Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.mft
File: z0dmQoBPz_nXCSiWNYNV1awA6nM.mft (raw, json)
Hash identifier: uBNdHOyfoaw//QGo9rzuyaPGcLyBf1upcc6rovpIBhU=
Subject key identifier: BE:9A:D5:1F:0B:50:4E:C1:16:6F:93:59:41:72:2C:63:B5:E1:36:C4
Authority key identifier: CF:47:66:42:80:4F:CF:F9:D7:09:28:96:35:83:55:D5:AC:00:EA:73
Certificate issuer: /CN=A917AAD4/serialNumber=CF476642804FCFF9D7092896358355D5AC00EA73
Certificate serial: 0105
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0dmQoBPz_nXCSiWNYNV1awA6nM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.mft
Manifest number: 0103
Signing time: Fri 31 Jan 2025 04:09:03 +0000
Manifest this update: Fri 31 Jan 2025 04:09:03 +0000
Manifest next update: Fri 07 Feb 2025 04:09:03 +0000
Files and hashes: 1: z0dmQoBPz_nXCSiWNYNV1awA6nM.crl (hash: nrAOAnLLYuO0H1ksbtuY4F/u+4BUtlGGoh6Qekx7G5U=)
2: 49467E2251BB11EEA3C7487DC4F9AE02.roa (hash: 1BeURRtwvSUrpkIj6xn/5BXwfH6TF/4NRVSxl/lQeog=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261 (0x105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AAD4/serialNumber=CF476642804FCFF9D7092896358355D5AC00EA73
Validity
Not Before: Jan 31 04:09:03 2025 GMT
Not After : Feb 7 04:09:03 2025 GMT
Subject: CN=679c4cdf-27c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:bd:3b:26:9c:73:c5:9d:d7:ea:0e:05:06:44:
b0:73:e8:76:2f:38:50:a7:c0:f3:1b:87:0a:88:79:
a7:f5:14:dc:9f:6c:79:85:fb:f6:7d:47:e5:71:32:
a8:fa:43:11:00:5c:cf:50:0e:a7:48:2e:ac:3e:05:
c4:80:db:be:a5:50:92:04:0a:b8:da:fd:dc:7c:84:
21:64:70:a0:fd:6c:e0:e7:0f:1e:3e:d3:eb:4a:5b:
1d:db:1f:f5:2c:d6:3e:fb:60:8a:63:a5:a3:e4:90:
fa:1a:b3:d5:c4:ba:e7:a6:ea:04:53:ff:76:26:59:
10:77:70:71:db:bb:4f:65:3d:86:5d:ab:bb:d5:6e:
01:92:fc:06:3b:2b:63:6a:1c:4e:14:19:30:d9:68:
dc:c1:1b:23:ed:5d:a3:d9:92:90:14:be:33:d2:c9:
f5:72:ab:8a:d6:1b:a4:6e:06:9c:e2:69:a6:95:d8:
06:85:60:39:bb:7d:3b:2f:7b:75:de:b9:fe:ed:39:
5a:74:fc:4b:bb:10:cf:a6:bc:88:2b:e8:e9:41:5c:
2e:36:54:92:27:77:97:10:20:a0:a7:90:b4:33:c7:
be:76:34:e2:58:90:dd:0e:e3:4b:53:cf:e3:77:f2:
5c:25:40:a9:f8:25:db:e2:5b:d4:b2:77:4a:d8:e3:
1f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9A:D5:1F:0B:50:4E:C1:16:6F:93:59:41:72:2C:63:B5:E1:36:C4
X509v3 Authority Key Identifier:
keyid:CF:47:66:42:80:4F:CF:F9:D7:09:28:96:35:83:55:D5:AC:00:EA:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0dmQoBPz_nXCSiWNYNV1awA6nM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:88:d1:ea:ef:61:6b:ee:4c:e2:44:55:a2:69:de:a1:84:e7:
ce:db:10:4a:41:75:fc:f7:73:0f:35:44:17:7b:76:45:ab:6e:
fd:09:ff:c4:42:30:da:66:7d:04:52:1f:1d:3f:f1:e6:d3:54:
ec:92:39:d1:1b:8c:2e:5e:4f:89:6b:9e:2d:f0:6d:fc:21:37:
9d:91:95:ec:8d:a3:88:0f:b1:e5:da:20:31:f6:62:7a:75:fd:
af:e5:77:cb:b2:ff:07:43:f8:f7:b2:74:de:a2:c1:bf:a7:bb:
b4:48:e9:31:6a:09:ef:8f:d9:01:30:55:1f:e6:93:cb:59:d4:
41:ef:cc:ad:6b:10:2d:b8:02:d8:45:b5:84:fd:05:c2:28:3c:
9d:ea:aa:95:b2:be:96:33:ab:38:77:ae:4e:fa:aa:ce:9b:40:
48:f9:1e:ef:eb:f1:0a:83:83:85:84:98:a8:4c:c2:dc:5b:ea:
4d:ee:e6:1a:53:bb:44:0a:fd:1b:94:af:58:c0:20:d0:65:9b:
0d:5c:e0:25:0c:93:b9:8f:9a:e0:fb:ad:df:33:1b:cc:52:49:
07:a0:b1:c0:4b:bc:35:c6:50:f7:e5:46:a0:c1:23:4b:e2:f9:
e8:6e:ca:e3:17:a7:5f:80:30:e9:70:d6:f9:b2:8d:2d:5d:b7:
ca:1c:6d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:10:56 2025 by rpki-client