0R5O20XqVb5TeHNTPrTgyLjODavgDTg45uwDKu4=)
2: 8C3B5858B6BD11EEB6F43F4CC4F9AE02.roa (hash: uX4YBH0d+v8XToflAmrr4PhcL0IestKtYL1AND4wHQk=)
3: 8D013D48B6BD11EEB6F43F4CC4F9AE02.roa (hash: 9GO3C9V25OtteOw/nfxFM0HH3LdeEcdPNGN7kiYXrI8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1535 (0x5ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172951/serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088
Validity
Not Before: Jan 30 22:54:12 2025 GMT
Not After : Feb 6 22:54:12 2025 GMT
Subject: CN=679c0314-9887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d6:8a:2c:19:2a:de:00:ae:fa:0b:d8:65:3c:
e7:6e:42:35:c2:0c:2e:2f:6b:1f:25:6b:41:ac:5f:
10:d9:54:3b:a7:79:68:98:f2:50:c1:54:56:1a:0a:
21:39:da:fa:64:1e:b2:2b:36:90:24:91:54:d5:87:
3a:87:f3:fb:32:82:60:b7:fb:f5:a5:e9:44:e8:08:
05:d0:ce:13:67:c1:cd:cc:9b:59:29:b0:dd:8f:32:
30:2f:78:bb:4a:1c:52:14:e9:5a:8f:18:a7:da:bb:
16:08:96:9d:bc:8a:a6:04:7e:38:30:48:d9:75:3e:
28:0c:0e:3f:30:7f:9d:f6:19:4c:07:4c:5c:4c:89:
11:07:99:dd:d0:65:6e:0a:fd:2b:d3:45:a3:d2:f8:
29:3f:ef:02:bf:d5:94:5e:c5:db:a5:38:9e:43:29:
8f:e0:39:f9:54:b0:ee:c0:54:d6:e2:f8:03:ea:3a:
51:fb:d7:5d:41:c6:2f:a5:b1:9d:e8:05:3e:c8:15:
88:64:ce:79:94:9a:9b:7a:8e:ba:f5:5f:6d:97:ed:
d8:82:40:dc:e0:8d:5e:06:0d:85:3d:dd:5d:f9:36:
c4:ac:0c:6a:a3:69:94:3b:f9:d4:a0:bc:a6:8a:ed:
f4:6c:1e:ee:6c:cc:24:67:c1:75:75:42:e7:7d:dd:
41:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:FC:34:6C:0B:55:47:20:1B:6C:E4:9C:1A:8D:AD:9C:90:AE:84:4B
X509v3 Authority Key Identifier:
keyid:CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:da:24:72:f2:eb:57:0b:27:a6:5d:73:0a:39:4f:d3:db:04:
57:a7:50:25:1c:76:7b:29:27:76:23:71:1c:ea:b8:ff:d2:22:
77:d8:fb:f8:f9:0c:2c:3d:5c:10:93:31:e2:96:79:bf:52:08:
39:a7:e0:03:80:30:7d:68:97:70:94:e1:11:8e:ce:ef:62:fe:
e0:13:a3:de:a2:0c:68:35:19:85:90:24:0f:38:c7:51:61:be:
dd:d0:8f:f1:70:0c:2a:21:cb:74:57:c6:06:d2:d9:3f:3c:8d:
b5:38:b8:be:dd:f3:e6:ec:17:4c:90:82:b2:b6:b0:fb:c6:a4:
1d:9a:ce:d7:c6:4f:a8:d8:c7:cc:a9:fa:2c:92:02:c6:c5:1d:
05:07:27:c9:fb:ea:21:3e:5b:45:60:22:e3:0c:20:ab:85:d8:
fc:86:8b:ef:f8:ee:16:eb:e9:50:b9:cf:a6:c2:23:72:5e:b7:
58:24:26:dc:dd:07:fb:12:7f:86:f6:60:c7:aa:d3:6c:5c:b1:
90:5f:8d:93:03:25:64:a0:dc:2f:83:39:3d:5f:af:7b:62:b7:
f0:f7:48:e7:da:8c:39:51:54:e8:dc:b2:9f:10:a4:29:37:c3:
f6:78:ca:38:df:cb:7c:71:e0:0b:87:02:49:ab:9e:db:8b:7a:
ae:32:8c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:45:27 2025 by rpki-client