Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft
File: Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft (raw, json)
Hash identifier: /QnXTvJQuqn+pmo1JBWRtUOqYGPlQy0xk/yf7dpmbVE=
Subject key identifier: D8:5F:54:FE:B7:26:F9:EA:20:62:2A:A8:6D:0A:58:87:DF:9C:EC:39
Authority key identifier: 67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11
Certificate issuer: /CN=A9172A52/serialNumber=674AC57C099876A06657180B34E24E6EEE884411
Certificate serial: 6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft
Manifest number: 4F
Signing time: Fri 31 Jan 2025 06:43:07 +0000
Manifest this update: Fri 31 Jan 2025 06:43:06 +0000
Manifest next update: Fri 07 Feb 2025 06:43:06 +0000
Files and hashes: 1: Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl (hash: tZbia6u4pCbc9Jq/t2KI5LKCBtUqyw9SQLR1ieHyBZM=)
2: 64F7DCE4D3BD11EFA52FF783C4F9AE02.roa (hash: YhVERhvtXXcrFTyDSv5Qa1F1feLk9QH6JfzQdvzKgMI=)
3: 5F80F96C9A6F11EF8D9BD80FC4F9AE02.roa (hash: x/GxynEkpXLSNWmZVbITUGXMZJMGzB1C/0SmBXF5ZvU=)
4: 65BB3518D3BD11EFA52FF783C4F9AE02.roa (hash: i/EZaFvZG8APBZoGgzEqNCc2JUzVAPKb3k4/6st6F+k=)
5: 24A183BCCD7211EFA468C80CC4F9AE02.roa (hash: rAjbu4pWtwLoX2EcJOASM/Y0HeyI0DokGLeEi0t1poM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172A52/serialNumber=674AC57C099876A06657180B34E24E6EEE884411
Validity
Not Before: Jan 31 06:43:06 2025 GMT
Not After : Feb 7 06:43:06 2025 GMT
Subject: CN=679c70fb-39a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:96:81:b3:3a:3b:3c:4e:e0:23:b0:dd:d1:7f:
ad:a1:77:8e:29:04:48:71:85:e5:f6:8e:05:0a:85:
b3:cf:68:4f:8e:8d:50:da:4f:46:b4:1b:b4:ba:66:
d0:fb:6d:2f:6b:3a:f9:80:e2:45:2f:de:68:e2:63:
86:e3:0d:95:ff:f4:e8:f4:a3:09:52:37:58:81:8a:
cc:1f:49:44:6c:6e:79:28:69:e5:e9:cd:11:67:43:
2d:4e:e1:dd:12:8f:a2:89:14:19:4e:cc:2a:47:3f:
cb:6f:1d:0a:a6:a2:bb:a8:8c:c1:2c:78:f8:40:5a:
d6:41:61:05:a0:ef:82:1c:94:b7:9d:41:59:8a:a2:
50:2c:f4:da:89:0a:37:7e:d1:52:2e:4c:b3:a8:38:
01:2a:08:03:50:df:41:43:8f:02:d6:a5:69:ec:ca:
3c:1a:2c:d3:1b:36:bd:60:f5:66:52:93:6e:b3:9d:
98:b2:9a:67:19:75:0b:af:11:92:d6:d0:64:c1:c6:
c2:7b:4b:48:8b:8c:f3:57:d8:a7:bc:12:6e:ea:4f:
c0:77:af:2c:a1:ad:6d:0d:f9:73:94:a0:39:05:51:
9a:dd:91:ed:6d:e9:9d:08:6f:2f:23:1c:07:33:48:
54:86:9a:17:29:2d:5c:ef:5c:c5:ba:7f:85:06:fa:
82:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:5F:54:FE:B7:26:F9:EA:20:62:2A:A8:6D:0A:58:87:DF:9C:EC:39
X509v3 Authority Key Identifier:
keyid:67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:6c:87:01:98:5a:54:f0:7d:bb:1c:70:03:60:7c:2c:42:99:
b6:4e:36:fd:fd:9e:7d:6a:ef:64:d2:d5:1f:fb:f8:65:f8:60:
25:0a:f6:16:fb:08:d6:a1:38:51:ac:37:1a:dd:27:55:25:ee:
35:3d:b2:d3:77:61:fd:a9:38:74:bd:ad:c7:87:91:e8:0a:70:
a2:40:99:19:c2:04:28:cf:69:c6:f1:08:56:cb:d5:4d:ea:51:
5a:5e:3b:4c:8c:26:1d:b3:1a:c2:03:f4:b8:ff:47:e0:f1:75:
ee:9f:0e:64:55:43:c6:6b:b5:66:44:35:db:6c:44:85:b5:42:
8f:59:08:fb:44:0c:1c:68:28:76:44:85:98:db:aa:bf:fb:80:
28:03:00:e5:2b:ef:19:9f:df:44:f2:e2:34:bc:3e:27:34:52:
90:1f:a8:5d:78:ac:2f:b3:48:dc:28:95:9c:54:47:7a:4b:f5:
50:0c:f9:54:6d:a9:e3:0e:9e:17:58:13:a1:5e:20:c5:6b:35:
81:6f:d1:87:71:0c:e9:16:36:79:38:dc:4a:86:2f:75:38:d4:
f1:61:41:2f:76:31:01:71:c5:d7:49:74:b0:ef:d1:79:d0:95:
a8:2b:23:f3:d9:48:97:13:8a:2a:20:da:71:84:f9:2d:21:f3:
aa:89:f5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:01:09 2025 by rpki-client