Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft
File: ZpvKCpDeWAORqO5km-TvvjbOhBg.mft (raw, json)
Hash identifier: imAzZCdLGWWykPYXzsxjq7xcyLtzmGxxQKqPgwyuC4Y=
Subject key identifier: C4:CF:7F:D8:68:26:39:99:66:40:47:8B:54:C7:F4:3E:22:91:55:DC
Authority key identifier: 66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18
Certificate issuer: /CN=A918031D/serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418
Certificate serial: 63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft
Manifest number: 61
Signing time: Fri 31 Jan 2025 06:05:31 +0000
Manifest this update: Fri 31 Jan 2025 06:05:30 +0000
Manifest next update: Fri 07 Feb 2025 06:05:30 +0000
Files and hashes: 1: ZpvKCpDeWAORqO5km-TvvjbOhBg.crl (hash: xqGCqVFTXrGYMyUxG78783teD5L+5i0HGDx9jJbsD04=)
2: 314597D64EEF11EF8BACFA30C4F9AE02.roa (hash: NfFMnt+VEyqSWVwOi+J918td9eREww3K9CdjnLDT82w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99 (0x63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918031D/serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418
Validity
Not Before: Jan 31 06:05:30 2025 GMT
Not After : Feb 7 06:05:30 2025 GMT
Subject: CN=679c682a-64ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f1:9c:e3:a6:a3:27:ca:01:60:c0:47:3c:b1:
bc:ef:67:df:23:9f:14:9d:b0:8c:20:f7:56:72:9a:
2a:a8:34:75:15:61:55:4d:b5:44:27:17:b2:65:71:
65:a6:b0:cc:0c:7a:dd:5e:5e:4d:d3:6d:a3:82:e7:
5d:24:cb:40:de:12:2e:ed:fb:11:d5:4e:5d:41:fb:
54:3e:20:f2:49:70:0c:98:ae:59:e9:87:18:35:76:
62:2f:7e:39:30:33:e2:8f:0f:8e:ba:19:ef:da:5a:
13:90:cb:62:b6:c3:fa:44:64:1c:4d:dc:03:a1:d1:
2e:d2:f7:ed:fa:62:e6:7a:f8:2e:bc:5d:a0:63:92:
58:7d:63:c6:83:b1:24:e5:c2:8f:4c:ba:7c:b7:d1:
96:86:d6:54:a0:59:49:54:cd:f4:7e:17:00:04:28:
b3:d6:17:72:b9:3b:90:3a:71:4a:16:03:9c:4f:60:
82:5b:53:05:f3:67:cf:8a:d6:4f:fd:72:d7:63:ed:
fc:06:ba:1f:01:5c:b4:40:f7:f8:ec:41:8d:28:c7:
d2:c9:6e:41:3b:2c:1e:1a:0d:9c:e6:5f:4f:13:58:
82:88:68:14:03:b7:e5:01:56:55:d6:5a:69:6b:50:
d3:ca:6e:ba:24:81:e8:c5:db:d4:16:ef:d9:97:bb:
cb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CF:7F:D8:68:26:39:99:66:40:47:8B:54:C7:F4:3E:22:91:55:DC
X509v3 Authority Key Identifier:
keyid:66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:dc:ea:dc:f3:07:5a:c0:54:e7:36:4f:5c:57:d5:30:3a:d1:
84:16:b2:a8:dc:e7:22:5e:72:95:05:5d:2f:a0:2c:95:94:a3:
96:1a:e7:23:5a:2a:5b:9f:30:74:b6:b6:35:f9:9f:d3:8e:c3:
c2:13:a9:25:92:0e:5a:49:c6:c9:96:fa:13:9b:da:12:09:ef:
70:74:40:d0:28:98:bc:3c:18:51:e7:83:6b:d6:95:cb:1a:e5:
dc:49:2b:fd:a7:f6:1c:9d:24:3f:0c:4c:bc:14:ff:06:7b:b8:
38:96:d2:ab:cc:5d:a5:5b:ef:41:f6:3c:bc:2c:cb:eb:84:1a:
ff:fe:aa:69:37:1f:61:a4:96:94:4f:e6:38:36:36:1c:d9:a2:
59:52:d8:03:34:09:72:7c:27:a2:e5:aa:c1:f2:bd:67:9d:bb:
66:24:bb:17:3d:4c:23:9a:92:f9:52:51:4d:d6:65:74:ad:92:
e4:36:e8:e3:14:0a:98:a9:d8:17:20:fb:18:d4:49:d1:03:44:
2f:20:6e:f8:00:f8:75:18:78:a5:e4:57:6b:0c:28:e2:d5:e0:
12:34:4a:ec:2b:9d:a5:71:8c:d4:03:d2:8a:74:8d:a2:16:bc:
4a:75:c4:9b:c1:23:eb:f3:26:b6:38:01:fb:37:8b:dc:f3:d9:
ef:91:72:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:03:30 2025 by rpki-client