Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft
File: ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft (raw, json)
Hash identifier: k3Rarj0jdIeXlu0v6FWjvveJTE6bjODqezkO5A7+EAs=
Subject key identifier: 43:B2:7D:FA:CA:CD:90:76:A1:59:69:1D:6C:34:1A:7D:71:AC:C8:25
Authority key identifier: 64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C
Certificate issuer: /CN=A9179581/serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C
Certificate serial: 22BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft
Manifest number: 22AC
Signing time: Fri 31 Jan 2025 15:52:14 +0000
Manifest this update: Fri 31 Jan 2025 15:52:14 +0000
Manifest next update: Fri 07 Feb 2025 15:52:14 +0000
Files and hashes: 1: ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl (hash: mJWtlPjJRKU7BpAwgyyW9Pfw7r9oObqrYFzA/gbfbrE=)
2: E043A9A4B14511E5B83D2120C4F9AE02.roa (hash: QfOFkTtfD/JlyUCDGr1ycwluY2IPcNmYuET79lfR5ic=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8890 (0x22ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179581/serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C
Validity
Not Before: Jan 31 15:52:14 2025 GMT
Not After : Feb 7 15:52:14 2025 GMT
Subject: CN=679cf1ae-f742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6c:e9:2b:da:ee:9f:7e:21:92:e5:b4:c9:4f:
e3:56:70:6d:e5:8e:bb:7d:1f:b4:ee:ef:39:e1:51:
d5:3e:8e:c3:20:c7:87:59:d1:fd:f9:14:83:df:3e:
e2:69:d7:30:4a:7b:26:e7:3f:34:69:56:26:5c:4d:
33:69:55:f6:c7:c2:4e:73:ce:ba:47:b8:15:79:c1:
16:e0:eb:64:53:01:93:30:c1:1b:2f:51:75:cd:84:
f5:79:67:b7:c5:01:1d:44:9b:53:4d:61:57:86:4e:
db:fc:2e:48:dd:e5:ae:75:71:33:e5:a9:2c:f6:aa:
2c:1a:80:9c:18:00:cb:1b:98:78:ba:bd:92:60:6b:
1c:a7:69:ed:59:61:93:38:bd:e5:ba:50:e8:c5:fc:
b4:85:b4:68:73:4c:cc:df:3f:65:b0:e3:3e:89:96:
cf:2c:76:a5:25:ac:d2:5f:98:03:22:fb:96:e7:98:
4a:ed:d9:c2:ce:c0:18:8d:e3:2a:64:83:83:c1:66:
f9:b9:4a:5a:42:de:f3:20:33:74:ac:1c:9b:62:47:
62:7a:bf:73:3d:7f:21:56:2e:cd:be:f9:ae:9d:79:
36:d9:16:47:d1:86:50:20:95:b8:d0:88:46:09:0e:
f1:e0:9f:da:40:34:2b:dd:e7:fc:98:4c:1a:b9:fd:
7c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B2:7D:FA:CA:CD:90:76:A1:59:69:1D:6C:34:1A:7D:71:AC:C8:25
X509v3 Authority Key Identifier:
keyid:64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:04:6b:43:4c:5c:67:98:64:46:00:32:80:88:9c:65:b8:4f:
ca:87:56:29:20:8f:95:8c:b1:29:e2:5d:dd:03:da:87:d8:a4:
18:d9:34:51:88:98:15:98:fc:aa:37:97:fb:9f:08:8f:0b:f0:
63:d3:4a:ca:7f:4a:9e:83:73:36:36:65:4c:bb:dd:97:b3:81:
7c:03:50:63:b7:50:c5:69:d5:66:ed:d6:06:41:84:49:c5:d3:
d0:07:3f:b5:71:f3:83:78:a1:50:2d:e1:fd:db:8a:15:41:d7:
0c:a9:04:9e:27:19:96:76:c0:23:12:34:35:f6:9a:bf:a0:82:
e7:3b:64:cf:8a:9e:02:59:92:39:6d:53:27:e1:3f:f9:76:67:
3f:c7:4d:35:3e:49:79:75:70:37:fb:0a:00:d2:c3:ca:89:7b:
d1:66:be:36:44:d9:e3:b5:5d:38:e5:75:67:3c:fd:55:c8:70:
e4:07:96:cf:fe:3e:4e:5b:86:41:3c:b6:85:c9:01:c4:d5:e1:
84:9c:36:23:79:a0:bc:e7:fd:a0:91:65:d1:26:84:d8:2a:97:
85:f8:70:c9:b9:41:b2:8e:0f:0d:ed:d7:bc:fe:2f:32:dc:85:
55:44:81:dd:23:9f:2c:01:5a:d4:48:b1:0c:b6:c7:fa:b4:b9:
85:d5:fc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:53:40 2025 by rpki-client