Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft
File: ZEfjYbGkSWugEo32lWV0SOleK5U.mft (raw, json)
Hash identifier: lXIeicdttyEzDZuthfTt8Df8Ku3cdZh6zhD8d6ngRv4=
Subject key identifier: 51:73:55:37:E5:47:06:B8:7A:CB:94:D7:4A:71:20:5D:0C:48:46:1A
Authority key identifier: 64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95
Certificate issuer: /CN=A917F879/serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95
Certificate serial: 0985
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft
Manifest number: 097B
Signing time: Thu 30 Jan 2025 20:11:54 +0000
Manifest this update: Thu 30 Jan 2025 20:11:53 +0000
Manifest next update: Thu 06 Feb 2025 20:11:53 +0000
Files and hashes: 1: ZEfjYbGkSWugEo32lWV0SOleK5U.crl (hash: GQQ6Jh24ZZe1lMUjX0WirgIRfpPUVKBk8dBYi1/v5qs=)
2: 8A6AA178556111EDB7E45424C4F9AE02.roa (hash: Lv3s/tDzwoH6gl7nLzqYDd9D8Hirj2BDnbGE+1t61zg=)
3: 894FFF40556111EDB7E45424C4F9AE02.roa (hash: J0+zE9SmlQGpzIqcvJUCPulCa8uAwpw7BcVDFzghz4Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2437 (0x985)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F879/serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95
Validity
Not Before: Jan 30 20:11:53 2025 GMT
Not After : Feb 6 20:11:53 2025 GMT
Subject: CN=679bdd09-1b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cf:e9:6a:b4:a8:a5:c4:e1:22:1b:11:fd:8e:
89:1a:db:ed:12:c4:42:c4:bd:49:4c:5b:7a:d0:43:
17:01:37:9d:6b:4e:68:2d:79:a2:70:04:6d:5b:1d:
18:fe:00:86:b8:96:77:bd:56:72:bd:49:8b:9a:1e:
d3:03:be:dc:f0:e7:a2:73:b5:53:02:4e:e9:7e:47:
bc:a0:a3:d7:3e:e4:7b:0e:0e:17:0d:de:16:47:de:
81:ce:0a:3d:b4:86:d5:80:0b:3d:e8:cf:1f:4c:ce:
ed:f8:3f:fe:b5:33:13:bc:47:b3:30:5d:c8:de:0a:
57:66:bb:0d:fc:2f:c5:17:35:9a:8b:c1:1c:d9:c6:
f7:2e:d7:d2:82:25:af:82:20:c9:ef:f4:c5:fb:8f:
e2:01:d1:62:c6:ab:4c:7e:cf:bf:54:1a:0c:d7:12:
2c:bc:53:b6:a9:cc:f6:6a:ff:b0:26:df:ab:bf:a3:
ee:b6:af:d8:7b:64:0a:75:d1:84:a0:5b:25:dd:ba:
ac:92:84:18:3d:09:8f:56:c1:4e:24:f3:b5:79:90:
1a:b3:9a:5e:8d:1d:ae:73:d6:da:61:4d:a8:44:1e:
ad:8c:ed:f1:06:3d:95:c2:a8:c0:31:9a:43:59:6a:
7d:1b:4a:d3:46:a8:68:ac:f2:b5:26:59:97:86:f0:
cb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:73:55:37:E5:47:06:B8:7A:CB:94:D7:4A:71:20:5D:0C:48:46:1A
X509v3 Authority Key Identifier:
keyid:64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:9f:9e:5e:dd:bc:32:8d:86:9b:db:6f:e0:00:d1:0e:c5:c2:
3d:27:62:9f:d1:b8:b9:37:b6:32:97:8a:74:88:7d:41:ff:e9:
52:a5:9b:ec:7f:ef:21:d7:a0:18:0b:63:72:46:2f:84:4e:41:
d2:cf:74:aa:78:b4:8b:ff:ea:67:7f:cf:c0:42:1f:e6:e8:22:
4a:f1:42:1b:4f:4a:7a:1c:37:ee:2d:97:d8:51:07:ba:6a:12:
b1:4e:c6:d6:12:80:1e:35:67:83:1e:cb:e2:f9:52:f9:5d:48:
8a:30:8e:b2:a3:c3:0a:6b:bf:0e:e9:77:c8:a6:61:6b:0e:64:
62:27:fb:8a:45:96:ec:a3:f4:35:77:83:07:77:ec:a8:41:1e:
d9:50:35:30:26:56:87:f3:33:9c:71:ee:6e:c6:5d:df:ae:96:
54:00:8a:d2:ee:dd:0a:37:51:c3:3e:14:f2:3a:c2:ee:9f:4d:
32:e9:9e:d2:fe:a7:6b:49:72:2c:de:b0:73:55:e5:fc:56:ce:
b5:d7:53:fe:71:91:c2:b1:74:f7:41:44:be:6f:36:db:a5:3a:
14:32:d2:be:63:bc:71:aa:c2:55:13:ab:dd:85:ad:25:82:15:
b5:cc:76:6f:c9:16:f8:6e:80:95:db:3c:6f:49:b1:d2:20:c1:
51:89:71:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:41:53 2025 by rpki-client