Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft
File: zmNwmX29E9IOXsYWW1qe46KCprA.mft (raw, json)
Hash identifier: afVs/D3AHJQmulVTDeIyjNmhFKGigA19dCBy2uF995k=
Subject key identifier: 3B:FA:E2:C7:88:35:6D:D0:BE:9F:CE:70:FF:AE:E3:67:9D:57:20:E7
Authority key identifier: CE:63:70:99:7D:BD:13:D2:0E:5E:C6:16:5B:5A:9E:E3:A2:82:A6:B0
Certificate issuer: /CN=A917ACA8/serialNumber=CE6370997DBD13D20E5EC6165B5A9EE3A282A6B0
Certificate serial: D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft
Manifest number: CF
Signing time: Fri 31 Jan 2025 04:51:05 +0000
Manifest this update: Fri 31 Jan 2025 04:51:04 +0000
Manifest next update: Fri 07 Feb 2025 04:51:04 +0000
Files and hashes: 1: zmNwmX29E9IOXsYWW1qe46KCprA.crl (hash: dev+jL9O9f2w5rN7pavhIGP/9izwBc6qFyFkQSLQGbc=)
2: 725ED2DC3C3E11EF8E9ED658C4F9AE02.roa (hash: b8Nk35gI73n6vPSPeGhcdp8/EnX7d3C+aJhz3JSGsbQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ACA8/serialNumber=CE6370997DBD13D20E5EC6165B5A9EE3A282A6B0
Validity
Not Before: Jan 31 04:51:04 2025 GMT
Not After : Feb 7 04:51:04 2025 GMT
Subject: CN=679c56b8-9027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d3:ca:99:04:6c:6b:e8:7b:8e:e0:69:65:d8:
b9:e7:95:c5:99:30:3f:06:b7:56:47:c0:9c:4d:1b:
9a:36:66:86:f3:eb:a9:7a:43:15:49:d3:d0:02:ce:
8b:a1:cb:bb:2c:3c:d5:1a:b5:64:7c:71:22:1c:7b:
08:86:e9:68:c4:fc:44:ab:af:c9:95:e8:c4:c4:63:
25:5d:65:1e:18:b3:57:2a:d5:ed:a4:d6:c2:3b:c6:
69:0f:57:e6:3a:57:3a:24:1b:87:36:50:bf:57:4a:
91:da:9b:37:8c:59:73:b7:17:ba:40:ff:47:38:c9:
3d:e2:93:08:e0:61:3a:e9:ce:e0:e0:d3:6c:dd:af:
8d:e3:fd:7e:c7:f7:1e:5b:d4:ed:84:d4:58:f8:b2:
2b:34:d6:bb:e2:35:56:38:31:53:ca:91:aa:8d:76:
93:da:a5:75:ef:f1:b0:19:48:30:18:1d:95:f1:5c:
e8:92:50:22:7f:80:cc:34:07:bf:50:15:c8:f4:ca:
82:84:f3:db:80:a9:e1:f4:41:0c:f5:9d:7c:25:cd:
bd:8f:7a:3c:99:b5:85:f9:50:05:ff:36:5f:63:f0:
e2:05:1f:7f:82:fa:db:69:13:45:f2:8c:d6:2c:5f:
35:75:60:7a:e2:94:28:75:c8:5d:9a:ba:e5:08:b8:
42:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FA:E2:C7:88:35:6D:D0:BE:9F:CE:70:FF:AE:E3:67:9D:57:20:E7
X509v3 Authority Key Identifier:
keyid:CE:63:70:99:7D:BD:13:D2:0E:5E:C6:16:5B:5A:9E:E3:A2:82:A6:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:08:1e:bf:ea:34:94:9d:eb:a6:8f:7f:b1:8d:24:34:aa:24:
05:a8:43:63:64:3f:f0:ff:3c:48:8a:8a:46:58:73:6f:fe:9b:
29:a6:58:2d:8f:66:6c:b7:88:8b:93:f6:d3:0c:32:b5:8a:eb:
37:3e:23:c8:50:a4:d1:7b:3a:88:51:d5:b4:15:6b:b2:75:d5:
97:74:2c:d0:9d:4e:51:86:c1:2a:b7:38:fd:df:a1:e2:4c:70:
f5:05:31:f7:33:13:bb:cc:3d:8a:82:cf:6d:5c:e1:d0:d7:05:
f2:c1:b8:4d:49:77:c8:b2:87:13:70:1e:19:14:17:f8:e8:d7:
88:af:bf:8b:60:05:10:d4:a6:1d:bc:03:fc:42:6e:24:2d:ef:
c4:f3:ae:1c:dd:4f:f2:3c:76:eb:58:f0:c7:59:73:e2:f2:05:
af:51:16:cb:0c:fd:b6:aa:d2:46:25:11:f3:9d:87:1f:23:91:
c3:13:6d:29:a5:19:44:54:a1:4d:a0:0e:9f:15:46:f5:d8:06:
01:83:5f:12:74:7f:47:f6:22:27:f7:13:56:12:cb:55:a1:6d:
7b:cc:40:e9:9e:a4:a2:4f:cc:bf:2d:77:27:52:89:31:e8:89:
da:bd:e3:b8:3b:4d:ef:66:30:e1:33:d7:69:ff:62:7c:db:72:
a5:02:5f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:07:29 2025 by rpki-client