Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft
File: 2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft (raw, json)
Hash identifier: /G47jBIBnpSaF9jUYJ+DiNIFnE3E8uTvaksR4tRYs+w=
Subject key identifier: E7:74:C9:06:FE:DC:10:FC:21:8A:2D:A4:64:FE:16:B9:CE:D2:05:36
Authority key identifier: D9:5C:E5:FB:36:91:5C:3D:8C:DB:10:DB:86:4A:4C:71:93:3C:DA:41
Certificate issuer: /CN=A91795CA/serialNumber=D95CE5FB36915C3D8CDB10DB864A4C71933CDA41
Certificate serial: 063A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Vzl-zaRXD2M2xDbhkpMcZM82kE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft
Manifest number: 0631
Signing time: Thu 30 Jan 2025 22:40:22 +0000
Manifest this update: Thu 30 Jan 2025 22:40:21 +0000
Manifest next update: Thu 06 Feb 2025 22:40:21 +0000
Files and hashes: 1: 2Vzl-zaRXD2M2xDbhkpMcZM82kE.crl (hash: MaYias0mu6BX8hyTYtZBnGZ8cKFJolGAL8VOCNx+Mxs=)
2: 0BEE202087BA11EBBBA56067C4F9AE02.roa (hash: RcqGn4DlzkrU8iX9c04+ABUEIkZSxXOe2ZYW/HJVZ60=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1594 (0x63a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91795CA/serialNumber=D95CE5FB36915C3D8CDB10DB864A4C71933CDA41
Validity
Not Before: Jan 30 22:40:21 2025 GMT
Not After : Feb 6 22:40:21 2025 GMT
Subject: CN=679bffd5-c466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ef:8b:06:94:69:f2:dd:31:e8:63:f3:52:23:
43:c4:e6:ee:33:b9:00:d0:86:8d:67:77:a3:da:62:
6d:52:72:eb:34:1f:e0:1b:94:c3:26:ed:95:da:c4:
f6:17:47:1c:40:8c:71:ab:ec:87:66:fd:a3:1f:b5:
5c:7a:38:d8:6e:7e:59:eb:71:c0:b3:cd:40:03:1e:
a9:97:8a:07:64:1e:74:72:c0:51:81:fc:f6:70:21:
ec:bf:05:3e:3f:bb:82:43:64:e3:95:5e:ac:10:03:
de:51:74:26:4b:ae:c6:87:53:f4:6c:de:7a:71:7f:
1e:85:b2:26:f4:2a:98:23:e2:79:31:63:ec:8b:ae:
42:ec:f7:a1:aa:1f:5f:67:9e:12:fb:e6:f6:44:29:
1e:80:fd:d7:22:4f:9a:e6:4f:21:28:95:d4:39:74:
3f:28:c1:92:1c:82:85:08:89:8b:e4:6d:9b:1a:bf:
21:76:50:be:c0:99:7f:ab:1f:f0:64:f4:cc:47:78:
ff:80:3e:f3:70:4e:5d:2f:16:3e:e1:f0:09:ce:bf:
10:1e:e3:45:ed:1c:0b:a9:e2:4c:cd:9f:24:b1:6d:
fc:d3:ee:6c:5d:e2:85:ac:f6:46:9b:30:83:ff:83:
99:80:ae:2e:ed:40:a0:12:b1:6e:ce:25:0b:ba:76:
9e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:74:C9:06:FE:DC:10:FC:21:8A:2D:A4:64:FE:16:B9:CE:D2:05:36
X509v3 Authority Key Identifier:
keyid:D9:5C:E5:FB:36:91:5C:3D:8C:DB:10:DB:86:4A:4C:71:93:3C:DA:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Vzl-zaRXD2M2xDbhkpMcZM82kE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:24:ae:35:92:8e:50:86:84:73:62:52:dc:26:f6:ee:1d:7c:
6c:19:5e:64:1b:10:e9:26:19:b3:5f:f6:d2:d3:6f:98:8c:c4:
bd:6f:90:67:9f:b6:ee:f8:7e:13:75:77:68:90:bd:fd:f3:d1:
0a:07:3b:5e:24:21:12:78:89:16:84:8f:73:6b:22:ed:ee:6c:
16:ad:dd:cb:99:3d:c0:7f:88:46:f0:14:30:8e:40:6f:af:9a:
f2:19:94:4d:02:18:13:b8:29:68:e0:80:ce:19:83:71:78:f1:
cf:3b:b9:49:0e:26:75:db:d2:4f:c7:5b:96:fa:d2:fa:b6:2e:
97:07:c4:ba:6a:75:66:b9:23:9c:5a:ae:19:48:4d:79:5b:b3:
b6:53:d3:de:77:88:29:60:00:e7:ab:1b:b9:b3:7e:e5:4d:04:
47:b7:23:7a:cc:c3:76:92:b1:88:11:76:af:7d:b0:8e:70:5a:
7a:dc:7d:b1:5c:33:4c:31:52:f2:31:d6:70:12:26:13:1d:4e:
59:4b:c8:f0:cd:24:cf:64:3a:9e:28:cb:21:59:ab:c4:1c:7b:
2e:b3:f2:52:ed:c4:e8:0d:a4:57:b4:cd:6e:51:4d:08:2f:94:
c2:32:35:e7:3a:92:7f:f6:e9:ff:b3:ea:27:07:36:77:10:d2:
1c:12:7a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:07:08 2025 by rpki-client