Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft
File: ZwbZhOcxaBICGI0pntNfAFsBdYA.mft (raw, json)
Hash identifier: lWulYz0G3tHXyvFCfA0TBm0TD9dfplSkoyB8kfLpLvo=
Subject key identifier: 83:BD:4B:11:33:CB:DD:2C:23:95:C2:5D:00:11:A8:76:C5:E6:99:F1
Authority key identifier: 67:06:D9:84:E7:31:68:12:02:18:8D:29:9E:D3:5F:00:5B:01:75:80
Certificate issuer: /CN=A917DCDA/serialNumber=6706D984E731681202188D299ED35F005B017580
Certificate serial: 3448
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZwbZhOcxaBICGI0pntNfAFsBdYA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft
Manifest number: 3448
Signing time: Fri 31 Jan 2025 14:42:50 +0000
Manifest this update: Fri 31 Jan 2025 14:42:49 +0000
Manifest next update: Fri 07 Feb 2025 14:42:49 +0000
Files and hashes: 1: ZwbZhOcxaBICGI0pntNfAFsBdYA.crl (hash: VxavIh5A2/WIcFIvSqq2y6JLkz5F0nLh+/4Y5h3l+uk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13384 (0x3448)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DCDA/serialNumber=6706D984E731681202188D299ED35F005B017580
Validity
Not Before: Jan 31 14:42:49 2025 GMT
Not After : Feb 7 14:42:49 2025 GMT
Subject: CN=679ce169-5eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:19:b7:f3:13:ec:b3:8c:bf:bf:37:4c:d2:2f:
89:2d:47:8e:07:c4:07:ee:0e:cd:7e:c7:30:0f:aa:
73:91:19:d1:40:8b:ae:dd:d9:7f:d8:83:f0:5a:e4:
62:13:4e:94:65:38:53:c0:0d:5e:67:cf:72:ef:a4:
5b:13:de:82:22:48:42:ee:d4:65:3d:1f:cb:67:08:
50:b2:47:c1:07:35:ba:90:56:81:c6:f5:33:0a:d7:
44:9f:9b:c1:ae:45:2d:48:69:22:8e:e3:1d:a3:6f:
aa:de:46:42:75:f1:38:f1:80:ce:06:fe:46:7c:5e:
90:4c:51:ff:79:dd:98:0e:20:27:e6:fd:af:66:30:
84:78:f9:3a:bc:20:16:4e:5d:01:3f:df:65:ec:1d:
05:d0:ea:08:16:5d:8a:07:25:2f:b8:88:d7:ee:15:
a9:e4:5a:d9:2c:8e:32:43:d4:0e:d7:1d:a9:44:f8:
3d:72:5d:be:7f:4f:5c:98:7e:53:04:50:b5:ba:37:
bc:6e:21:45:a9:44:bb:27:17:30:f3:1f:12:cf:99:
e3:40:4b:2c:01:fd:65:72:ce:4f:a2:d0:6a:76:8c:
69:23:ee:ee:25:52:27:a5:47:bf:6e:e4:ad:71:7a:
76:69:55:dc:97:96:3d:57:b8:0b:17:ff:59:8f:af:
10:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BD:4B:11:33:CB:DD:2C:23:95:C2:5D:00:11:A8:76:C5:E6:99:F1
X509v3 Authority Key Identifier:
keyid:67:06:D9:84:E7:31:68:12:02:18:8D:29:9E:D3:5F:00:5B:01:75:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZwbZhOcxaBICGI0pntNfAFsBdYA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:ee:a6:e2:8c:8a:88:c6:a2:c7:7e:a2:4b:2b:68:00:35:28:
05:38:66:db:c1:1e:55:f2:91:eb:70:bf:66:3f:fd:cf:ba:d7:
5a:54:ef:5e:f2:b8:dd:81:ff:00:08:c6:f6:97:03:fd:96:a0:
3f:f6:29:37:03:15:7a:9f:18:4a:d2:d5:68:db:31:29:57:3f:
32:84:6e:75:01:33:b1:46:c1:3f:cb:d0:ab:9c:23:a0:6c:e2:
58:93:37:06:ff:a4:10:68:88:70:18:ca:e7:55:15:a4:7e:ba:
f0:64:aa:1d:db:f7:9e:2f:61:2d:f8:03:62:60:61:54:1e:12:
ef:c7:7c:e9:42:06:04:73:19:23:2b:b3:cf:95:02:70:0c:46:
c3:dd:39:86:56:b5:e7:14:25:e7:06:27:7a:67:f2:28:3f:1c:
3c:50:07:ec:5f:cf:01:9d:5e:70:ab:10:ae:ec:57:1b:6b:08:
41:b2:de:68:8a:e0:fd:3a:fa:f4:24:e0:59:dc:e5:e1:b4:52:
3f:b0:a8:54:38:aa:1b:5b:7b:e5:60:17:28:55:44:c8:a5:5c:
35:02:47:07:4e:bd:97:15:8d:4d:04:c1:74:77:ea:8d:5a:d9:
97:ee:d1:45:57:28:ac:b6:cd:5e:c3:b9:d9:20:10:5a:1f:c4:
4c:ff:bd:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:02:15 2025 by rpki-client