Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft
File: 0Z0h9lpMk802wwczAhMPTmW38Ok.mft (raw, json)
Hash identifier: QxRFnKlIT/9eD/MhjQuWWLQFGxQNyujUv0n70t9lum0=
Subject key identifier: 99:BC:1B:7D:4C:63:28:89:D7:B5:C8:A3:1E:38:40:E8:18:88:CD:41
Authority key identifier: D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9
Certificate issuer: /CN=A91765CB/serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9
Certificate serial: 0140
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft
Manifest number: 013A
Signing time: Fri 31 Jan 2025 03:38:13 +0000
Manifest this update: Fri 31 Jan 2025 03:38:12 +0000
Manifest next update: Fri 07 Feb 2025 03:38:12 +0000
Files and hashes: 1: 0Z0h9lpMk802wwczAhMPTmW38Ok.crl (hash: F/qLmg3aEqcDfEo7oIFp0QXdsoPWR7oMcxyg9XA9aFI=)
2: 4C30AA30B08411EFA29E6722C4F9AE02.roa (hash: eyu3cJvMk8x/lB+NzC776MbDc6l8Tfm9D0VXNEV1yIM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 320 (0x140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91765CB/serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9
Validity
Not Before: Jan 31 03:38:12 2025 GMT
Not After : Feb 7 03:38:12 2025 GMT
Subject: CN=679c45a4-2fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0e:ae:8f:60:af:ed:12:22:95:02:15:1d:2b:
cc:11:21:dd:0c:0d:1d:e1:c8:7a:fb:0c:d3:69:0c:
7f:c1:66:a1:a9:47:7f:0e:4d:a1:b1:ce:7c:43:7d:
54:42:3c:b0:ad:b1:42:1f:71:a9:66:47:39:2e:1e:
73:6c:34:45:c6:17:90:25:3d:1f:46:2d:39:3e:e6:
79:8c:12:12:81:00:45:13:f5:12:b2:47:34:82:ec:
a4:29:67:49:0e:10:68:62:f1:3e:ee:21:7e:bc:65:
09:2f:a5:6d:af:97:7b:ae:46:de:2c:85:4f:ac:f5:
03:5d:0a:a5:25:28:7e:f1:0f:41:61:91:5e:99:c9:
e2:e2:4a:84:4b:84:d2:36:e0:37:44:f8:88:6b:6d:
95:2f:88:00:99:51:bd:33:0a:1b:13:70:75:87:0a:
0e:c5:51:8b:15:02:ab:93:35:20:3d:ba:d5:4c:9b:
75:b5:65:a4:29:3c:8c:72:36:d8:27:11:90:d7:d7:
3c:83:24:52:0e:86:94:0e:fc:f4:6f:71:49:9c:ff:
17:ca:ac:35:43:0b:47:b2:13:12:ae:dc:87:50:e0:
92:50:7b:f6:77:42:73:ba:a9:69:8c:82:32:80:d6:
2e:be:ea:fe:a2:96:7c:9a:77:3e:af:13:0f:51:ba:
5e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BC:1B:7D:4C:63:28:89:D7:B5:C8:A3:1E:38:40:E8:18:88:CD:41
X509v3 Authority Key Identifier:
keyid:D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:6a:36:07:3b:a2:4f:e4:9c:b7:1c:5c:42:29:13:39:f8:9e:
5a:2d:d3:29:21:08:23:68:be:3c:4f:76:54:3e:2b:b7:96:8f:
97:76:32:16:a7:61:05:94:66:a1:be:c2:f2:84:10:d3:24:54:
1c:fb:7d:ef:7d:ed:e0:5c:99:15:59:fd:ac:5a:df:57:7a:23:
fb:eb:3c:d3:b7:a7:9d:f5:48:ea:11:4d:88:7c:51:3f:ab:74:
3f:cf:9c:16:03:73:cd:a0:99:4b:8f:fe:7f:b1:8b:5f:e5:92:
d2:31:9d:81:6e:6c:60:cc:32:1d:77:6d:0c:a2:7d:90:b5:7f:
ed:c0:98:37:09:18:06:a5:2b:33:4e:ca:85:be:b0:39:d9:e2:
a0:33:f8:7c:23:ac:f8:67:0e:0d:4d:08:e2:2b:0b:61:ff:a3:
4c:81:e3:da:81:f2:22:72:aa:58:70:23:7e:83:29:1a:f5:4a:
c1:9f:c6:4c:42:c7:bf:7d:4a:a3:2b:3d:13:b1:a2:77:25:27:
a0:f0:6c:48:16:62:9e:17:1d:e1:14:69:c5:d1:b2:71:75:fc:
25:b2:e7:86:49:96:f0:7c:79:0c:1a:a4:4c:82:8f:d2:f4:4c:
b5:94:12:22:2b:69:02:c9:76:80:0a:85:52:5e:58:89:7b:02:
59:dc:77:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:12:26 2025 by rpki-client