Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft
File: zFYtxSbsguOOtsIo8wMNGLYkwVI.mft (raw, json)
Hash identifier: 4ZzkMmHFVImeLlIyfvtCVhsLJHGx4hSSvOqmWm6WACk=
Subject key identifier: 96:AC:32:0E:81:F4:8D:74:4E:5B:3D:F4:C0:0A:E2:5C:72:A2:26:77
Authority key identifier: CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52
Certificate issuer: /CN=A917D048/serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152
Certificate serial: 1A9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft
Manifest number: 1A6E
Signing time: Fri 31 Jan 2025 16:21:43 +0000
Manifest this update: Fri 31 Jan 2025 16:21:43 +0000
Manifest next update: Fri 07 Feb 2025 16:21:42 +0000
Files and hashes: 1: zFYtxSbsguOOtsIo8wMNGLYkwVI.crl (hash: ThXNyXUgi6TlF3IS8xYnMnsp1YxVQOI9Hf4qiC1lFhg=)
2: B15CDE14707811E7998D782EC4F9AE02.roa (hash: A6xdM14VrnCdwg0TqU0I0zzOpRFsFmCK+agsWkSMQCA=)
3: 6C5BE410BD9F11EE963C753BC4F9AE02.roa (hash: vrRUnpBdqM34i5a9Uoksk8sscXoYe/cPgohb+RiQ9YQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6811 (0x1a9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D048/serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152
Validity
Not Before: Jan 31 16:21:43 2025 GMT
Not After : Feb 7 16:21:42 2025 GMT
Subject: CN=679cf897-5f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:25:d5:a6:a0:4d:32:35:ea:45:25:c0:15:e5:
31:06:4b:53:34:57:49:46:5a:30:65:5c:c9:f4:29:
1e:1d:6c:0d:18:87:c9:19:83:9a:08:9d:a8:56:4e:
90:09:57:c4:32:20:1c:58:9b:80:34:f5:db:a5:28:
4b:da:49:4a:8a:b9:0d:72:01:63:ad:f5:8f:a0:48:
95:5b:ac:b9:49:ea:2a:d4:95:4a:93:26:82:59:9f:
b3:56:a7:a9:ad:e8:85:00:5f:3e:97:3e:ad:b1:22:
e5:62:da:5e:cd:8e:e9:6f:dc:98:c1:38:bc:d6:ae:
93:e9:f6:9e:15:cf:0b:3f:23:a8:c5:60:0e:7d:b4:
0e:40:0c:d4:b6:6b:b0:90:51:e3:90:93:b8:9c:4b:
41:e8:fd:18:3b:76:41:1e:3d:d7:98:9d:ca:76:38:
19:47:12:44:3e:18:3b:5b:32:8b:d6:c1:56:26:78:
61:2a:d3:db:bc:43:39:24:24:d9:be:d9:cc:b9:85:
41:dd:ec:6b:ac:9c:fb:83:38:d5:1b:c6:b3:ab:c5:
fc:97:b4:fd:b1:c6:54:91:e9:4e:9e:dc:7f:fa:f1:
0a:5f:29:c8:4a:c4:fb:21:a9:30:37:d6:08:9e:c4:
79:b7:65:ff:35:5f:80:19:10:00:be:6f:8c:1e:a6:
3d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AC:32:0E:81:F4:8D:74:4E:5B:3D:F4:C0:0A:E2:5C:72:A2:26:77
X509v3 Authority Key Identifier:
keyid:CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:3b:d3:99:38:88:e9:67:2e:c2:6e:61:da:0f:16:13:17:6c:
17:3a:b5:ef:cf:c6:6c:51:3f:98:8e:e8:e7:7c:bb:03:8a:27:
97:a1:bc:fb:3d:aa:2d:6b:33:55:6c:33:2c:25:5b:e6:c0:a4:
ee:c5:35:75:db:1a:aa:13:22:67:40:7c:3f:9a:44:d3:f6:e5:
b3:4c:ee:01:9f:e4:39:2c:ad:18:bf:53:68:8c:65:38:d4:85:
84:ac:12:b7:9c:ab:dc:71:99:42:b3:17:5c:13:63:d7:38:d9:
d7:6b:6c:67:83:30:42:19:b6:43:c8:84:a1:1a:3f:26:9a:98:
fb:9e:52:9b:9b:9b:77:44:dd:b4:f9:4c:15:de:50:ee:68:d4:
84:13:12:05:00:20:18:73:64:c5:29:7d:23:b2:40:b0:69:4d:
0c:ba:43:9c:8a:8a:1c:a1:b9:6c:c8:4c:e7:21:ea:23:78:fa:
eb:63:85:14:a8:e3:5f:ec:9e:e8:74:2a:f2:43:b0:f9:36:78:
5f:76:17:35:f6:53:a8:e4:d4:e3:c1:c6:f7:4d:4f:63:48:0e:
b8:ff:13:15:76:ee:0f:a0:72:77:00:b9:94:3d:c2:45:94:14:
a3:ff:cb:51:01:14:3f:ae:4c:ee:e3:e8:9c:31:6c:98:59:94:
c8:5f:9e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:01:37 2025 by rpki-client